This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: eHJ/cMDa9D090SimwJP4WVrHRJN7cWgBzeABTXRP1Fw= Subject key identifier: AA:F1:91:94:51:3B:F6:DC:B7:78:D6:73:D7:68:65:B9:2A:22:2B:48 Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 31FB6D59EE56F45E2B1608A9C88F91A69DFAEAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: DD Signing time: Sat 20 Dec 2025 14:01:32 +0000 Manifest this update: Sat 20 Dec 2025 13:56:32 +0000 Manifest next update: Tue 23 Dec 2025 23:53:32 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) 2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: uw9lTpOzfz/jnYPaVG9NOKxTiT2Hz6GFIRNZnURxCHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fb:6d:59:ee:56:f4:5e:2b:16:08:a9:c8:8f:91:a6:9d:fa:ea:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Dec 20 13:56:32 2025 GMT Not After : Dec 23 23:53:32 2025 GMT Subject: CN=AAF19194513BF6DCB778D673D76865B92A222B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:af:ca:2d:22:66:ee:4e:6f:00:a8:10:19: 58:68:5c:e9:d7:ea:a8:95:34:7d:12:7f:6a:02:4a: 94:8e:a0:ee:2f:45:6b:82:82:d5:20:7c:0e:65:ca: 2b:46:fa:86:3e:72:62:21:5f:72:d4:7e:5e:63:cd: c6:15:b2:35:70:82:55:44:de:e9:9d:ae:a4:a7:d3: 7f:01:70:7a:5c:85:a1:29:03:0f:b8:d0:cd:aa:63: e1:3d:16:8e:f8:83:47:5b:7c:8c:af:9c:5f:6c:82: 3d:43:45:5c:d5:53:14:bf:06:eb:54:29:7d:72:3f: af:92:a0:12:3f:59:b1:5a:97:63:1b:5b:41:c6:58: 5e:f0:ec:46:97:44:ba:a3:c8:04:30:31:ed:45:60: 2b:e7:8e:e0:04:e4:95:4f:f6:66:a0:1c:04:af:20: 56:c3:86:6f:42:c2:4d:b0:df:7f:83:36:11:8f:6f: 25:fa:9f:f9:7a:bb:2d:2f:42:6c:6d:5b:4b:af:c4: a1:04:ae:a0:83:81:f4:09:cd:7a:c4:23:23:bd:12: f5:e9:8f:67:e3:ea:9d:0a:04:34:bc:d1:40:bd:4d: 8d:ed:34:0c:22:cc:32:5d:98:27:fe:a5:48:98:bf: 25:6e:2f:59:28:79:a8:30:3f:15:22:62:bb:e9:09: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:91:94:51:3B:F6:DC:B7:78:D6:73:D7:68:65:B9:2A:22:2B:48 X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ee:53:26:e2:9b:73:c5:27:22:28:29:f2:a3:09:d5:3d:4a: ee:5b:cf:19:d7:d3:26:d6:19:86:b5:56:3a:54:de:94:81:59: f1:92:33:93:ed:15:7c:ac:b5:db:6d:25:02:55:ba:c4:d9:2d: 2c:3e:13:46:e3:10:a1:67:fa:c2:16:21:ac:03:82:05:f4:86: 37:b4:09:23:6e:12:fa:98:e5:28:e5:ee:48:16:8d:46:02:7f: b7:7a:42:a9:e3:4a:17:c7:b6:eb:b0:5c:94:4d:34:1b:a8:e1: 21:38:bd:67:50:13:8a:54:07:5d:8d:bf:12:38:2d:c8:07:5b: ae:57:d8:33:3a:09:bd:fb:22:39:f3:30:a0:d8:eb:51:51:11: fd:f8:70:29:44:22:4b:55:96:1d:f2:1c:ba:88:77:3e:84:ac: 0e:e4:37:58:11:f8:7d:92:44:72:be:f0:ca:93:b0:6d:25:c7: 94:5f:20:08:15:b9:cb:61:ad:9b:c2:ef:00:4f:f8:c7:3a:eb: 87:03:c9:01:d7:71:24:53:29:f1:d1:30:01:71:2c:62:55:2c: 75:b6:7f:88:30:fa:2f:9b:a7:36:64:d3:78:3f:b5:f7:9b:c2: 7e:7a:55:f5:9e:3a:ae:d0:ac:bd:ad:6e:2f:97:a0:3d:9e:33: a6:b0:ff:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfttWe5W9F4rFgipyI+Rpp366q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNTEyMjAxMzU2MzJaFw0yNTEyMjMyMzUzMzJaMDMxMTAvBgNV BAMTKEFBRjE5MTk0NTEzQkY2RENCNzc4RDY3M0Q3Njg2NUI5MkEyMjJCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8K/KLSJm7k5vAKgQGVhoXOnX 6qiVNH0Sf2oCSpSOoO4vRWuCgtUgfA5lyitG+oY+cmIhX3LUfl5jzcYVsjVwglVE 3umdrqSn038BcHpchaEpAw+40M2qY+E9Fo74g0dbfIyvnF9sgj1DRVzVUxS/ButU KX1yP6+SoBI/WbFal2MbW0HGWF7w7EaXRLqjyAQwMe1FYCvnjuAE5JVP9magHASv IFbDhm9Cwk2w33+DNhGPbyX6n/l6uy0vQmxtW0uvxKEErqCDgfQJzXrEIyO9EvXp j2fj6p0KBDS80UC9TY3tNAwizDJdmCf+pUiYvyVuL1koeagwPxUiYrvpCbNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvGRlFE79ty3eNZz12hluSoiK0gwHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7uUybim3PFJyIoKfKjCdU9Su5bzxnX0ybW GYa1VjpU3pSBWfGSM5PtFXystdttJQJVusTZLSw+E0bjEKFn+sIWIawDggX0hje0 CSNuEvqY5Sjl7kgWjUYCf7d6QqnjShfHtuuwXJRNNBuo4SE4vWdQE4pUB12NvxI4 LcgHW65X2DM6Cb37IjnzMKDY61FREf34cClEIktVlh3yHLqIdz6ErA7kN1gR+H2S RHK+8MqTsG0lx5RfIAgVucthrZvC7wBP+Mc664cDyQHXcSRTKfHRMAFxLGJVLHW2 f4gw+i+bpzZk03g/tfebwn56VfWeOq7QrL2tbi+XoD2eM6aw/7o= -----END CERTIFICATE-----Generated at Mon Dec 22 09:45:55 2025 by rpki-client