This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: zZW1GSUIqCUxS4yQPh+32m5j+ceKragFBvlpRLsWkRY= Subject key identifier: CE:A9:B5:1E:E5:A1:87:D4:F6:3E:2B:E3:16:E2:A1:48:B1:9A:50:52 Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 53B9B13651F5FC8C5A953F44F8905DF9A335349C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: E0 Signing time: Sat 27 Dec 2025 07:31:20 +0000 Manifest this update: Sat 27 Dec 2025 07:26:20 +0000 Manifest next update: Tue 30 Dec 2025 10:47:20 +0000 Files and hashes: 1: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: T6gbaZxY+4EbQq2f37YhViGTImXEg0use2eUjU6C/Eo=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b9:b1:36:51:f5:fc:8c:5a:95:3f:44:f8:90:5d:f9:a3:35:34:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Dec 27 07:26:20 2025 GMT Not After : Dec 30 10:47:20 2025 GMT Subject: CN=CEA9B51EE5A187D4F63E2BE316E2A148B19A5052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:16:40:cf:e8:28:cd:ac:09:ed:17:35:86: dd:cc:aa:1a:97:7a:2a:6d:4f:48:a5:d8:63:9c:92: 62:3c:12:3d:24:e3:2a:65:17:a4:40:72:f8:f4:2e: a6:e5:0c:9a:27:59:14:dd:62:48:4f:1e:67:e9:9a: cf:19:d6:9f:ad:c3:c9:82:1e:09:4b:14:55:e4:56: 01:d0:68:ae:22:ef:0d:63:47:16:e1:48:9f:c9:34: 0b:4a:a9:90:72:1a:22:96:55:f4:b5:a1:bd:fb:79: c0:62:ce:2c:cc:1c:b9:b0:20:72:b8:73:45:a5:7b: 42:ab:a1:82:2d:d4:d6:6d:23:9b:83:3b:52:46:28: f0:9c:f1:bb:5b:3a:c9:61:0f:6d:43:26:cb:50:fd: c0:3c:c2:d5:83:0b:e7:6f:45:22:83:a4:19:3d:9c: 34:6f:c7:17:dc:60:85:ba:7d:2f:94:5e:7e:1c:aa: 03:4c:05:3f:e9:d4:0d:a9:17:3d:37:51:1b:99:bd: bf:5d:0a:2e:d9:e3:dc:b5:cb:df:98:09:25:ae:fb: de:e9:0d:ad:9a:51:ef:a2:05:bf:23:a7:18:44:7f: 9e:7e:7b:fb:ff:e2:f0:c2:60:33:93:96:2b:ca:07: 88:d6:1d:d6:99:6e:c3:10:16:3b:36:be:33:fb:2f: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:B5:1E:E5:A1:87:D4:F6:3E:2B:E3:16:E2:A1:48:B1:9A:50:52 X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9d:91:99:61:41:fc:70:07:97:6b:4a:be:0d:d8:5a:11:d9: de:b4:e5:84:4c:fc:55:a8:a0:94:4c:c5:0c:ea:90:b2:05:f2: 88:40:b4:42:4f:af:3c:17:26:d7:82:f0:77:65:c1:6e:90:05: 91:0d:8c:20:f8:11:4e:07:7a:f0:ca:04:8a:fb:45:60:05:4f: 4d:3e:b4:b7:94:22:e3:b6:62:ed:20:00:3c:16:1a:c7:57:d8: c3:0a:fd:3a:cd:3f:f1:53:66:71:e1:8a:a1:2b:9d:69:49:d1: 0b:85:11:7e:cb:38:b6:04:97:22:96:9a:ae:de:ff:2b:f9:03: 1e:21:2e:88:5c:5c:ce:44:ae:69:e6:3d:77:79:6b:99:94:0b: 2f:51:76:17:9d:2b:d5:22:59:46:17:87:98:a3:26:d6:fb:10: fc:a8:cb:df:b8:88:ca:2b:ee:b4:1e:7f:42:6e:a0:f8:0f:55: 64:20:2e:03:03:2b:a5:9d:9d:3a:13:ad:0a:d9:68:e7:4a:73: ff:0a:80:f2:dd:eb:ba:6f:dd:f7:a9:5a:cb:16:ea:0d:2c:f2: d7:8d:ed:d5:2e:2c:fb:62:2e:61:e0:4a:90:2b:fe:fd:d2:cf: 5c:59:d7:4f:ad:e8:ac:75:60:97:a3:c6:bf:cc:3c:47:3a:0d: b1:56:40:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7mxNlH1/IxalT9E+JBd+aM1NJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNTEyMjcwNzI2MjBaFw0yNTEyMzAxMDQ3MjBaMDMxMTAvBgNV BAMTKENFQTlCNTFFRTVBMTg3RDRGNjNFMkJFMzE2RTJBMTQ4QjE5QTUwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYxZAz+gozawJ7Rc1ht3MqhqX eiptT0il2GOckmI8Ej0k4yplF6RAcvj0LqblDJonWRTdYkhPHmfpms8Z1p+tw8mC HglLFFXkVgHQaK4i7w1jRxbhSJ/JNAtKqZByGiKWVfS1ob37ecBizizMHLmwIHK4 c0Wle0KroYIt1NZtI5uDO1JGKPCc8btbOslhD21DJstQ/cA8wtWDC+dvRSKDpBk9 nDRvxxfcYIW6fS+UXn4cqgNMBT/p1A2pFz03URuZvb9dCi7Z49y1y9+YCSWu+97p Da2aUe+iBb8jpxhEf55+e/v/4vDCYDOTlivKB4jWHdaZbsMQFjs2vjP7L7ftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqm1HuWhh9T2PivjFuKhSLGaUFIwHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICdkZlhQfxwB5drSr4N2FoR2d605YRM/FWo oJRMxQzqkLIF8ohAtEJPrzwXJteC8HdlwW6QBZENjCD4EU4HevDKBIr7RWAFT00+ tLeUIuO2Yu0gADwWGsdX2MMK/TrNP/FTZnHhiqErnWlJ0QuFEX7LOLYElyKWmq7e /yv5Ax4hLohcXM5ErmnmPXd5a5mUCy9RdhedK9UiWUYXh5ijJtb7EPyoy9+4iMor 7rQef0JuoPgPVWQgLgMDK6WdnToTrQrZaOdKc/8KgPLd67pv3fepWssW6g0s8teN 7dUuLPtiLmHgSpAr/v3Sz1xZ10+t6Kx1YJejxr/MPEc6DbFWQDY= -----END CERTIFICATE-----Generated at Sun Dec 28 23:25:56 2025 by rpki-client