This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: 99Av1Zp7fhexzoPeGiLhYHjA9EXCFyo12WxtvkmNWAQ= Subject key identifier: 8F:B9:FF:F2:3A:F2:74:00:4B:0E:CC:B3:DE:0B:BA:2E:14:1C:36:6A Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 2A4C0B35938A1B44939D0072FEFAEE878BAF34F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 01DF Signing time: Mon 29 Dec 2025 08:10:40 +0000 Manifest this update: Mon 29 Dec 2025 08:05:40 +0000 Manifest next update: Thu 01 Jan 2026 16:52:40 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: BiJ2LxQXpQYBcyiI4TWt1ege6+i7wz9wmlQfsavATtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4c:0b:35:93:8a:1b:44:93:9d:00:72:fe:fa:ee:87:8b:af:34:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Dec 29 08:05:40 2025 GMT Not After : Jan 1 16:52:40 2026 GMT Subject: CN=8FB9FFF23AF274004B0ECCB3DE0BBA2E141C366A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:5b:85:b4:f0:3d:bf:48:83:7f:32:87:2a: 50:40:42:69:fa:9f:94:0a:95:08:91:f1:5c:e9:50: 75:94:ca:35:f4:72:8b:80:85:7a:f9:59:1f:41:26: da:e6:5e:74:7e:73:2f:34:9a:e9:20:96:bf:0d:7b: 2b:dd:5f:31:ca:23:a4:fb:d3:33:27:b3:cd:90:b7: d4:9d:13:2c:4d:96:30:f8:f9:9d:b4:68:ce:ff:17: 66:90:50:90:d2:c9:65:3c:2b:8d:9d:54:30:44:fd: ce:a8:54:d2:c2:12:fc:14:3c:58:f5:5e:74:0a:3f: 68:7d:54:99:ec:6f:2c:1e:44:69:64:f8:6b:55:3f: 1b:c0:86:3e:9c:f8:6c:9a:e0:4b:64:ac:d5:5d:0f: 68:70:9c:9d:35:c0:63:ca:b1:fc:a9:2e:c4:ad:1c: 4d:f2:2c:b5:10:7f:c9:23:49:4b:82:9b:bf:89:67: 96:b4:09:d6:c6:8a:d6:f3:93:5d:3a:0e:63:ca:e3: 37:b9:50:28:d4:a5:e8:7f:0b:b4:cb:07:d9:d1:51: 49:71:02:23:8d:4f:67:7e:03:38:27:f7:78:7c:81: ad:c5:79:11:98:5c:25:5d:ab:9f:eb:3f:2b:03:fb: 89:85:19:5c:7f:b1:25:c8:0c:17:67:c8:db:94:90: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B9:FF:F2:3A:F2:74:00:4B:0E:CC:B3:DE:0B:BA:2E:14:1C:36:6A X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:b6:b9:fd:e7:02:fe:75:1e:e9:42:cd:e3:e4:37:d6:99: 90:7c:b1:25:bb:a6:61:d0:52:a3:99:c1:35:08:9a:cb:aa:d2: 7c:28:d7:5f:85:e6:68:ba:68:0e:bf:4e:3c:c1:26:a9:ea:c6: e7:51:78:8c:7f:63:25:98:88:4b:c9:37:09:8e:96:3c:10:1a: c9:ba:d8:74:76:2a:05:68:a0:50:c6:e5:4f:e9:b7:35:ca:30: 4b:33:42:4f:b4:cf:52:af:85:cc:46:95:42:96:cf:75:8d:a1: 0b:ba:58:e9:d7:30:93:e7:49:4c:50:dd:b6:db:93:1a:d6:6d: 1e:60:59:d9:22:dc:51:ed:ce:99:e2:b5:fa:9c:33:40:d0:92: 61:9e:40:00:1f:56:67:a3:af:bd:2a:c4:06:76:bc:7c:02:10: 21:83:ac:59:88:97:c2:48:c3:92:c5:37:2f:2f:9b:95:7d:e7: a2:ad:4a:74:fa:4a:bb:c5:83:1a:cd:5d:33:43:67:2f:42:d7: ff:99:b2:30:85:b2:94:49:3b:e2:3a:7b:3a:c0:46:93:a2:91: 6b:ca:a0:17:e5:60:06:c7:95:a1:21:15:90:35:22:3a:bb:66: f5:d7:eb:9a:9c:9e:3d:cf:9e:81:ac:88:8f:13:07:79:3c:1e: ea:6e:9c:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkwLNZOKG0STnQBy/vruh4uvNPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTEyMjkwODA1NDBaFw0yNjAxMDExNjUyNDBaMDMxMTAvBgNV BAMTKDhGQjlGRkYyM0FGMjc0MDA0QjBFQ0NCM0RFMEJCQTJFMTQxQzM2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXL1uFtPA9v0iDfzKHKlBAQmn6 n5QKlQiR8VzpUHWUyjX0couAhXr5WR9BJtrmXnR+cy80mukglr8NeyvdXzHKI6T7 0zMns82Qt9SdEyxNljD4+Z20aM7/F2aQUJDSyWU8K42dVDBE/c6oVNLCEvwUPFj1 XnQKP2h9VJnsbyweRGlk+GtVPxvAhj6c+Gya4EtkrNVdD2hwnJ01wGPKsfypLsSt HE3yLLUQf8kjSUuCm7+JZ5a0CdbGitbzk106DmPK4ze5UCjUpeh/C7TLB9nRUUlx AiONT2d+Azgn93h8ga3FeRGYXCVdq5/rPysD+4mFGVx/sSXIDBdnyNuUkImjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7n/8jrydABLDsyz3gu6LhQcNmowHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu8trn95wL+dR7pQs3j5DfWmZB8sSW7pmHQ UqOZwTUImsuq0nwo11+F5mi6aA6/TjzBJqnqxudReIx/YyWYiEvJNwmOljwQGsm6 2HR2KgVooFDG5U/ptzXKMEszQk+0z1KvhcxGlUKWz3WNoQu6WOnXMJPnSUxQ3bbb kxrWbR5gWdki3FHtzpnitfqcM0DQkmGeQAAfVmejr70qxAZ2vHwCECGDrFmIl8JI w5LFNy8vm5V956KtSnT6SrvFgxrNXTNDZy9C1/+ZsjCFspRJO+I6ezrARpOikWvK oBflYAbHlaEhFZA1Ijq7ZvXX65qcnj3PnoGsiI8TB3k8HupunGw= -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:29 2025 by rpki-client