This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft File: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json) Hash identifier: wcPDbD7aqtodDhAKN3x3hTFY5S5zJY2yrvFEyPl1qwk= Subject key identifier: 3B:5C:50:8B:31:A7:A9:8B:01:68:7E:3D:0F:6D:5C:9F:3A:8E:B1:24 Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F Certificate issuer: /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Certificate serial: 6A394C61D2D5B9228756FF53FA7047736036DC07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft Manifest number: 01A9 Signing time: Tue 23 Dec 2025 23:31:01 +0000 Manifest this update: Tue 23 Dec 2025 23:26:01 +0000 Manifest next update: Sat 27 Dec 2025 09:11:01 +0000 Files and hashes: 1: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=) 2: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=) 3: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: 42VDv6na916ppDbTuo1qTgKfV0P7fIK7hLzZ8Tvli30=) 4: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:39:4c:61:d2:d5:b9:22:87:56:ff:53:fa:70:47:73:60:36:dc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F Validity Not Before: Dec 23 23:26:01 2025 GMT Not After : Dec 27 09:11:01 2025 GMT Subject: CN=3B5C508B31A7A98B01687E3D0F6D5C9F3A8EB124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:76:8e:a6:96:f4:5f:a9:1d:63:09:cb:52:51: 9d:01:58:ff:5e:37:4d:f3:78:0c:68:24:12:63:fb: 21:d7:aa:ad:3c:0d:32:aa:94:ab:e7:ad:ee:dc:0b: 19:43:5c:0c:9e:ad:98:dc:43:d6:91:70:b7:de:c0: 03:40:92:5a:a2:63:52:e9:db:2b:a8:35:d1:1a:5a: 8a:29:52:9f:18:0d:9f:28:73:c3:3e:a3:b8:3e:d9: 55:e9:ca:08:06:42:25:f1:69:4b:86:d2:21:d2:21: 7c:7b:0f:88:21:27:90:50:6f:51:14:bf:2f:59:62: 6d:44:16:02:d4:51:c9:d3:a4:8f:c0:92:95:f6:63: 88:be:b3:6c:b9:d7:94:bb:f8:b6:a4:9f:a4:24:7d: ae:56:53:a4:10:a4:b0:a9:33:dc:5e:1e:a3:9b:69: c2:3c:6e:0b:da:f3:3d:23:6d:42:ca:30:98:8b:94: f5:41:9c:9a:56:61:84:03:db:0a:d6:d3:22:af:35: 62:4e:a0:44:65:67:99:1c:cc:3d:b2:1e:3e:a3:1f: 98:8a:e9:dd:b0:a5:7a:35:65:2a:3b:2a:31:c9:de: 1f:99:96:55:14:33:bf:57:1e:11:07:dc:fe:b5:81: aa:c9:10:2e:4e:ab:dd:6d:65:ff:5f:b1:05:8c:56: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:50:8B:31:A7:A9:8B:01:68:7E:3D:0F:6D:5C:9F:3A:8E:B1:24 X509v3 Authority Key Identifier: keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:92:ec:2a:67:df:fb:4c:0e:5d:01:d4:82:a2:89:71:94:8b: e7:c8:49:dc:b0:34:b8:05:4b:78:ca:63:c6:a5:8e:6b:65:0a: ee:58:51:fd:81:c8:53:5c:03:8e:50:62:f4:8b:10:e4:5a:06: e2:6d:ad:1b:14:d7:fc:46:51:55:22:fb:18:cd:10:ec:d6:8d: 4e:c6:20:35:68:cf:fe:bd:42:ca:fc:e0:bb:00:7e:6f:96:b3: 6d:4e:31:e3:20:36:3c:74:77:63:29:49:7c:73:bd:14:e9:36: b1:26:85:ce:47:37:6b:0c:06:57:37:06:65:6b:06:4e:f6:cd: db:cc:6a:23:69:d6:17:30:4a:0b:a2:dc:8e:73:5c:e6:51:62: 32:48:4d:6d:54:5c:52:cd:f3:c2:f0:8a:6f:a4:5b:e5:59:c3: 9e:e8:94:67:d4:a8:bb:96:83:1e:36:ab:3c:77:7c:40:67:fc: 75:a3:36:04:2c:cd:7d:03:87:42:6c:cf:be:44:b6:d6:e9:39: cf:d1:27:39:8d:44:95:85:83:b0:a5:51:8e:97:1c:81:87:53: 5e:23:0c:ed:9f:61:93:aa:b0:a6:a6:74:0f:c2:49:69:c1:6b: 2c:0b:cb:d2:6d:92:c3:9c:bd:10:78:eb:59:63:e4:a1:d0:56: 70:7b:7a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajlMYdLVuSKHVv9T+nBHc2A23AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0 RjFDMUQ1RjAeFw0yNTEyMjMyMzI2MDFaFw0yNTEyMjcwOTExMDFaMDMxMTAvBgNV BAMTKDNCNUM1MDhCMzFBN0E5OEIwMTY4N0UzRDBGNkQ1QzlGM0E4RUIxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsdo6mlvRfqR1jCctSUZ0BWP9e N03zeAxoJBJj+yHXqq08DTKqlKvnre7cCxlDXAyerZjcQ9aRcLfewANAklqiY1Lp 2yuoNdEaWoopUp8YDZ8oc8M+o7g+2VXpyggGQiXxaUuG0iHSIXx7D4ghJ5BQb1EU vy9ZYm1EFgLUUcnTpI/AkpX2Y4i+s2y515S7+Lakn6Qkfa5WU6QQpLCpM9xeHqOb acI8bgva8z0jbULKMJiLlPVBnJpWYYQD2wrW0yKvNWJOoERlZ5kczD2yHj6jH5iK 6d2wpXo1ZSo7KjHJ3h+ZllUUM79XHhEH3P61garJEC5Oq91tZf9fsQWMVqH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1xQizGnqYsBaH49D21cnzqOsSQwHwYDVR0j BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD MUQ1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwMWNkZjktNTJlMS00Yzk4LTlh YjMtYWZiNzBmYWMzNzdjLzAvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIx OTA0RjFDMUQ1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCS7Cpn3/tMDl0B1IKiiXGUi+fISdywNLgF S3jKY8aljmtlCu5YUf2ByFNcA45QYvSLEORaBuJtrRsU1/xGUVUi+xjNEOzWjU7G IDVoz/69Qsr84LsAfm+Ws21OMeMgNjx0d2MpSXxzvRTpNrEmhc5HN2sMBlc3BmVr Bk72zdvMaiNp1hcwSgui3I5zXOZRYjJITW1UXFLN88Lwim+kW+VZw57olGfUqLuW gx42qzx3fEBn/HWjNgQszX0Dh0Jsz75EttbpOc/RJzmNRJWFg7ClUY6XHIGHU14j DO2fYZOqsKamdA/CSWnBaywLy9JtksOcvRB461lj5KHQVnB7esI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:58 2025 by rpki-client