This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: oew4KDeTnjTFzQlk5pLiOFyNw+UvfEwfgxVf8w6onmY= Subject key identifier: 96:8D:F9:DB:FE:1B:28:27:E7:A7:4F:36:7F:36:F2:9E:F3:00:70:ED Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 6125B3298FBBD7FDEFC1BAD7D07CCB0AFA2CBB45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: D7 Signing time: Sat 06 Dec 2025 12:31:19 +0000 Manifest this update: Sat 06 Dec 2025 12:26:19 +0000 Manifest next update: Tue 09 Dec 2025 16:25:19 +0000 Files and hashes: 1: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: wUQyqdBFyLS2xTX22YemtqVNHTBMBmQ6UwhWeaYoPbQ=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:b3:29:8f:bb:d7:fd:ef:c1:ba:d7:d0:7c:cb:0a:fa:2c:bb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Dec 6 12:26:19 2025 GMT Not After : Dec 9 16:25:19 2025 GMT Subject: CN=968DF9DBFE1B2827E7A74F367F36F29EF30070ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:fe:6a:ec:51:04:4b:3c:3c:dc:ed:23:c8: b3:2b:b6:80:c1:0f:fe:c6:e0:d5:d7:79:7b:0d:8a: d6:c0:81:2f:10:69:26:cd:cd:80:6f:72:e7:ac:90: 73:04:43:f7:fe:e5:f8:66:68:0d:73:da:5b:88:2f: df:fa:dc:10:0e:6c:27:c6:35:0c:ab:f9:0f:27:ba: e9:03:b3:f2:85:a9:e1:85:fc:f7:9c:e8:72:34:0a: b2:72:66:57:ab:0b:7a:da:a8:b6:23:a9:9e:fb:2a: 21:40:c2:a5:8f:f8:f3:b1:51:00:ea:4a:a0:1e:a8: 1b:c1:5d:26:eb:85:5c:5e:bf:6e:57:fc:8a:0f:c0: 6d:36:24:c7:15:8e:09:76:1c:f6:07:44:34:2f:19: 13:0e:e8:22:13:4e:6e:84:6c:b6:fa:5b:0a:a1:85: b1:69:ce:90:71:80:0f:64:61:dc:5c:2f:ac:61:b8: d8:6d:37:d0:f0:c7:5f:a4:85:6a:2b:73:44:96:84: c0:27:f7:37:d8:f5:4a:24:ec:f3:a4:9c:53:5d:37: 35:ca:26:0d:59:ac:16:b4:10:df:45:88:32:20:29: f3:c3:e8:00:bf:f2:c8:a4:fa:d0:0d:09:a3:d2:a0: 65:67:8a:4f:99:39:51:1e:d5:59:19:66:43:4c:f5: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:F9:DB:FE:1B:28:27:E7:A7:4F:36:7F:36:F2:9E:F3:00:70:ED X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e3:bd:86:4a:5a:bd:83:e8:0f:80:27:2c:aa:b7:64:58:51: 4d:dd:b7:8b:05:6b:a5:bb:26:a0:51:51:bc:63:4c:72:71:e4: 8a:a8:9a:da:ef:2d:cf:76:27:2e:c2:23:86:7a:7e:a3:f7:74: c3:72:2f:96:32:0b:a2:48:96:47:5f:4d:af:a0:e8:cc:f4:5f: 0f:23:72:f6:fa:26:cf:44:2c:10:4c:9a:4b:8e:6d:31:09:95: af:5e:86:03:38:a0:96:14:ea:78:6b:0f:83:8c:f4:2b:c5:6e: eb:04:46:4f:44:b6:1f:69:4c:d2:b9:c3:82:ef:34:18:12:59: 56:a0:40:d0:75:f4:48:54:09:06:26:e3:04:81:30:a4:d8:11: e2:91:64:65:b6:e9:ce:c5:42:06:a9:45:7d:09:0e:c0:0a:ac: 70:05:de:3f:be:69:67:f6:a5:21:29:b0:a7:b3:2c:6f:4f:b9: aa:84:8b:6c:3f:41:92:a7:6e:2b:a9:e7:88:6b:aa:70:43:cb: bd:e9:51:ac:86:af:c6:f7:62:da:29:22:b2:44:3f:49:98:6c: ba:45:0a:75:87:2a:44:b0:18:b1:c7:4e:6d:b1:1d:4c:e0:0b: 7d:27:85:a0:57:46:20:0b:29:a6:14:c2:02:40:41:4d:35:4d: 0e:2e:03:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSWzKY+71/3vwbrX0HzLCvosu0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNTEyMDYxMjI2MTlaFw0yNTEyMDkxNjI1MTlaMDMxMTAvBgNV BAMTKDk2OERGOURCRkUxQjI4MjdFN0E3NEYzNjdGMzZGMjlFRjMwMDcwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6f5q7FEESzw83O0jyLMrtoDB D/7G4NXXeXsNitbAgS8QaSbNzYBvcueskHMEQ/f+5fhmaA1z2luIL9/63BAObCfG NQyr+Q8nuukDs/KFqeGF/Pec6HI0CrJyZlerC3raqLYjqZ77KiFAwqWP+POxUQDq SqAeqBvBXSbrhVxev25X/IoPwG02JMcVjgl2HPYHRDQvGRMO6CITTm6EbLb6Wwqh hbFpzpBxgA9kYdxcL6xhuNhtN9Dwx1+khWorc0SWhMAn9zfY9Uok7POknFNdNzXK Jg1ZrBa0EN9FiDIgKfPD6AC/8sik+tANCaPSoGVnik+ZOVEe1VkZZkNM9dZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlo352/4bKCfnp082fzbynvMAcO0wHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnjvYZKWr2D6A+AJyyqt2RYUU3dt4sFa6W7 JqBRUbxjTHJx5IqomtrvLc92Jy7CI4Z6fqP3dMNyL5YyC6JIlkdfTa+g6Mz0Xw8j cvb6Js9ELBBMmkuObTEJla9ehgM4oJYU6nhrD4OM9CvFbusERk9Eth9pTNK5w4Lv NBgSWVagQNB19EhUCQYm4wSBMKTYEeKRZGW26c7FQgapRX0JDsAKrHAF3j++aWf2 pSEpsKezLG9PuaqEi2w/QZKnbiup54hrqnBDy73pUayGr8b3YtopIrJEP0mYbLpF CnWHKkSwGLHHTm2xHUzgC30nhaBXRiALKaYUwgJAQU01TQ4uA5I= -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:59 2025 by rpki-client