This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: QhF/8XXHOXn/ufU5zOyS0Ndh2Xtp4ukv9Dokth7QFgc= Subject key identifier: 18:5A:A0:70:10:59:67:BF:46:2B:76:CD:3D:A3:B3:81:58:20:0E:B8 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 6A4D09B99A3C8293AC63035F3DB1822B45E8B58B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 0100 Signing time: Sat 20 Dec 2025 13:22:52 +0000 Manifest this update: Sat 20 Dec 2025 13:17:52 +0000 Manifest next update: Tue 23 Dec 2025 20:16:52 +0000 Files and hashes: 1: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: DV/Ysq1yZkTAa8pW0HRLBJPRE8N2Tk3tLTv0NcoXz2k=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4d:09:b9:9a:3c:82:93:ac:63:03:5f:3d:b1:82:2b:45:e8:b5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Dec 20 13:17:52 2025 GMT Not After : Dec 23 20:16:52 2025 GMT Subject: CN=185AA070105967BF462B76CD3DA3B38158200EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e3:71:7f:45:28:ac:2e:79:7b:84:e7:ff:df: 5c:db:9a:75:1a:1e:5f:ec:1a:04:b8:d8:33:4c:b6: 10:ed:fc:ae:bd:55:1f:e3:29:a6:a4:e1:9e:d1:b3: 06:cf:64:69:fe:8a:0c:b4:8c:0f:ef:14:e6:c5:94: c5:65:1d:5f:c0:1a:53:a3:02:37:d6:27:7c:30:14: 30:aa:35:90:13:be:a7:3d:40:08:6c:76:0f:a1:c1: 18:e0:ab:41:1f:d6:b5:cd:2a:17:d3:a8:d0:f2:eb: 20:ac:10:5d:92:27:93:24:c2:00:f4:42:7b:a6:11: ce:27:96:b7:62:f9:aa:43:90:aa:d8:15:4b:18:44: d3:d1:24:2b:8d:2c:4c:b0:c8:2f:60:c6:d5:16:a9: f7:f3:74:49:d3:05:9d:2d:63:93:60:a4:4f:23:be: bd:42:0f:ee:fa:05:17:88:d1:0b:84:96:e7:26:69: 03:24:72:b2:fc:3f:fe:e8:50:46:23:a0:1d:70:5f: e3:85:ef:c9:f5:68:6b:fa:45:d8:f8:8c:ef:2c:14: 89:5b:a1:61:d5:14:14:4c:85:37:53:32:65:f8:86: b1:ee:4c:f8:5f:98:bb:53:42:9c:d9:91:24:0e:9e: ab:43:49:36:7d:fb:92:93:d3:45:4d:a4:71:5d:43: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:A0:70:10:59:67:BF:46:2B:76:CD:3D:A3:B3:81:58:20:0E:B8 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:81:a6:d6:d1:c1:59:a1:83:9c:e1:5f:e5:02:57:7e:89:fe: 5b:2e:a8:da:5d:fe:f9:76:6a:98:5b:34:99:33:43:8b:f1:1c: 8a:ee:c5:8c:83:18:b6:0f:22:41:01:fe:ea:5c:0f:f5:f6:59: 88:a4:76:10:9a:77:4d:c8:9a:d8:d1:46:7b:4b:2f:d3:86:01: 58:c9:e9:9a:85:51:8e:60:38:39:23:b5:15:fb:4a:0a:88:de: 60:0e:de:ab:0f:88:bb:eb:4d:b7:c3:7d:16:67:9f:55:d3:d6: 3e:ba:1a:60:5a:43:49:46:e8:53:26:b3:0f:68:e2:cf:01:f0: f0:b5:fe:fe:15:c9:3f:9c:f1:10:82:62:c4:92:0c:59:93:5a: a9:94:b4:0c:c4:94:90:87:64:45:f4:06:20:10:a4:35:32:ff: 5d:38:df:d5:50:31:93:99:c7:1f:76:20:10:0a:a0:8f:63:20: ff:68:9c:16:49:ab:6e:c7:aa:cd:a1:76:11:df:58:10:33:1d: 6f:21:9b:3f:55:b5:65:5f:b7:d6:df:36:66:f3:82:d7:30:8f: 87:f9:4f:c6:d0:74:28:88:fa:53:79:f3:ab:60:e9:69:a9:39: b8:e9:9b:a8:bb:8f:6d:51:c8:32:36:53:9d:15:cf:5b:b5:e5: a6:c7:27:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUak0JuZo8gpOsYwNfPbGCK0XotYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNTEyMjAxMzE3NTJaFw0yNTEyMjMyMDE2NTJaMDMxMTAvBgNV BAMTKDE4NUFBMDcwMTA1OTY3QkY0NjJCNzZDRDNEQTNCMzgxNTgyMDBFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj43F/RSisLnl7hOf/31zbmnUa Hl/sGgS42DNMthDt/K69VR/jKaak4Z7RswbPZGn+igy0jA/vFObFlMVlHV/AGlOj AjfWJ3wwFDCqNZATvqc9QAhsdg+hwRjgq0Ef1rXNKhfTqNDy6yCsEF2SJ5MkwgD0 QnumEc4nlrdi+apDkKrYFUsYRNPRJCuNLEywyC9gxtUWqffzdEnTBZ0tY5NgpE8j vr1CD+76BReI0QuElucmaQMkcrL8P/7oUEYjoB1wX+OF78n1aGv6Rdj4jO8sFIlb oWHVFBRMhTdTMmX4hrHuTPhfmLtTQpzZkSQOnqtDSTZ9+5KT00VNpHFdQ+tdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFqgcBBZZ79GK3bNPaOzgVggDrgwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCBptbRwVmhg5zhX+UCV36J/lsuqNpd/vl2 aphbNJkzQ4vxHIruxYyDGLYPIkEB/upcD/X2WYikdhCad03ImtjRRntLL9OGAVjJ 6ZqFUY5gODkjtRX7SgqI3mAO3qsPiLvrTbfDfRZnn1XT1j66GmBaQ0lG6FMmsw9o 4s8B8PC1/v4VyT+c8RCCYsSSDFmTWqmUtAzElJCHZEX0BiAQpDUy/10439VQMZOZ xx92IBAKoI9jIP9onBZJq27Hqs2hdhHfWBAzHW8hmz9VtWVft9bfNmbzgtcwj4f5 T8bQdCiI+lN586tg6WmpObjpm6i7j21RyDI2U50Vz1u15abHJw8= -----END CERTIFICATE-----Generated at Mon Dec 22 22:58:43 2025 by rpki-client