This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: NXCUMyo2UH8pnMo39dXeUaWS4jNF87lXzoRYro59WHw= Subject key identifier: 75:9E:E3:AF:D3:D1:A8:CE:63:30:88:C5:30:95:5E:F8:E5:0E:3A:61 Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 18C179DEC4A2AA186DAE00B611F117A91639074E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01C2 Signing time: Thu 18 Dec 2025 08:03:05 +0000 Manifest this update: Thu 18 Dec 2025 07:58:05 +0000 Manifest next update: Sun 21 Dec 2025 10:48:05 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: bYL3syFx6NGhqMU1M8OANCcKtX9aZc4njVRqY9dr5o8=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: CBI4nIwtPdaHkjZOY64Coq97MMUx2Tj7jWzoQgQNj4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c1:79:de:c4:a2:aa:18:6d:ae:00:b6:11:f1:17:a9:16:39:07:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Dec 18 07:58:05 2025 GMT Not After : Dec 21 10:48:05 2025 GMT Subject: CN=759EE3AFD3D1A8CE633088C530955EF8E50E3A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:aa:0d:56:53:ed:ae:c8:fc:61:30:44:5f: 67:28:6f:8d:90:ed:c8:22:e6:61:11:96:46:a0:fc: 60:0e:b0:16:d9:a8:4d:fa:f0:19:5c:f5:3b:6c:f8: 68:37:8a:fc:ac:dc:1b:1b:62:ef:14:b3:d0:44:61: 0a:90:66:b7:22:d2:62:95:89:5f:af:01:1c:a6:c9: a4:6f:95:e3:48:00:b6:13:5e:f8:cf:84:a0:e6:30: ff:ca:0a:16:cc:3f:72:ea:15:10:fc:5a:d2:5d:db: 1f:6c:1f:a2:1c:b8:a9:02:f3:4e:3d:9a:95:a4:29: cf:4d:a3:96:30:f8:37:14:9c:58:5c:42:70:2c:db: 42:8c:e3:55:ac:cd:3e:57:b5:10:59:b6:bb:1a:b3: f1:b9:eb:18:4f:13:58:ab:9a:7b:f7:71:ec:bf:01: ef:ab:10:c5:40:4d:43:df:00:0d:bd:1f:02:fb:87: 61:f5:79:51:d4:54:bf:af:65:f8:55:12:06:cc:d3: 5e:1d:61:5b:fb:82:b9:09:fb:7b:8a:27:cb:1d:44: bb:2e:f4:41:2d:b3:46:89:73:03:e9:d5:c9:8b:f5: 33:51:2f:f9:12:2a:cd:4a:07:c3:eb:d5:05:b3:51: 74:11:91:c3:56:64:fa:16:11:0d:fc:19:64:84:e0: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:E3:AF:D3:D1:A8:CE:63:30:88:C5:30:95:5E:F8:E5:0E:3A:61 X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e3:76:c7:57:fe:4e:4b:1f:ae:d2:33:64:99:4a:63:5c:c5: 73:44:89:e0:80:6c:d2:98:64:65:9b:74:a4:5b:9b:c8:14:53: d1:b7:8c:e1:12:e2:85:12:1c:40:13:af:2d:72:36:89:da:fb: c0:4d:0d:5f:b2:8c:14:e1:df:f9:84:03:27:67:10:cf:7f:89: 3b:94:bb:75:52:81:1f:76:c2:13:93:d0:91:1e:99:56:66:e3: fc:95:81:00:a1:08:af:78:8a:55:b0:1a:ab:87:48:64:00:7b: 4e:26:1c:ab:98:be:52:cb:74:6a:3c:bf:5b:73:66:7f:0a:02: 17:9e:dc:6f:9d:49:36:79:27:82:10:80:39:10:1b:e1:5f:d8: d5:be:15:04:28:9d:30:b0:48:a7:b7:49:27:8e:c0:4b:9f:64: bb:48:de:33:5f:83:96:9d:81:14:95:8f:d8:ba:a9:49:8f:8e: b5:61:82:53:0f:ee:49:77:c4:a1:74:f6:ff:b2:0b:4b:16:67: cc:1a:05:d0:71:6a:27:4d:60:1c:bc:6b:3e:24:23:90:1d:56: d4:79:d1:a4:81:e9:4c:f7:4f:ff:99:f9:1e:87:64:1d:8d:5f: 1b:3d:c8:8a:7c:a3:85:79:d6:90:39:45:e2:ef:8b:d3:af:c4: b3:d1:b5:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMF53sSiqhhtrgC2EfEXqRY5B04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTEyMTgwNzU4MDVaFw0yNTEyMjExMDQ4MDVaMDMxMTAvBgNV BAMTKDc1OUVFM0FGRDNEMUE4Q0U2MzMwODhDNTMwOTU1RUY4RTUwRTNBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/KoNVlPtrsj8YTBEX2cob42Q 7cgi5mERlkag/GAOsBbZqE368Blc9Tts+Gg3ivys3BsbYu8Us9BEYQqQZrci0mKV iV+vARymyaRvleNIALYTXvjPhKDmMP/KChbMP3LqFRD8WtJd2x9sH6IcuKkC8049 mpWkKc9No5Yw+DcUnFhcQnAs20KM41WszT5XtRBZtrsas/G56xhPE1irmnv3cey/ Ae+rEMVATUPfAA29HwL7h2H1eVHUVL+vZfhVEgbM014dYVv7grkJ+3uKJ8sdRLsu 9EEts0aJcwPp1cmL9TNRL/kSKs1KB8Pr1QWzUXQRkcNWZPoWEQ38GWSE4F7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdZ7jr9PRqM5jMIjFMJVe+OUOOmEwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/jdsdX/k5LH67SM2SZSmNcxXNEieCAbNKY ZGWbdKRbm8gUU9G3jOES4oUSHEATry1yNona+8BNDV+yjBTh3/mEAydnEM9/iTuU u3VSgR92whOT0JEemVZm4/yVgQChCK94ilWwGquHSGQAe04mHKuYvlLLdGo8v1tz Zn8KAhee3G+dSTZ5J4IQgDkQG+Ff2NW+FQQonTCwSKe3SSeOwEufZLtI3jNfg5ad gRSVj9i6qUmPjrVhglMP7kl3xKF09v+yC0sWZ8waBdBxaidNYBy8az4kI5AdVtR5 0aSB6Uz3T/+Z+R6HZB2NXxs9yIp8o4V51pA5ReLvi9OvxLPRtc8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:29 2025 by rpki-client