This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: zK+zO3JnBGhc06823Hqws/jXVodGQ/e660XyfhI7RjQ= Subject key identifier: 01:FC:B5:99:46:B3:46:5C:89:83:22:9C:38:5A:7E:85:D4:91:EE:E7 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 643CA2774CB4FBA3FD2E7214F78BC3D9585E7B0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 0102 Signing time: Wed 17 Dec 2025 19:11:09 +0000 Manifest this update: Wed 17 Dec 2025 19:06:09 +0000 Manifest next update: Sat 20 Dec 2025 22:53:09 +0000 Files and hashes: 1: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: x19ipZx9BDNbNFRirHc+U7xExf4FR5tw+sFHPnQUZic=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3c:a2:77:4c:b4:fb:a3:fd:2e:72:14:f7:8b:c3:d9:58:5e:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Dec 17 19:06:09 2025 GMT Not After : Dec 20 22:53:09 2025 GMT Subject: CN=01FCB59946B3465C8983229C385A7E85D491EEE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:bc:5e:b4:f8:1c:2c:43:62:9c:56:13:7f: 01:ee:1b:02:02:96:42:10:50:f6:d8:6c:f2:ec:de: 17:ae:5b:39:1f:13:51:1c:81:77:f9:50:eb:ee:9e: b3:70:57:1c:a7:bd:ae:90:2d:d6:5d:b0:57:49:a2: 6a:f7:c1:11:7d:25:40:a7:05:c6:33:77:aa:ed:83: 11:e9:4b:f7:23:aa:59:a4:99:24:dd:4e:5a:c3:e4: c5:eb:16:4b:ba:00:25:f8:44:9a:1a:46:70:38:fe: 58:4d:54:3e:70:8e:63:ec:83:a3:0d:d6:98:5c:46: 8f:41:a4:0f:3c:f6:24:e2:83:90:e2:ba:a2:ea:5f: 3e:3f:d5:b3:16:d4:b5:f6:09:18:49:ae:2c:41:c1: f4:27:68:ae:36:36:63:ef:9c:bd:1c:e1:b1:51:9a: 13:d0:6b:fc:07:9c:5a:32:14:0e:e1:c6:9c:fe:6f: 6d:37:ff:91:97:08:70:79:ef:aa:4e:1b:86:33:3f: b4:cd:a5:13:94:22:de:23:8c:65:9a:fa:f8:54:ba: 60:c0:65:17:f6:6e:a0:1b:e1:5d:91:44:ac:17:1c: 2a:b1:e3:ae:62:e1:19:c9:da:07:6d:b1:d6:22:7e: 4a:e3:6b:9d:e5:6e:53:07:41:d1:a2:91:60:c1:0b: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:B5:99:46:B3:46:5C:89:83:22:9C:38:5A:7E:85:D4:91:EE:E7 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:37:94:0c:b9:f4:b8:16:ed:0f:5a:96:ec:26:3c:ce:cc:19: fa:19:c5:2e:65:72:2d:1c:74:f1:d6:35:e1:56:48:5e:61:41: 48:7a:1d:6c:b4:b3:90:42:c0:17:0c:a8:c9:be:ff:ce:e8:cc: 79:95:ff:e5:01:2b:1d:1c:24:22:62:d3:8a:1a:da:a3:99:3f: e6:de:ce:09:eb:17:cb:28:62:e0:2e:af:be:0f:83:af:16:d5: 0b:90:57:48:b4:fa:f4:a5:9a:ef:f6:e9:a2:3f:04:ab:2d:64: d8:78:07:19:b4:fa:f8:12:dd:d3:a4:78:10:2a:af:7f:dc:e4: d9:20:42:aa:bc:a9:f9:9e:af:86:3e:e3:2c:98:47:97:55:c7: 9b:73:f0:88:7b:1b:86:e6:c1:4e:3a:86:87:2c:3c:db:d4:b1: 2a:b0:0b:8c:53:7f:2d:12:50:52:29:99:e9:93:c3:00:c0:a9: e0:c4:94:dc:eb:7e:c6:08:8b:f2:d1:bd:86:49:f6:82:04:c2: af:ca:2d:bd:fb:5a:b6:9c:2e:ba:a5:8c:cf:d5:d4:a6:d8:b7: 20:a8:61:5c:4b:af:d3:f4:1d:a7:c9:f2:34:05:0f:bc:a7:7b: 17:ae:31:48:75:38:c8:b4:23:db:87:37:9a:af:b2:b2:62:b8: 95:00:38:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDyid0y0+6P9LnIU94vD2VheewwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTEyMTcxOTA2MDlaFw0yNTEyMjAyMjUzMDlaMDMxMTAvBgNV BAMTKDAxRkNCNTk5NDZCMzQ2NUM4OTgzMjI5QzM4NUE3RTg1RDQ5MUVFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaX7xetPgcLENinFYTfwHuGwIC lkIQUPbYbPLs3heuWzkfE1EcgXf5UOvunrNwVxynva6QLdZdsFdJomr3wRF9JUCn BcYzd6rtgxHpS/cjqlmkmSTdTlrD5MXrFku6ACX4RJoaRnA4/lhNVD5wjmPsg6MN 1phcRo9BpA889iTig5DiuqLqXz4/1bMW1LX2CRhJrixBwfQnaK42NmPvnL0c4bFR mhPQa/wHnFoyFA7hxpz+b203/5GXCHB576pOG4YzP7TNpROUIt4jjGWa+vhUumDA ZRf2bqAb4V2RRKwXHCqx465i4RnJ2gdtsdYifkrja53lblMHQdGikWDBC/vxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfy1mUazRlyJgyKcOFp+hdSR7ucwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY3lAy59LgW7Q9aluwmPM7MGfoZxS5lci0c dPHWNeFWSF5hQUh6HWy0s5BCwBcMqMm+/87ozHmV/+UBKx0cJCJi04oa2qOZP+be zgnrF8soYuAur74Pg68W1QuQV0i0+vSlmu/26aI/BKstZNh4Bxm0+vgS3dOkeBAq r3/c5NkgQqq8qfmer4Y+4yyYR5dVx5tz8Ih7G4bmwU46hocsPNvUsSqwC4xTfy0S UFIpmemTwwDAqeDElNzrfsYIi/LRvYZJ9oIEwq/KLb37WracLrqljM/V1KbYtyCo YVxLr9P0HafJ8jQFD7ynexeuMUh1OMi0I9uHN5qvsrJiuJUAOCA= -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:08 2025 by rpki-client