This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: 2z8fDMUy3KB+hhPv2HYXP61UJ4wB1MdlelZbDQik7CI= Subject key identifier: 46:CC:92:F7:0D:C2:0B:72:4A:44:D7:40:BA:67:0A:3D:8B:F9:74:E5 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 3AA06B51050EA8A317CFD989FF8A011552F3CD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 0211 Signing time: Sat 20 Dec 2025 00:01:27 +0000 Manifest this update: Fri 19 Dec 2025 23:56:27 +0000 Manifest next update: Tue 23 Dec 2025 06:27:27 +0000 Files and hashes: 1: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: L8hqyx0eipCFqU6+0WyKVWa40auJcEWfqo9ET0Mz3L4=) 2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 5: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a0:6b:51:05:0e:a8:a3:17:cf:d9:89:ff:8a:01:15:52:f3:cd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Dec 19 23:56:27 2025 GMT Not After : Dec 23 06:27:27 2025 GMT Subject: CN=46CC92F70DC20B724A44D740BA670A3D8BF974E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:78:ac:60:1f:1d:a5:5d:19:b4:8e:be:b3: 09:2e:d8:53:33:4e:a7:d6:92:2a:99:32:77:70:3b: 88:bd:e0:dc:0f:5c:a9:cb:6f:4b:a1:ec:a2:df:b6: cf:78:e4:85:33:89:fa:78:6d:bf:17:31:1f:38:bc: b9:f7:b4:75:29:6d:38:35:09:d2:b3:5a:64:c3:4a: 12:70:59:9d:db:9b:07:1b:11:de:47:73:e6:d9:df: ec:db:47:ed:46:a8:4f:fb:0a:30:33:5e:e3:47:89: e6:01:69:20:bb:43:d5:87:50:f3:7e:b7:0d:c1:f4: ca:70:d8:f0:c7:09:a6:4a:d1:31:a0:3c:0a:6d:0f: ad:1f:6a:41:61:12:3f:40:b8:3e:99:39:d5:5b:1e: 2e:4e:99:ee:3b:92:17:1e:9d:98:ae:72:e6:29:c4: 46:a0:50:3e:b0:57:03:c2:27:51:e3:19:08:99:8a: 45:76:4e:b4:c5:5b:df:77:25:16:3f:a6:2e:a7:44: 20:9a:79:9a:d5:35:4f:49:7d:06:a9:73:c5:b4:ec: c2:b4:f5:aa:b9:f6:f0:17:d0:0a:90:03:ce:d4:77: b3:a5:c3:1f:62:52:f3:14:fd:1c:00:b4:b8:51:ec: ad:98:b0:56:e2:91:17:68:24:08:4f:a8:0b:c2:dc: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:92:F7:0D:C2:0B:72:4A:44:D7:40:BA:67:0A:3D:8B:F9:74:E5 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f5:bf:24:d1:d2:48:c7:da:df:6e:d1:71:36:ba:42:56:41: 7b:d0:0b:5c:05:74:89:09:db:41:f8:e1:1a:72:7c:c2:9f:9e: af:ea:82:4f:66:8d:19:ab:8b:2d:f8:22:cc:c7:0e:8b:69:94: 5e:0f:f7:c1:ed:b5:7c:3c:9b:4b:23:ef:7b:fa:e0:ff:3f:ee: 23:34:7e:f2:34:3b:8b:06:93:b6:8a:8c:b0:64:ed:df:82:29: dc:30:81:33:df:e7:3a:0e:b6:ee:87:bf:be:2e:cf:82:cd:70: 24:73:d5:a7:70:91:fa:5d:f0:7b:be:0b:b4:2a:99:ec:b4:46: d7:76:db:4d:d7:5b:01:3d:ac:a7:67:57:14:4f:97:53:ee:97: 35:2b:eb:f4:e7:be:d2:ff:6d:7f:4e:e4:e5:7e:f2:e4:62:07: a6:83:37:e3:ce:09:94:fb:e0:52:c4:23:c3:f5:02:26:c2:12: 70:f5:5c:06:e8:ec:07:21:92:14:16:8f:0f:fd:4d:71:86:a3: 0f:2a:06:96:58:41:fa:e6:07:5d:09:3b:72:c7:dc:07:ba:5e: 1c:c2:a7:67:f1:90:13:4c:c1:33:0c:33:4f:9b:8e:79:d7:68: 14:3c:8b:2a:68:ad:63:7f:98:c7:11:39:09:af:7a:3c:84:a6: 9f:fc:b1:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqBrUQUOqKMXz9mJ/4oBFVLzzU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTEyMTkyMzU2MjdaFw0yNTEyMjMwNjI3MjdaMDMxMTAvBgNV BAMTKDQ2Q0M5MkY3MERDMjBCNzI0QTQ0RDc0MEJBNjcwQTNEOEJGOTc0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoHisYB8dpV0ZtI6+swku2FMz TqfWkiqZMndwO4i94NwPXKnLb0uh7KLfts945IUzifp4bb8XMR84vLn3tHUpbTg1 CdKzWmTDShJwWZ3bmwcbEd5Hc+bZ3+zbR+1GqE/7CjAzXuNHieYBaSC7Q9WHUPN+ tw3B9Mpw2PDHCaZK0TGgPAptD60fakFhEj9AuD6ZOdVbHi5Ome47khcenZiucuYp xEagUD6wVwPCJ1HjGQiZikV2TrTFW993JRY/pi6nRCCaeZrVNU9JfQapc8W07MK0 9aq59vAX0AqQA87Ud7Olwx9iUvMU/RwAtLhR7K2YsFbikRdoJAhPqAvC3P27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsyS9w3CC3JKRNdAumcKPYv5dOUwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH1vyTR0kjH2t9u0XE2ukJWQXvQC1wFdIkJ 20H44RpyfMKfnq/qgk9mjRmriy34IszHDotplF4P98HttXw8m0sj73v64P8/7iM0 fvI0O4sGk7aKjLBk7d+CKdwwgTPf5zoOtu6Hv74uz4LNcCRz1adwkfpd8Hu+C7Qq mey0Rtd2203XWwE9rKdnVxRPl1PulzUr6/TnvtL/bX9O5OV+8uRiB6aDN+POCZT7 4FLEI8P1AibCEnD1XAbo7AchkhQWjw/9TXGGow8qBpZYQfrmB10JO3LH3Ae6XhzC p2fxkBNMwTMMM0+bjnnXaBQ8iyporWN/mMcROQmvejyEpp/8sdw= -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:07 2025 by rpki-client