This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
File: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft (raw, json)
Hash identifier: wfevotBil2XwWODbkxHUVUF+3tTYf22xuUIhO5yjtpM=
Subject key identifier: 23:93:44:A1:6D:57:5A:69:94:C4:30:E0:31:43:F0:04:5A:35:9F:A4
Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
Certificate issuer: /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Certificate serial: 7FD832A977B07B830F73CC0F3E3CB3B41BA728A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
Manifest number: 0270
Signing time: Wed 17 Dec 2025 01:22:06 +0000
Manifest this update: Wed 17 Dec 2025 01:17:06 +0000
Manifest next update: Sat 20 Dec 2025 03:01:06 +0000
Files and hashes: 1: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: eLmTnlusz2D6JkNd6vhEC+Aix0imNHgU5omxSQWEZDw=)
2: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: y+8t5UUINdTPUUm1lJ0KZGSga3Yl3uHzqVqQyt9zoE8=)
3: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: 3d+mx0+iwzqvKG0kVcKkiTDes8ajUjlfaMyAG4o8aKI=)
4: F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl (hash: qKfy780E1Onft4cmghAkeRYnm/ozXnUFnF8PMciwtaQ=)
5: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: TgHgsu6QYqZ5L3n6Lalu5pdAbtV44ycXni/ET0cNJvg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d8:32:a9:77:b0:7b:83:0f:73:cc:0f:3e:3c:b3:b4:1b:a7:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Validity
Not Before: Dec 17 01:17:06 2025 GMT
Not After : Dec 20 03:01:06 2025 GMT
Subject: CN=239344A16D575A6994C430E03143F0045A359FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:b0:c0:86:31:d2:ba:cb:c9:c3:6e:f6:26:
ea:96:d3:ac:63:bb:67:e2:9d:ed:00:85:9b:3e:38:
b5:c5:31:b6:14:7f:63:97:f8:0c:bd:66:5d:fa:f5:
ed:e6:88:bf:86:07:a5:88:ab:05:29:05:f3:63:44:
11:0e:d0:91:a7:a8:19:53:87:7a:2b:6e:b3:98:0a:
2d:41:0b:9c:f4:ce:31:39:e4:d5:13:e0:c9:e3:b2:
96:4a:db:94:8c:59:a4:3f:76:df:e2:49:44:00:b4:
5b:13:3b:1d:6e:b9:a1:1a:1a:20:5b:7f:6c:9a:36:
6e:65:1e:a2:5f:ff:a0:c3:54:f8:f3:1b:c3:c0:75:
ef:4e:e5:80:cf:85:f3:ce:af:09:01:19:0f:f0:79:
55:4b:3c:db:37:a3:0a:76:3c:b6:36:86:1d:35:bd:
93:e8:14:73:f1:ad:a9:ac:2c:9c:fa:d8:8c:d8:e2:
4f:3a:b8:f2:fb:74:b8:9f:f7:92:f8:ce:39:c9:27:
6c:6e:8c:36:0e:d2:1a:48:97:0f:c4:29:5b:b9:94:
d6:a0:ad:49:e9:33:df:1c:b3:3e:3d:c8:01:77:d8:
14:6c:c7:78:84:40:d4:0f:ad:ee:de:0b:c5:a1:39:
f6:33:07:46:01:b0:83:4e:14:23:ff:80:d8:b7:57:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:44:A1:6D:57:5A:69:94:C4:30:E0:31:43:F0:04:5A:35:9F:A4
X509v3 Authority Key Identifier:
keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e6:c2:1a:9a:4a:ef:46:dc:cf:54:0e:28:d8:b6:7c:60:3e:
c2:30:dd:66:30:33:82:92:03:2c:c8:64:11:0f:53:f5:1b:f4:
6f:90:67:f4:c4:f0:47:d5:67:14:16:18:df:ad:63:ae:a6:a0:
3c:f1:2c:2f:63:86:ea:79:49:d3:0b:3c:c7:19:e0:9a:58:6d:
d6:40:79:15:35:a1:67:e4:81:17:5e:94:b3:25:a2:f7:f8:d9:
b4:94:9a:e5:30:78:0e:b8:d6:fa:38:fb:2b:df:08:4b:2a:69:
11:2c:88:65:c3:cd:fb:8f:da:e8:3c:c3:0f:7e:8b:bb:74:db:
40:f1:1b:8c:ff:65:fb:aa:3a:28:7b:72:e9:04:f1:39:45:1f:
03:98:8d:44:d9:51:e2:10:b0:29:5d:e6:d9:3e:cc:bb:cb:1e:
1e:b9:b5:90:0a:fa:27:9a:1c:30:56:8e:8f:a9:95:6e:cb:6e:
76:bc:dd:d6:69:0e:a4:44:8d:e3:42:f0:96:50:df:0f:98:60:
91:fa:2d:b8:9a:15:47:24:b0:db:02:86:24:a3:e7:00:3e:ff:
fa:b6:26:de:20:1d:b9:4f:ad:06:2a:71:25:79:e3:01:22:f4:
1e:91:f8:62:cf:d5:bd:3b:8d:40:b3:8c:df:4a:f8:84:b5:98:
72:71:79:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:14:23 2025 by rpki-client