This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: 9bJ3eaRlP6xIbPtnwUonxAFqzBF0qRMfkpzpMgY0fI0= Subject key identifier: DA:3D:B5:F9:34:51:2A:47:26:12:25:67:97:3C:23:17:1C:E2:4B:B4 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 18BF1D5DC285CE3A2270A6A175E6F5D158B4B213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03C5 Signing time: Thu 25 Dec 2025 05:12:12 +0000 Manifest this update: Thu 25 Dec 2025 05:07:12 +0000 Manifest next update: Sun 28 Dec 2025 13:52:12 +0000 Files and hashes: 1: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: 3jwvQlsLu0lI7iEu5UChQIrVjHLsyw58yLN1RTUATv8=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 13:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bf:1d:5d:c2:85:ce:3a:22:70:a6:a1:75:e6:f5:d1:58:b4:b2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Dec 25 05:07:12 2025 GMT Not After : Dec 28 13:52:12 2025 GMT Subject: CN=DA3DB5F934512A4726122567973C23171CE24BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:15:5c:18:77:24:3e:ed:4a:6c:89:64:23: e6:7a:b3:8f:a9:00:ee:e4:28:8d:bc:1d:59:94:99: 83:56:12:06:d8:41:f5:b9:b9:ec:33:f3:5b:49:6c: 0a:67:cb:14:24:be:ae:85:75:cd:6c:29:5e:89:bc: 6d:ff:ce:21:d4:b4:df:82:8c:53:1e:9c:5f:34:c4: 4a:2a:d8:2a:56:e5:2d:ed:12:10:0d:41:f7:68:52: 40:06:6c:5b:12:f2:5a:ba:5d:03:36:d5:06:61:e2: 84:fd:42:54:90:c0:67:8b:96:dd:69:c8:c0:10:15: c9:eb:e2:92:ff:a1:7b:ba:09:04:46:7e:b3:dd:43: 8c:86:74:a5:03:d2:b2:c1:11:36:9e:4d:ec:40:b9: 3e:da:db:55:37:39:54:ff:db:7c:a6:93:da:7e:a8: 4f:ce:3d:fc:63:67:03:53:e9:b8:eb:f7:f6:3e:5a: ca:ae:9d:da:ea:38:57:04:4c:06:14:ae:e1:29:c6: d6:b1:41:17:99:84:3d:93:15:b9:c5:11:82:a8:33: 21:b3:48:8b:42:3c:bd:d7:0e:62:e6:4e:5f:6b:54: ae:a5:ad:c8:a3:b5:58:43:b3:0d:0f:a9:56:0c:84: 79:bc:2c:bf:2d:97:69:92:42:45:d3:96:5f:85:3e: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3D:B5:F9:34:51:2A:47:26:12:25:67:97:3C:23:17:1C:E2:4B:B4 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:34:6f:dc:89:67:6c:a6:d1:f9:30:5e:fd:ec:c0:eb:a0:90: d0:b8:89:94:a2:c9:ce:4a:44:01:80:6d:d7:56:84:31:49:91: b4:a6:e1:25:98:7e:aa:bd:c8:06:d6:19:52:11:24:61:7e:5b: d3:52:50:2c:bc:5c:48:e1:8c:a2:e9:fb:26:3c:ec:1d:b7:9b: 21:e7:10:5c:73:1b:40:ff:39:7a:ba:75:93:11:0a:b2:bb:c9: 63:27:7e:9f:55:eb:c3:0a:bf:d8:73:74:77:91:8c:8c:5c:00: 74:f8:98:44:67:80:1b:07:4a:e6:c1:79:83:30:ed:a1:2b:81: 3d:6e:6c:2d:02:68:0e:05:55:e1:d3:a9:13:fc:31:d7:04:9c: 01:ee:fe:a1:4a:6f:0b:d1:3f:d3:16:63:ac:a6:23:d2:97:a7: 6d:6a:c4:ed:00:c4:7c:55:7d:d8:e7:76:5d:98:4f:6d:0b:81: 38:6c:48:cd:3f:a3:7b:6b:6a:eb:78:7e:d6:63:72:d0:a6:9b: 7a:98:33:91:44:7f:df:b7:12:f2:c8:61:45:b3:93:cf:0d:1b: a6:3b:34:89:a1:df:40:b8:c1:27:d2:e2:11:db:89:68:39:5d: 02:b0:a4:9d:20:90:b9:53:24:f3:1f:28:49:d1:aa:2c:c1:61: 20:6a:0f:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGL8dXcKFzjoicKahdeb10Vi0shMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTEyMjUwNTA3MTJaFw0yNTEyMjgxMzUyMTJaMDMxMTAvBgNV BAMTKERBM0RCNUY5MzQ1MTJBNDcyNjEyMjU2Nzk3M0MyMzE3MUNFMjRCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5hVcGHckPu1KbIlkI+Z6s4+p AO7kKI28HVmUmYNWEgbYQfW5uewz81tJbApnyxQkvq6Fdc1sKV6JvG3/ziHUtN+C jFMenF80xEoq2CpW5S3tEhANQfdoUkAGbFsS8lq6XQM21QZh4oT9QlSQwGeLlt1p yMAQFcnr4pL/oXu6CQRGfrPdQ4yGdKUD0rLBETaeTexAuT7a21U3OVT/23ymk9p+ qE/OPfxjZwNT6bjr9/Y+WsqundrqOFcETAYUruEpxtaxQReZhD2TFbnFEYKoMyGz SItCPL3XDmLmTl9rVK6lrcijtVhDsw0PqVYMhHm8LL8tl2mSQkXTll+FPrv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2j21+TRRKkcmEiVnlzwjFxziS7QwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA0b9yJZ2ym0fkwXv3swOugkNC4iZSiyc5K RAGAbddWhDFJkbSm4SWYfqq9yAbWGVIRJGF+W9NSUCy8XEjhjKLp+yY87B23myHn EFxzG0D/OXq6dZMRCrK7yWMnfp9V68MKv9hzdHeRjIxcAHT4mERngBsHSubBeYMw 7aErgT1ubC0CaA4FVeHTqRP8MdcEnAHu/qFKbwvRP9MWY6ymI9KXp21qxO0AxHxV fdjndl2YT20LgThsSM0/o3traut4ftZjctCmm3qYM5FEf9+3EvLIYUWzk88NG6Y7 NImh30C4wSfS4hHbiWg5XQKwpJ0gkLlTJPMfKEnRqizBYSBqD88= -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:18 2025 by rpki-client