This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: H5GS9W1IF76uQpRLNmkgGEqfpf9tKwQJU4d+ZV+1Aks= Subject key identifier: B2:F6:6C:E5:3D:2F:03:D0:BA:CE:69:BA:DE:CF:D8:D8:35:2A:11:87 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 47BEAA35AF6FB43EF855E18292B6A6CFA3C07637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 026D Signing time: Thu 18 Dec 2025 11:10:04 +0000 Manifest this update: Thu 18 Dec 2025 11:05:04 +0000 Manifest next update: Sun 21 Dec 2025 20:45:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: 86sCj5O6+U8/Z2C/3s7zau4WeaXjY6eGwcV9NoVcOCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:be:aa:35:af:6f:b4:3e:f8:55:e1:82:92:b6:a6:cf:a3:c0:76:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Dec 18 11:05:04 2025 GMT Not After : Dec 21 20:45:04 2025 GMT Subject: CN=B2F66CE53D2F03D0BACE69BADECFD8D8352A1187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:9b:4b:04:d1:c2:88:55:a3:88:2d:22:b6: 42:22:50:c2:7f:0d:b5:8f:a6:a3:5f:38:e3:eb:5c: 0a:c2:7e:55:59:17:81:a0:c5:fd:1c:36:99:01:e7: 61:a3:c0:de:d1:c2:0c:77:02:13:63:50:95:bc:45: 04:43:c3:e9:db:ba:24:95:f4:12:6e:ff:6d:ea:55: a7:bb:4e:97:f4:b1:5e:d3:fe:d1:4d:57:a3:2e:7e: 0b:65:a6:9e:7d:3a:aa:a6:39:fa:c4:10:25:48:b1: 96:cd:02:8b:b4:70:83:29:4b:a0:2a:59:42:ef:28: 4c:de:50:11:46:08:f8:78:fd:4f:14:b4:7b:d7:08: ba:8f:13:8b:85:24:7e:63:de:d8:36:a1:59:5c:ef: 0a:78:07:1e:0b:66:1e:90:c9:58:81:3d:22:47:a4: 3d:83:b6:2a:60:41:ce:44:c9:43:8d:8e:2c:f3:39: 23:01:7f:d4:7a:37:6e:22:81:72:cf:e8:7a:34:1a: f5:51:ce:05:ab:ac:47:e0:fa:5a:cc:c0:2b:3e:75: ca:1d:e9:2d:67:bb:2b:40:10:5e:10:9d:5b:72:31: cd:20:b5:ab:3c:d7:2d:1e:ef:cc:d2:06:b7:47:b5: 82:02:d9:df:29:35:b8:81:d2:06:4a:8a:f9:e6:2e: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F6:6C:E5:3D:2F:03:D0:BA:CE:69:BA:DE:CF:D8:D8:35:2A:11:87 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:35:28:d2:cf:82:cd:e7:6a:42:c9:57:a3:1b:c0:2a:b7: 1d:f1:4c:dd:44:6d:69:c0:f9:0b:39:bc:f6:46:42:42:b1:4b: 3b:4d:d4:3d:67:8d:5d:06:88:29:da:d9:3e:3b:18:19:67:90: 4d:ea:c1:4f:e5:4a:3d:39:e2:47:f7:b4:af:f6:8e:f7:4a:9b: 4b:f8:9a:32:e6:ff:0b:b9:f1:d3:f1:ae:16:bc:78:2e:85:78: ec:61:06:ba:ad:0c:89:45:66:1b:d7:7b:25:16:bf:2a:b4:40: 3a:ff:af:70:ed:83:db:33:eb:92:f2:38:38:54:f6:13:e5:45: 1d:84:fc:83:d8:78:6a:d9:57:ea:c0:db:11:a3:20:82:3d:2a: 9d:a4:08:66:7a:be:01:31:9a:57:64:70:9d:73:4a:44:9d:b5: 3b:59:9a:70:90:fe:db:21:d4:dc:03:bb:a9:e8:ba:91:55:2c: 0a:f1:67:e7:c0:3a:e7:dc:e4:7d:eb:a8:9e:3a:03:49:36:d7: 53:50:ab:57:18:a4:98:db:9f:52:9b:37:3e:39:91:fd:71:e8: ba:00:84:45:f6:05:85:1c:91:56:17:73:9c:46:d4:44:90:67: 1b:a7:12:7a:08:95:a6:35:e8:76:e6:2a:82:85:03:59:c3:1e: f7:47:9c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR76qNa9vtD74VeGCkramz6PAdjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTEyMTgxMTA1MDRaFw0yNTEyMjEyMDQ1MDRaMDMxMTAvBgNV BAMTKEIyRjY2Q0U1M0QyRjAzRDBCQUNFNjlCQURFQ0ZEOEQ4MzUyQTExODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTptLBNHCiFWjiC0itkIiUMJ/ DbWPpqNfOOPrXArCflVZF4Ggxf0cNpkB52GjwN7Rwgx3AhNjUJW8RQRDw+nbuiSV 9BJu/23qVae7Tpf0sV7T/tFNV6Mufgtlpp59OqqmOfrEECVIsZbNAou0cIMpS6Aq WULvKEzeUBFGCPh4/U8UtHvXCLqPE4uFJH5j3tg2oVlc7wp4Bx4LZh6QyViBPSJH pD2DtipgQc5EyUONjizzOSMBf9R6N24igXLP6Ho0GvVRzgWrrEfg+lrMwCs+dcod 6S1nuytAEF4QnVtyMc0gtas81y0e78zSBrdHtYIC2d8pNbiB0gZKivnmLoulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvZs5T0vA9C6zmm63s/Y2DUqEYcwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF0NSjSz4LN52pCyVejG8Aqtx3xTN1EbWnA +Qs5vPZGQkKxSztN1D1njV0GiCna2T47GBlnkE3qwU/lSj054kf3tK/2jvdKm0v4 mjLm/wu58dPxrha8eC6FeOxhBrqtDIlFZhvXeyUWvyq0QDr/r3Dtg9sz65LyODhU 9hPlRR2E/IPYeGrZV+rA2xGjIII9Kp2kCGZ6vgExmldkcJ1zSkSdtTtZmnCQ/tsh 1NwDu6noupFVLArxZ+fAOufc5H3rqJ46A0k211NQq1cYpJjbn1KbNz45kf1x6LoA hEX2BYUckVYXc5xG1ESQZxunEnoIlaY16HbmKoKFA1nDHvdHnEM= -----END CERTIFICATE-----Generated at Fri Dec 19 22:42:50 2025 by rpki-client