This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: cpvN3GGo8yh/3gG/OLGfmWuuDeVPMDz/e1ETECrLrIM= Subject key identifier: 76:86:2F:B9:CA:73:58:7C:1D:39:A6:B9:9D:15:09:F9:10:0B:AA:97 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 5358ECE1A9B6A7AD3ACF8A94D96C7637358FDC74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0157 Signing time: Thu 18 Dec 2025 15:41:09 +0000 Manifest this update: Thu 18 Dec 2025 15:36:09 +0000 Manifest next update: Sun 21 Dec 2025 17:28:09 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: 9kVdBDCVoE0me3pqsxVjMbde5FSrq9lHcnXcdt3vy4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:58:ec:e1:a9:b6:a7:ad:3a:cf:8a:94:d9:6c:76:37:35:8f:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Dec 18 15:36:09 2025 GMT Not After : Dec 21 17:28:09 2025 GMT Subject: CN=76862FB9CA73587C1D39A6B99D1509F9100BAA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:18:50:37:00:d5:82:c2:17:ef:fd:b4:62: d2:fc:d0:03:7f:6c:5b:58:26:15:e3:90:b1:76:d4: 2b:68:03:b4:5b:34:b1:f7:9a:1b:1e:de:e8:70:61: 2a:0d:14:99:03:40:10:28:b7:dd:c8:a2:83:e3:75: 95:fa:43:60:f4:07:f9:e6:1c:ad:fa:73:d9:31:23: 24:60:2b:45:84:ab:ec:7b:1c:74:3e:56:fe:f1:48: 9a:fa:3c:7e:0d:09:7a:91:33:8d:c0:ad:76:21:8b: a0:a8:44:3c:d3:60:cc:63:80:c8:1b:4d:04:f1:a4: e2:89:62:91:0a:0a:37:9c:bc:61:5b:b1:68:48:6d: 0c:d4:c7:9b:da:cc:fb:c5:22:41:c0:4f:51:ff:b9: 62:f4:de:21:03:b6:bc:07:06:72:34:69:df:c4:5a: fd:19:df:7a:14:3b:4b:0b:58:a4:f8:16:8c:93:b8: d9:f7:7b:8e:bb:14:ce:bd:32:61:86:5b:35:39:6c: 55:77:31:df:f8:89:fa:be:17:5a:d3:72:12:3e:53: e2:e7:98:f5:58:38:ef:08:44:60:8e:32:bd:f1:71: 9d:78:e5:94:f5:27:ed:e8:32:76:b1:01:ec:e2:0f: 90:f0:9f:5c:09:f4:b3:99:02:ce:82:37:06:5b:cf: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:86:2F:B9:CA:73:58:7C:1D:39:A6:B9:9D:15:09:F9:10:0B:AA:97 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b6:fb:79:a6:ce:22:80:59:ab:68:02:c7:89:4c:32:e0:26: b1:55:00:f3:e3:c1:f0:e8:01:3d:c7:4b:7b:ea:d6:02:41:a8: 0a:c5:fb:d6:44:08:0e:63:ab:2a:90:c5:5a:c6:d6:52:f4:c4: 16:e3:b0:86:fd:7a:a9:c6:bd:fd:c7:d6:45:21:f4:23:0a:5e: fe:02:40:04:7a:ff:4c:fe:ba:ea:fc:54:ed:1d:3f:eb:34:fc: 44:1c:7c:e6:e5:68:a0:9e:72:65:a1:aa:ea:42:fa:26:8b:d0: dd:7d:68:03:e8:17:96:e7:13:94:b7:ad:97:17:fb:c7:f9:1d: 9c:8d:90:84:38:2d:bd:12:6e:dd:d8:06:27:01:ed:67:a1:b7: 7d:b5:60:d1:86:a3:d6:77:46:35:0d:d4:09:f6:f8:78:b8:86: 87:c6:e3:87:c3:07:98:eb:d8:9a:e1:69:c7:8b:6b:48:8d:6c: 77:58:cd:6d:f9:63:18:fb:a6:35:f2:88:f6:34:3b:4e:93:cf: c4:02:fd:99:2c:c9:b0:fe:09:e1:6e:19:55:be:c4:7f:14:71: 57:b7:19:4a:b8:20:62:ae:d8:6e:0b:f5:1c:2c:31:f2:12:b2: ac:80:c5:af:48:03:86:a1:a0:c9:0b:09:c7:11:f6:0d:f7:78: a8:d4:00:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1js4am2p606z4qU2Wx2NzWP3HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTEyMTgxNTM2MDlaFw0yNTEyMjExNzI4MDlaMDMxMTAvBgNV BAMTKDc2ODYyRkI5Q0E3MzU4N0MxRDM5QTZCOTlEMTUwOUY5MTAwQkFBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVoBhQNwDVgsIX7/20YtL80AN/ bFtYJhXjkLF21CtoA7RbNLH3mhse3uhwYSoNFJkDQBAot93IooPjdZX6Q2D0B/nm HK36c9kxIyRgK0WEq+x7HHQ+Vv7xSJr6PH4NCXqRM43ArXYhi6CoRDzTYMxjgMgb TQTxpOKJYpEKCjecvGFbsWhIbQzUx5vazPvFIkHAT1H/uWL03iEDtrwHBnI0ad/E Wv0Z33oUO0sLWKT4FoyTuNn3e467FM69MmGGWzU5bFV3Md/4ifq+F1rTchI+U+Ln mPVYOO8IRGCOMr3xcZ145ZT1J+3oMnaxAeziD5Dwn1wJ9LOZAs6CNwZbz7gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdoYvucpzWHwdOaa5nRUJ+RALqpcwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy2+3mmziKAWatoAseJTDLgJrFVAPPjwfDo AT3HS3vq1gJBqArF+9ZECA5jqyqQxVrG1lL0xBbjsIb9eqnGvf3H1kUh9CMKXv4C QAR6/0z+uur8VO0dP+s0/EQcfOblaKCecmWhqupC+iaL0N19aAPoF5bnE5S3rZcX +8f5HZyNkIQ4Lb0Sbt3YBicB7Weht321YNGGo9Z3RjUN1An2+Hi4hofG44fDB5jr 2JrhaceLa0iNbHdYzW35Yxj7pjXyiPY0O06Tz8QC/ZksybD+CeFuGVW+xH8UcVe3 GUq4IGKu2G4L9RwsMfISsqyAxa9IA4ahoMkLCccR9g33eKjUAJc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:45 2025 by rpki-client