This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: bSIQ0phxanbyEtahPXy3dtLoJvp+VWjw9plBNQUHgY4= Subject key identifier: CE:DF:3D:BB:D3:15:4E:C0:9D:E0:B7:AF:7F:E7:4C:EE:CD:79:BD:6B Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 24DD8F7A0C2D1B23C9D3584852544937AC244C94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 053F Signing time: Thu 18 Dec 2025 07:30:50 +0000 Manifest this update: Thu 18 Dec 2025 07:25:50 +0000 Manifest next update: Sun 21 Dec 2025 16:04:50 +0000 Files and hashes: 1: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: OeI0nNEc/B0afWx2vP7qvxq8Ug3fHlL7TjcVg5w+xos=) 2: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 3: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dd:8f:7a:0c:2d:1b:23:c9:d3:58:48:52:54:49:37:ac:24:4c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Dec 18 07:25:50 2025 GMT Not After : Dec 21 16:04:50 2025 GMT Subject: CN=CEDF3DBBD3154EC09DE0B7AF7FE74CEECD79BD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:58:1b:63:11:c8:f2:56:64:f4:f7:53:7c:f9: 85:1b:53:e9:68:8f:c5:2a:d7:d0:f1:17:4e:c3:d4: 4e:93:e2:3f:14:c4:91:c9:37:f7:82:72:32:f2:64: 8c:d8:7a:a9:58:79:fd:68:21:97:29:c6:f4:e4:6d: 1a:ae:2d:1e:9a:5a:ed:86:68:eb:d3:6e:49:02:ef: 7d:35:a8:54:15:93:37:3c:05:34:db:be:f4:0e:c6: 47:52:08:1e:11:13:17:1b:d6:a4:53:7f:f1:c4:d9: fd:29:8a:e2:71:22:9c:ab:81:8a:cc:c5:70:87:30: 17:3e:05:ab:9e:87:13:90:bd:10:f9:2c:21:5a:1d: 92:fb:e3:30:56:37:9f:f1:ff:0c:67:f5:bd:95:26: f2:df:ad:13:00:96:d3:be:18:c7:44:c1:12:60:a7: ea:5f:1e:5b:2f:c6:e1:e7:b4:ae:b2:35:46:2b:8a: 1b:19:5b:92:b7:97:aa:c8:0f:ac:ce:25:cc:16:b9: 46:ac:a9:3f:0c:3b:cf:20:e8:e0:09:49:72:e3:34: c7:2c:a5:d4:6e:7b:df:de:cb:f9:3c:27:dd:2f:1f: a1:c1:75:4c:6f:32:05:b9:d8:4c:1f:13:0b:20:e1: 9a:40:e2:d9:4f:1c:15:f7:a1:90:1e:43:26:26:e0: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:3D:BB:D3:15:4E:C0:9D:E0:B7:AF:7F:E7:4C:EE:CD:79:BD:6B X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:93:62:b0:d1:86:60:02:25:66:73:46:c5:0e:99:18:94:72: cb:2d:48:2b:72:4e:fc:26:2c:da:ef:b2:0f:9a:13:b8:e8:37: 4d:4d:a2:d4:57:d8:ed:ab:55:42:85:a8:20:8f:ba:2a:6e:03: b2:8c:1d:04:87:1c:23:0e:73:cd:c3:e7:0b:79:59:6d:a9:30: 7d:90:e5:d3:96:41:1b:22:c4:aa:45:c9:ff:38:62:6b:73:b3: a2:85:8d:c0:7d:38:31:f5:55:80:83:18:1e:a9:a0:cd:36:22: 33:23:d4:16:46:4e:9d:9d:ab:07:2c:6b:68:a3:6a:da:e6:dd: 4e:d5:09:c0:29:75:01:aa:f7:dc:e1:75:fc:12:92:da:8f:f4: b7:ec:0b:09:f4:8a:c7:2b:9a:38:d0:bd:85:3d:9a:35:f3:3e: 49:84:87:fb:78:b9:be:45:ab:3d:fe:92:c3:c8:eb:f5:9c:35: 64:af:47:50:22:50:35:c7:db:23:6d:d7:a4:03:85:c1:6c:0a: d1:48:02:1a:45:b4:ed:29:06:99:47:9f:4b:90:63:f2:46:92: bf:41:72:8b:dc:78:2c:81:4a:23:de:de:75:8a:33:92:64:58: 98:d0:80:a8:1d:e3:50:b8:61:ec:85:2d:42:22:b6:7c:5e:61: 4f:26:fc:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJN2PegwtGyPJ01hIUlRJN6wkTJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTEyMTgwNzI1NTBaFw0yNTEyMjExNjA0NTBaMDMxMTAvBgNV BAMTKENFREYzREJCRDMxNTRFQzA5REUwQjdBRjdGRTc0Q0VFQ0Q3OUJENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWBtjEcjyVmT091N8+YUbU+lo j8Uq19DxF07D1E6T4j8UxJHJN/eCcjLyZIzYeqlYef1oIZcpxvTkbRquLR6aWu2G aOvTbkkC7301qFQVkzc8BTTbvvQOxkdSCB4RExcb1qRTf/HE2f0piuJxIpyrgYrM xXCHMBc+BauehxOQvRD5LCFaHZL74zBWN5/x/wxn9b2VJvLfrRMAltO+GMdEwRJg p+pfHlsvxuHntK6yNUYrihsZW5K3l6rID6zOJcwWuUasqT8MO88g6OAJSXLjNMcs pdRue9/ey/k8J90vH6HBdUxvMgW52EwfEwsg4ZpA4tlPHBX3oZAeQyYm4GXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzt89u9MVTsCd4Levf+dM7s15vWswHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2TYrDRhmACJWZzRsUOmRiUcsstSCtyTvwm LNrvsg+aE7joN01NotRX2O2rVUKFqCCPuipuA7KMHQSHHCMOc83D5wt5WW2pMH2Q 5dOWQRsixKpFyf84Ymtzs6KFjcB9ODH1VYCDGB6poM02IjMj1BZGTp2dqwcsa2ij atrm3U7VCcApdQGq99zhdfwSktqP9LfsCwn0iscrmjjQvYU9mjXzPkmEh/t4ub5F qz3+ksPI6/WcNWSvR1AiUDXH2yNt16QDhcFsCtFIAhpFtO0pBplHn0uQY/JGkr9B covceCyBSiPe3nWKM5JkWJjQgKgd41C4YeyFLUIitnxeYU8m/MI= -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:39 2025 by rpki-client