This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: 1IwGsw3UI9vCpoatreo5exZqKxPd5LC4+60fwSY5pH4= Subject key identifier: 7F:17:68:C4:B6:FE:E1:08:3D:B9:A6:39:5E:B5:DC:2C:E0:79:9F:CF Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 687BB1D6CB83C7498ECB467202496F046AF7A09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0267 Signing time: Thu 04 Dec 2025 17:10:04 +0000 Manifest this update: Thu 04 Dec 2025 17:05:04 +0000 Manifest next update: Mon 08 Dec 2025 04:38:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: n51UNXRH4rEeFd2aKHsCiwFLi3TGhxLaq93UFjhQ2os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7b:b1:d6:cb:83:c7:49:8e:cb:46:72:02:49:6f:04:6a:f7:a0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Dec 4 17:05:04 2025 GMT Not After : Dec 8 04:38:04 2025 GMT Subject: CN=7F1768C4B6FEE1083DB9A6395EB5DC2CE0799FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:fa:b2:1b:38:52:1c:11:0b:98:cb:92:e0: 0b:a5:40:9b:4f:00:66:c2:76:80:b9:08:e1:0e:35: a2:0a:8c:a0:fa:4b:24:33:03:78:9b:99:65:6d:ed: ad:34:c0:85:3d:fc:8c:ed:71:70:28:ea:5e:b2:02: b1:4a:ed:62:45:59:b2:1f:ad:89:61:6e:84:f7:7c: f8:08:79:e7:a0:72:d4:36:f2:09:51:94:bd:d6:4a: 0c:64:42:c6:be:e3:7f:eb:88:4e:81:74:27:04:1a: b1:20:1f:0d:e6:da:87:18:00:b3:34:44:65:c8:9b: af:16:ee:04:0d:92:32:ad:e3:4d:ca:d7:24:b7:9a: 41:4c:9f:c3:7a:22:94:32:db:d2:ba:0d:40:0f:b9: bb:22:19:8d:90:1d:8b:f0:9a:ff:15:8f:0a:31:e2: 6e:03:cd:b6:8e:77:f9:67:23:da:c6:1c:4a:bf:46: 8e:bc:8f:15:c7:1d:b6:89:70:06:7d:9d:07:ff:22: 4f:a0:c4:1c:b3:87:09:47:12:8c:ea:48:b4:34:c1: e1:b7:47:19:c0:bd:82:c9:83:08:b4:6a:ee:a8:5d: 66:07:14:6f:e9:69:32:f4:15:92:b1:1e:af:3d:60: 59:13:6f:62:8c:a4:4c:46:22:77:b6:23:4e:96:e2: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:68:C4:B6:FE:E1:08:3D:B9:A6:39:5E:B5:DC:2C:E0:79:9F:CF X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:df:c4:4f:72:d3:1a:af:c4:da:3e:32:22:53:47:27:31:8a: 45:67:f4:44:b1:8d:81:86:d5:9a:35:12:8c:03:49:ab:75:9f: 04:19:6b:a4:8f:7e:c6:a2:2d:0c:b8:d7:19:66:c0:13:c0:4f: c9:f8:77:5a:19:8f:a3:e9:d6:ef:0a:5e:0b:4e:19:5b:3e:f0: 63:a9:82:f7:5d:97:83:cf:cc:69:18:07:3e:bd:2b:23:37:d0: b4:e3:d9:df:54:97:83:a2:67:a8:73:10:f7:26:40:f1:62:fe: 34:aa:e3:51:74:e7:da:13:53:4d:a7:df:93:fb:0a:bf:7e:88: 4c:06:67:e4:a1:e1:e1:44:7b:87:71:ec:3b:bd:13:4d:5d:62: 66:53:78:e7:a2:1f:4c:e3:c8:79:fa:48:7d:b0:a9:cf:ef:9a: 06:39:92:2a:78:ed:e7:80:6d:f9:d2:c9:6d:92:08:34:d5:70: e3:d8:80:6a:2b:fb:90:f5:5b:9c:c6:7d:0f:8f:0b:ae:e2:86: 3f:82:4b:25:cf:c1:6d:f0:5d:fb:a7:2f:19:68:83:e9:de:6b: 30:d0:e3:5c:48:9a:b3:45:31:5c:83:98:29:d7:f5:86:e7:22: 3b:03:90:d4:28:8b:26:7f:c3:e2:74:4e:cd:29:09:92:18:41: 6b:08:56:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHux1suDx0mOy0ZyAklvBGr3oJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTEyMDQxNzA1MDRaFw0yNTEyMDgwNDM4MDRaMDMxMTAvBgNV BAMTKDdGMTc2OEM0QjZGRUUxMDgzREI5QTYzOTVFQjVEQzJDRTA3OTlGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1fqyGzhSHBELmMuS4AulQJtP AGbCdoC5COEONaIKjKD6SyQzA3ibmWVt7a00wIU9/IztcXAo6l6yArFK7WJFWbIf rYlhboT3fPgIeeegctQ28glRlL3WSgxkQsa+43/riE6BdCcEGrEgHw3m2ocYALM0 RGXIm68W7gQNkjKt403K1yS3mkFMn8N6IpQy29K6DUAPubsiGY2QHYvwmv8Vjwox 4m4DzbaOd/lnI9rGHEq/Ro68jxXHHbaJcAZ9nQf/Ik+gxByzhwlHEozqSLQ0weG3 RxnAvYLJgwi0au6oXWYHFG/paTL0FZKxHq89YFkTb2KMpExGIne2I06W4nHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxdoxLb+4Qg9uaY5XrXcLOB5n88wHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLfxE9y0xqvxNo+MiJTRycxikVn9ESxjYGG 1Zo1EowDSat1nwQZa6SPfsaiLQy41xlmwBPAT8n4d1oZj6Pp1u8KXgtOGVs+8GOp gvddl4PPzGkYBz69KyM30LTj2d9Ul4OiZ6hzEPcmQPFi/jSq41F059oTU02n35P7 Cr9+iEwGZ+Sh4eFEe4dx7Du9E01dYmZTeOeiH0zjyHn6SH2wqc/vmgY5kip47eeA bfnSyW2SCDTVcOPYgGor+5D1W5zGfQ+PC67ihj+CSyXPwW3wXfunLxlog+neazDQ 41xImrNFMVyDmCnX9YbnIjsDkNQoiyZ/w+J0Ts0pCZIYQWsIVvI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:57 2025 by rpki-client