This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: siEWuAx6IyTpp8RiWX2R5EFwA3DgpgeBHqODgRynJGo= Subject key identifier: D2:0C:29:73:D2:7D:DD:C9:4E:A0:DA:72:B7:A8:67:DC:E3:2B:38:28 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 0ABB435BA2619DA96E8E36DEC0F8C059DF24487C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 024F Signing time: Sun 14 Dec 2025 18:51:27 +0000 Manifest this update: Sun 14 Dec 2025 18:46:27 +0000 Manifest next update: Wed 17 Dec 2025 22:37:27 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 3: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: zvgEx6dtLHF0Ad5SJuoHrsDQ5LU/WiRADuHPEr2pzwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 22:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bb:43:5b:a2:61:9d:a9:6e:8e:36:de:c0:f8:c0:59:df:24:48:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Dec 14 18:46:27 2025 GMT Not After : Dec 17 22:37:27 2025 GMT Subject: CN=D20C2973D27DDDC94EA0DA72B7A867DCE32B3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:f2:94:86:ff:96:17:49:e9:3e:4d:eb:c5: 9f:87:c7:38:9b:62:d1:78:5c:93:ff:f1:0d:40:01: c6:6f:15:69:e1:97:ce:a7:d0:60:d8:d5:33:8f:d9: 72:4f:d3:7d:f3:d3:94:4f:f0:9a:2b:8f:9e:97:bf: 31:84:70:31:a6:70:1c:3d:a5:70:9a:8f:2e:63:01: 9f:48:d4:7e:60:e6:d6:05:c3:db:76:e7:f1:48:7c: cf:f1:c1:42:e8:f4:1b:00:e8:1b:1c:a3:45:42:c1: e2:3f:a6:45:da:bc:64:40:6b:87:44:9a:c9:b1:7e: bc:ea:1f:42:17:b9:55:44:c1:24:3b:97:4f:f0:98: 47:c0:a5:e9:e9:a0:c6:e7:21:52:eb:8e:0b:fc:e9: e9:09:e7:ee:cb:19:0a:7c:63:d7:aa:a7:b7:10:88: ce:f5:ad:e6:26:cf:07:88:4c:51:a3:3f:15:c6:d9: 05:36:a1:5e:ec:7f:84:9e:38:d6:64:7a:8f:fa:c8: 28:e6:fd:86:d3:10:eb:e8:fa:94:40:94:6e:ee:6e: 12:96:f0:d5:bb:3d:17:d4:00:3a:d7:36:08:e6:f0: 49:54:24:db:22:13:24:00:42:49:14:5b:0a:23:ef: 32:74:e3:fe:5b:cc:85:56:9f:9a:5f:87:e1:24:fd: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:29:73:D2:7D:DD:C9:4E:A0:DA:72:B7:A8:67:DC:E3:2B:38:28 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:da:32:20:6d:e8:a7:00:da:f9:18:71:b8:66:fe:24:18:21: e2:94:18:e1:91:18:44:22:c3:7d:1a:aa:0e:66:22:02:c9:ab: 45:57:15:21:6e:65:0d:8e:34:2c:ee:1d:60:ce:02:09:da:12: ea:53:43:2e:9c:dc:d1:cb:03:a1:c4:8d:72:09:b3:22:c0:9b: 8f:c2:d6:0e:dd:89:90:f1:20:5e:43:da:f5:96:89:5a:dd:da: c1:07:cd:19:73:84:0c:3a:0f:7b:36:42:e1:e4:8b:95:8b:e5: e8:0b:15:fa:6f:7b:f1:23:88:c6:88:cf:f7:87:97:7a:d5:9b: 5e:cd:d2:e6:25:d9:5d:6f:5a:d3:bf:df:d4:68:aa:e2:b7:da: b4:00:74:8c:c8:c6:3f:1b:07:1a:47:79:6a:dc:bb:4d:a4:0c: 9f:86:ab:ba:8b:bd:69:5b:c1:12:f5:57:7e:27:3a:50:ff:6a: af:3e:82:aa:fe:cb:04:41:ca:6c:41:59:18:10:bf:50:ce:58: 12:0c:36:e1:e9:1c:79:82:01:b9:54:1b:20:6e:b8:ad:e9:be: b6:23:27:7a:24:df:8e:f0:17:54:dd:ee:cb:6d:c7:6f:78:c3: 52:7f:74:9c:3b:c2:4f:c7:4a:09:3c:67:7a:40:b2:e5:60:2a: 56:f1:e7:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrtDW6JhnalujjbewPjAWd8kSHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTEyMTQxODQ2MjdaFw0yNTEyMTcyMjM3MjdaMDMxMTAvBgNV BAMTKEQyMEMyOTczRDI3REREQzk0RUEwREE3MkI3QTg2N0RDRTMyQjM4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40PKUhv+WF0npPk3rxZ+Hxzib YtF4XJP/8Q1AAcZvFWnhl86n0GDY1TOP2XJP033z05RP8Jorj56XvzGEcDGmcBw9 pXCajy5jAZ9I1H5g5tYFw9t25/FIfM/xwULo9BsA6Bsco0VCweI/pkXavGRAa4dE msmxfrzqH0IXuVVEwSQ7l0/wmEfApenpoMbnIVLrjgv86ekJ5+7LGQp8Y9eqp7cQ iM71reYmzweITFGjPxXG2QU2oV7sf4SeONZkeo/6yCjm/YbTEOvo+pRAlG7ubhKW 8NW7PRfUADrXNgjm8ElUJNsiEyQAQkkUWwoj7zJ04/5bzIVWn5pfh+Ek/Rf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gwpc9J93clOoNpyt6hn3OMrOCgwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjaMiBt6KcA2vkYcbhm/iQYIeKUGOGRGEQi w30aqg5mIgLJq0VXFSFuZQ2ONCzuHWDOAgnaEupTQy6c3NHLA6HEjXIJsyLAm4/C 1g7diZDxIF5D2vWWiVrd2sEHzRlzhAw6D3s2QuHki5WL5egLFfpve/EjiMaIz/eH l3rVm17N0uYl2V1vWtO/39RoquK32rQAdIzIxj8bBxpHeWrcu02kDJ+Gq7qLvWlb wRL1V34nOlD/aq8+gqr+ywRBymxBWRgQv1DOWBIMNuHpHHmCAblUGyBuuK3pvrYj J3ok347wF1Td7sttx294w1J/dJw7wk/HSgk8Z3pAsuVgKlbx57k= -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:35 2025 by rpki-client