This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft File: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft (raw, json) Hash identifier: ewt1/Vt3S8PtWqElmwr9KPhG898z0vauDGkEjrxj2YI= Subject key identifier: DB:D1:B2:EF:32:5F:C7:78:7D:79:9D:8C:7D:4E:21:42:7F:F8:D4:24 Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 Certificate issuer: /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6 Certificate serial: 3DEFAD280AA650C2A10D79B7C829283087086E8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft Manifest number: 01A7 Signing time: Fri 19 Dec 2025 22:33:25 +0000 Manifest this update: Fri 19 Dec 2025 22:28:25 +0000 Manifest next update: Tue 23 Dec 2025 03:53:25 +0000 Files and hashes: 1: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: xqDmQkKvNjqDIhr5W6P74uer/xZQw7F/hF7jgT+PobU=) 2: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl (hash: 3IK5nIi5EqlOIoAcq5jIbxfi1nyHO15DL4DWNbBUKcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 03:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ef:ad:28:0a:a6:50:c2:a1:0d:79:b7:c8:29:28:30:87:08:6e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6 Validity Not Before: Dec 19 22:28:25 2025 GMT Not After : Dec 23 03:53:25 2025 GMT Subject: CN=DBD1B2EF325FC7787D799D8C7D4E21427FF8D424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:d8:ab:5a:09:a3:26:f0:34:8b:96:a1:73: 22:8b:b5:e6:78:15:2e:5b:d6:c9:69:68:6b:7a:fa: 58:cc:63:ee:99:15:fa:1c:87:56:7f:fc:b9:71:79: 8c:a7:f2:1a:1f:77:d2:e1:cd:d0:ae:18:00:5a:6e: 45:94:ad:0f:a7:9f:38:cf:42:fe:d2:a8:1f:6d:15: 7f:19:59:c6:7c:60:8f:7d:fb:65:83:d7:bf:ff:3a: ce:00:a2:42:3c:05:c9:30:c0:17:dc:52:bf:01:f7: e0:c6:87:06:4e:a3:21:ff:59:aa:09:62:e7:d4:17: 08:4d:21:46:05:af:c0:9d:90:74:9f:f2:a4:03:dd: e8:9b:43:15:15:9d:51:03:87:f5:b9:db:0c:6b:00: 09:65:f7:c8:2d:ac:1b:cc:a8:0e:f8:e4:2f:08:f6: 30:9b:b8:e6:9b:13:d8:ee:b6:39:f4:49:8a:b4:d4: 4b:73:19:19:88:eb:09:51:38:6a:ec:cf:f8:ac:40: 80:9d:61:25:7e:1a:2e:d0:9d:95:9f:15:45:b0:33: f7:38:9d:27:05:fb:4c:aa:2c:7f:fe:68:e0:cb:40: 84:9c:9a:7f:85:23:29:a5:b2:ac:00:a5:37:5d:ce: 02:3b:be:6d:e4:07:eb:31:6c:96:79:57:17:c5:96: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D1:B2:EF:32:5F:C7:78:7D:79:9D:8C:7D:4E:21:42:7F:F8:D4:24 X509v3 Authority Key Identifier: keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:66:55:61:e8:cb:7e:12:c4:9d:0a:cb:81:2a:f9:4e:e7:ba: 75:b0:ec:26:cf:e1:be:a7:0e:7b:3e:ad:c9:e1:5b:74:fe:1d: fd:03:ec:12:20:9e:0a:10:28:29:aa:2c:da:41:83:e6:e9:3f: ca:e4:b5:ca:1d:bb:12:03:52:98:ba:ed:6d:3d:39:32:5b:70: 0a:b7:f4:1c:e3:43:60:91:8f:c5:8c:34:36:18:e4:26:4c:e4: 89:b9:9f:e2:ef:56:5d:a6:18:98:d7:82:b3:6c:9f:7c:af:bf: c6:fa:54:b2:06:17:57:26:a0:8a:e9:e4:72:6c:d0:6e:de:9f: b0:a1:9a:39:01:8b:7a:a3:dc:12:04:57:d5:dc:28:1e:de:ac: c4:44:75:24:ef:29:bc:9c:f3:5b:04:c2:be:12:12:10:06:67: b4:a6:d6:91:79:58:b3:96:42:ad:eb:cf:a0:e8:59:12:1c:07: 12:69:cf:b4:35:f8:07:f1:1f:d6:6f:06:e1:24:35:b6:8f:6c: 91:2c:dd:4e:3f:87:fc:fa:e3:f1:7f:f5:af:10:1e:21:66:c7: e0:75:da:2a:c8:a3:f6:06:29:96:78:f8:ee:88:27:da:d9:50: e1:79:ee:97:0d:75:9b:5c:a9:f7:e0:83:92:39:e0:48:ef:22: 78:d1:31:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPe+tKAqmUMKhDXm3yCkoMIcIbo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZE MzY4MzlDNjAeFw0yNTEyMTkyMjI4MjVaFw0yNTEyMjMwMzUzMjVaMDMxMTAvBgNV BAMTKERCRDFCMkVGMzI1RkM3Nzg3RDc5OUQ4QzdENEUyMTQyN0ZGOEQ0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMNirWgmjJvA0i5ahcyKLteZ4 FS5b1slpaGt6+ljMY+6ZFfoch1Z//LlxeYyn8hofd9LhzdCuGABabkWUrQ+nnzjP Qv7SqB9tFX8ZWcZ8YI99+2WD17//Os4AokI8BckwwBfcUr8B9+DGhwZOoyH/WaoJ YufUFwhNIUYFr8CdkHSf8qQD3eibQxUVnVEDh/W52wxrAAll98gtrBvMqA745C8I 9jCbuOabE9jutjn0SYq01EtzGRmI6wlROGrsz/isQICdYSV+Gi7QnZWfFUWwM/c4 nScF+0yqLH/+aODLQIScmn+FIymlsqwApTddzgI7vm3kB+sxbJZ5VxfFlj/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU29Gy7zJfx3h9eZ2MfU4hQn/41CQwHwYDVR0j BBgwFoAU9VZC6uvYPSudkrbbeYf75tNoOcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODgzZmU3NS05MWU0LTQ5ODktYmM1ZS02YTI2MDgyZGMzMzQvMC9GNTU2NDJFQUVC RDgzRDJCOUQ5MkI2REI3OTg3RkJFNkQzNjgzOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZEMzY4 MzlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg4M2ZlNzUtOTFlNC00OTg5LWJj NWUtNmEyNjA4MmRjMzM0LzAvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZC RTZEMzY4MzlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJmVWHoy34SxJ0Ky4Eq+U7nunWw7CbP4b6n Dns+rcnhW3T+Hf0D7BIgngoQKCmqLNpBg+bpP8rktcoduxIDUpi67W09OTJbcAq3 9BzjQ2CRj8WMNDYY5CZM5Im5n+LvVl2mGJjXgrNsn3yvv8b6VLIGF1cmoIrp5HJs 0G7en7ChmjkBi3qj3BIEV9XcKB7erMREdSTvKbyc81sEwr4SEhAGZ7Sm1pF5WLOW Qq3rz6DoWRIcBxJpz7Q1+AfxH9ZvBuEkNbaPbJEs3U4/h/z64/F/9a8QHiFmx+B1 2irIo/YGKZZ4+O6IJ9rZUOF57pcNdZtcqffgg5I54EjvInjRMZU= -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:13 2025 by rpki-client