This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft File: F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json) Hash identifier: sLGtDyao+9WS3bWYH5om6dLwyh+5gfMjmFJYpXSDEzc= Subject key identifier: D0:1D:F0:F1:63:AE:17:96:DB:58:58:E5:B9:50:8C:22:E6:CE:B0:44 Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6 Certificate serial: 73D474DD35CEA6FAAB2E44681DA347E168CF5A82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft Manifest number: 01A9 Signing time: Sun 21 Dec 2025 05:11:40 +0000 Manifest this update: Sun 21 Dec 2025 05:06:40 +0000 Manifest next update: Wed 24 Dec 2025 14:19:40 +0000 Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: XUjYjomn+FDHeFP35eIIQvW7MGG7ocItLx8+BF1P+J0=) 2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: Qr+mbwfD+b3Wx1d8zLc2y5WL4MZHDYvcZAO1Ua98DlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d4:74:dd:35:ce:a6:fa:ab:2e:44:68:1d:a3:47:e1:68:cf:5a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6 Validity Not Before: Dec 21 05:06:40 2025 GMT Not After : Dec 24 14:19:40 2025 GMT Subject: CN=D01DF0F163AE1796DB5858E5B9508C22E6CEB044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7b:c6:69:18:23:b9:e5:ac:9e:0f:91:d6:40: 55:66:29:97:f2:ad:36:47:d0:b3:1b:5c:40:47:a8: 2f:9b:ad:6c:44:e9:da:00:20:58:6b:b2:1c:4f:f3: 82:83:b2:70:68:5e:7c:ab:5e:f7:0c:62:62:2a:77: 73:eb:9c:31:b4:2b:44:aa:80:b1:f8:04:7c:80:54: 7f:5c:d8:cc:19:b9:f4:a1:e9:e0:1b:4d:1c:5e:54: 54:ac:d9:8d:a7:8c:f2:dc:23:92:5a:8a:ec:64:44: d3:39:85:b1:0d:07:5d:36:74:cc:d1:56:93:67:bc: eb:58:6c:90:88:78:7f:c6:eb:b9:00:54:cc:f8:ad: a7:8c:56:ca:ab:f8:b5:88:b5:39:ea:77:0c:e5:13: c7:28:0b:b3:2c:8b:25:b9:23:b5:18:07:38:aa:d8: 7d:98:6e:14:ed:fe:72:27:f5:87:29:5d:a2:c2:7c: 59:e3:88:7d:ef:43:b8:32:f0:1e:6e:1f:73:15:07: f3:19:78:78:5f:f5:8e:37:4b:90:51:14:da:d1:c6: 9f:74:f8:ce:a9:6d:20:fb:f8:c6:ff:cb:35:95:af: 0e:a8:49:70:a8:22:d7:f8:b8:e4:d8:69:4f:82:6d: d4:6f:88:e0:34:65:02:33:f3:da:7d:c9:79:f8:04: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1D:F0:F1:63:AE:17:96:DB:58:58:E5:B9:50:8C:22:E6:CE:B0:44 X509v3 Authority Key Identifier: keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:d4:a5:23:e8:20:c8:7b:ab:5e:4d:45:7f:93:15:d3:3e: 83:5b:13:c3:28:45:11:49:80:dc:09:01:15:63:1a:9a:2e:52: 07:09:4a:d1:68:2b:9c:8b:11:5f:c2:e1:45:f5:1c:8b:22:69: d7:94:8d:20:61:ff:53:ce:6a:28:ec:38:d1:bb:87:fd:83:f3: 39:ee:31:12:65:8b:22:27:20:46:29:8d:c4:3d:de:bb:d0:69: 93:28:1c:c2:de:78:74:2a:d6:41:ee:d4:da:8e:ca:81:45:d9: b9:10:50:92:88:5b:b4:0a:8c:b8:08:8f:d5:44:65:5e:61:d7: 91:87:a7:80:7b:ce:58:c9:5c:06:fb:f5:74:ce:cc:3d:33:bd: a2:92:84:be:6a:87:88:e2:bb:06:21:a8:28:9b:3d:d5:0d:c1: 19:0d:3c:37:6c:3f:c0:62:d1:41:5c:54:71:bd:69:65:05:30: bd:fc:53:c1:70:36:55:67:01:f5:c6:f7:4c:aa:39:a0:6d:7f: 59:68:2e:99:98:6a:46:7a:b4:e3:f7:5b:e8:ee:f7:e0:83:3a: 2d:9f:2f:4b:fc:b8:1f:0a:9a:ed:d5:2c:6d:e7:26:0f:14:d3: 91:8d:f8:48:83:8a:da:fd:12:52:5a:ae:f1:61:da:19:4c:e5: e5:68:f2:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9R03TXOpvqrLkRoHaNH4WjPWoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQy QTJEMzNDNjAeFw0yNTEyMjEwNTA2NDBaFw0yNTEyMjQxNDE5NDBaMDMxMTAvBgNV BAMTKEQwMURGMEYxNjNBRTE3OTZEQjU4NThFNUI5NTA4QzIyRTZDRUIwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxe8ZpGCO55ayeD5HWQFVmKZfy rTZH0LMbXEBHqC+brWxE6doAIFhrshxP84KDsnBoXnyrXvcMYmIqd3PrnDG0K0Sq gLH4BHyAVH9c2MwZufSh6eAbTRxeVFSs2Y2njPLcI5JaiuxkRNM5hbENB102dMzR VpNnvOtYbJCIeH/G67kAVMz4raeMVsqr+LWItTnqdwzlE8coC7MsiyW5I7UYBziq 2H2YbhTt/nIn9YcpXaLCfFnjiH3vQ7gy8B5uH3MVB/MZeHhf9Y43S5BRFNrRxp90 +M6pbSD7+Mb/yzWVrw6oSXCoItf4uOTYaU+CbdRviOA0ZQIz89p9yXn4BHDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0B3w8WOuF5bbWFjluVCMIubOsEQwHwYDVR0j BBgwFoAU8HXZGTP3sxR8MDeU1sSYFCotM8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzJjNTEyMS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC9GMDc1RDkxOTMz RjdCMzE0N0MzMDM3OTRENkM0OTgxNDJBMkQzM0M2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQyQTJE MzNDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5 ZWMtZjZjMzQ5ZjM0MzEwLzAvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4 MTQyQTJEMzNDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9O1KUj6CDIe6teTUV/kxXTPoNbE8MoRRFJ gNwJARVjGpouUgcJStFoK5yLEV/C4UX1HIsiadeUjSBh/1POaijsONG7h/2D8znu MRJliyInIEYpjcQ93rvQaZMoHMLeeHQq1kHu1NqOyoFF2bkQUJKIW7QKjLgIj9VE ZV5h15GHp4B7zljJXAb79XTOzD0zvaKShL5qh4jiuwYhqCibPdUNwRkNPDdsP8Bi 0UFcVHG9aWUFML38U8FwNlVnAfXG90yqOaBtf1loLpmYakZ6tOP3W+ju9+CDOi2f L0v8uB8Kmu3VLG3nJg8U05GN+EiDitr9ElJarvFh2hlM5eVo8uk= -----END CERTIFICATE-----Generated at Sun Dec 21 15:52:12 2025 by rpki-client