This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: BBecV6MYj1WrlAJwYQ+a1GesFV9rv6gUMrJS03nAQFI= Subject key identifier: 8A:E0:DA:83:58:0E:94:71:6B:B9:B6:DA:3D:B0:C5:48:01:C7:52:D6 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 1944FAC4AB8B4F7C28C6AD67DB49293AA88D7FC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 01E7 Signing time: Fri 05 Dec 2025 07:31:36 +0000 Manifest this update: Fri 05 Dec 2025 07:26:36 +0000 Manifest next update: Mon 08 Dec 2025 14:49:36 +0000 Files and hashes: 1: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) 2: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: zsaE8TvpfaxsY9qxoBGOE0vlakvd3+gme48DOPltMMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:44:fa:c4:ab:8b:4f:7c:28:c6:ad:67:db:49:29:3a:a8:8d:7f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Dec 5 07:26:36 2025 GMT Not After : Dec 8 14:49:36 2025 GMT Subject: CN=8AE0DA83580E94716BB9B6DA3DB0C54801C752D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:8a:45:df:6c:6f:b8:7d:a8:14:31:c9:e4: fc:d0:26:f1:a6:52:3d:44:d9:a4:c4:98:91:df:f9: 00:da:96:b4:62:e8:2e:6f:24:72:52:5f:9f:6d:0c: 86:25:aa:f7:4f:39:86:92:dd:61:2e:9c:87:a7:c6: d2:07:23:4d:d2:5a:c5:56:43:e5:a5:30:9e:f9:f4: 22:ea:6e:14:aa:ba:c9:63:03:6b:45:05:78:05:aa: 5f:b4:b5:5d:f7:75:33:3c:e7:10:9f:73:13:0e:23: e7:b8:c4:0e:2a:94:fe:8b:ad:35:a0:ee:b9:1c:21: cc:26:c7:3d:b1:c2:07:a2:fc:ff:69:6b:65:2b:f3: 95:47:28:46:05:e6:1e:17:0b:86:90:ce:c6:e5:08: 09:42:92:87:18:7a:b5:02:63:fe:d5:1b:62:f2:cc: a3:3e:c0:85:4c:11:b7:d4:f1:46:9f:9a:b1:b1:19: f7:02:82:47:34:68:48:ec:4e:d2:5f:5d:35:84:8c: f4:aa:d2:a7:1c:f9:df:fd:f8:b4:bb:6c:8d:79:eb: 7b:3c:59:58:d6:98:d1:31:44:dc:0d:ba:94:e0:25: ba:2d:fb:53:4c:8f:15:17:b4:3a:cf:9e:d9:df:ee: 50:7a:24:92:ec:f4:ec:e1:f6:e1:f2:76:f9:45:0b: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E0:DA:83:58:0E:94:71:6B:B9:B6:DA:3D:B0:C5:48:01:C7:52:D6 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7c:6c:a9:f4:7a:0e:24:01:d9:0b:bb:1f:47:09:e1:64:75: 76:cb:d0:ca:3f:9f:f1:5a:58:08:15:61:96:09:c7:0a:6e:2e: 1b:d8:ba:9f:71:4a:87:82:e0:4b:60:1c:ee:8a:c3:06:40:66: ab:00:d8:c8:f4:19:79:7a:fb:09:bf:18:77:a7:e9:e2:a5:1a: 3a:50:9f:c7:a0:88:e7:10:25:c3:d8:cb:69:8c:6f:2a:27:4a: 15:69:62:fb:7c:40:91:59:4a:61:a7:1f:7c:a7:52:b5:e3:fb: fc:e3:24:3d:cf:00:7a:0f:89:e6:76:52:ce:42:a4:7f:19:c6: fc:43:fd:35:b4:14:f4:b0:7b:ef:34:45:00:2f:f2:96:28:85: 38:2a:d2:2e:55:cf:2a:2e:95:4e:7e:aa:a0:0e:c8:e7:85:e7: a4:38:d1:b3:a8:59:10:17:86:4d:d4:5b:43:32:3f:a5:aa:88: ef:c9:d1:c3:37:46:6a:5e:fd:fb:03:40:3d:28:d8:20:5c:25: e9:b0:d9:9b:fa:19:74:3d:72:c3:93:84:a1:1d:e0:fb:3a:34: 4e:89:69:46:bb:70:5c:a1:29:6b:86:c5:eb:63:3f:a4:3a:d9: bd:4d:b5:fe:7b:d4:d2:36:62:eb:d4:92:92:ff:3b:5a:33:07: 85:8c:fd:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUT6xKuLT3woxq1n20kpOqiNf8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTEyMDUwNzI2MzZaFw0yNTEyMDgxNDQ5MzZaMDMxMTAvBgNV BAMTKDhBRTBEQTgzNTgwRTk0NzE2QkI5QjZEQTNEQjBDNTQ4MDFDNzUyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaA4pF32xvuH2oFDHJ5PzQJvGm Uj1E2aTEmJHf+QDalrRi6C5vJHJSX59tDIYlqvdPOYaS3WEunIenxtIHI03SWsVW Q+WlMJ759CLqbhSqusljA2tFBXgFql+0tV33dTM85xCfcxMOI+e4xA4qlP6LrTWg 7rkcIcwmxz2xwgei/P9pa2Ur85VHKEYF5h4XC4aQzsblCAlCkocYerUCY/7VG2Ly zKM+wIVMEbfU8UafmrGxGfcCgkc0aEjsTtJfXTWEjPSq0qcc+d/9+LS7bI1563s8 WVjWmNExRNwNupTgJbot+1NMjxUXtDrPntnf7lB6JJLs9Ozh9uHydvlFC4kvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiuDag1gOlHFrubbaPbDFSAHHUtYwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFh8bKn0eg4kAdkLux9HCeFkdXbL0Mo/n/Fa WAgVYZYJxwpuLhvYup9xSoeC4EtgHO6KwwZAZqsA2Mj0GXl6+wm/GHen6eKlGjpQ n8egiOcQJcPYy2mMbyonShVpYvt8QJFZSmGnH3ynUrXj+/zjJD3PAHoPieZ2Us5C pH8ZxvxD/TW0FPSwe+80RQAv8pYohTgq0i5VzyoulU5+qqAOyOeF56Q40bOoWRAX hk3UW0MyP6WqiO/J0cM3Rmpe/fsDQD0o2CBcJemw2Zv6GXQ9csOThKEd4Ps6NE6J aUa7cFyhKWuGxetjP6Q62b1Ntf571NI2YuvUkpL/O1ozB4WM/Q8= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:06 2025 by rpki-client