This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft File: F1F25C19AB419E370912452242B8B55038581157.mft (raw, json) Hash identifier: RfMZEkncwz3kRsjLQeqETEIqc+4ggEBBezzhg9RfNeQ= Subject key identifier: BF:EE:B9:B9:70:E5:AC:10:EB:2D:0F:0B:F7:50:74:F7:BD:2E:E5:B3 Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 Certificate issuer: /CN=F1F25C19AB419E370912452242B8B55038581157 Certificate serial: 1F01B87B09272E74BE13117C9DC82C758DA9E6EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft Manifest number: 01B1 Signing time: Sat 20 Dec 2025 17:01:58 +0000 Manifest this update: Sat 20 Dec 2025 16:56:58 +0000 Manifest next update: Wed 24 Dec 2025 04:38:58 +0000 Files and hashes: 1: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: 3rPKYUZalojIRm9OVoB6zRFi27r01gp3XfIoDBOCPmk=) 2: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: jpWaT+oGFZ1feNV4Ontzk7N9Bf3lE1R8kV74EOaQmlQ=) 3: F1F25C19AB419E370912452242B8B55038581157.crl (hash: s+iN5Er/JNFw7IQvjBE3j3DfaHLrRTjVyBIW8OvVawI=) 4: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: Nf1gJItG6184KCSXBcwB3dOHt5qHqt2wOtxt68ogTdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:01:b8:7b:09:27:2e:74:be:13:11:7c:9d:c8:2c:75:8d:a9:e6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F25C19AB419E370912452242B8B55038581157 Validity Not Before: Dec 20 16:56:58 2025 GMT Not After : Dec 24 04:38:58 2025 GMT Subject: CN=BFEEB9B970E5AC10EB2D0F0BF75074F7BD2EE5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:7e:6d:ff:c4:d6:50:f5:bc:39:6e:5b:4d: 76:08:de:9c:01:6f:99:c8:d1:f1:b3:90:97:de:3b: 32:1c:73:49:f4:2d:d3:33:93:16:d6:86:10:59:d9: b4:ac:24:08:64:de:50:7d:29:12:d2:8d:82:c6:96: f4:7b:17:8b:e3:6a:19:6d:f1:b5:8d:97:cb:e8:02: 90:c1:1f:5a:34:ff:63:7f:e7:e9:66:a7:6e:37:ff: 9e:36:bc:6b:2b:4a:ac:f4:74:8a:56:43:1a:e6:33: e2:e5:bc:af:52:c8:7b:fc:0a:6f:08:7e:63:b2:c8: 3e:88:15:2e:2f:f4:2a:b6:01:87:2a:51:fc:52:1f: 2d:73:98:67:07:5c:70:18:ed:95:44:e9:e8:73:39: 6b:4c:af:da:c5:6e:a0:3e:a3:3a:f6:7a:3b:ba:4a: c5:7c:45:c2:6b:cc:a1:7c:b4:7b:ef:d6:4d:79:d9: f1:c7:64:7e:ea:84:e2:92:df:7d:be:42:61:79:6b: ea:11:d8:0f:2f:f9:30:fc:a5:98:02:ca:c9:ae:33: 93:bd:3d:8f:dd:34:25:eb:19:2f:e3:88:87:34:f8: e3:95:6a:f2:cf:f0:50:aa:0a:11:9f:bf:c1:4f:2b: c5:c7:89:1b:55:87:f4:ee:aa:ca:ec:27:f3:54:bc: 17:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:B9:B9:70:E5:AC:10:EB:2D:0F:0B:F7:50:74:F7:BD:2E:E5:B3 X509v3 Authority Key Identifier: keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:71:bc:63:98:6d:17:ca:56:84:35:2c:45:af:d4:40:0e:cb: d1:f7:ae:c1:5f:b2:1e:fa:30:0b:79:39:22:f4:94:a5:23:4c: b2:a9:b1:da:f0:ba:30:54:0b:95:ec:33:38:51:a9:e7:ff:25: 29:a6:8b:9b:49:d4:bf:3e:38:f2:8d:04:48:db:b5:2e:62:26: 41:d1:c0:cd:ee:d7:c6:59:9d:d4:a5:89:97:1f:9f:20:e5:77: bc:73:62:dd:77:5e:2b:9c:ee:99:04:4d:c1:c0:a9:6c:e6:30: 65:8a:1f:97:ab:75:24:f0:69:ec:4f:a0:c8:d2:28:22:f5:58: 71:6a:01:63:61:b1:e3:7e:68:12:7c:1b:02:b7:f9:1d:0e:3b: cf:8d:06:71:89:cf:15:f7:c0:ce:15:99:ca:77:60:e1:a2:9a: 6a:06:4f:25:3b:2f:6d:1f:9c:a4:cf:f5:75:06:ec:79:27:13: 12:af:c8:06:fa:37:e5:10:8c:d8:21:a5:a8:75:0c:38:d0:0e: 75:e0:47:e9:19:28:0c:a6:4c:c5:92:ef:22:c2:7d:ae:89:71: df:7a:de:77:93:98:be:31:4b:cd:c2:52:08:51:78:70:b4:c0: 8e:c2:ad:d8:66:c1:b7:47:68:92:84:73:a1:1c:a0:fd:d4:17: 8e:e7:ba:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwG4ewknLnS+ExF8ncgsdY2p5uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAz ODU4MTE1NzAeFw0yNTEyMjAxNjU2NThaFw0yNTEyMjQwNDM4NThaMDMxMTAvBgNV BAMTKEJGRUVCOUI5NzBFNUFDMTBFQjJEMEYwQkY3NTA3NEY3QkQyRUU1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07n5t/8TWUPW8OW5bTXYI3pwB b5nI0fGzkJfeOzIcc0n0LdMzkxbWhhBZ2bSsJAhk3lB9KRLSjYLGlvR7F4vjahlt 8bWNl8voApDBH1o0/2N/5+lmp243/542vGsrSqz0dIpWQxrmM+LlvK9SyHv8Cm8I fmOyyD6IFS4v9Cq2AYcqUfxSHy1zmGcHXHAY7ZVE6ehzOWtMr9rFbqA+ozr2eju6 SsV8RcJrzKF8tHvv1k152fHHZH7qhOKS332+QmF5a+oR2A8v+TD8pZgCysmuM5O9 PY/dNCXrGS/jiIc0+OOVavLP8FCqChGfv8FPK8XHiRtVh/TuqsrsJ/NUvBctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+65uXDlrBDrLQ8L91B0970u5bMwHwYDVR0j BBgwFoAU8fJcGatBnjcJEkUiQri1UDhYEVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTMzMDYzMy1hN2QxLTRkMGEtYTFjYy1iNmMzZWVkZmJjMTcvMC9GMUYyNUMxOUFC NDE5RTM3MDkxMjQ1MjI0MkI4QjU1MDM4NTgxMTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAzODU4 MTE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1 NTAzODU4MTE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpxvGOYbRfKVoQ1LEWv1EAOy9H3rsFfsh76 MAt5OSL0lKUjTLKpsdrwujBUC5XsMzhRqef/JSmmi5tJ1L8+OPKNBEjbtS5iJkHR wM3u18ZZndSliZcfnyDld7xzYt13Xiuc7pkETcHAqWzmMGWKH5erdSTwaexPoMjS KCL1WHFqAWNhseN+aBJ8GwK3+R0OO8+NBnGJzxX3wM4Vmcp3YOGimmoGTyU7L20f nKTP9XUG7HknExKvyAb6N+UQjNghpah1DDjQDnXgR+kZKAymTMWS7yLCfa6Jcd96 3neTmL4xS83CUghReHC0wI7CrdhmwbdHaJKEc6EcoP3UF47nulc= -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:54 2025 by rpki-client