This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: X2RcGK0vbbS/+w6bMVQLHtqSvs1rugq4Bjmc2de2gqM= Subject key identifier: 4C:2A:2C:2C:BF:70:9A:DC:7B:B6:EA:A4:26:55:7D:6D:B1:E8:10:7E Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 2D251ABA6A3F6BC381428ACFE243E07A964BC462 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 04CD Signing time: Wed 24 Dec 2025 08:43:07 +0000 Manifest this update: Wed 24 Dec 2025 08:38:07 +0000 Manifest next update: Sat 27 Dec 2025 11:45:07 +0000 Files and hashes: 1: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=) 2: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: ro9zF6IUUVQCGQAU+RWSq4qnxD81hCbR/3LBFBFptZw=) 3: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=) 4: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:25:1a:ba:6a:3f:6b:c3:81:42:8a:cf:e2:43:e0:7a:96:4b:c4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Dec 24 08:38:07 2025 GMT Not After : Dec 27 11:45:07 2025 GMT Subject: CN=4C2A2C2CBF709ADC7BB6EAA426557D6DB1E8107E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:20:fa:b2:2f:ad:e0:ad:3e:0e:97:6c:47: 59:19:89:d4:3b:f3:db:4c:4a:41:12:d5:0f:fb:00: 1c:15:20:51:7f:15:6f:c3:55:67:a5:c3:2b:25:37: 3f:6c:81:9f:ca:32:1d:c6:92:77:67:b4:6d:f0:94: e4:89:2f:11:4b:2f:81:3a:a6:fa:ca:00:78:36:c5: ad:44:ae:f5:2e:66:9b:01:82:c7:f0:5e:ed:b0:e2: 0e:fc:53:85:d8:df:b9:e5:d6:07:b8:51:ad:67:9a: d4:d3:45:37:2d:f6:bd:ae:b1:b0:d3:60:9d:17:bb: 48:d6:e4:7d:7f:84:39:33:a4:a7:eb:6c:96:0e:f6: 9d:17:fe:55:1b:c8:ae:22:0a:61:72:0d:3f:98:f4: 10:16:b8:17:26:f2:2d:43:96:b5:cf:ef:61:46:43: 3f:38:94:c3:88:87:4b:f3:de:b9:05:17:b4:e2:65: ac:6a:9f:c5:b4:6a:96:26:02:8c:89:d1:75:8b:09: 59:98:09:63:fe:a6:a4:8b:5f:ec:c6:da:71:f8:d3: 25:ba:c8:71:31:6e:31:cb:0f:46:3e:2e:ad:c0:48: c4:3e:18:4f:25:cc:ac:06:32:90:65:60:21:73:cf: 17:4a:70:17:ca:7e:ae:7c:dc:10:dc:22:cc:24:17: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2A:2C:2C:BF:70:9A:DC:7B:B6:EA:A4:26:55:7D:6D:B1:E8:10:7E X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:37:38:76:42:c1:27:9a:c8:5a:20:5e:d4:d0:b5:56:ed:69: c8:ee:43:05:c2:f3:63:7f:6d:f2:30:32:5a:38:3d:c9:d6:3b: dd:0b:14:86:0b:f5:5e:d6:1a:c9:ff:87:e6:f5:44:50:b0:67: 93:38:63:97:c0:b1:b4:0e:aa:07:af:bf:8c:58:01:8f:15:4d: 71:41:73:2c:a9:e5:77:02:77:10:a5:e8:0b:00:90:fd:3f:cd: f8:ca:e2:4d:dc:8d:b6:97:bb:d1:c6:48:9c:f1:68:df:cf:e0: 9d:13:d2:ed:8c:ce:87:ba:30:3e:d1:2a:55:9e:0c:2c:09:1c: dd:90:d7:2e:d7:a9:69:5f:80:2b:e0:75:fa:aa:fd:f5:0c:9b: b7:c0:36:70:31:c0:45:90:a7:d9:80:0e:1c:4a:68:d1:1e:3e: 54:2e:9a:02:ae:6f:19:55:e6:c8:e2:c0:bd:85:e0:58:c6:32: 88:6f:47:91:87:62:f1:f1:69:d6:a3:72:49:f9:49:b1:85:04: 8d:be:ba:c7:9f:15:17:3c:4f:86:45:bf:b8:3c:1d:d7:bb:d5: 7d:be:c4:88:58:af:86:59:fd:d8:e2:4c:3e:44:35:3a:b4:e8: c8:51:8e:32:85:73:82:fc:28:ee:80:18:12:08:61:72:92:52: 9b:41:25:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSUaumo/a8OBQorP4kPgepZLxGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNTEyMjQwODM4MDdaFw0yNTEyMjcxMTQ1MDdaMDMxMTAvBgNV BAMTKDRDMkEyQzJDQkY3MDlBREM3QkI2RUFBNDI2NTU3RDZEQjFFODEwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6iD6si+t4K0+DpdsR1kZidQ7 89tMSkES1Q/7ABwVIFF/FW/DVWelwyslNz9sgZ/KMh3GkndntG3wlOSJLxFLL4E6 pvrKAHg2xa1ErvUuZpsBgsfwXu2w4g78U4XY37nl1ge4Ua1nmtTTRTct9r2usbDT YJ0Xu0jW5H1/hDkzpKfrbJYO9p0X/lUbyK4iCmFyDT+Y9BAWuBcm8i1DlrXP72FG Qz84lMOIh0vz3rkFF7TiZaxqn8W0apYmAoyJ0XWLCVmYCWP+pqSLX+zG2nH40yW6 yHExbjHLD0Y+Lq3ASMQ+GE8lzKwGMpBlYCFzzxdKcBfKfq583BDcIswkF2SpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCosLL9wmtx7tuqkJlV9bbHoEH4wHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK03OHZCwSeayFogXtTQtVbtacjuQwXC82N/ bfIwMlo4PcnWO90LFIYL9V7WGsn/h+b1RFCwZ5M4Y5fAsbQOqgevv4xYAY8VTXFB cyyp5XcCdxCl6AsAkP0/zfjK4k3cjbaXu9HGSJzxaN/P4J0T0u2Mzoe6MD7RKlWe DCwJHN2Q1y7XqWlfgCvgdfqq/fUMm7fANnAxwEWQp9mADhxKaNEePlQumgKubxlV 5sjiwL2F4FjGMohvR5GHYvHxadajckn5SbGFBI2+usefFRc8T4ZFv7g8Hde71X2+ xIhYr4ZZ/djiTD5ENTq06MhRjjKFc4L8KO6AGBIIYXKSUptBJcQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:15 2025 by rpki-client