This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft File: F137C794398E5F88909A244EC978EA476CCF76CC.mft (raw, json) Hash identifier: Yr2+WXL5vdaY872v6iOdULpWv+3CrQPnTGelonXA9Xk= Subject key identifier: FD:5F:E7:69:16:99:32:A3:F0:C0:28:14:63:13:BD:07:BD:CF:A5:C5 Authority key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC Certificate issuer: /CN=F137C794398E5F88909A244EC978EA476CCF76CC Certificate serial: 47DFFE55B9C8AD2896F5749B134B8F349815A1EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft Manifest number: 01EB Signing time: Mon 22 Dec 2025 14:22:05 +0000 Manifest this update: Mon 22 Dec 2025 14:17:05 +0000 Manifest next update: Fri 26 Dec 2025 00:09:05 +0000 Files and hashes: 1: F137C794398E5F88909A244EC978EA476CCF76CC.crl (hash: dyymcVhkFWYlzJDTDfrfysBWeC/yjGTPm82to+6XXZs=) 2: 3130332e35352e3232342e302f32332d3234203d3e20313530343832.roa (hash: bYXObqHIEuwgYntbLAkXiZDYp6ozXDo0Cjhn/uYq1JU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:df:fe:55:b9:c8:ad:28:96:f5:74:9b:13:4b:8f:34:98:15:a1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F137C794398E5F88909A244EC978EA476CCF76CC Validity Not Before: Dec 22 14:17:05 2025 GMT Not After : Dec 26 00:09:05 2025 GMT Subject: CN=FD5FE769169932A3F0C028146313BD07BDCFA5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:c0:54:6b:aa:70:a4:1a:86:85:15:78:ff: 82:83:51:51:b5:e9:ac:ca:b8:bb:f1:0d:cd:7b:6d: 19:a8:a2:7b:cd:84:9f:1e:4f:51:71:e8:7b:2e:b2: a7:e7:c8:d7:d0:8c:9f:f7:d4:69:fe:4a:3e:9d:39: 70:1a:e0:e3:db:cd:50:e7:d8:8b:7d:b3:af:10:d7: fb:7c:9d:b3:06:cf:cb:2b:2c:7d:07:52:09:96:f0: 3f:d1:cf:bf:e6:6c:1c:ea:18:12:8b:a5:1b:bd:46: d2:d3:53:21:df:37:34:7b:2d:fc:79:02:fb:cc:a0: 32:7b:54:3e:c3:2a:de:9c:7a:4c:4b:0a:22:e8:e5: fd:da:3f:ef:5a:84:eb:76:17:09:c9:59:aa:03:a0: 89:3b:e5:c1:8e:29:5d:e0:66:e8:56:90:d6:34:e1: 8a:48:c0:33:2c:0f:83:95:23:8b:d5:63:de:12:b3: 05:fd:c3:d4:f7:2d:61:a2:7c:84:d0:05:0b:24:39: b4:05:67:cf:30:b3:eb:aa:7a:1c:1b:3a:0a:a2:99: a5:06:e5:5c:8a:04:7f:75:59:69:bf:d5:f9:c3:d4: 75:63:99:c7:14:67:8b:a0:d8:c0:46:aa:6a:c2:0c: eb:f5:51:29:f1:9c:e7:86:3b:7b:21:3e:a3:0b:12: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:E7:69:16:99:32:A3:F0:C0:28:14:63:13:BD:07:BD:CF:A5:C5 X509v3 Authority Key Identifier: keyid:F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ec:e7:ed:43:42:10:7f:a4:bd:ab:4a:d6:4c:30:25:92:0b: 4f:2c:76:5c:ff:81:d1:dd:0c:c9:f1:70:db:67:41:3f:9c:a3: d0:17:2f:d1:6d:2d:e7:06:10:3b:1b:d0:6e:72:a4:9a:d6:58: 86:02:95:a2:6f:ae:9e:5d:62:30:0a:87:73:92:25:fd:0c:56: d8:e9:98:d2:dd:b1:ec:82:54:a0:a0:ee:c1:99:3e:2d:5e:ff: e1:8a:92:27:f1:82:4a:5b:fb:8e:70:a5:ea:fc:ab:63:93:05: a8:05:2c:1f:57:7d:91:e5:7b:72:2e:0e:13:0c:ca:ee:f3:95: 22:89:e0:c8:83:e2:96:5d:82:5b:4d:2b:e3:3f:ef:dc:ae:3d: 79:3e:a7:1b:6e:18:77:00:08:35:9e:e6:19:7a:05:0a:0c:a5: d2:d8:83:dd:75:1d:bf:80:56:6e:25:c9:8e:1c:18:ac:3c:1e: 88:14:cf:64:98:ee:b6:c7:32:f4:87:a3:cb:24:97:a8:0a:3e: e8:36:b9:3e:5d:54:9d:cb:e1:7b:46:87:7a:7e:e4:76:8e:dc: 8b:8d:f5:a4:f8:95:0a:02:7b:a5:ba:b6:d3:24:0c:73:9f:37: 02:ea:0a:99:f9:16:a5:6f:a8:a8:99:1c:9f:74:14:08:ff:26: cd:21:71:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9/+VbnIrSiW9XSbE0uPNJgVoeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2 Q0NGNzZDQzAeFw0yNTEyMjIxNDE3MDVaFw0yNTEyMjYwMDA5MDVaMDMxMTAvBgNV BAMTKEZENUZFNzY5MTY5OTMyQTNGMEMwMjgxNDYzMTNCRDA3QkRDRkE1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJcBUa6pwpBqGhRV4/4KDUVG1 6azKuLvxDc17bRmoonvNhJ8eT1Fx6HsusqfnyNfQjJ/31Gn+Sj6dOXAa4OPbzVDn 2It9s68Q1/t8nbMGz8srLH0HUgmW8D/Rz7/mbBzqGBKLpRu9RtLTUyHfNzR7Lfx5 AvvMoDJ7VD7DKt6cekxLCiLo5f3aP+9ahOt2FwnJWaoDoIk75cGOKV3gZuhWkNY0 4YpIwDMsD4OVI4vVY94SswX9w9T3LWGifITQBQskObQFZ88ws+uqehwbOgqimaUG 5VyKBH91WWm/1fnD1HVjmccUZ4ug2MBGqmrCDOv1USnxnOeGO3shPqMLErYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/V/naRaZMqPwwCgUYxO9B73PpcUwHwYDVR0j BBgwFoAU8TfHlDmOX4iQmiROyXjqR2zPdswwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMC9GMTM3Qzc5NDM5 OEU1Rjg4OTA5QTI0NEVDOTc4RUE0NzZDQ0Y3NkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2Q0NG NzZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmMmM3MzMtZDY3Zi00ODEzLWI4 ZjctMDU4ZDk1YTA5NTg3LzAvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVB NDc2Q0NGNzZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDs5+1DQhB/pL2rStZMMCWSC08sdlz/gdHd DMnxcNtnQT+co9AXL9FtLecGEDsb0G5ypJrWWIYClaJvrp5dYjAKh3OSJf0MVtjp mNLdseyCVKCg7sGZPi1e/+GKkifxgkpb+45wper8q2OTBagFLB9XfZHle3IuDhMM yu7zlSKJ4MiD4pZdgltNK+M/79yuPXk+pxtuGHcACDWe5hl6BQoMpdLYg911Hb+A Vm4lyY4cGKw8HogUz2SY7rbHMvSHo8skl6gKPug2uT5dVJ3L4XtGh3p+5HaO3IuN 9aT4lQoCe6W6ttMkDHOfNwLqCpn5FqVvqKiZHJ90FAj/Js0hcdY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:02 2025 by rpki-client