This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json) Hash identifier: hAR1Gbmt78CJkdDe2wIR+WZccq2IgprpbaRxbO7VvDs= Subject key identifier: 2E:10:51:78:DF:51:0C:53:66:C6:BD:76:25:1A:8A:55:74:98:B5:5C Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Certificate serial: 0B0E8D600680A7E0059075430B63216CF30275DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft Manifest number: EC Signing time: Wed 24 Dec 2025 20:22:34 +0000 Manifest this update: Wed 24 Dec 2025 20:17:34 +0000 Manifest next update: Sat 27 Dec 2025 21:03:34 +0000 Files and hashes: 1: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=) 2: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: nl1AqgNLXOyNmurR0DWyEVr04Zxqes/+LntDxjxF2cU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0e:8d:60:06:80:a7:e0:05:90:75:43:0b:63:21:6c:f3:02:75:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF Validity Not Before: Dec 24 20:17:34 2025 GMT Not After : Dec 27 21:03:34 2025 GMT Subject: CN=2E105178DF510C5366C6BD76251A8A557498B55C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:99:06:05:65:2f:fc:fd:82:dc:65:21:11: 0f:55:c4:90:0c:f8:b9:a7:fc:e4:ef:86:0f:1d:a5: 78:3a:09:c5:82:c2:24:65:eb:94:69:95:6e:ab:9f: 09:2d:2c:56:c4:e9:da:ec:ff:72:3a:1e:55:b2:88: 1e:c6:6f:c1:f5:9e:e8:e1:9c:15:24:82:14:4b:62: 89:65:6c:7e:ed:a8:df:8f:65:44:b6:63:6f:dd:c1: d2:56:a1:f7:31:45:7f:13:24:94:31:6e:19:ad:a1: f7:d3:82:b2:11:2e:a5:be:ea:47:da:9c:e9:ca:8c: 84:d5:6a:a4:4f:bb:7f:9b:3d:a4:20:7d:9b:2c:94: 56:9f:91:4b:55:1d:5b:6a:aa:20:5a:ee:c6:94:0b: fe:a0:27:df:52:c2:ba:2f:30:20:e3:96:09:4a:db: 53:74:b9:af:2a:c9:23:fb:90:c9:e4:2f:df:89:ab: 7e:ff:4d:aa:57:94:30:64:c1:dd:0f:b6:e7:cd:65: 19:b6:76:4a:11:0c:07:b8:8f:31:4e:9c:c8:39:3d: e0:9a:1e:92:e1:85:19:74:45:ee:e5:28:a6:48:14: 3d:e8:39:82:0c:c9:d3:cb:3b:26:3d:8f:bc:a7:0f: d3:1c:3c:a5:63:c6:e4:68:12:75:43:b7:5b:9d:1a: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:10:51:78:DF:51:0C:53:66:C6:BD:76:25:1A:8A:55:74:98:B5:5C X509v3 Authority Key Identifier: keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:db:54:2a:74:e6:62:dd:7f:1c:f7:15:2b:f7:91:1c:b3:66: e1:80:79:2a:1a:0d:0f:f8:e4:27:f3:cb:80:6c:a5:ec:96:19: cd:c8:aa:42:fc:55:08:de:d2:3c:1e:de:ff:ba:0b:d6:16:0d: a4:75:44:81:5f:e3:d3:e4:ae:99:9c:aa:c2:12:69:20:6c:52: 37:25:20:e6:19:50:d9:a1:48:5b:c2:94:2b:5a:7d:16:63:0a: 29:14:35:29:cc:ad:eb:f4:f0:bd:e8:fa:90:b7:2a:d1:94:19: f3:60:e8:8e:f1:0d:6b:41:f2:a0:c5:8d:a4:c4:54:55:e4:56: c8:45:05:25:af:3d:f7:3b:1a:75:15:37:0d:3b:3e:70:1d:c4: 8e:37:e4:b7:ef:99:20:57:bf:1c:f0:48:8f:88:c7:eb:ef:5c: 24:0a:3d:a7:42:db:7b:8d:34:14:5c:c5:2c:c3:12:1f:6a:32: 2c:6a:bb:7a:5c:65:13:be:1d:79:3e:e4:d0:27:dd:95:15:88: 42:16:8c:c7:3b:f5:ff:4d:53:87:53:3f:99:e8:eb:b7:ab:6f: bb:f9:23:43:f8:76:85:49:8b:99:c7:1a:af:ec:fb:21:b2:f3: 21:e2:a1:22:c1:41:d9:5a:4f:ac:5c:6f:2b:4b:89:8f:77:e8: 24:46:ba:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCw6NYAaAp+AFkHVDC2MhbPMCdd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3 NjY4MEFFRjAeFw0yNTEyMjQyMDE3MzRaFw0yNTEyMjcyMTAzMzRaMDMxMTAvBgNV BAMTKDJFMTA1MTc4REY1MTBDNTM2NkM2QkQ3NjI1MUE4QTU1NzQ5OEI1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC35kGBWUv/P2C3GUhEQ9VxJAM +Lmn/OTvhg8dpXg6CcWCwiRl65RplW6rnwktLFbE6drs/3I6HlWyiB7Gb8H1nujh nBUkghRLYollbH7tqN+PZUS2Y2/dwdJWofcxRX8TJJQxbhmtoffTgrIRLqW+6kfa nOnKjITVaqRPu3+bPaQgfZsslFafkUtVHVtqqiBa7saUC/6gJ99SwrovMCDjlglK 21N0ua8qySP7kMnkL9+Jq37/TapXlDBkwd0PtufNZRm2dkoRDAe4jzFOnMg5PeCa HpLhhRl0Re7lKKZIFD3oOYIMydPLOyY9j7ynD9McPKVjxuRoEnVDt1udGrkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhBReN9RDFNmxr12JRqKVXSYtVwwHwYDVR0j BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1 QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4 MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0 OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjbVCp05mLdfxz3FSv3kRyzZuGAeSoaDQ/4 5Cfzy4BspeyWGc3IqkL8VQje0jwe3v+6C9YWDaR1RIFf49PkrpmcqsISaSBsUjcl IOYZUNmhSFvClCtafRZjCikUNSnMrev08L3o+pC3KtGUGfNg6I7xDWtB8qDFjaTE VFXkVshFBSWvPfc7GnUVNw07PnAdxI435LfvmSBXvxzwSI+Ix+vvXCQKPadC23uN NBRcxSzDEh9qMixqu3pcZRO+HXk+5NAn3ZUViEIWjMc79f9NU4dTP5no67erb7v5 I0P4doVJi5nHGq/s+yGy8yHioSLBQdlaT6xcbytLiY936CRGuu8= -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:44 2025 by rpki-client