This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: hdtHKHVV6SbO2ZQEqgBNQdml3WI3MddhskjeKch8MC4= Subject key identifier: 04:F7:77:C5:3F:AA:CE:74:CD:1A:56:57:6E:13:A1:D2:7E:28:C9:4C Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 37B7634EF25FDDA871FB1F26A3A5C950631F46AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03C4 Signing time: Mon 22 Dec 2025 18:52:47 +0000 Manifest this update: Mon 22 Dec 2025 18:47:47 +0000 Manifest next update: Fri 26 Dec 2025 05:04:47 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: qDSX5/34vbakX4AchSBlvYolW1JdFysYzMQkE7LjoOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:63:4e:f2:5f:dd:a8:71:fb:1f:26:a3:a5:c9:50:63:1f:46:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Dec 22 18:47:47 2025 GMT Not After : Dec 26 05:04:47 2025 GMT Subject: CN=04F777C53FAACE74CD1A56576E13A1D27E28C94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:bf:76:fa:26:8b:f0:6a:ba:d7:e8:52:82: 6f:74:90:f7:10:40:48:6a:21:90:3c:07:ef:b5:ed: 2c:08:08:e3:97:a5:7b:7f:2b:b6:fc:36:7a:ba:61: 20:c9:ff:37:ba:e0:e3:89:3b:e8:b9:65:0b:16:b0: 45:8b:21:69:35:07:c6:3e:e6:2e:3a:b0:fa:00:84: 82:13:96:bd:30:33:73:c7:71:3d:46:4d:d2:f2:13: f6:0f:17:ed:d1:c6:7c:63:dc:b7:ef:d4:97:e8:99: cf:ed:52:fa:6f:2b:7b:f1:30:70:94:30:38:37:8d: 31:b7:e6:7b:a7:2b:dc:bf:28:6d:8a:12:20:e5:96: 6f:9d:6f:40:65:e1:ce:94:19:25:0f:0f:ea:db:61: 98:21:ca:c6:c0:fc:c4:b6:b6:c1:80:08:5a:5e:ab: 4b:35:5e:9f:6d:9a:14:d3:ee:31:10:23:1a:de:6a: c0:2d:ef:89:f8:2a:c0:99:4c:a9:d9:17:14:4a:e8: 3d:8c:69:7f:1a:41:dc:4f:f2:fd:28:58:37:fa:a4: 98:d2:7f:82:de:67:b1:cd:d8:c8:44:c7:1f:23:34: 47:4f:1d:e7:87:cc:90:11:07:3f:e1:f9:3b:36:53: 9a:a7:83:25:f0:19:b7:0a:b9:6c:05:56:67:69:a3: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:77:C5:3F:AA:CE:74:CD:1A:56:57:6E:13:A1:D2:7E:28:C9:4C X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6a:fa:44:20:f4:89:d4:5a:47:c5:0f:e4:c3:69:3f:8a:af: 50:f8:8d:e9:cf:44:68:87:64:b1:fe:0c:a1:85:5f:38:9a:5e: 17:4b:f6:d2:48:eb:46:96:42:f2:0c:2b:c4:d9:6f:73:42:b2: 8d:0e:b6:19:84:7d:82:73:61:1c:0d:23:05:cb:5f:e3:bf:ad: 6e:9e:53:76:81:ef:29:18:e7:6d:d9:10:1d:15:70:1a:fb:95: b0:49:ce:68:09:5f:c6:f7:b3:b7:38:c2:9a:44:26:09:36:42: 90:3e:76:f1:be:1f:46:8f:d8:aa:c0:0b:5e:aa:6e:1a:71:79: d2:10:a5:2b:7e:7a:3c:9e:75:9d:71:03:54:51:2b:fb:90:7a: 3c:4b:f6:6e:cd:71:88:ba:85:34:3c:9d:ed:e7:2c:2d:95:72: 13:79:08:d0:de:53:2f:7f:21:cf:c8:4d:49:6e:4e:3b:d5:e3: c5:90:0b:2a:1f:30:8a:36:8f:43:49:34:f1:da:b2:4d:c1:21: d1:df:e6:7a:17:76:97:d7:25:1d:bb:08:6e:4a:c4:53:48:a8: fa:64:7c:f4:a9:ab:75:09:fc:02:f3:b1:b8:b9:e0:fe:5e:c7: e0:f6:ad:b5:73:f6:5e:18:54:af:97:b0:c5:fb:11:fd:6e:72: 8f:8b:97:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7djTvJf3ahx+x8mo6XJUGMfRq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTEyMjIxODQ3NDdaFw0yNTEyMjYwNTA0NDdaMDMxMTAvBgNV BAMTKDA0Rjc3N0M1M0ZBQUNFNzRDRDFBNTY1NzZFMTNBMUQyN0UyOEM5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLk792+iaL8Gq61+hSgm90kPcQ QEhqIZA8B++17SwICOOXpXt/K7b8Nnq6YSDJ/ze64OOJO+i5ZQsWsEWLIWk1B8Y+ 5i46sPoAhIITlr0wM3PHcT1GTdLyE/YPF+3Rxnxj3Lfv1Jfomc/tUvpvK3vxMHCU MDg3jTG35nunK9y/KG2KEiDllm+db0Bl4c6UGSUPD+rbYZghysbA/MS2tsGACFpe q0s1Xp9tmhTT7jEQIxreasAt74n4KsCZTKnZFxRK6D2MaX8aQdxP8v0oWDf6pJjS f4LeZ7HN2MhExx8jNEdPHeeHzJARBz/h+Ts2U5qngyXwGbcKuWwFVmdpo1UXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPd3xT+qznTNGlZXbhOh0n4oyUwwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBq+kQg9InUWkfFD+TDaT+Kr1D4jenPRGiH ZLH+DKGFXziaXhdL9tJI60aWQvIMK8TZb3NCso0OthmEfYJzYRwNIwXLX+O/rW6e U3aB7ykY523ZEB0VcBr7lbBJzmgJX8b3s7c4wppEJgk2QpA+dvG+H0aP2KrAC16q bhpxedIQpSt+ejyedZ1xA1RRK/uQejxL9m7NcYi6hTQ8ne3nLC2VchN5CNDeUy9/ Ic/ITUluTjvV48WQCyofMIo2j0NJNPHask3BIdHf5noXdpfXJR27CG5KxFNIqPpk fPSpq3UJ/ALzsbi54P5ex+D2rbVz9l4YVK+XsMX7Ef1uco+Ll5k= -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:57 2025 by rpki-client