This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: HcEXsKCdtQuTllVhnbziIUSKHok5TykRmNB1ALNCuX0= Subject key identifier: 93:51:8D:6D:3F:AB:C1:CD:A8:28:15:CD:87:93:D2:34:79:B6:69:E0 Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 302CEBCB0A172A6171D4E47FEB4F5BA9ECCDC05D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: DC Signing time: Sat 06 Dec 2025 15:41:12 +0000 Manifest this update: Sat 06 Dec 2025 15:36:12 +0000 Manifest next update: Tue 09 Dec 2025 19:02:12 +0000 Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=) 2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: rA4JZA7omiLQA655a0mXSSfmAjjt0Hnaj8HYhRW/NpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:eb:cb:0a:17:2a:61:71:d4:e4:7f:eb:4f:5b:a9:ec:cd:c0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Dec 6 15:36:12 2025 GMT Not After : Dec 9 19:02:12 2025 GMT Subject: CN=93518D6D3FABC1CDA82815CD8793D23479B669E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:84:9c:b7:d4:61:6e:1b:cf:6b:6a:da:76: 1e:2c:83:d1:42:5d:56:60:2a:84:7f:41:1b:a0:32: 06:8c:27:bf:b0:ed:47:a5:2d:4e:27:4d:da:01:97: a4:77:e7:52:79:0b:3f:79:1a:58:f0:92:9b:87:61: b8:da:48:34:2b:de:aa:2b:ce:bb:32:a8:43:22:3e: 6e:c2:27:bc:71:2e:61:8a:49:a6:d2:58:69:d9:27: f5:62:b9:89:6b:85:4e:b3:99:8a:a3:a2:56:be:6a: 36:78:9b:b3:04:76:f9:55:33:c5:29:2a:99:0e:c5: d4:cf:f3:8f:5a:6a:35:50:0d:a5:47:23:54:6e:e2: b7:bd:e3:31:d7:28:1d:33:8e:42:ad:f9:d9:de:24: 3f:86:49:7b:1a:b3:6e:83:7f:16:c1:90:e9:c4:6e: ec:5f:97:9d:e6:47:84:06:2d:a6:8c:6b:6f:70:13: 8c:77:15:e9:d7:35:4e:f0:02:e5:a3:92:a3:e2:10: ce:36:2e:b7:12:9a:66:c3:7e:69:5e:43:c9:62:7a: 64:7e:fe:2b:bb:32:29:31:6d:5d:a7:34:d9:28:b2: e1:b7:ad:3c:59:f0:88:e7:16:e6:ed:8b:2b:84:8c: 4e:43:ed:43:b8:ea:90:d6:0c:99:f0:5f:a4:bd:f8: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:51:8D:6D:3F:AB:C1:CD:A8:28:15:CD:87:93:D2:34:79:B6:69:E0 X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:aa:fa:e7:81:e0:c2:63:27:a9:11:77:9e:d6:71:5a:e9:89: a6:69:78:0a:c1:c8:da:ca:b5:69:b1:96:44:2e:5f:a7:55:31: 83:df:09:96:d3:83:be:20:06:0d:71:de:7e:c2:3a:55:93:27: 9d:2f:a3:d5:c1:4d:6c:bc:d7:15:da:40:cb:54:01:7d:cb:fa: 2f:1a:87:3e:30:04:d6:cf:13:a4:3d:41:99:db:5c:cb:38:b2: 74:44:b0:dd:ae:7f:e4:dd:c1:04:e3:06:d1:ef:29:58:4c:47: e2:ad:a4:ce:2a:4b:50:3c:75:6c:73:d9:cd:c8:a6:77:e0:8e: f4:52:2e:09:3b:ab:bd:5e:63:6a:0e:b8:a4:82:33:26:c8:1d: dc:e9:6e:3e:ee:3e:26:62:89:46:79:70:77:91:26:0f:f8:a8: 83:f0:d1:f4:4f:5c:8a:8d:e7:f6:4c:63:07:db:00:b4:6a:e3: 6f:94:06:07:47:14:a3:df:96:7b:aa:98:56:0a:b2:eb:f8:19: 04:3e:41:72:7e:c7:c1:be:96:25:fc:af:4c:06:c1:17:a1:22: 83:f7:6b:f3:51:3a:ba:cf:09:ce:9f:43:db:5d:e7:fd:c2:3d: ef:c3:f5:b2:f7:13:a3:67:4a:b6:bd:9f:8b:5d:e6:f5:43:05: 69:1f:04:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCzrywoXKmFx1OR/609bqezNwF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNTEyMDYxNTM2MTJaFw0yNTEyMDkxOTAyMTJaMDMxMTAvBgNV BAMTKDkzNTE4RDZEM0ZBQkMxQ0RBODI4MTVDRDg3OTNEMjM0NzlCNjY5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWX4Sct9RhbhvPa2radh4sg9FC XVZgKoR/QRugMgaMJ7+w7UelLU4nTdoBl6R351J5Cz95GljwkpuHYbjaSDQr3qor zrsyqEMiPm7CJ7xxLmGKSabSWGnZJ/ViuYlrhU6zmYqjola+ajZ4m7MEdvlVM8Up KpkOxdTP849aajVQDaVHI1Ru4re94zHXKB0zjkKt+dneJD+GSXsas26DfxbBkOnE buxfl53mR4QGLaaMa29wE4x3FenXNU7wAuWjkqPiEM42LrcSmmbDfmleQ8liemR+ /iu7MikxbV2nNNkosuG3rTxZ8IjnFubtiyuEjE5D7UO46pDWDJnwX6S9+N8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk1GNbT+rwc2oKBXNh5PSNHm2aeAwHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWq+ueB4MJjJ6kRd57WcVrpiaZpeArByNrK tWmxlkQuX6dVMYPfCZbTg74gBg1x3n7COlWTJ50vo9XBTWy81xXaQMtUAX3L+i8a hz4wBNbPE6Q9QZnbXMs4snREsN2uf+TdwQTjBtHvKVhMR+KtpM4qS1A8dWxz2c3I pnfgjvRSLgk7q71eY2oOuKSCMybIHdzpbj7uPiZiiUZ5cHeRJg/4qIPw0fRPXIqN 5/ZMYwfbALRq42+UBgdHFKPflnuqmFYKsuv4GQQ+QXJ+x8G+liX8r0wGwRehIoP3 a/NROrrPCc6fQ9td5/3CPe/D9bL3E6NnSra9n4td5vVDBWkfBE4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:55 2025 by rpki-client