This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: 786mTSTs2hX5dB0IOD+Q6buSUQ8VXQ/cO86uIKLPMg4= Subject key identifier: BD:E6:A3:3F:E1:4E:3D:17:79:B5:9D:6C:DC:0C:AA:52:56:DD:C3:70 Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 24F05D4B3DE2C4CC5E9FB5B7191FCF7A59F5405B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: E1 Signing time: Wed 17 Dec 2025 04:31:16 +0000 Manifest this update: Wed 17 Dec 2025 04:26:16 +0000 Manifest next update: Sat 20 Dec 2025 14:03:16 +0000 Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=) 2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: WSTo84rYqNElsbk9TcNgJ0Js4YXgWrlJaxYYsJSXV3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f0:5d:4b:3d:e2:c4:cc:5e:9f:b5:b7:19:1f:cf:7a:59:f5:40:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Dec 17 04:26:16 2025 GMT Not After : Dec 20 14:03:16 2025 GMT Subject: CN=BDE6A33FE14E3D1779B59D6CDC0CAA5256DDC370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:3f:9d:a0:78:d6:c6:eb:67:bf:f7:2a:e3: be:76:a1:6d:e0:83:43:e8:81:bf:5e:9b:9b:0b:4c: 9d:5a:d5:a4:15:c5:90:b3:3a:64:b0:e1:0a:7e:e8: 67:83:bc:06:11:54:b2:e1:54:37:0b:67:7b:f4:ae: bd:3b:fd:af:91:7b:49:4d:91:bb:a0:c9:8f:96:98: 3e:6b:1c:d1:73:df:91:5b:77:b5:7e:a9:64:2e:1c: bf:c5:e0:94:41:71:a4:5a:e2:4c:78:82:f9:94:71: 1c:cc:b2:88:4b:ff:28:f2:10:7c:fe:cd:e5:09:e6: 8c:73:60:63:fc:98:d1:f6:fb:43:47:08:33:4f:64: 9e:ee:ad:12:21:da:3b:5d:cd:c6:33:b0:f0:aa:24: d9:cd:48:11:9c:f8:49:10:93:65:fa:17:05:8c:b1: 45:94:5d:76:67:de:b7:37:d7:aa:67:8d:c4:89:4a: 1b:f9:63:ac:d5:4f:30:bb:4d:2d:9c:8c:7f:ed:e7: 14:fd:4a:0c:eb:b2:b7:52:4d:21:c1:c0:c6:7b:82: 95:8a:ef:95:00:05:a1:fe:40:8e:46:db:95:53:4f: f5:49:35:0c:11:58:a5:4f:bb:fa:3f:fe:38:f3:d2: 81:9f:7c:2d:5d:3f:26:87:4c:70:f8:ed:d2:8c:a2: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E6:A3:3F:E1:4E:3D:17:79:B5:9D:6C:DC:0C:AA:52:56:DD:C3:70 X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:42:45:47:b0:37:03:c9:78:24:66:15:82:71:e1:72:46: d9:57:63:5d:18:3b:14:9c:ac:ca:7b:63:52:86:2c:aa:b8:ef: 6d:bf:22:7a:c7:2f:7b:a7:c4:be:a7:97:80:e3:a7:7a:7f:1f: fe:8a:2c:ad:95:17:d9:80:a7:1a:e6:d4:06:dd:d8:40:d9:10: 41:d9:5f:6f:2a:eb:57:66:ad:71:0c:8a:a3:29:34:a4:b2:03: 83:58:2f:28:6d:5a:06:1c:a6:ec:5b:2d:55:b3:b1:0d:df:68: e5:2e:4e:ae:db:d4:c1:8a:8b:3d:39:b8:24:29:1d:f4:3a:15: f7:5a:6d:56:07:49:e4:6e:1c:f7:07:0a:ed:5c:d8:cc:c1:10: 3a:d1:d0:0f:0e:12:99:61:e4:3b:4c:9c:aa:bd:1f:46:9d:6b: 97:61:18:c1:38:fc:6a:37:5a:77:d5:1a:81:c0:c7:e4:66:c6: 80:5b:f9:93:01:49:b1:f3:33:50:f1:12:6b:0e:5c:9a:af:42: eb:76:f4:8b:7c:8b:37:e2:07:34:ff:46:e8:be:3b:b4:fc:9e: 08:6c:f0:d1:b5:5f:7e:c0:36:0a:9b:b8:54:6c:19:08:33:2d: 30:47:12:5a:2d:86:fb:2f:a1:ba:e8:cd:14:c5:c9:47:77:31: 89:68:00:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPBdSz3ixMxen7W3GR/Peln1QFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTEyMTcwNDI2MTZaFw0yNTEyMjAxNDAzMTZaMDMxMTAvBgNV BAMTKEJERTZBMzNGRTE0RTNEMTc3OUI1OUQ2Q0RDMENBQTUyNTZEREMzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClkz+doHjWxutnv/cq4752oW3g g0Pogb9em5sLTJ1a1aQVxZCzOmSw4Qp+6GeDvAYRVLLhVDcLZ3v0rr07/a+Re0lN kbugyY+WmD5rHNFz35Fbd7V+qWQuHL/F4JRBcaRa4kx4gvmUcRzMsohL/yjyEHz+ zeUJ5oxzYGP8mNH2+0NHCDNPZJ7urRIh2jtdzcYzsPCqJNnNSBGc+EkQk2X6FwWM sUWUXXZn3rc316pnjcSJShv5Y6zVTzC7TS2cjH/t5xT9SgzrsrdSTSHBwMZ7gpWK 75UABaH+QI5G25VTT/VJNQwRWKVPu/o//jjz0oGffC1dPyaHTHD47dKMoqsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUveajP+FOPRd5tZ1s3AyqUlbdw3AwHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiGQkVHsDcDyXgkZhWCceFyRtlXY10YOxSc rMp7Y1KGLKq4722/InrHL3unxL6nl4Djp3p/H/6KLK2VF9mApxrm1Abd2EDZEEHZ X28q61dmrXEMiqMpNKSyA4NYLyhtWgYcpuxbLVWzsQ3faOUuTq7b1MGKiz05uCQp HfQ6FfdabVYHSeRuHPcHCu1c2MzBEDrR0A8OEplh5DtMnKq9H0ada5dhGME4/Go3 WnfVGoHAx+RmxoBb+ZMBSbHzM1DxEmsOXJqvQut29It8izfiBzT/Rui+O7T8nghs 8NG1X37ANgqbuFRsGQgzLTBHElothvsvobrozRTFyUd3MYloAHA= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:33 2025 by rpki-client