This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft File: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json) Hash identifier: /3rAi8PfvZW95ZBLLV72MA4Zl2X5fze1zN8SViBEIR8= Subject key identifier: E3:6C:12:A3:95:F5:14:07:D7:4B:E9:E9:F1:19:37:A5:2E:04:F4:D5 Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 Certificate issuer: /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Certificate serial: 602E6724BA4B3DFD1CC71DED75528AFB3EC5B895 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft Manifest number: 01EF Signing time: Tue 23 Dec 2025 12:12:47 +0000 Manifest this update: Tue 23 Dec 2025 12:07:47 +0000 Manifest next update: Fri 26 Dec 2025 14:53:47 +0000 Files and hashes: 1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: hntI5fQ2jZqqLi75uf0QA9nRkg8LsvjIkioHlpRek34=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2e:67:24:ba:4b:3d:fd:1c:c7:1d:ed:75:52:8a:fb:3e:c5:b8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27 Validity Not Before: Dec 23 12:07:47 2025 GMT Not After : Dec 26 14:53:47 2025 GMT Subject: CN=E36C12A395F51407D74BE9E9F11937A52E04F4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:7c:ab:38:8f:07:8b:a4:11:b4:a0:da:30: bd:de:be:e5:c7:af:c4:60:2d:c9:c7:dd:c7:ca:4c: 27:df:f5:bd:8f:1c:2e:c2:bc:34:9f:ad:ab:ae:a9: 69:89:d5:7e:d0:b6:c6:81:71:ff:3f:4a:97:0b:c4: d1:b3:d8:85:5a:07:25:b6:75:53:d4:31:65:2a:e9: 94:d4:27:92:b2:d5:89:e9:24:38:28:91:82:f8:f0: 12:8d:19:20:48:44:0d:a4:0a:a6:96:33:0b:14:90: c5:e2:e6:e6:11:47:a3:68:31:a3:a8:d5:59:d1:1b: c6:7e:24:94:9d:07:3f:a2:89:c0:ca:4d:1f:29:13: c3:33:cb:d5:7b:42:c0:33:25:0a:38:49:a9:df:75: 2c:05:63:36:70:c5:dc:ab:7d:ac:8b:c1:e8:01:d9: 70:71:16:37:25:d6:39:dc:67:cb:0b:45:8a:1d:88: 3a:3e:1c:0a:7f:b3:b0:b4:fa:9c:67:7c:1b:82:31: b1:5f:c0:dd:b1:c6:0c:28:f1:0c:f4:e1:13:50:19: 7c:3a:19:19:cc:eb:a0:8b:2a:9c:a3:ea:a1:8d:06: 2e:ab:db:55:a1:f5:7f:e4:ed:cd:f0:f8:60:6e:37: e8:e2:59:e8:e7:1f:5f:06:b5:62:86:58:2d:80:bf: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6C:12:A3:95:F5:14:07:D7:4B:E9:E9:F1:19:37:A5:2E:04:F4:D5 X509v3 Authority Key Identifier: keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:df:b2:a7:38:9e:d0:48:4d:a7:ed:72:d6:35:83:ad:ca:0a: 65:9b:5d:f5:6f:16:f4:b3:54:71:fd:82:0a:22:11:1c:b4:83: 56:5d:c9:a8:bc:3c:10:50:67:2d:cf:08:f1:4d:e0:bb:fa:ae: a2:aa:c4:34:38:32:ff:e2:4b:19:0a:8c:4b:3c:5f:f4:04:f1: f4:79:83:3c:42:9d:d8:7a:35:12:ac:90:16:cb:78:0b:5f:42: 23:c9:5b:56:22:36:7d:04:11:b7:96:16:36:9c:aa:f9:70:e4: c6:85:b0:93:d6:4c:24:71:da:93:8c:48:ab:e9:d5:79:a8:e0: 91:60:f4:2d:00:b4:42:a5:08:e3:a5:22:33:ba:7d:a4:e7:86: 2b:a5:28:1c:09:30:d9:24:19:5f:b7:0b:4b:21:a5:02:de:f0: 8f:f5:32:40:9a:ae:51:22:8a:df:62:84:0f:5f:f1:bb:4c:af: 0f:98:87:2c:d0:82:0a:45:c7:7e:4e:86:96:7d:46:e2:52:2e: 65:a5:6a:0f:14:bd:53:4a:25:97:cd:9c:55:fe:62:0e:00:02: c8:41:67:c1:58:d4:b2:aa:e6:65:fa:eb:d3:74:6a:17:9d:f8: 75:ca:73:d2:a0:05:bd:33:ef:3e:55:c7:9e:91:4e:f2:90:00: 51:e0:7b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC5nJLpLPf0cxx3tdVKK+z7FuJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF RkUwRUMyNzAeFw0yNTEyMjMxMjA3NDdaFw0yNTEyMjYxNDUzNDdaMDMxMTAvBgNV BAMTKEUzNkMxMkEzOTVGNTE0MDdENzRCRTlFOUYxMTkzN0E1MkUwNEY0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkknyrOI8Hi6QRtKDaML3evuXH r8RgLcnH3cfKTCff9b2PHC7CvDSfrauuqWmJ1X7QtsaBcf8/SpcLxNGz2IVaByW2 dVPUMWUq6ZTUJ5Ky1YnpJDgokYL48BKNGSBIRA2kCqaWMwsUkMXi5uYRR6NoMaOo 1VnRG8Z+JJSdBz+iicDKTR8pE8Mzy9V7QsAzJQo4SanfdSwFYzZwxdyrfayLwegB 2XBxFjcl1jncZ8sLRYodiDo+HAp/s7C0+pxnfBuCMbFfwN2xxgwo8Qz04RNQGXw6 GRnM66CLKpyj6qGNBi6r21Wh9X/k7c3w+GBuN+jiWejnH18GtWKGWC2AvxZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU42wSo5X1FAfXS+np8Rk3pS4E9NUwHwYDVR0j BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7fsqc4ntBITaftctY1g63KCmWbXfVvFvSz VHH9ggoiERy0g1Zdyai8PBBQZy3PCPFN4Lv6rqKqxDQ4Mv/iSxkKjEs8X/QE8fR5 gzxCndh6NRKskBbLeAtfQiPJW1YiNn0EEbeWFjacqvlw5MaFsJPWTCRx2pOMSKvp 1Xmo4JFg9C0AtEKlCOOlIjO6faTnhiulKBwJMNkkGV+3C0shpQLe8I/1MkCarlEi it9ihA9f8btMrw+YhyzQggpFx35OhpZ9RuJSLmWlag8UvVNKJZfNnFX+Yg4AAshB Z8FY1LKq5mX669N0ahed+HXKc9KgBb0z7z5Vx56RTvKQAFHge1A= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:26 2025 by rpki-client