This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft File: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft (raw, json) Hash identifier: 193PLte1a/01aNPBdZsM3zP6sCsXGxB8/OOiCEo0vEw= Subject key identifier: 4D:9F:F2:26:00:D7:59:2D:BF:1F:8A:6D:F6:41:B8:4A:D1:6D:AB:66 Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 10A1AEF40D87F22BA35B51385AF1FB9AE6F35225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft Manifest number: 02C9 Signing time: Mon 22 Dec 2025 21:50:39 +0000 Manifest this update: Mon 22 Dec 2025 21:45:39 +0000 Manifest next update: Fri 26 Dec 2025 09:08:39 +0000 Files and hashes: 1: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: 5zbaW1xbLSdresKE5AfyN56h8mwWMq5gXzkIga/AR30=) 2: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: c3S8Sv0dGIlGjcnrbLjUcHdin3EJiHMEXQSgcY9POBM=) 3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: KyVMhkhG4VtcKnJeiu0MXlT+/JG0ojfS9TufypkTrUA=) 4: F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl (hash: HdV0YDvnD0DEPG/RoXbIPKImC+iYaR8iqDD37UoGIuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 09:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a1:ae:f4:0d:87:f2:2b:a3:5b:51:38:5a:f1:fb:9a:e6:f3:52:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Dec 22 21:45:39 2025 GMT Not After : Dec 26 09:08:39 2025 GMT Subject: CN=4D9FF22600D7592DBF1F8A6DF641B84AD16DAB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ce:64:92:af:a7:18:d0:08:77:05:5c:f5:2c: 0d:e3:05:8f:c2:62:5d:da:87:d8:22:a0:5d:6d:7c: 8d:70:1a:af:a8:3a:56:74:ac:5b:1c:fa:3e:db:c0: f7:61:2a:08:6d:53:c8:0f:59:6d:5b:44:1c:34:19: e5:83:36:da:2e:d3:65:81:a9:f0:9d:ea:21:55:75: fb:b6:a8:d8:ae:c9:0c:91:ec:51:41:bf:97:4b:65: ea:b1:63:fd:7a:df:01:70:50:72:62:3d:c4:30:ba: 13:c4:12:bd:d5:47:41:93:b1:84:ca:8e:24:78:ae: f5:d9:21:34:8b:5f:ea:f3:bb:39:e9:4c:d9:e2:22: 3d:e7:39:fc:d0:0c:40:75:c7:2f:79:04:6d:e3:2d: 5d:94:80:f8:17:4f:cc:56:ac:02:6f:94:e9:af:1f: 99:46:97:84:e3:2a:17:2e:cd:3b:23:1c:6c:02:4d: 5d:9f:72:c5:67:10:4f:de:8a:22:01:4c:d1:74:7d: eb:ce:f6:83:8a:70:ec:82:b0:00:32:ac:4a:bb:9d: a0:33:48:d0:25:e7:65:94:50:7a:49:2f:b2:8a:1e: 3a:bf:80:35:de:a9:ed:d5:ea:60:67:5f:22:6e:8e: dc:a4:59:ad:70:1d:c7:a3:78:09:d9:e3:89:11:ae: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9F:F2:26:00:D7:59:2D:BF:1F:8A:6D:F6:41:B8:4A:D1:6D:AB:66 X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:51:84:68:4e:e1:0d:e0:e8:43:6a:b2:e8:ec:57:fc:dd: 28:7d:ed:2c:ab:99:1a:3d:02:3c:66:c6:be:63:12:49:10:e0: 29:22:c2:b3:b7:c1:76:6d:66:03:24:11:d2:f3:e2:7e:5b:b0: 1d:f2:bd:f8:4e:38:b7:90:54:2a:57:0f:76:46:d0:ad:1f:07: 58:5f:74:54:2b:ea:8b:33:4e:2c:6a:31:d6:48:5b:c8:ad:53: 3d:aa:3d:e8:2f:38:7c:4d:05:a4:75:41:e2:1e:a9:96:de:de: 15:f7:cf:02:62:ec:ed:3c:01:ff:3d:6f:0f:4b:f8:1b:28:13: 82:47:57:8c:77:b8:fa:26:60:f9:28:bc:99:97:e1:0e:fa:39: b9:ee:50:d6:99:28:4a:59:e4:cc:e4:2d:6c:87:67:18:f3:22: 64:d5:fd:47:a8:8e:e7:07:ee:59:92:d1:5b:8d:d5:16:e6:2b: 43:b7:af:38:46:0e:39:6b:53:31:34:f8:81:fb:94:7e:4e:5c: 4f:db:f2:09:99:62:b5:d8:5c:b9:84:a2:88:e6:c1:f3:ec:97: c0:7e:8c:78:e8:e8:45:1f:ab:90:01:9c:c2:c2:c7:96:11:34: f7:19:e4:24:3a:b1:9f:4a:d2:a4:89:ad:66:60:37:4a:f9:f5: 7f:fb:a4:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKGu9A2H8iujW1E4WvH7mubzUiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNTEyMjIyMTQ1MzlaFw0yNTEyMjYwOTA4MzlaMDMxMTAvBgNV BAMTKDREOUZGMjI2MDBENzU5MkRCRjFGOEE2REY2NDFCODRBRDE2REFCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnzmSSr6cY0Ah3BVz1LA3jBY/C Yl3ah9gioF1tfI1wGq+oOlZ0rFsc+j7bwPdhKghtU8gPWW1bRBw0GeWDNtou02WB qfCd6iFVdfu2qNiuyQyR7FFBv5dLZeqxY/163wFwUHJiPcQwuhPEEr3VR0GTsYTK jiR4rvXZITSLX+rzuznpTNniIj3nOfzQDEB1xy95BG3jLV2UgPgXT8xWrAJvlOmv H5lGl4TjKhcuzTsjHGwCTV2fcsVnEE/eiiIBTNF0fevO9oOKcOyCsAAyrEq7naAz SNAl52WUUHpJL7KKHjq/gDXeqe3V6mBnXyJujtykWa1wHcejeAnZ44kRrlnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZ/yJgDXWS2/H4pt9kG4StFtq2YwHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgw MTFFODI4OTg4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAQUYRoTuEN4OhDarLo7Ff83Sh97SyrmRo9 Ajxmxr5jEkkQ4CkiwrO3wXZtZgMkEdLz4n5bsB3yvfhOOLeQVCpXD3ZG0K0fB1hf dFQr6oszTixqMdZIW8itUz2qPegvOHxNBaR1QeIeqZbe3hX3zwJi7O08Af89bw9L +BsoE4JHV4x3uPomYPkovJmX4Q76ObnuUNaZKEpZ5MzkLWyHZxjzImTV/UeojucH 7lmS0VuN1RbmK0O3rzhGDjlrUzE0+IH7lH5OXE/b8gmZYrXYXLmEoojmwfPsl8B+ jHjo6EUfq5ABnMLCx5YRNPcZ5CQ6sZ9K0qSJrWZgN0r59X/7pDI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:56 2025 by rpki-client