This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft File: 10FC4D9D2403FC433C19BB76131325B776505E51.mft (raw, json) Hash identifier: qoRX8FZ2FqtHySPBfvmIPaGSzL8o9oarRQFwdVEiy6E= Subject key identifier: 74:1A:F6:A5:C5:BC:3A:CB:36:93:0E:62:13:69:19:19:91:23:58:7E Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 762FD71DD0E416882FB48AFCB966BCF7E4E04661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft Manifest number: 04CC Signing time: Thu 18 Dec 2025 06:51:37 +0000 Manifest this update: Thu 18 Dec 2025 06:46:37 +0000 Manifest next update: Sun 21 Dec 2025 09:55:37 +0000 Files and hashes: 1: 10FC4D9D2403FC433C19BB76131325B776505E51.crl (hash: m7OlJ9/PmDB2Qx3IKjjGny6Rp782ij4dNxl+V4HXoVY=) 2: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (hash: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY=) 3: 323030313a6466343a346230303a3a2f34382d3438203d3e20313337333135.roa (hash: vnOWOE8ANRJB3kxmh2kTgRDOD4mP6pnBNqxwGmSsQIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2f:d7:1d:d0:e4:16:88:2f:b4:8a:fc:b9:66:bc:f7:e4:e0:46:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Dec 18 06:46:37 2025 GMT Not After : Dec 21 09:55:37 2025 GMT Subject: CN=741AF6A5C5BC3ACB36930E62136919199123587E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:88:aa:4b:21:fa:ba:94:bc:ab:83:17:e9: 19:f6:f7:51:28:ac:ba:e7:65:c6:3c:d8:f2:86:dc: 3c:26:88:ee:3f:04:f1:52:0c:ab:5d:86:04:e8:a8: 2d:bb:fd:e5:32:d5:36:c1:80:99:ad:0e:4a:02:82: f2:51:09:2c:5a:f6:d6:de:12:a7:60:78:94:7d:95: 9d:e6:78:8e:60:94:5e:c3:ad:9f:8e:f8:0a:41:86: 3e:74:b6:c0:30:17:1c:97:e3:e2:91:e8:32:0d:fe: e8:14:e6:5c:f9:d2:06:74:ca:a1:6d:e1:79:eb:e9: ac:9f:4a:51:67:a8:c5:a0:2a:88:39:d3:7b:60:f2: af:f9:dc:30:3f:47:68:c8:79:ca:8f:76:5f:1a:2c: a6:62:4c:b4:32:fd:d7:d5:6d:ee:dd:4c:b6:de:ab: 06:51:4b:86:c3:67:b1:a6:c3:6d:d7:ff:e0:41:f6: 94:c2:38:ca:1d:7e:ac:e0:33:4c:33:a0:2e:24:9a: 1a:08:77:7e:91:6e:b0:46:fa:4e:94:9c:aa:0b:ef: 02:b4:ee:f7:49:f0:11:ca:fc:5b:f9:e2:4c:5d:9d: 4f:c6:b4:62:f4:d5:31:2f:f8:3c:55:9f:1c:dd:85: c2:73:79:8c:21:d7:8c:cb:27:f4:59:bf:84:a9:1c: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:F6:A5:C5:BC:3A:CB:36:93:0E:62:13:69:19:19:91:23:58:7E X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:59:36:15:9b:5b:02:c1:a3:5a:43:d3:9f:43:36:29:86:20: aa:d0:9a:31:06:e3:af:25:e2:e8:2f:1f:0f:52:bf:ae:18:9a: c2:55:91:27:c5:ae:3c:04:fa:17:42:8f:86:de:c5:0e:f5:8b: 29:ca:8c:7b:6c:3d:7c:6d:45:30:54:12:e6:5a:2d:40:9b:fe: 85:c4:b8:4f:be:a2:d1:36:92:22:6e:f8:49:6f:ff:7f:3e:0f: 68:c8:47:2e:de:10:82:41:25:19:61:22:14:c7:c6:2f:99:82: 87:0d:3e:e9:f1:45:95:73:a9:b8:c8:7d:85:e9:5d:b2:42:cb: a2:3b:0c:30:2e:af:b8:97:ea:8d:0f:72:85:01:2c:c7:d7:aa: b8:7d:20:8c:de:d9:11:77:ca:e9:38:c7:55:4f:27:5a:fb:dc: fc:93:f3:bc:cd:79:bc:5c:c7:cc:68:0a:5c:25:24:fc:9a:0b: 34:e2:4c:90:64:9b:63:73:dc:80:16:8a:9c:86:7c:58:b4:84: e7:91:bf:22:6c:b2:2b:18:21:54:d6:b1:46:6d:72:6a:fe:a6: 92:f9:3e:64:a3:6a:ee:26:a0:6a:fb:94:ab:71:8d:75:ea:9d: 69:f1:e8:9a:20:be:29:01:ad:24:f0:96:43:b6:9f:10:49:65: 1b:02:8a:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdi/XHdDkFogvtIr8uWa89+TgRmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNTEyMTgwNjQ2MzdaFw0yNTEyMjEwOTU1MzdaMDMxMTAvBgNV BAMTKDc0MUFGNkE1QzVCQzNBQ0IzNjkzMEU2MjEzNjkxOTE5OTEyMzU4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+IiqSyH6upS8q4MX6Rn291Eo rLrnZcY82PKG3DwmiO4/BPFSDKtdhgToqC27/eUy1TbBgJmtDkoCgvJRCSxa9tbe EqdgeJR9lZ3meI5glF7DrZ+O+ApBhj50tsAwFxyX4+KR6DIN/ugU5lz50gZ0yqFt 4Xnr6ayfSlFnqMWgKog503tg8q/53DA/R2jIecqPdl8aLKZiTLQy/dfVbe7dTLbe qwZRS4bDZ7Gmw23X/+BB9pTCOModfqzgM0wzoC4kmhoId36RbrBG+k6UnKoL7wK0 7vdJ8BHK/Fv54kxdnU/GtGL01TEv+DxVnxzdhcJzeYwh14zLJ/RZv4SpHEUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdBr2pcW8Oss2kw5iE2kZGZEjWH4wHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RmMDY4YmQtOGUzYS00Njk1LTg5 ZWQtM2IzMjUwZjg3NWM5LzAvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1 Qjc3NjUwNUU1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFZNhWbWwLBo1pD059DNimGIKrQmjEG468l 4ugvHw9Sv64YmsJVkSfFrjwE+hdCj4bexQ71iynKjHtsPXxtRTBUEuZaLUCb/oXE uE++otE2kiJu+Elv/38+D2jIRy7eEIJBJRlhIhTHxi+ZgocNPunxRZVzqbjIfYXp XbJCy6I7DDAur7iX6o0PcoUBLMfXqrh9IIze2RF3yuk4x1VPJ1r73PyT87zNebxc x8xoClwlJPyaCzTiTJBkm2Nz3IAWipyGfFi0hOeRvyJssisYIVTWsUZtcmr+ppL5 PmSjau4moGr7lKtxjXXqnWnx6JogvikBrSTwlkO2nxBJZRsCiuU= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:27 2025 by rpki-client