This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json) Hash identifier: xiiYzqQScYBt5G6LoWiWc85Vm4cLRuGNREFAIri32IQ= Subject key identifier: C9:F6:19:4E:1A:8F:31:29:9C:90:0F:6A:48:35:97:3A:DE:81:75:AB Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Certificate issuer: /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Certificate serial: 1EC4E7560CCA30E3D3F078EB9E665F1084E28D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft Manifest number: D3 Signing time: Tue 23 Dec 2025 02:50:02 +0000 Manifest this update: Tue 23 Dec 2025 02:45:02 +0000 Manifest next update: Fri 26 Dec 2025 05:53:02 +0000 Files and hashes: 1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: +8TG0pgV3RKRjQ2wXGLAmAJAxbGmjGbGMMIADOb+8tI=) 2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c4:e7:56:0c:ca:30:e3:d3:f0:78:eb:9e:66:5f:10:84:e2:8d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Validity Not Before: Dec 23 02:45:02 2025 GMT Not After : Dec 26 05:53:02 2025 GMT Subject: CN=C9F6194E1A8F31299C900F6A4835973ADE8175AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:bb:c6:88:2a:e0:7d:02:39:18:ed:80:3e: 38:bf:7f:48:62:03:f7:29:2f:07:37:56:ea:ad:13: 9b:4c:cd:6a:8a:2d:d4:a6:44:2d:ff:5f:de:8c:85: 94:47:16:f2:04:7c:a6:26:f8:97:33:dc:50:3a:a5: 9a:85:e6:03:61:ab:da:10:23:92:e6:84:e8:e2:d6: 3a:57:5b:84:2d:d3:ee:2c:a1:5c:0f:30:e1:ff:55: bb:8d:fb:2e:0f:05:bd:f9:a1:d9:4c:68:c1:7f:68: 03:13:c3:08:26:ac:b7:6d:73:26:0b:6b:0a:b2:02: 54:50:7a:ab:bc:8d:66:79:ea:e3:a0:24:44:b1:2c: f8:f2:9e:90:ed:b4:5b:97:89:0b:36:bd:17:bb:a9: 27:10:fa:3b:8c:ff:6d:6a:a9:1d:7e:c6:ae:b1:93: 07:04:de:b6:67:f0:a6:4b:4a:61:aa:eb:60:29:e7: 80:ad:03:35:b5:da:3f:4b:8a:ad:b6:a1:7f:c6:70: 76:2b:19:8e:ba:8f:72:57:01:68:c5:be:9f:e5:39: 5a:b2:86:62:b6:d4:7b:02:ce:92:f0:b2:dd:f2:59: 50:b4:d8:ec:5c:ac:e1:72:bb:49:1a:6f:e2:cf:bd: 4d:c2:18:18:f2:39:42:79:a2:60:fb:e5:41:38:42: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F6:19:4E:1A:8F:31:29:9C:90:0F:6A:48:35:97:3A:DE:81:75:AB X509v3 Authority Key Identifier: keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:b0:19:e4:66:fc:ed:1c:91:cd:03:54:bc:eb:f6:7d:75: ba:1c:9a:da:00:4a:d9:74:79:ef:ec:1c:80:f2:9e:00:22:7a: 87:18:cd:7a:74:63:5c:be:aa:1a:1e:28:55:f4:8a:7e:5a:e0: 1e:97:e3:8f:f2:a5:06:1e:93:d8:9f:4f:28:e2:42:50:5a:dd: 72:29:eb:b1:6c:56:dd:8f:9c:22:9b:88:d9:fa:1a:46:54:9f: 75:89:e9:e8:19:a6:c6:88:77:5a:a4:60:75:88:d4:d6:71:c9: a9:3f:81:19:b3:4e:ba:f6:8c:af:07:59:75:5a:b7:9b:0e:6d: bd:f5:b4:01:e5:07:7a:fa:e4:fd:14:6e:7b:47:67:3e:f3:c5: d8:6c:75:69:2b:8f:ea:b6:4a:7f:c7:5a:5f:d4:96:57:66:2d: 03:2e:29:58:3a:bb:0f:28:48:e0:ac:2d:cf:b6:76:1d:f4:3d: f5:c3:78:38:70:26:9f:75:55:b0:3c:bd:01:5a:73:46:4d:6b: ad:26:81:c1:a9:aa:67:dd:05:f4:ad:82:4c:14:40:84:2d:35: 36:25:52:ea:b2:5a:04:3b:df:89:b8:cd:1c:13:af:48:6b:ad: 1c:d9:33:02:b3:e9:1f:5f:19:c1:ff:e4:ee:b8:aa:f5:8b:f5: b3:5e:53:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsTnVgzKMOPT8HjrnmZfEITijVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy QjBFQTM1RTAeFw0yNTEyMjMwMjQ1MDJaFw0yNTEyMjYwNTUzMDJaMDMxMTAvBgNV BAMTKEM5RjYxOTRFMUE4RjMxMjk5QzkwMEY2QTQ4MzU5NzNBREU4MTc1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHrvGiCrgfQI5GO2APji/f0hi A/cpLwc3VuqtE5tMzWqKLdSmRC3/X96MhZRHFvIEfKYm+Jcz3FA6pZqF5gNhq9oQ I5LmhOji1jpXW4Qt0+4soVwPMOH/VbuN+y4PBb35odlMaMF/aAMTwwgmrLdtcyYL awqyAlRQequ8jWZ56uOgJESxLPjynpDttFuXiQs2vRe7qScQ+juM/21qqR1+xq6x kwcE3rZn8KZLSmGq62Ap54CtAzW12j9Liq22oX/GcHYrGY66j3JXAWjFvp/lOVqy hmK21HsCzpLwst3yWVC02OxcrOFyu0kab+LPvU3CGBjyOUJ5omD75UE4QqtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyfYZThqPMSmckA9qSDWXOt6BdaswHwYDVR0j BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF QTM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGI1NjctMzNhOC00Y2UwLWJj ZmYtY2IwZjBhODVjMjM5LzAvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVB NkMyQjBFQTM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzFsBnkZvztHJHNA1S86/Z9dbocmtoAStl0 ee/sHIDyngAieocYzXp0Y1y+qhoeKFX0in5a4B6X44/ypQYek9ifTyjiQlBa3XIp 67FsVt2PnCKbiNn6GkZUn3WJ6egZpsaId1qkYHWI1NZxyak/gRmzTrr2jK8HWXVa t5sObb31tAHlB3r65P0UbntHZz7zxdhsdWkrj+q2Sn/HWl/UlldmLQMuKVg6uw8o SOCsLc+2dh30PfXDeDhwJp91VbA8vQFac0ZNa60mgcGpqmfdBfStgkwUQIQtNTYl UuqyWgQ734m4zRwTr0hrrRzZMwKz6R9fGcH/5O64qvWL9bNeU7M= -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:55 2025 by rpki-client