This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: /KF+XAYO36XSiRxlh9rOQUpfxT2UNQUdHHOV6ZVH5Cg= Subject key identifier: 32:84:C8:CF:FF:8A:5E:DA:5C:B2:F0:A1:16:C7:1F:C0:78:2E:A3:77 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 12C58D846D26719A14414A9CC7C1A2178EDB39CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 0232 Signing time: Fri 05 Dec 2025 14:40:50 +0000 Manifest this update: Fri 05 Dec 2025 14:35:50 +0000 Manifest next update: Mon 08 Dec 2025 15:45:50 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: 0F/e7HXM6RewppNvBLsBTgOrgInhn4x03uj25Mzm8NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:8d:84:6d:26:71:9a:14:41:4a:9c:c7:c1:a2:17:8e:db:39:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Dec 5 14:35:50 2025 GMT Not After : Dec 8 15:45:50 2025 GMT Subject: CN=3284C8CFFF8A5EDA5CB2F0A116C71FC0782EA377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:85:93:32:63:27:ea:c0:e9:d4:8c:9e:b2: e8:c1:97:ec:71:d2:f7:1b:9a:5c:30:71:da:52:55: 90:b3:e9:0d:4b:21:a6:93:0c:ef:cb:1c:11:82:20: 86:1d:af:ba:bf:1b:aa:44:64:05:2c:bd:12:f0:be: 70:3f:85:ac:6b:26:c6:16:1e:8f:d4:ba:6d:e9:fe: 8c:08:0a:49:f4:38:42:24:ba:93:74:c0:45:89:90: d7:21:6b:c8:ed:9e:e9:3b:85:78:80:45:e2:74:05: e1:43:c4:92:2b:62:01:2f:ec:6b:dc:a3:2c:0c:89: bc:2b:90:96:90:ac:4f:fa:95:c0:35:6e:35:69:df: d3:da:dd:ed:b2:c2:56:9b:27:c2:7f:76:0f:e4:39: 87:bb:f9:9a:d1:9c:0a:64:21:58:05:5e:7b:08:11: 60:b0:01:74:13:fe:88:46:44:2a:df:13:6f:23:57: 50:0c:fd:18:21:49:4a:a1:da:d6:fc:3f:ce:70:5a: ea:50:66:e7:ea:6a:71:c7:0d:0c:79:3c:a8:57:34: e3:5a:fa:50:4a:16:39:c1:35:46:d5:e2:d3:79:1b: 56:29:85:5a:d0:00:4f:2e:2c:dd:23:cb:3e:07:9b: 86:1a:11:3a:64:40:88:08:f0:2e:dd:70:31:12:db: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:84:C8:CF:FF:8A:5E:DA:5C:B2:F0:A1:16:C7:1F:C0:78:2E:A3:77 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:40:19:64:97:4e:80:22:36:a7:d5:25:d3:3d:52:17:9b: 3f:ff:0e:ef:18:89:1b:1b:39:2c:a6:aa:d8:6b:45:49:88:f9: aa:e6:ab:17:48:48:4a:73:16:93:48:1e:a7:b0:9c:22:eb:6b: 9d:36:b9:8c:d8:81:19:cd:f4:14:a2:ea:78:e0:ee:24:25:52: 9b:31:80:59:10:83:19:02:9c:b7:a7:ca:e3:09:ee:46:d5:2e: 89:63:9d:5c:a9:b2:ca:4d:38:7e:40:bc:a4:72:9d:28:ea:91: 5e:4a:63:99:0e:6b:3e:d0:bb:6a:bb:5e:53:83:f5:da:2d:58: 15:e5:1a:89:56:a8:f2:98:39:76:b0:fc:e7:f8:29:9c:e3:2a: 44:84:ec:bb:c1:1c:89:58:cf:89:33:a3:31:81:ad:71:c4:fa: 70:83:fe:87:97:6c:b7:a8:03:85:f8:07:ce:89:91:70:5a:18: 17:20:8d:d6:0d:ae:29:42:77:9d:69:1e:8a:c7:81:5f:1e:57: 53:05:58:2b:e2:f9:43:50:8e:a5:44:ac:24:8c:70:15:8a:e2: 61:0c:09:c4:d7:41:f4:86:5f:3d:a1:62:5c:32:4c:1d:48:0a: 81:f3:83:be:95:0f:93:5f:90:c9:29:8c:5a:91:6d:e4:ee:21: 28:ee:ba:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsWNhG0mcZoUQUqcx8GiF47bOc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTEyMDUxNDM1NTBaFw0yNTEyMDgxNTQ1NTBaMDMxMTAvBgNV BAMTKDMyODRDOENGRkY4QTVFREE1Q0IyRjBBMTE2QzcxRkMwNzgyRUEzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDac4WTMmMn6sDp1IyesujBl+xx 0vcbmlwwcdpSVZCz6Q1LIaaTDO/LHBGCIIYdr7q/G6pEZAUsvRLwvnA/haxrJsYW Ho/Uum3p/owICkn0OEIkupN0wEWJkNcha8jtnuk7hXiAReJ0BeFDxJIrYgEv7Gvc oywMibwrkJaQrE/6lcA1bjVp39Pa3e2ywlabJ8J/dg/kOYe7+ZrRnApkIVgFXnsI EWCwAXQT/ohGRCrfE28jV1AM/RghSUqh2tb8P85wWupQZufqanHHDQx5PKhXNONa +lBKFjnBNUbV4tN5G1YphVrQAE8uLN0jyz4Hm4YaETpkQIgI8C7dcDES25BxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoTIz/+KXtpcsvChFscfwHguo3cwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfPQBlkl06AIjan1SXTPVIXmz//Du8YiRsb OSymqthrRUmI+armqxdISEpzFpNIHqewnCLra502uYzYgRnN9BSi6njg7iQlUpsx gFkQgxkCnLenyuMJ7kbVLoljnVypsspNOH5AvKRynSjqkV5KY5kOaz7Qu2q7XlOD 9dotWBXlGolWqPKYOXaw/Of4KZzjKkSE7LvBHIlYz4kzozGBrXHE+nCD/oeXbLeo A4X4B86JkXBaGBcgjdYNrilCd51pHorHgV8eV1MFWCvi+UNQjqVErCSMcBWK4mEM CcTXQfSGXz2hYlwyTB1ICoHzg76VD5NfkMkpjFqRbeTuISjuuuE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:50 2025 by rpki-client