This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: nH+MGnaYItvsbHxb7Pd9J6yzn1UmMTbipB3dc+4gLt8= Subject key identifier: 14:D5:1C:6B:BF:E4:13:71:11:DA:47:B1:38:E8:8D:F8:CE:96:59:27 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 68F213417C122CA440492FCB48C5D9CF0713EE90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0535 Signing time: Thu 18 Dec 2025 17:20:43 +0000 Manifest this update: Thu 18 Dec 2025 17:15:43 +0000 Manifest next update: Mon 22 Dec 2025 03:52:43 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: x2KGnpTDEhZ175jM0xTGIdbpqVYMnrUI6K3wnrMG51g=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f2:13:41:7c:12:2c:a4:40:49:2f:cb:48:c5:d9:cf:07:13:ee:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Dec 18 17:15:43 2025 GMT Not After : Dec 22 03:52:43 2025 GMT Subject: CN=14D51C6BBFE4137111DA47B138E88DF8CE965927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:8a:9e:7c:ee:08:d0:ae:07:b2:92:ec:a4: 8d:5c:42:cb:41:56:54:66:55:fe:7f:9a:29:44:be: 6c:cc:5d:fe:64:a6:d8:4e:41:fc:93:09:d3:d5:33: 51:98:5b:91:c6:27:23:f4:af:ee:72:17:b7:82:f6: 4c:37:1c:e1:da:88:31:d3:dc:57:01:e7:6e:a0:ee: 2c:8d:67:27:25:ae:c5:2c:3e:76:b8:31:62:e8:1c: e9:8a:27:c0:9d:ca:4c:ed:b7:fa:6a:3e:bf:6d:fc: fd:80:41:73:17:e2:73:dd:cc:dd:88:2d:ec:b0:b1: a1:3b:05:ed:53:6c:a7:c8:b1:b3:c0:1c:3c:3e:0a: 18:a0:84:db:e8:ca:31:dd:09:f2:25:df:02:db:af: 78:6b:a2:f5:20:a6:68:26:86:bd:61:42:eb:ef:cb: 68:2d:ec:1b:5c:91:d1:37:fc:1d:fb:b6:ca:6d:b3: da:d0:56:13:b9:a9:76:ec:97:fc:ec:16:c9:16:e5: 91:ad:05:ec:f4:43:45:3f:9c:87:9a:51:17:be:84: 06:83:2d:5a:01:88:6f:c2:89:e0:31:90:f3:8a:91: 81:ea:e5:94:a4:a5:21:08:a4:21:9d:86:7c:bf:ff: 8e:18:ce:47:a2:d6:f6:18:20:0e:a2:be:99:3c:89: b6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:1C:6B:BF:E4:13:71:11:DA:47:B1:38:E8:8D:F8:CE:96:59:27 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:09:e3:a5:44:ca:6a:ef:f4:b9:df:3b:49:d4:db:a7:63:d7: 15:7e:f8:e9:4e:71:3a:93:76:eb:68:c1:0e:e8:6c:c7:a1:3b: c4:79:fc:78:de:69:ae:6d:c7:7d:8c:61:5d:c4:ca:45:b6:ee: b6:b4:d9:a1:e6:f0:23:6c:eb:50:6a:8d:da:f3:6f:69:79:8a: c6:92:2f:a3:cb:65:8f:86:ce:9d:25:a7:b1:d0:08:cd:04:13: 9e:2b:63:e3:f7:15:d7:98:8a:34:69:6c:3d:9a:b0:4b:6b:af: 43:09:50:4d:58:93:a9:ba:d6:58:3f:8d:75:60:df:13:09:0e: 25:88:19:24:12:ed:a4:82:0d:68:ae:22:47:fe:59:9a:4f:d0: 9d:32:0f:98:b7:33:9c:cc:a7:65:e7:65:64:59:b7:1e:4f:b9: dd:28:a3:27:99:63:da:cb:4d:37:87:84:f9:4e:bd:b8:f2:f7: b9:b7:ef:73:ff:c6:fa:3f:3c:3a:9c:a2:8c:86:95:8c:e1:7e: ae:67:cd:34:92:91:b3:50:48:77:03:b1:d0:0f:30:6f:ff:62: f0:a7:f0:3f:8f:c3:1d:01:5f:2c:b7:ee:ad:aa:53:45:22:65: f4:16:9e:d4:12:40:06:59:d5:ea:7c:28:ef:90:0c:56:94:42: c9:03:df:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaPITQXwSLKRASS/LSMXZzwcT7pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTEyMTgxNzE1NDNaFw0yNTEyMjIwMzUyNDNaMDMxMTAvBgNV BAMTKDE0RDUxQzZCQkZFNDEzNzExMURBNDdCMTM4RTg4REY4Q0U5NjU5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZIqefO4I0K4HspLspI1cQstB VlRmVf5/milEvmzMXf5kpthOQfyTCdPVM1GYW5HGJyP0r+5yF7eC9kw3HOHaiDHT 3FcB526g7iyNZyclrsUsPna4MWLoHOmKJ8Cdykztt/pqPr9t/P2AQXMX4nPdzN2I LeywsaE7Be1TbKfIsbPAHDw+ChighNvoyjHdCfIl3wLbr3hrovUgpmgmhr1hQuvv y2gt7BtckdE3/B37tspts9rQVhO5qXbsl/zsFskW5ZGtBez0Q0U/nIeaURe+hAaD LVoBiG/CieAxkPOKkYHq5ZSkpSEIpCGdhny//44Yzkei1vYYIA6ivpk8ibYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNUca7/kE3ER2kexOOiN+M6WWScwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkJ46VEymrv9LnfO0nU26dj1xV++OlOcTqT dutowQ7obMehO8R5/Hjeaa5tx32MYV3EykW27ra02aHm8CNs61Bqjdrzb2l5isaS L6PLZY+Gzp0lp7HQCM0EE54rY+P3FdeYijRpbD2asEtrr0MJUE1Yk6m61lg/jXVg 3xMJDiWIGSQS7aSCDWiuIkf+WZpP0J0yD5i3M5zMp2XnZWRZtx5Pud0ooyeZY9rL TTeHhPlOvbjy97m373P/xvo/PDqcooyGlYzhfq5nzTSSkbNQSHcDsdAPMG//YvCn 8D+Pwx0BXyy37q2qU0UiZfQWntQSQAZZ1ep8KO+QDFaUQskD3zA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:35 2025 by rpki-client