This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: OSzyzDWqfSSPQKuX+gEKERk4uqsde/sbSaFFKAKOQBI= Subject key identifier: D3:58:13:0C:78:BD:EF:DF:0F:15:62:77:9A:09:A2:6E:DA:60:E1:1E Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 7E5EE82D2798AC5423ED3D132B68F7FA1EB84DDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 0148 Signing time: Mon 22 Dec 2025 23:31:15 +0000 Manifest this update: Mon 22 Dec 2025 23:26:15 +0000 Manifest next update: Fri 26 Dec 2025 01:19:15 +0000 Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=) 2: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: BBdf8wSLtO+WbXMcteqRvBtFqJ+rW+Otwxnpbeug5vQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5e:e8:2d:27:98:ac:54:23:ed:3d:13:2b:68:f7:fa:1e:b8:4d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Dec 22 23:26:15 2025 GMT Not After : Dec 26 01:19:15 2025 GMT Subject: CN=D358130C78BDEFDF0F1562779A09A26EDA60E11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:80:f6:b0:7d:5e:c8:39:de:c9:ef:36:10: fd:33:87:d1:25:62:75:4b:9d:10:ae:fd:f5:63:84: d7:d8:6e:2c:57:18:24:94:09:5d:a8:4c:af:70:0e: dd:f8:db:9a:7b:0f:3e:d6:f9:e6:e3:8f:b6:cf:ff: 39:05:76:5c:b0:65:5e:1c:c2:e3:b6:15:ec:fb:c9: 14:31:59:b0:aa:bc:72:99:56:a0:5f:4b:fb:4a:6d: 1a:0f:33:1f:b5:57:61:af:33:20:9c:88:22:1d:c5: 77:a6:54:97:5e:b2:ff:65:5c:41:48:5f:a5:f5:95: 9a:a2:e3:5f:6c:8f:f5:79:6e:41:93:4f:94:14:77: 3a:46:73:bc:84:b9:e1:a6:fd:7e:72:f2:d1:c8:87: ea:78:65:4b:9c:5a:b2:83:7a:79:ed:08:b3:10:d8: 17:81:84:d7:12:58:31:13:1f:1b:3a:c0:87:9f:d7: b2:47:ec:9c:3d:66:e6:54:d3:d4:e0:74:19:09:c2: 6d:08:dd:20:47:7a:30:d4:2d:bc:cd:8a:3c:d2:18: 9f:e5:8d:6b:99:ed:cd:9a:6d:99:03:c6:d8:ee:a6: f2:73:ab:ec:12:6c:4e:b3:0c:57:eb:6e:09:cf:e9: 24:c7:97:f7:d5:82:d1:d8:b2:71:59:fb:af:0b:d9: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:13:0C:78:BD:EF:DF:0F:15:62:77:9A:09:A2:6E:DA:60:E1:1E X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:26:68:dc:bc:5c:5d:93:8a:b9:c3:a7:81:2e:d7:a1:5a:d0: e0:a9:8c:1b:5c:23:c3:f6:6c:39:18:c0:1f:49:4f:8f:62:9d: 4a:4d:00:1f:7c:cb:27:e4:90:ea:dd:1f:11:cf:41:d9:54:46: f8:c2:b0:d6:27:c6:36:7a:4e:be:95:eb:9e:4d:03:22:63:68: a2:db:1b:3f:e5:09:a7:8a:5e:fb:91:db:45:1e:b4:26:d4:63: a4:3a:1e:d0:06:99:5e:c4:80:41:1c:62:3f:be:7e:6a:0b:19: 0e:7d:43:20:62:37:ea:d8:92:b1:29:21:ee:77:43:79:81:7b: 8a:34:4c:b2:ef:2f:2d:ec:a0:5e:05:0f:98:5a:f9:b1:3d:6d: 94:4a:dd:db:da:ad:94:37:22:01:b3:10:08:ed:ce:67:63:6a: ab:97:65:68:2b:8f:b3:35:5d:65:e8:4b:ba:d5:4a:a2:0c:21: 88:3d:29:38:ee:d6:81:8c:ac:3f:77:3c:f6:b3:ba:a4:10:7a: e0:8a:77:55:fa:ee:89:d0:f7:de:01:57:24:00:2b:e0:e1:fd: ca:ca:b0:bb:fe:f0:e3:1c:26:09:23:e9:61:71:2c:33:e1:dd: aa:f9:57:59:e0:7e:90:51:5e:e8:55:3d:7d:32:4b:e1:a8:41: 53:ec:fa:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl7oLSeYrFQj7T0TK2j3+h64Td8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTEyMjIyMzI2MTVaFw0yNTEyMjYwMTE5MTVaMDMxMTAvBgNV BAMTKEQzNTgxMzBDNzhCREVGREYwRjE1NjI3NzlBMDlBMjZFREE2MEUxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtYD2sH1eyDneye82EP0zh9El YnVLnRCu/fVjhNfYbixXGCSUCV2oTK9wDt3425p7Dz7W+ebjj7bP/zkFdlywZV4c wuO2Fez7yRQxWbCqvHKZVqBfS/tKbRoPMx+1V2GvMyCciCIdxXemVJdesv9lXEFI X6X1lZqi419sj/V5bkGTT5QUdzpGc7yEueGm/X5y8tHIh+p4ZUucWrKDenntCLMQ 2BeBhNcSWDETHxs6wIef17JH7Jw9ZuZU09TgdBkJwm0I3SBHejDULbzNijzSGJ/l jWuZ7c2abZkDxtjupvJzq+wSbE6zDFfrbgnP6STHl/fVgtHYsnFZ+68L2VLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU01gTDHi9798PFWJ3mgmibtpg4R4wHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgmaNy8XF2TirnDp4Eu16Fa0OCpjBtcI8P2 bDkYwB9JT49inUpNAB98yyfkkOrdHxHPQdlURvjCsNYnxjZ6Tr6V655NAyJjaKLb Gz/lCaeKXvuR20UetCbUY6Q6HtAGmV7EgEEcYj++fmoLGQ59QyBiN+rYkrEpIe53 Q3mBe4o0TLLvLy3soF4FD5ha+bE9bZRK3dvarZQ3IgGzEAjtzmdjaquXZWgrj7M1 XWXoS7rVSqIMIYg9KTju1oGMrD93PPazuqQQeuCKd1X67onQ994BVyQAK+Dh/crK sLv+8OMcJgkj6WFxLDPh3ar5V1ngfpBRXuhVPX0yS+GoQVPs+oY= -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:30 2025 by rpki-client