This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: jtAZNUUgXkcXYp7UaDHfP0dzbogjvZTgCCKmbtnSdY0= Subject key identifier: 0D:E8:46:AF:2B:E2:01:E0:59:15:F3:28:F4:40:08:D5:2D:D2:C1:8C Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 027C931C4B94959B769D3B121B2D38C5977D046F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 0134 Signing time: Fri 19 Dec 2025 18:11:37 +0000 Manifest this update: Fri 19 Dec 2025 18:06:37 +0000 Manifest next update: Tue 23 Dec 2025 01:51:37 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: O6VGCkcgQO9F0JpfbsK+MVtSBV7jVLerdHTCJxugEwY=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: mpA7r4n5AsM3pCamORvl0shKqIyo/JWeKgRAvasmRM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:93:1c:4b:94:95:9b:76:9d:3b:12:1b:2d:38:c5:97:7d:04:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Dec 19 18:06:37 2025 GMT Not After : Dec 23 01:51:37 2025 GMT Subject: CN=0DE846AF2BE201E05915F328F44008D52DD2C18C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:e8:fa:f0:d3:10:7f:91:dc:1c:58:c2:80: 56:af:94:56:7b:dc:b3:9a:9b:cf:ab:61:c1:57:10: 98:60:38:f9:f2:6a:54:fb:1a:9f:ca:b4:2b:bc:87: 15:83:bc:b2:0d:53:1a:33:e1:63:82:0e:c2:87:14: 2f:ec:5e:cf:c6:c5:fe:89:98:b6:36:dc:c4:22:9f: d0:56:be:03:24:0e:6a:f3:bc:3e:6c:e1:98:55:14: dd:66:5e:a1:f5:85:36:00:0b:8d:df:1a:09:6e:b8: ec:8e:02:0b:ee:5b:d4:fe:ca:1c:e7:a7:33:77:10: 6c:aa:bc:23:67:0d:cf:3f:f6:1a:d5:38:e6:d0:9f: bc:26:31:f9:fb:2d:9f:0b:1e:20:1b:db:cd:0f:04: b0:a5:47:e5:6b:97:08:e0:6e:28:f2:81:c9:bf:19: b5:00:a9:c0:67:f4:32:a6:bd:ef:bc:27:87:8c:ac: 70:8b:dd:70:c8:a0:e5:72:56:f1:b2:22:cc:21:d2: fe:17:c9:27:14:f4:a6:08:31:f2:48:55:b7:bf:dc: c4:a4:07:d7:c6:42:5b:b0:fe:db:4c:9e:89:11:d3: f4:4b:a0:1c:85:89:23:fd:da:9d:e5:f6:29:74:53: 12:9c:27:c6:4f:59:22:4d:c9:63:3c:93:7b:2b:00: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E8:46:AF:2B:E2:01:E0:59:15:F3:28:F4:40:08:D5:2D:D2:C1:8C X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:21:08:d6:fd:e9:02:7d:ff:9f:b5:aa:83:74:8c:ef:3d:1e: 4c:36:ba:b9:09:6b:c2:86:5a:38:15:1b:32:7a:90:d9:b8:69: 9b:2a:ba:4b:94:ca:78:50:8b:f0:0d:83:c6:25:73:35:c2:95: da:85:f4:b7:b4:86:1d:73:61:6f:78:bf:f2:09:b0:b7:89:74: b3:ed:07:7a:b1:7e:74:c1:e3:8a:af:bd:7f:2c:e8:80:57:42: 11:62:8c:02:f2:10:8d:25:24:da:ac:9c:67:a6:9b:fa:5d:18: 67:05:d8:62:79:08:1d:5d:c9:15:e4:ea:97:3c:72:6e:2a:35: 19:84:8d:4e:69:c8:b3:f6:53:8f:dc:af:87:7c:f9:bf:dc:1d: 9c:1f:cb:6e:f7:66:cc:e0:13:b9:57:44:98:7b:74:72:f7:56: 3b:78:8b:29:fc:48:a7:ce:39:1a:bf:88:f8:cc:fa:78:73:5f: b8:e2:cf:fb:d2:2c:7f:e7:90:89:87:7a:82:d5:00:c7:a1:49: 40:f0:c3:a6:0c:ee:60:97:4a:23:24:6a:80:46:78:b2:d5:79: 0e:db:24:a4:5c:a8:59:5a:09:31:03:c9:8e:58:f3:3f:66:30: c7:32:5c:7d:c8:e6:af:50:ef:4a:24:74:2e:ce:f9:38:3e:27: 40:0a:b3:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnyTHEuUlZt2nTsSGy04xZd9BG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTEyMTkxODA2MzdaFw0yNTEyMjMwMTUxMzdaMDMxMTAvBgNV BAMTKDBERTg0NkFGMkJFMjAxRTA1OTE1RjMyOEY0NDAwOEQ1MkREMkMxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSej68NMQf5HcHFjCgFavlFZ7 3LOam8+rYcFXEJhgOPnyalT7Gp/KtCu8hxWDvLINUxoz4WOCDsKHFC/sXs/Gxf6J mLY23MQin9BWvgMkDmrzvD5s4ZhVFN1mXqH1hTYAC43fGgluuOyOAgvuW9T+yhzn pzN3EGyqvCNnDc8/9hrVOObQn7wmMfn7LZ8LHiAb280PBLClR+Vrlwjgbijygcm/ GbUAqcBn9DKmve+8J4eMrHCL3XDIoOVyVvGyIswh0v4XyScU9KYIMfJIVbe/3MSk B9fGQluw/ttMnokR0/RLoByFiSP92p3l9il0UxKcJ8ZPWSJNyWM8k3srAMXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDehGryviAeBZFfMo9EAI1S3SwYwwHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADchCNb96QJ9/5+1qoN0jO89Hkw2urkJa8KG WjgVGzJ6kNm4aZsqukuUynhQi/ANg8YlczXCldqF9Le0hh1zYW94v/IJsLeJdLPt B3qxfnTB44qvvX8s6IBXQhFijALyEI0lJNqsnGemm/pdGGcF2GJ5CB1dyRXk6pc8 cm4qNRmEjU5pyLP2U4/cr4d8+b/cHZwfy273ZszgE7lXRJh7dHL3Vjt4iyn8SKfO ORq/iPjM+nhzX7jiz/vSLH/nkImHeoLVAMehSUDww6YM7mCXSiMkaoBGeLLVeQ7b JKRcqFlaCTEDyY5Y8z9mMMcyXH3I5q9Q70okdC7O+Tg+J0AKsx8= -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:28 2025 by rpki-client