This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: TE4sMZwSuR6DzFt3wKw8zYyejSRNRe2t/EVympKvW3M= Subject key identifier: E4:CF:C6:F1:AC:18:FE:85:24:05:8D:6D:EE:16:64:83:55:E0:6D:2E Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 2AE2B948499CBCB948F27A4B5FEA920AAE461DF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 020B Signing time: Wed 17 Dec 2025 19:01:08 +0000 Manifest this update: Wed 17 Dec 2025 18:56:08 +0000 Manifest next update: Sun 21 Dec 2025 02:56:08 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: yHgviAonhwtKWvOPHQAHeZjeTloPWy7krUFweYwlkig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e2:b9:48:49:9c:bc:b9:48:f2:7a:4b:5f:ea:92:0a:ae:46:1d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Dec 17 18:56:08 2025 GMT Not After : Dec 21 02:56:08 2025 GMT Subject: CN=E4CFC6F1AC18FE8524058D6DEE16648355E06D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:90:af:48:4c:9c:12:e5:03:d2:bd:6a:37: 2e:c1:db:63:73:1f:31:43:23:50:ac:12:49:29:01: 26:40:26:fa:af:57:a5:61:d0:86:3d:ef:9e:63:b9: 52:41:e6:bb:f1:07:c2:aa:63:8f:da:39:64:64:8f: c3:cc:fc:a2:e0:d1:05:45:d1:57:17:c3:e7:60:31: 9b:1c:38:9a:e7:9d:f5:2a:25:f3:02:7f:55:3d:0c: 0d:36:4e:0e:24:e1:63:59:f1:e6:87:38:ef:b0:44: b3:a7:c5:9f:40:cd:d4:cd:d8:4d:4a:fd:90:01:41: 1c:55:bb:85:41:6c:5d:90:8d:8c:38:e1:8c:91:a5: e2:b7:f4:ef:31:40:e0:36:94:f6:b5:33:57:05:9e: 7b:aa:14:92:30:36:70:b4:c2:cb:cc:b0:97:5a:9e: 0d:1c:18:8b:3a:55:1a:d8:b8:f7:7a:e9:22:71:19: 14:1e:bf:37:45:67:75:3b:c7:41:83:f3:bf:ed:9a: 4d:80:c0:d3:4d:63:2c:48:1b:78:e5:d5:c3:d6:7e: 2d:51:d0:cf:64:1b:00:26:4a:e3:c6:79:b5:ee:27: 2d:63:a4:07:bd:96:41:1b:bb:8b:2b:00:a8:54:98: da:61:1e:45:26:bb:ac:bf:b4:a7:c6:8b:69:5b:5f: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:C6:F1:AC:18:FE:85:24:05:8D:6D:EE:16:64:83:55:E0:6D:2E X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3e:e3:92:07:10:e3:bd:01:fb:a2:71:1d:8e:f5:31:06:d7: fb:30:f9:d1:a7:32:be:49:20:30:48:91:59:be:bc:0b:fd:85: 74:63:4d:6b:7e:35:84:68:e5:5e:93:5d:88:70:ab:32:c6:5e: ef:53:3d:42:e4:00:e6:de:07:e2:7d:d6:a1:fd:ef:e8:90:75: d9:43:8f:96:f7:70:77:e0:0c:6f:a3:19:c6:43:a5:a9:7d:d3: a2:cf:94:b2:ab:f1:c6:4a:63:db:5b:7c:6a:cd:f4:cc:38:80: 68:03:15:6a:21:cc:88:a5:59:87:c9:7f:79:8f:d7:78:9e:a4: 85:7a:03:50:16:b1:c0:56:5e:05:b1:78:be:70:d0:f6:2a:f8: 21:03:6e:25:55:58:dc:f1:27:f3:30:1d:61:87:45:03:3c:9f: b1:c7:04:64:c7:05:b6:f7:36:6d:09:0b:48:79:00:21:2b:7b: 1b:85:94:fd:fd:69:e7:e8:f7:03:6c:6d:b8:5a:c3:8b:34:a1: bf:23:e9:e2:ca:37:e7:51:79:18:63:77:2b:ee:da:1b:de:06: d3:62:f5:02:f7:64:e2:24:ec:27:90:2e:33:7e:12:93:9d:9f: c9:01:bf:fa:1e:d6:5a:48:73:3a:c0:f0:63:37:6b:db:53:72: 7b:e2:dc:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuK5SEmcvLlI8npLX+qSCq5GHfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTEyMTcxODU2MDhaFw0yNTEyMjEwMjU2MDhaMDMxMTAvBgNV BAMTKEU0Q0ZDNkYxQUMxOEZFODUyNDA1OEQ2REVFMTY2NDgzNTVFMDZEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/ZCvSEycEuUD0r1qNy7B22Nz HzFDI1CsEkkpASZAJvqvV6Vh0IY9755juVJB5rvxB8KqY4/aOWRkj8PM/KLg0QVF 0VcXw+dgMZscOJrnnfUqJfMCf1U9DA02Tg4k4WNZ8eaHOO+wRLOnxZ9AzdTN2E1K /ZABQRxVu4VBbF2QjYw44YyRpeK39O8xQOA2lPa1M1cFnnuqFJIwNnC0wsvMsJda ng0cGIs6VRrYuPd66SJxGRQevzdFZ3U7x0GD87/tmk2AwNNNYyxIG3jl1cPWfi1R 0M9kGwAmSuPGebXuJy1jpAe9lkEbu4srAKhUmNphHkUmu6y/tKfGi2lbX4z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5M/G8awY/oUkBY1t7hZkg1XgbS4wHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4+45IHEOO9AfuicR2O9TEG1/sw+dGnMr5J IDBIkVm+vAv9hXRjTWt+NYRo5V6TXYhwqzLGXu9TPULkAObeB+J91qH97+iQddlD j5b3cHfgDG+jGcZDpal906LPlLKr8cZKY9tbfGrN9Mw4gGgDFWohzIilWYfJf3mP 13iepIV6A1AWscBWXgWxeL5w0PYq+CEDbiVVWNzxJ/MwHWGHRQM8n7HHBGTHBbb3 Nm0JC0h5ACErexuFlP39aefo9wNsbbhaw4s0ob8j6eLKN+dReRhjdyvu2hveBtNi 9QL3ZOIk7CeQLjN+EpOdn8kBv/oe1lpIczrA8GM3a9tTcnvi3Hc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:23 2025 by rpki-client