This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: TmP5r8IwwM/CV8cI0Lc0eRkqGniDwU5enPMpjZeLjEI= Subject key identifier: 8A:D6:37:DB:01:95:47:D6:73:88:95:05:4F:87:2D:03:3B:60:77:FB Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 7BD7DE7F644806E642C9BF5B94E9333CED3748F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 03B1 Signing time: Thu 18 Dec 2025 23:01:24 +0000 Manifest this update: Thu 18 Dec 2025 22:56:24 +0000 Manifest next update: Mon 22 Dec 2025 00:15:24 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: 3DExrHzfhuNjeoXzWG0L087xAG0XavfVOySU0Rxn8YA=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d7:de:7f:64:48:06:e6:42:c9:bf:5b:94:e9:33:3c:ed:37:48:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Dec 18 22:56:24 2025 GMT Not After : Dec 22 00:15:24 2025 GMT Subject: CN=8AD637DB019547D6738895054F872D033B6077FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:08:4d:12:6b:bd:68:7a:d0:00:e5:88:95: c0:07:ea:27:2f:af:41:77:23:9a:f3:5f:c7:19:eb: 05:7e:e9:3f:07:8a:fd:ad:0e:81:00:34:95:5f:7f: 72:12:11:10:72:82:31:71:26:bc:bf:69:4e:00:77: 37:84:62:2f:7a:e7:d3:2e:b0:14:c1:3a:4f:ef:8a: 7a:a2:7f:33:47:f3:ad:4c:96:41:b7:dc:09:34:fe: dd:18:9f:57:9b:4e:f2:fc:e7:a3:7d:1c:92:4a:08: 8b:1f:99:67:fa:b8:0f:c6:16:a1:1f:f3:82:72:1c: 13:0c:ab:8e:36:2f:8c:b4:e1:10:95:fc:15:29:9a: b6:3f:b4:4b:58:4c:d8:52:91:8a:36:a0:95:32:3f: b6:b7:e5:c1:9c:a9:d5:d5:ca:29:ea:cd:6c:9c:e7: 5b:a9:c6:d4:e2:71:e5:17:46:0f:b1:d8:26:aa:d2: 9e:d2:15:b8:01:ec:74:20:c4:44:c0:39:eb:73:f5: 5f:72:37:52:e6:67:d6:92:c9:53:aa:3c:07:19:db: a6:46:ee:51:8c:07:22:0d:16:7f:40:8f:c2:fa:a5: 4a:3d:73:fc:9d:73:a0:dc:99:41:72:b5:83:44:72: c1:18:6e:44:e0:3f:fa:30:44:7a:c6:ba:62:2b:ea: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:37:DB:01:95:47:D6:73:88:95:05:4F:87:2D:03:3B:60:77:FB X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1d:68:a4:51:fb:3f:22:87:5a:f8:4d:c7:77:8f:5b:01:82: a5:fa:0c:7d:7a:9f:4d:fa:2e:eb:d5:d6:28:a9:a6:89:61:88: fc:2f:42:5c:7f:f5:2e:68:ba:5d:c4:3e:f5:c2:0a:a6:6a:a2: ca:e2:bd:7c:db:a1:cd:1c:dc:fd:f5:18:33:50:e3:03:df:1b: 80:fa:79:ce:59:b3:3d:63:7c:f2:7d:21:2d:da:00:5c:00:2a: 33:5d:8c:c3:8a:fa:9c:20:9f:ad:c4:f2:d0:82:eb:1f:26:1d: 12:eb:62:41:6c:53:d8:63:d1:a1:4e:56:88:c7:77:10:d9:63: 33:b0:70:66:4b:39:5d:02:70:09:01:5b:aa:17:48:74:e6:e4: 1b:67:8a:91:50:02:c0:3e:49:12:b7:a4:86:17:ee:ad:0d:13: 6c:cc:0d:8d:6a:51:fc:88:ca:21:ae:51:fb:64:92:c0:23:8b: 7d:14:df:ff:02:14:38:fc:43:28:2b:00:ef:5e:69:e3:55:24: cc:4d:65:6c:de:36:84:56:f4:ba:94:80:b6:f4:29:cf:52:d7: 4e:b8:80:4f:d5:30:02:ff:7d:80:19:99:a9:56:8b:38:67:7e: a6:9f:f8:6e:e7:65:61:ef:33:23:3b:50:45:de:c0:3c:d8:98: e3:30:fa:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9fef2RIBuZCyb9blOkzPO03SPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTEyMTgyMjU2MjRaFw0yNTEyMjIwMDE1MjRaMDMxMTAvBgNV BAMTKDhBRDYzN0RCMDE5NTQ3RDY3Mzg4OTUwNTRGODcyRDAzM0I2MDc3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdghNEmu9aHrQAOWIlcAH6icv r0F3I5rzX8cZ6wV+6T8Hiv2tDoEANJVff3ISERBygjFxJry/aU4AdzeEYi9659Mu sBTBOk/vinqifzNH861MlkG33Ak0/t0Yn1ebTvL856N9HJJKCIsfmWf6uA/GFqEf 84JyHBMMq442L4y04RCV/BUpmrY/tEtYTNhSkYo2oJUyP7a35cGcqdXVyinqzWyc 51upxtTiceUXRg+x2Caq0p7SFbgB7HQgxETAOetz9V9yN1LmZ9aSyVOqPAcZ26ZG 7lGMByINFn9Aj8L6pUo9c/ydc6DcmUFytYNEcsEYbkTgP/owRHrGumIr6s/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitY32wGVR9ZziJUFT4ctAztgd/swHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsdaKRR+z8ih1r4Tcd3j1sBgqX6DH16n036 LuvV1iippolhiPwvQlx/9S5oul3EPvXCCqZqosrivXzboc0c3P31GDNQ4wPfG4D6 ec5Zsz1jfPJ9IS3aAFwAKjNdjMOK+pwgn63E8tCC6x8mHRLrYkFsU9hj0aFOVojH dxDZYzOwcGZLOV0CcAkBW6oXSHTm5BtnipFQAsA+SRK3pIYX7q0NE2zMDY1qUfyI yiGuUftkksAji30U3/8CFDj8QygrAO9eaeNVJMxNZWzeNoRW9LqUgLb0Kc9S1064 gE/VMAL/fYAZmalWizhnfqaf+G7nZWHvMyM7UEXewDzYmOMw+jY= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:42 2025 by rpki-client