This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: AjBRCV2VJtkgcg2qcvpy9cS0nJVpPkguui/lzMSHgLU= Subject key identifier: C5:DA:3F:2D:84:7C:B6:F6:7A:AB:F7:4B:0A:04:C3:54:DC:17:23:65 Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 3D0E8727F4FAB3EA00FBDC8CF8BF7482E503A163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 020E Signing time: Wed 24 Dec 2025 15:43:18 +0000 Manifest this update: Wed 24 Dec 2025 15:38:18 +0000 Manifest next update: Sat 27 Dec 2025 16:01:18 +0000 Files and hashes: 1: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: ouZhuOiJTdV6UrxQd6WO7B9MQdoPD7+KKdHQwcpcRyE=) 2: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0e:87:27:f4:fa:b3:ea:00:fb:dc:8c:f8:bf:74:82:e5:03:a1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Dec 24 15:38:18 2025 GMT Not After : Dec 27 16:01:18 2025 GMT Subject: CN=C5DA3F2D847CB6F67AABF74B0A04C354DC172365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:59:f3:3f:c9:90:38:2c:56:79:d0:56:01: 95:90:d4:11:5e:11:80:47:72:6f:eb:0b:4d:d2:4b: 69:cb:0b:e9:f4:47:db:87:77:9f:25:df:7a:73:0e: b3:bc:59:5a:6c:83:0c:c9:ac:ef:8d:47:32:1a:b8: a8:83:f5:6a:90:80:38:95:9f:5f:b5:64:07:de:d0: c9:80:3a:72:36:72:62:51:14:f2:95:2b:5f:3c:67: a4:6a:1e:5a:b2:14:7f:f5:35:be:9c:b6:b3:28:86: 0d:90:f9:43:a5:49:9a:0e:d6:86:f2:e8:d8:51:35: f4:de:bf:69:1e:ab:7e:9a:8c:45:45:29:10:d0:1a: 34:41:14:30:cb:ab:1a:d3:b6:4d:5f:d4:bb:1e:b9: 74:7f:8f:0e:8e:32:ef:0e:42:f3:2d:df:31:f7:34: d1:d0:3b:29:4d:8d:26:37:13:86:42:35:c2:92:59: 08:70:ab:78:1e:29:6b:05:67:00:d7:81:2b:db:bd: 22:89:79:8e:14:95:ca:87:5b:a8:d1:79:f4:1d:f6: 3b:b4:b2:8f:38:96:87:63:d4:45:e2:74:03:2d:b8: a1:2b:6d:2e:4a:9c:f5:b7:31:f4:69:27:98:bc:18: 46:c6:d3:12:df:34:69:70:e2:a6:92:ec:5b:f1:0f: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DA:3F:2D:84:7C:B6:F6:7A:AB:F7:4B:0A:04:C3:54:DC:17:23:65 X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d2:8f:1c:7d:37:65:9f:07:ef:ed:0b:39:31:b7:71:fc:28: 9d:32:7d:91:a4:d5:da:0e:d3:e2:21:28:fb:95:d8:3d:c1:ba: b5:23:70:f2:23:89:bd:bc:fa:aa:4f:19:8b:4b:03:94:df:c0: f0:5b:9e:96:82:76:d8:17:70:c4:7a:b7:49:41:2d:2e:06:77: 28:fd:9e:92:b6:27:4f:7e:10:1e:17:34:07:ff:16:2a:b0:c5: 0c:5f:11:b7:b5:dd:ab:56:d0:86:da:01:89:54:8e:b0:84:55: 09:3d:e1:d1:22:b2:56:e5:64:ce:b0:74:d2:c8:d6:4d:49:18: 86:dc:f2:d0:c0:45:20:44:4b:a5:65:cd:24:9c:47:0c:94:4f: 94:23:60:84:90:86:15:04:6f:1d:f4:69:d9:71:10:5a:84:92: ef:e0:36:aa:01:b5:20:69:d2:5f:0a:24:a8:b1:ee:2c:2f:57: 9a:8c:81:de:71:cd:4e:f1:9d:d5:6a:fb:b9:dd:fe:d0:a4:a1: 6f:b8:cd:3d:99:14:7e:94:e5:a6:29:74:91:3d:0f:ac:d8:3d: 09:87:9c:b2:5b:c7:78:70:8f:52:1b:d0:b2:3a:7c:6d:2d:c1: 0d:90:69:ed:5f:9f:5a:8f:da:50:53:09:c6:ef:90:b5:b4:21: 02:0c:92:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQ6HJ/T6s+oA+9yM+L90guUDoWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTEyMjQxNTM4MThaFw0yNTEyMjcxNjAxMThaMDMxMTAvBgNV BAMTKEM1REEzRjJEODQ3Q0I2RjY3QUFCRjc0QjBBMDRDMzU0REMxNzIzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLlnzP8mQOCxWedBWAZWQ1BFe EYBHcm/rC03SS2nLC+n0R9uHd58l33pzDrO8WVpsgwzJrO+NRzIauKiD9WqQgDiV n1+1ZAfe0MmAOnI2cmJRFPKVK188Z6RqHlqyFH/1Nb6ctrMohg2Q+UOlSZoO1oby 6NhRNfTev2keq36ajEVFKRDQGjRBFDDLqxrTtk1f1LseuXR/jw6OMu8OQvMt3zH3 NNHQOylNjSY3E4ZCNcKSWQhwq3geKWsFZwDXgSvbvSKJeY4UlcqHW6jRefQd9ju0 so84lodj1EXidAMtuKErbS5KnPW3MfRpJ5i8GEbG0xLfNGlw4qaS7FvxD5dPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdo/LYR8tvZ6q/dLCgTDVNwXI2UwHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTSjxx9N2WfB+/tCzkxt3H8KJ0yfZGk1doO 0+IhKPuV2D3BurUjcPIjib28+qpPGYtLA5TfwPBbnpaCdtgXcMR6t0lBLS4Gdyj9 npK2J09+EB4XNAf/FiqwxQxfEbe13atW0IbaAYlUjrCEVQk94dEislblZM6wdNLI 1k1JGIbc8tDARSBES6VlzSScRwyUT5QjYISQhhUEbx30adlxEFqEku/gNqoBtSBp 0l8KJKix7iwvV5qMgd5xzU7xndVq+7nd/tCkoW+4zT2ZFH6U5aYpdJE9D6zYPQmH nLJbx3hwj1Ib0LI6fG0twQ2Qae1fn1qP2lBTCcbvkLW0IQIMkk4= -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:25 2025 by rpki-client