This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: dort4Po6xUf1PbEN8N7JvVuN6vsmzIyvcPVCSMOXO4s= Subject key identifier: 4A:22:E7:A1:5B:32:D5:CB:CA:91:9B:EF:EF:21:07:6D:F7:27:2F:16 Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 401B5FC9551734F2CED450CB6BE7481AE8A0FC77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 012E Signing time: Wed 17 Dec 2025 13:11:39 +0000 Manifest this update: Wed 17 Dec 2025 13:06:39 +0000 Manifest next update: Sat 20 Dec 2025 23:49:39 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) 2: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: +LLnwAQa3jpZj2KjfBIIS+Phum5KV7FSzyahsrGUkYQ=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1b:5f:c9:55:17:34:f2:ce:d4:50:cb:6b:e7:48:1a:e8:a0:fc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Dec 17 13:06:39 2025 GMT Not After : Dec 20 23:49:39 2025 GMT Subject: CN=4A22E7A15B32D5CBCA919BEFEF21076DF7272F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:e2:a2:0f:d0:66:17:fe:ef:dc:32:f3:18: 03:9c:34:15:25:5a:8b:1a:a4:cb:c0:10:8d:05:41: ca:7d:39:8a:8f:c3:80:df:82:db:aa:4a:0b:31:f1: 2b:dc:4a:a8:10:1b:c6:cd:54:ac:4b:a3:eb:6c:c9: b6:cc:b6:25:51:eb:11:81:3b:1d:87:07:aa:49:41: 11:5f:84:07:34:95:fd:db:cf:31:6b:fc:e9:07:28: dc:3a:81:e9:93:e4:e8:2e:59:6c:0a:92:2b:4e:8e: e9:c8:2c:ef:41:8e:bc:0b:15:a3:a9:52:12:73:c9: 8c:72:31:73:d7:31:07:f6:d9:ef:7a:fd:7b:3d:33: 74:de:3c:10:e3:f1:94:46:21:c5:31:a5:ed:a7:e8: c5:c5:11:79:21:d5:32:21:28:42:ce:fc:ca:41:5a: ec:fa:9d:d2:48:90:37:8e:16:25:e9:36:82:e4:34: c5:37:92:96:c2:1a:08:9e:9a:84:41:21:2a:9f:f3: f1:6d:6b:3c:6f:2d:b5:d3:db:70:a7:ad:d4:c7:f6: a5:2d:82:34:1d:3b:3c:37:f5:9a:ee:17:48:d7:a0: b2:a0:e6:f8:c9:90:4f:7f:82:e2:29:b4:57:9e:bf: 80:5e:b9:b1:33:eb:fd:16:5c:31:4e:33:76:02:7b: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:E7:A1:5B:32:D5:CB:CA:91:9B:EF:EF:21:07:6D:F7:27:2F:16 X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:bd:61:86:e4:77:1b:9e:d8:cc:b0:4a:c5:41:7d:fc:a3: b7:f5:a1:94:ca:93:c5:f3:ec:99:31:21:97:03:d4:d4:16:4d: 06:34:d7:35:d9:98:2f:e2:d9:18:36:0a:13:b5:2c:0b:9c:84: b8:b0:02:0b:87:5f:d4:85:ba:bc:e3:52:e0:59:27:05:9b:e4: 18:b8:3a:13:4c:ec:4a:17:fa:78:11:06:d0:35:a2:f7:6b:2e: a7:ed:9f:ed:23:03:68:da:67:75:f7:d3:84:56:9c:7e:c3:98: c9:8c:c5:e4:fa:12:08:e5:54:3a:f9:69:5b:d9:0d:85:0d:e1: 6a:70:75:42:ff:61:00:d4:0a:50:b8:9b:22:cc:09:17:80:4a: 51:39:e0:d4:13:a7:b9:67:96:a8:ea:cf:45:24:de:68:37:82: 19:43:22:04:a8:92:32:85:01:3e:2f:ae:5b:f8:a1:0a:98:60: 7f:d1:6d:84:9d:0d:c8:33:33:2e:e2:27:8a:7e:2b:9c:1c:a4: b4:9e:40:9f:43:9d:05:91:d8:1f:d9:7f:ef:b7:62:64:5f:1e: 6d:e0:c5:e2:5f:df:3c:d7:b9:1f:07:db:6f:1e:20:5d:35:8c: 0b:b1:05:43:69:1d:e5:8c:97:71:12:8f:89:9d:ce:3e:33:14: 53:1e:c6:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBtfyVUXNPLO1FDLa+dIGuig/HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTEyMTcxMzA2MzlaFw0yNTEyMjAyMzQ5MzlaMDMxMTAvBgNV BAMTKDRBMjJFN0ExNUIzMkQ1Q0JDQTkxOUJFRkVGMjEwNzZERjcyNzJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALeKiD9BmF/7v3DLzGAOcNBUl WosapMvAEI0FQcp9OYqPw4DfgtuqSgsx8SvcSqgQG8bNVKxLo+tsybbMtiVR6xGB Ox2HB6pJQRFfhAc0lf3bzzFr/OkHKNw6gemT5OguWWwKkitOjunILO9BjrwLFaOp UhJzyYxyMXPXMQf22e96/Xs9M3TePBDj8ZRGIcUxpe2n6MXFEXkh1TIhKELO/MpB Wuz6ndJIkDeOFiXpNoLkNMU3kpbCGgiemoRBISqf8/FtazxvLbXT23CnrdTH9qUt gjQdOzw39ZruF0jXoLKg5vjJkE9/guIptFeev4BeubEz6/0WXDFOM3YCexFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiLnoVsy1cvKkZvv7yEHbfcnLxYwHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL+vWGG5HcbntjMsErFQX38o7f1oZTKk8Xz 7JkxIZcD1NQWTQY01zXZmC/i2Rg2ChO1LAuchLiwAguHX9SFurzjUuBZJwWb5Bi4 OhNM7EoX+ngRBtA1ovdrLqftn+0jA2jaZ3X304RWnH7DmMmMxeT6EgjlVDr5aVvZ DYUN4WpwdUL/YQDUClC4myLMCReASlE54NQTp7lnlqjqz0Uk3mg3ghlDIgSokjKF AT4vrlv4oQqYYH/RbYSdDcgzMy7iJ4p+K5wcpLSeQJ9DnQWR2B/Zf++3YmRfHm3g xeJf3zzXuR8H228eIF01jAuxBUNpHeWMl3ESj4mdzj4zFFMexks= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:48 2025 by rpki-client