This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft File: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft (raw, json) Hash identifier: 9G8qPpS2YASCt7eFOHb1q4QKOqkYEDfQKtr8UQqQ3/k= Subject key identifier: 2A:C3:9A:73:B5:98:5B:CA:10:7E:3D:33:DF:B2:63:6F:92:E4:5F:9A Authority key identifier: F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 Certificate issuer: /CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Certificate serial: 5EB9607FE910724CF97BD2BB4203E75CAE2EBDCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft Manifest number: D9 Signing time: Sat 27 Dec 2025 12:51:25 +0000 Manifest this update: Sat 27 Dec 2025 12:46:25 +0000 Manifest next update: Tue 30 Dec 2025 16:22:25 +0000 Files and hashes: 1: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: H3T3VBAkYGZBVt4prOPaCEzHSlQDxm09XEH58hbRsm0=) 2: F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl (hash: d9UMx2jxQuUfAyPF9ZUgSU/UjxgQdhEPjZxoH/0UrHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 16:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b9:60:7f:e9:10:72:4c:f9:7b:d2:bb:42:03:e7:5c:ae:2e:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3C45071697AB68FDEAEBF5820E70DDD1B494B58 Validity Not Before: Dec 27 12:46:25 2025 GMT Not After : Dec 30 16:22:25 2025 GMT Subject: CN=2AC39A73B5985BCA107E3D33DFB2636F92E45F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:49:99:19:3a:da:d9:80:c4:9a:88:e8:f6: fe:74:57:1a:6a:05:96:aa:21:8a:34:6b:c7:ff:fc: 8e:56:79:26:69:6b:22:84:28:6a:ec:77:21:b7:29: b3:32:00:53:e4:96:c0:24:e1:47:c6:4c:64:fe:b5: 87:95:9b:8a:b9:47:07:74:19:7c:4e:a2:ab:e3:1a: 37:bc:18:d9:3f:4e:00:b1:f2:1c:89:51:8d:6a:48: ad:81:57:83:6f:2e:ca:cf:f9:57:5a:e7:a5:6e:6f: 1c:df:11:c7:d8:3f:40:82:05:fd:c9:47:b9:70:31: 1c:bf:f0:79:d4:6a:c4:5c:c0:ed:7d:32:5d:51:d9: 08:0a:73:28:fa:1f:cd:e2:d7:ce:da:36:23:71:b9: c5:c2:3e:ae:6e:0d:19:b7:c1:31:74:34:2e:38:99: 41:6d:de:e3:b1:8c:d1:98:b4:6a:4e:9a:9a:05:da: ea:6f:b8:2e:ad:69:f3:aa:ad:d9:3c:fe:bc:c3:8e: 52:55:3f:ad:26:69:87:4c:3b:c8:56:67:fe:df:5b: a9:b3:f2:93:ea:5e:79:65:a7:e1:dc:a9:d9:c2:e1: 22:f3:d8:08:fc:56:fa:21:7e:de:6b:ab:b7:f5:97: df:0f:74:6f:b1:f3:03:45:18:b3:c2:5a:03:d3:0e: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:9A:73:B5:98:5B:CA:10:7E:3D:33:DF:B2:63:6F:92:E4:5F:9A X509v3 Authority Key Identifier: keyid:F3:C4:50:71:69:7A:B6:8F:DE:AE:BF:58:20:E7:0D:DD:1B:49:4B:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/F3C45071697AB68FDEAEBF5820E70DDD1B494B58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a8:17:15:a7:ad:68:86:e2:ee:4c:d3:58:0c:51:7f:96:17: a0:85:33:ee:ca:1b:83:e1:21:c5:33:2d:94:00:2d:37:0c:6d: 96:d3:cc:0e:a9:7d:4f:6d:db:9b:22:1d:ae:60:b6:f4:a3:68: 7f:ac:43:3a:63:40:2d:cb:ed:29:4f:88:e6:63:ab:31:20:7c: fb:ca:d6:62:c8:07:8e:b4:b3:01:db:1e:50:be:f9:43:f4:09: 3b:23:94:5a:82:dd:15:31:6f:98:4d:f8:69:be:c1:91:43:c4: ad:9c:72:e3:b6:ae:44:3f:c6:0f:2e:03:b0:d9:3d:dd:16:1d: 85:1a:3a:b1:42:e3:3a:68:44:63:89:0a:b6:9a:76:6a:81:39: c1:81:93:9d:fd:55:54:f1:ea:53:de:0b:64:70:9a:b0:d1:cf: 21:0d:da:8a:4b:4d:7b:f1:72:4c:ca:4d:1a:42:17:54:fa:11: 71:37:13:c8:4b:37:8d:8b:12:6f:d9:06:3c:97:56:45:74:14: d7:00:6e:93:8a:92:8c:0d:86:98:4e:e3:a3:14:fb:50:f1:3f: 1e:b6:29:b1:a6:35:fd:d4:ec:ca:d6:19:db:d1:a8:e2:5d:2c: 10:1c:73:e3:80:d8:1b:c7:d0:7e:51:38:80:11:cd:85:95:aa: dc:e6:41:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrlgf+kQckz5e9K7QgPnXK4uvcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQx QjQ5NEI1ODAeFw0yNTEyMjcxMjQ2MjVaFw0yNTEyMzAxNjIyMjVaMDMxMTAvBgNV BAMTKDJBQzM5QTczQjU5ODVCQ0ExMDdFM0QzM0RGQjI2MzZGOTJFNDVGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40EmZGTra2YDEmojo9v50Vxpq BZaqIYo0a8f//I5WeSZpayKEKGrsdyG3KbMyAFPklsAk4UfGTGT+tYeVm4q5Rwd0 GXxOoqvjGje8GNk/TgCx8hyJUY1qSK2BV4NvLsrP+Vda56VubxzfEcfYP0CCBf3J R7lwMRy/8HnUasRcwO19Ml1R2QgKcyj6H83i187aNiNxucXCPq5uDRm3wTF0NC44 mUFt3uOxjNGYtGpOmpoF2upvuC6tafOqrdk8/rzDjlJVP60maYdMO8hWZ/7fW6mz 8pPqXnllp+HcqdnC4SLz2Aj8Vvohft5rq7f1l98PdG+x8wNFGLPCWgPTDteBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKsOac7WYW8oQfj0z37Jjb5LkX5owHwYDVR0j BBgwFoAU88RQcWl6to/err9YIOcN3RtJS1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDliMzUxOS0zZGYzLTQ0MDYtODI4Zi0zZWJiOTFkOTI5NDQvMC9GM0M0NTA3MTY5 N0FCNjhGREVBRUJGNTgyMEU3MERERDFCNDk0QjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBEREQxQjQ5 NEI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvRjNDNDUwNzE2OTdBQjY4RkRFQUVCRjU4MjBFNzBE REQxQjQ5NEI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASoFxWnrWiG4u5M01gMUX+WF6CFM+7KG4Ph IcUzLZQALTcMbZbTzA6pfU9t25siHa5gtvSjaH+sQzpjQC3L7SlPiOZjqzEgfPvK 1mLIB460swHbHlC++UP0CTsjlFqC3RUxb5hN+Gm+wZFDxK2ccuO2rkQ/xg8uA7DZ Pd0WHYUaOrFC4zpoRGOJCraadmqBOcGBk539VVTx6lPeC2RwmrDRzyEN2opLTXvx ckzKTRpCF1T6EXE3E8hLN42LEm/ZBjyXVkV0FNcAbpOKkowNhphO46MU+1DxPx62 KbGmNf3U7MrWGdvRqOJdLBAcc+OA2BvH0H5ROIARzYWVqtzmQas= -----END CERTIFICATE-----Generated at Mon Dec 29 16:28:14 2025 by rpki-client