This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: wYxyeVvOddGH9i19GMpt7GWDuKUXsSsPwO+66YAVa9o= Subject key identifier: EA:81:8E:DC:23:B7:F2:CD:1D:C4:36:42:D1:6B:78:EF:1E:60:51:D5 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 1FD307E94CC4730B437437B5671AD69EA08B5A09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: FF Signing time: Thu 18 Dec 2025 07:54:24 +0000 Manifest this update: Thu 18 Dec 2025 07:49:24 +0000 Manifest next update: Sun 21 Dec 2025 13:22:24 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: 58lwWQq0WELAmsvXoGNFQKzg4mdFhyDnaho2JZJ3xzo=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d3:07:e9:4c:c4:73:0b:43:74:37:b5:67:1a:d6:9e:a0:8b:5a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Dec 18 07:49:24 2025 GMT Not After : Dec 21 13:22:24 2025 GMT Subject: CN=EA818EDC23B7F2CD1DC43642D16B78EF1E6051D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:de:dc:d1:75:8a:04:a8:1d:3d:86:64:4b: f9:7e:60:26:06:92:24:47:bf:af:aa:3e:07:de:46: 13:37:4a:f2:c5:77:c4:88:32:f8:65:a7:e0:bf:9d: ae:fd:15:95:34:ca:78:0f:2f:bd:60:57:f9:91:69: cb:66:b0:70:9d:5f:a3:6f:78:06:8e:dd:2c:37:fd: 83:97:c7:07:8c:a7:0f:22:c7:50:80:da:ab:bf:fb: 89:7b:b5:c2:77:11:83:64:63:f8:1a:12:8a:27:93: bf:58:bc:b1:0d:de:de:98:b7:2a:62:30:f6:a6:22: c8:27:f6:0f:73:0c:cd:86:28:47:74:62:d7:d5:ad: e7:66:81:8d:e0:54:c0:c0:ca:b2:e1:02:80:0b:40: c1:19:23:9f:1d:b9:84:cf:a7:3e:c6:5e:92:85:25: ba:51:ab:b6:4d:e9:7e:3b:d5:48:43:c1:17:8f:37: c4:44:99:2a:05:4f:9a:ae:c0:5f:6a:0a:a7:1a:82: 15:bc:ba:7d:04:43:47:85:c7:81:b1:f2:31:24:a6: 23:a4:bc:01:79:09:c7:0c:4d:5e:59:ff:75:77:b3: b8:7f:6d:3f:04:12:05:78:e5:16:48:4c:88:d3:2e: 47:fe:fa:d3:82:0f:58:71:1c:2d:59:10:0a:09:77: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:8E:DC:23:B7:F2:CD:1D:C4:36:42:D1:6B:78:EF:1E:60:51:D5 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:32:d8:2e:fe:2f:34:21:22:30:a3:7f:87:54:55:cf:68:b1: 3c:fd:77:6b:6a:7f:ed:57:dc:54:37:ba:69:05:2d:b4:ed:c1: 3f:bb:db:c9:d8:e5:b6:2a:d4:48:44:14:90:19:6d:1f:c2:b7: 40:76:86:fa:58:66:ce:c7:87:6a:70:92:0d:bc:fc:71:02:b1: 89:8f:73:64:b1:8c:86:67:98:06:04:b3:19:cb:5e:f5:57:33: 70:34:90:aa:72:5b:84:14:63:eb:17:c7:b1:ed:87:ca:3c:9d: 75:89:a9:14:ae:5f:c7:26:c4:8e:32:01:df:9b:70:96:47:18: 30:fb:ca:71:8b:99:d3:f4:79:21:50:3b:33:67:61:ed:ea:f7: 9e:24:e3:3a:a4:19:87:9c:29:cb:70:af:c9:83:50:f5:f5:b1: f2:fb:08:31:0b:f8:c4:b1:43:e1:3f:59:6c:6a:fc:74:4a:ae: 69:f7:e8:03:69:de:4e:24:68:ed:c6:e6:bd:a4:0c:ca:d5:b0: 7b:37:6a:a9:f7:b2:f2:70:51:e3:f0:af:26:e6:ae:54:28:36: 55:ba:af:55:76:5c:7d:83:2f:02:1b:b2:34:2c:b3:d1:a6:49: 93:f9:24:37:15:97:b0:dc:d0:fd:95:53:a5:c0:63:27:62:6e: fd:75:07:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9MH6UzEcwtDdDe1ZxrWnqCLWgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTEyMTgwNzQ5MjRaFw0yNTEyMjExMzIyMjRaMDMxMTAvBgNV BAMTKEVBODE4RURDMjNCN0YyQ0QxREM0MzY0MkQxNkI3OEVGMUU2MDUxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wN7c0XWKBKgdPYZkS/l+YCYG kiRHv6+qPgfeRhM3SvLFd8SIMvhlp+C/na79FZU0yngPL71gV/mRactmsHCdX6Nv eAaO3Sw3/YOXxweMpw8ix1CA2qu/+4l7tcJ3EYNkY/gaEoonk79YvLEN3t6Ytypi MPamIsgn9g9zDM2GKEd0YtfVredmgY3gVMDAyrLhAoALQMEZI58duYTPpz7GXpKF JbpRq7ZN6X471UhDwRePN8REmSoFT5quwF9qCqcaghW8un0EQ0eFx4Gx8jEkpiOk vAF5CccMTV5Z/3V3s7h/bT8EEgV45RZITIjTLkf++tOCD1hxHC1ZEAoJd8gbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oGO3CO38s0dxDZC0Wt47x5gUdUwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYy2C7+LzQhIjCjf4dUVc9osTz9d2tqf+1X 3FQ3umkFLbTtwT+728nY5bYq1EhEFJAZbR/Ct0B2hvpYZs7Hh2pwkg28/HECsYmP c2SxjIZnmAYEsxnLXvVXM3A0kKpyW4QUY+sXx7Hth8o8nXWJqRSuX8cmxI4yAd+b cJZHGDD7ynGLmdP0eSFQOzNnYe3q954k4zqkGYecKctwr8mDUPX1sfL7CDEL+MSx Q+E/WWxq/HRKrmn36ANp3k4kaO3G5r2kDMrVsHs3aqn3svJwUePwrybmrlQoNlW6 r1V2XH2DLwIbsjQss9GmSZP5JDcVl7Dc0P2VU6XAYydibv11Byw= -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:49 2025 by rpki-client