This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: q8nz6ri5vO9rjIBNHIaAmyaTTECg8qp5uxxtbd17aCE= Subject key identifier: E6:83:07:FB:5F:48:36:E4:4B:77:C2:3C:20:C7:12:BC:BD:94:16:41 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 3D58AD78841ADA87B0C81076E279A8A3ABD6875D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02EA Signing time: Tue 23 Dec 2025 11:33:51 +0000 Manifest this update: Tue 23 Dec 2025 11:28:51 +0000 Manifest next update: Fri 26 Dec 2025 18:34:51 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) 3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: IarEJEy7d8F0oX9shyb9+RSQVynzI8vIW0j4+gK7btc=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 18:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:58:ad:78:84:1a:da:87:b0:c8:10:76:e2:79:a8:a3:ab:d6:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Dec 23 11:28:51 2025 GMT Not After : Dec 26 18:34:51 2025 GMT Subject: CN=E68307FB5F4836E44B77C23C20C712BCBD941641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:22:45:63:6c:e7:21:76:f1:63:93:2f:f9: 71:21:86:54:7f:1e:87:dd:89:84:d9:d9:58:14:48: b5:66:58:71:2f:5a:b4:04:bf:71:96:c6:39:4d:54: 63:b7:a8:3f:d2:1a:32:18:08:26:bc:14:9a:33:97: bb:e2:91:f1:78:65:6c:d1:c3:6b:58:75:69:61:50: 2a:bb:f3:fe:53:43:49:a8:f9:b7:d9:c1:d5:8f:16: a6:11:15:22:96:dc:b6:8b:5a:f6:bf:11:23:aa:5a: f5:7f:10:24:2d:c0:9f:57:01:b6:89:02:2c:83:7d: 1c:1e:b4:5f:29:2d:c0:6d:e4:79:48:0c:4f:02:2d: a3:f9:12:d8:f2:62:fe:bb:7e:58:0d:01:9a:79:b9: f3:65:29:17:01:11:39:14:c4:6e:29:2d:ab:1f:d2: d1:53:e6:cd:65:80:36:67:7d:84:aa:3d:af:8a:b6: 19:1d:a7:28:26:85:e2:4d:35:29:29:e0:5c:07:54: 75:2d:13:ca:ce:7d:85:63:2f:84:64:29:f3:20:0b: 69:5d:e9:97:e3:4c:cf:33:79:9e:ed:90:c0:0b:61: 65:ce:3e:e0:73:1b:f8:9b:d4:b6:71:65:65:c4:d8: a8:41:29:bc:6a:66:31:a1:27:9b:c4:70:97:4c:86: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:07:FB:5F:48:36:E4:4B:77:C2:3C:20:C7:12:BC:BD:94:16:41 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:00:bf:91:88:0f:89:72:3b:a9:1a:8e:16:46:d7:a0:52: 46:1b:9e:ad:a4:e6:52:90:83:bf:89:65:67:14:70:20:bd:c0: 18:e3:64:0d:c4:33:e0:99:bb:ae:7b:1c:64:75:f4:9e:dc:f4: af:bc:c0:78:4b:3a:fa:6d:8b:54:60:5b:fd:1d:83:c6:c2:d8: 29:c4:f7:b7:49:27:04:3e:ea:5f:eb:ef:b0:eb:f5:b9:15:82: 28:cc:16:f0:1e:a1:4e:ef:6f:79:60:fd:66:2c:66:09:cc:97: 6e:cb:c9:ac:95:84:b8:4b:7d:89:66:d5:b5:37:95:96:9a:05: df:a6:85:80:b6:a4:64:8f:57:5d:d0:76:c7:76:46:77:a7:73: 92:f6:78:9c:68:7a:d4:b7:7c:75:b5:20:85:5f:87:28:ff:cb: 8e:51:35:04:43:dd:d3:2b:ed:20:94:23:12:4b:0e:04:8f:bd: 44:5e:ed:69:b6:26:47:24:9d:e7:a9:f6:62:37:80:c5:e0:11: 7d:39:7b:16:53:02:0c:64:94:70:54:7e:73:fa:47:ae:ca:dc: ef:26:a3:55:56:4e:49:a1:45:9b:91:38:03:68:e9:92:a9:a9: 76:90:c0:2b:ec:32:a1:52:d9:59:ae:10:14:4a:a2:6b:d1:d7: 6f:56:33:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPViteIQa2oewyBB24nmoo6vWh10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTEyMjMxMTI4NTFaFw0yNTEyMjYxODM0NTFaMDMxMTAvBgNV BAMTKEU2ODMwN0ZCNUY0ODM2RTQ0Qjc3QzIzQzIwQzcxMkJDQkQ5NDE2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYyJFY2znIXbxY5Mv+XEhhlR/ HofdiYTZ2VgUSLVmWHEvWrQEv3GWxjlNVGO3qD/SGjIYCCa8FJozl7vikfF4ZWzR w2tYdWlhUCq78/5TQ0mo+bfZwdWPFqYRFSKW3LaLWva/ESOqWvV/ECQtwJ9XAbaJ AiyDfRwetF8pLcBt5HlIDE8CLaP5EtjyYv67flgNAZp5ufNlKRcBETkUxG4pLasf 0tFT5s1lgDZnfYSqPa+KthkdpygmheJNNSkp4FwHVHUtE8rOfYVjL4RkKfMgC2ld 6ZfjTM8zeZ7tkMALYWXOPuBzG/ib1LZxZWXE2KhBKbxqZjGhJ5vEcJdMhortAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5oMH+19INuRLd8I8IMcSvL2UFkEwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSfAL+RiA+JcjupGo4WRtegUkYbnq2k5lKQ g7+JZWcUcCC9wBjjZA3EM+CZu657HGR19J7c9K+8wHhLOvpti1RgW/0dg8bC2CnE 97dJJwQ+6l/r77Dr9bkVgijMFvAeoU7vb3lg/WYsZgnMl27LyayVhLhLfYlm1bU3 lZaaBd+mhYC2pGSPV13Qdsd2Rnenc5L2eJxoetS3fHW1IIVfhyj/y45RNQRD3dMr 7SCUIxJLDgSPvURe7Wm2Jkckneep9mI3gMXgEX05exZTAgxklHBUfnP6R67K3O8m o1VWTkmhRZuROANo6ZKpqXaQwCvsMqFS2VmuEBRKomvR129WM9g= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:06 2025 by rpki-client