This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft File: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft (raw, json) Hash identifier: xD+T4uuwh72gzEAK5qHXvVM5FzcYD9Bj1C2IJEnaNp4= Subject key identifier: E9:41:0E:28:46:A5:7B:E3:15:AC:2C:7B:62:11:8C:62:B3:4F:D7:49 Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA Certificate issuer: /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Certificate serial: 4ED78DA8684E5CD570BF3CC506AE36BD8AF94231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft Manifest number: 01D0 Signing time: Fri 19 Dec 2025 01:02:10 +0000 Manifest this update: Fri 19 Dec 2025 00:57:10 +0000 Manifest next update: Mon 22 Dec 2025 09:18:10 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: nybBbZermRnfCAlPFTR2ETmDBv6TPrDdj8bK6gzLTv0=) 2: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: uH7Yykg71jP1VkPGgxNuX7EouajeURB+bw3/u+w3tXE=) 3: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: GgMpV6awuEKacj2HVVRDN4z4Htq937tLhpXSx5OCQQw=) 4: F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl (hash: d14LUFbwL7ciOe5muV/AwkOl5vqwB9dwF25j8y20gWA=) 5: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: kIEXLbdHyNVR/2+p4R7baZ0vAlG7dZTeEpJcDfIBOIk=) 6: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: NYY0i2hycJDZMAWkhMI1MwXrSLzfIpid9oGLQQbdYaY=) 7: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: T9XYyvCurgMmepMYEsZNDRpjFjN9NnYsijhEUminICw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d7:8d:a8:68:4e:5c:d5:70:bf:3c:c5:06:ae:36:bd:8a:f9:42:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA Validity Not Before: Dec 19 00:57:10 2025 GMT Not After : Dec 22 09:18:10 2025 GMT Subject: CN=E9410E2846A57BE315AC2C7B62118C62B34FD749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:83:e1:62:b1:4f:28:7d:c0:b5:cf:6c:40: 73:ac:98:3b:4e:ff:63:3f:9f:47:98:71:4e:99:f1: 78:ca:33:da:bf:47:19:c2:5f:43:d1:38:75:11:cf: df:4d:6d:5c:73:9d:c9:3c:b7:b0:e7:b4:bb:7e:c0: 82:b4:cc:6a:14:0b:6d:70:53:68:5b:4d:7c:27:f7: 70:96:53:3d:98:8d:27:e0:e7:3b:52:ee:dd:84:55: 4a:11:a7:42:e1:11:36:75:57:e6:a3:8d:fe:6b:89: a3:fe:ae:10:17:d3:b6:50:b2:c4:72:b0:e8:c7:bd: 67:e8:6f:39:71:5a:22:ef:ef:ae:a9:62:72:54:bf: 5b:fb:d1:e3:ce:0c:2b:07:77:7c:79:67:6f:7e:97: bc:d3:83:18:2f:f2:22:14:78:4c:39:eb:fb:38:be: 83:58:b4:6e:0e:f3:ae:cb:62:64:66:09:87:cf:4a: 9c:0e:35:d3:be:11:8b:8c:de:09:2c:44:e5:f5:4b: e0:ba:cc:68:8c:aa:11:8f:3c:f8:3f:5e:8e:ff:ea: 39:1f:a0:a0:b5:51:4c:5c:7b:b8:95:dc:1f:9e:a6: be:d4:e5:4e:84:96:56:eb:5e:e0:e6:18:02:c6:9b: 5b:67:2f:3b:c8:3c:f5:61:4c:49:e8:5d:28:4e:95: 9b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:41:0E:28:46:A5:7B:E3:15:AC:2C:7B:62:11:8C:62:B3:4F:D7:49 X509v3 Authority Key Identifier: keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:b7:53:52:69:96:d1:ad:b2:63:1a:93:2a:33:7d:4b:06: 09:26:72:72:c9:90:1a:d4:d3:06:f1:5b:37:b2:f6:e1:8e:7a: eb:3b:60:2d:ea:d4:0d:95:4f:b2:d6:da:9d:25:8e:e7:b2:12: 51:62:fc:28:83:86:2c:72:af:dc:ad:e7:73:bb:ae:a7:53:40: cb:cf:73:3d:be:9d:22:8a:4d:e5:e5:fc:8f:28:e6:03:95:1d: b0:52:aa:4e:a7:6b:c5:f8:0c:3c:b6:94:b3:9d:c9:94:58:d1: 4c:cb:82:f4:c6:5c:8c:0e:22:78:a2:68:fc:5a:08:81:fc:7e: 47:9c:d8:fb:b0:17:c4:f7:35:32:5e:72:1e:0f:54:f2:be:f6: 23:81:be:65:29:5d:87:76:79:f6:10:df:4b:9c:58:a2:b0:c5: f6:9b:b5:41:54:ae:a2:93:0e:57:de:e3:3b:ab:b4:e7:bc:59: dd:e0:48:52:1a:9c:ae:7e:37:c4:7c:b9:a4:3a:31:3e:1c:9c: f0:81:52:a9:6a:a8:02:4c:d5:c1:e5:13:d1:c8:d9:00:06:7a: f9:5e:62:fe:fd:14:e8:a9:31:d0:42:ee:3d:93:d7:6e:d4:35: 52:c6:d2:0e:26:71:79:37:3c:47:84:7e:ef:61:56:f7:26:4d: 26:cb:58:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTteNqGhOXNVwvzzFBq42vYr5QjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIw MkZDMjFFQTAeFw0yNTEyMTkwMDU3MTBaFw0yNTEyMjIwOTE4MTBaMDMxMTAvBgNV BAMTKEU5NDEwRTI4NDZBNTdCRTMxNUFDMkM3QjYyMTE4QzYyQjM0RkQ3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiboPhYrFPKH3Atc9sQHOsmDtO /2M/n0eYcU6Z8XjKM9q/RxnCX0PROHURz99NbVxznck8t7DntLt+wIK0zGoUC21w U2hbTXwn93CWUz2YjSfg5ztS7t2EVUoRp0LhETZ1V+ajjf5riaP+rhAX07ZQssRy sOjHvWfobzlxWiLv766pYnJUv1v70ePODCsHd3x5Z29+l7zTgxgv8iIUeEw56/s4 voNYtG4O867LYmRmCYfPSpwONdO+EYuM3gksROX1S+C6zGiMqhGPPPg/Xo7/6jkf oKC1UUxce7iV3B+epr7U5U6EllbrXuDmGALGm1tnLzvIPPVhTEnoXShOlZvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UEOKEale+MVrCx7YhGMYrNP10kwHwYDVR0j BBgwFoAU+OEvCkM8i3M74x214M0e8gL8IeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGNlNDc5Ni00OWRlLTQzYjEtYTE1Mi1iMThkMTFhZGE1MjkvMC9GOEUxMkYwQTQz M0M4QjczM0JFMzFEQjVFMENEMUVGMjAyRkMyMUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFFRjIwMkZD MjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvRjhFMTJGMEE0MzNDOEI3MzNCRTMxREI1RTBDRDFF RjIwMkZDMjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoDt1NSaZbRrbJjGpMqM31LBgkmcnLJkBrU 0wbxWzey9uGOeus7YC3q1A2VT7LW2p0ljueyElFi/CiDhixyr9yt53O7rqdTQMvP cz2+nSKKTeXl/I8o5gOVHbBSqk6na8X4DDy2lLOdyZRY0UzLgvTGXIwOIniiaPxa CIH8fkec2PuwF8T3NTJech4PVPK+9iOBvmUpXYd2efYQ30ucWKKwxfabtUFUrqKT Dlfe4zurtOe8Wd3gSFIanK5+N8R8uaQ6MT4cnPCBUqlqqAJM1cHlE9HI2QAGevle Yv79FOipMdBC7j2T127UNVLG0g4mcXk3PEeEfu9hVvcmTSbLWFc= -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:23 2025 by rpki-client