This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: IW7b5VdOtHPFX1qMAWGA1QdtWEysdq/7jZSsP0DSBlM= Subject key identifier: 98:55:71:50:ED:4F:90:4D:65:03:B6:BA:35:06:20:21:A0:B3:C5:99 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 1AE1F1420F6E64C015F7F24098C2FD8A356BDA0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02E2 Signing time: Fri 05 Dec 2025 21:12:08 +0000 Manifest this update: Fri 05 Dec 2025 21:07:08 +0000 Manifest next update: Mon 08 Dec 2025 21:36:08 +0000 Files and hashes: 1: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: Qr3OR/V5TrUNH6W4aa20hXZyfvLd1ARQw/Bg7CKfjbs=) 2: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e1:f1:42:0f:6e:64:c0:15:f7:f2:40:98:c2:fd:8a:35:6b:da:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Dec 5 21:07:08 2025 GMT Not After : Dec 8 21:36:08 2025 GMT Subject: CN=98557150ED4F904D6503B6BA35062021A0B3C599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:c2:fd:6a:d6:fc:c5:5d:ce:c7:25:d5:ba: 1f:fb:fb:c9:2f:c8:c4:59:60:79:c5:a9:76:8d:ae: 02:39:4e:02:62:d8:4c:60:54:4c:2c:90:c4:9e:f3: 0c:ef:bd:ac:e1:c6:23:70:31:42:96:58:45:c4:b7: e0:ea:98:04:a0:50:50:2d:0b:92:d1:4b:2c:66:1d: 4d:9a:c2:31:34:80:86:3e:b5:fd:47:11:3b:af:80: 83:83:4c:ce:e2:a1:54:45:35:69:fa:2b:2b:17:12: 87:cd:db:96:17:3d:04:89:83:45:cc:ed:ed:6e:14: 65:3f:91:1d:d2:7e:1b:2b:c3:1f:cd:33:99:17:98: b4:90:24:b2:88:e8:44:4c:d5:3e:57:84:55:a7:c5: 00:06:52:40:0d:16:63:18:62:03:a5:eb:a2:84:e8: bc:53:5d:dc:af:f4:4b:6a:74:95:03:5d:d6:b1:93: b2:6b:37:f3:89:72:df:e3:60:4f:87:f1:9c:21:7f: a7:bf:2d:4a:c9:b4:ef:90:09:c9:a2:fb:fb:88:3a: 1d:0d:49:97:18:32:7a:36:57:ed:9d:49:82:7f:9e: e6:38:2b:69:8f:77:9d:68:7d:73:b0:1d:02:af:b2: 2e:02:40:70:25:46:97:62:88:0b:21:82:81:c9:1b: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:71:50:ED:4F:90:4D:65:03:B6:BA:35:06:20:21:A0:B3:C5:99 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dc:7d:b9:2f:da:33:49:11:0b:7d:08:9a:ca:3b:27:a1:15: 5e:21:f5:93:95:bd:e1:0d:ac:83:9e:42:5e:90:f3:dc:d3:3d: 80:e0:f2:7e:e2:64:de:c5:c5:7f:5f:0d:61:bd:40:85:80:95: 39:29:30:22:f3:c5:53:42:b1:fd:a7:69:56:a3:50:09:47:5a: 82:81:30:69:f1:21:3a:9a:25:29:b5:6c:c8:5b:ac:64:5b:76: 03:ae:1a:36:9f:ba:25:4f:7d:f4:af:ed:2c:d8:e3:fb:8c:b7: 8e:38:9d:de:bd:f2:f3:8a:5c:92:d5:77:0a:54:6f:74:f4:b4: d3:60:6d:ca:d2:3d:e4:ff:da:d4:9b:1c:a1:11:68:0b:86:a7: d0:52:96:b8:4f:d1:f1:5c:94:aa:b1:a7:0f:3e:27:8b:23:93: 4b:25:ae:7e:44:4f:e9:87:6f:0c:b6:bf:32:1b:99:0a:be:cf: 3f:e5:db:92:02:29:f4:f9:af:cc:b0:ec:d0:6f:69:4f:dd:d2: 43:80:77:40:7e:f3:61:36:55:40:ad:55:f7:db:96:34:6c:c4: 94:ab:36:5e:3c:6b:f4:ef:67:8d:0e:b7:ab:a9:34:f5:d1:08: e2:a3:7e:61:7f:d8:17:91:d3:7a:6d:40:d9:b6:d8:ea:5b:50: e0:4e:4e:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuHxQg9uZMAV9/JAmML9ijVr2gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTEyMDUyMTA3MDhaFw0yNTEyMDgyMTM2MDhaMDMxMTAvBgNV BAMTKDk4NTU3MTUwRUQ0RjkwNEQ2NTAzQjZCQTM1MDYyMDIxQTBCM0M1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSacL9atb8xV3OxyXVuh/7+8kv yMRZYHnFqXaNrgI5TgJi2ExgVEwskMSe8wzvvazhxiNwMUKWWEXEt+DqmASgUFAt C5LRSyxmHU2awjE0gIY+tf1HETuvgIODTM7ioVRFNWn6KysXEofN25YXPQSJg0XM 7e1uFGU/kR3Sfhsrwx/NM5kXmLSQJLKI6ERM1T5XhFWnxQAGUkANFmMYYgOl66KE 6LxTXdyv9EtqdJUDXdaxk7JrN/OJct/jYE+H8Zwhf6e/LUrJtO+QCcmi+/uIOh0N SZcYMno2V+2dSYJ/nuY4K2mPd51ofXOwHQKvsi4CQHAlRpdiiAshgoHJG1cXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFVxUO1PkE1lA7a6NQYgIaCzxZkwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7cfbkv2jNJEQt9CJrKOyehFV4h9ZOVveEN rIOeQl6Q89zTPYDg8n7iZN7FxX9fDWG9QIWAlTkpMCLzxVNCsf2naVajUAlHWoKB MGnxITqaJSm1bMhbrGRbdgOuGjafuiVPffSv7SzY4/uMt444nd698vOKXJLVdwpU b3T0tNNgbcrSPeT/2tSbHKERaAuGp9BSlrhP0fFclKqxpw8+J4sjk0slrn5ET+mH bwy2vzIbmQq+zz/l25ICKfT5r8yw7NBvaU/d0kOAd0B+82E2VUCtVffbljRsxJSr Nl48a/TvZ40Ot6upNPXRCOKjfmF/2BeR03ptQNm22OpbUOBOTi0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:33 2025 by rpki-client