This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft File: F5908629C575E46230F87489BF209EE6FBCF3860.mft (raw, json) Hash identifier: aMQd4exGz82mF6HF3GDervchcIdIpTN4AsBBMeT+TPc= Subject key identifier: D7:A9:11:3A:08:D7:C1:15:31:F5:B7:4F:E4:B9:7F:6D:C7:AF:CC:EC Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 Certificate issuer: /CN=F5908629C575E46230F87489BF209EE6FBCF3860 Certificate serial: 695AAF49B99D600F821B1AFCA5104E241B3D8C07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft Manifest number: 01BC Signing time: Fri 05 Dec 2025 07:51:24 +0000 Manifest this update: Fri 05 Dec 2025 07:46:24 +0000 Manifest next update: Mon 08 Dec 2025 08:38:24 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 1ZkUeeyzSqD5X/4v5W9zMPdNTSAUHdo1L38gVf4lA6o=) 2: F5908629C575E46230F87489BF209EE6FBCF3860.crl (hash: hZSyTxe98br5OjAhDCWeUDcPCbFGP/gtnt0O0uMOqtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5a:af:49:b9:9d:60:0f:82:1b:1a:fc:a5:10:4e:24:1b:3d:8c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860 Validity Not Before: Dec 5 07:46:24 2025 GMT Not After : Dec 8 08:38:24 2025 GMT Subject: CN=D7A9113A08D7C11531F5B74FE4B97F6DC7AFCCEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:79:e9:a0:cd:2c:0c:2a:82:1e:be:52:eb: e7:90:0d:89:98:d2:57:70:b7:30:bd:46:bb:1d:28: 47:9c:c4:0c:cd:3e:e2:d3:3c:81:b1:e1:33:0b:4d: 57:db:d1:78:d6:52:54:d9:e6:23:a4:f9:a4:e6:93: 88:4e:c5:c7:9e:be:3d:9d:67:e6:8e:08:82:90:87: 21:37:c3:1a:38:47:01:54:5d:87:50:6e:4f:ff:8d: e2:bc:49:ca:8a:1f:74:af:36:e3:08:86:10:c2:6e: 6e:f6:d6:ab:1b:08:e5:ae:38:35:98:01:c6:81:ba: f2:1e:33:fe:00:0c:2b:56:c7:9c:ef:99:57:b3:2e: 80:19:d2:1a:c6:16:c4:e6:20:f9:18:c7:bf:4e:7f: 7b:58:29:38:ec:c7:fb:e9:0c:12:89:ea:3a:ac:24: c8:04:93:50:3f:2d:21:f6:57:40:59:98:e2:ba:ac: ee:c4:de:75:52:08:53:a7:02:1f:22:1d:85:22:f2: f2:ef:19:71:84:7a:30:c0:52:35:63:3e:b9:c3:0b: 68:4b:63:8f:22:c3:2b:30:b3:9c:d4:22:4c:49:a0: 62:23:41:fb:8e:a6:88:88:1e:64:62:13:e7:10:58: 11:a3:af:e4:04:c0:4e:6f:b3:8b:95:b4:56:15:28: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:11:3A:08:D7:C1:15:31:F5:B7:4F:E4:B9:7F:6D:C7:AF:CC:EC X509v3 Authority Key Identifier: keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:35:20:e1:7b:35:de:60:5f:bd:2d:41:d3:19:ce:73:e7:fd: 1c:94:0a:04:0c:4c:c2:83:0e:a5:b1:42:a2:1d:24:ce:e0:1f: 3c:71:5b:1e:48:94:a9:d3:b3:83:ba:a1:28:7d:ef:bb:78:df: b2:7d:fe:99:f4:af:a2:49:e0:b6:ef:3b:51:e9:58:7d:54:9d: c8:e2:18:98:95:78:3d:fb:7b:07:7a:5d:27:b6:3e:ba:18:46: eb:07:0c:ae:ba:81:4a:de:29:ea:05:49:50:83:2b:1e:6b:68: d1:20:21:59:ab:08:3d:35:e1:1c:fa:eb:66:ce:92:61:7f:3f: 11:b4:12:72:e2:d4:a8:af:fe:1d:c8:23:68:91:d2:1e:d0:d0: 18:35:50:62:13:87:20:a6:c7:b5:73:15:c3:50:34:81:63:5b: 3e:c1:8e:3d:71:24:0c:c4:ab:82:ea:15:e0:03:5e:d1:b8:7f: c4:cb:04:b7:c4:df:1d:d1:96:ab:a0:27:03:ef:18:be:9f:9b: c1:7e:c9:de:fb:5c:23:9e:b6:21:d7:36:1f:c6:03:b2:72:f7: eb:9e:74:90:8a:13:bb:19:5e:76:b3:75:fd:1d:36:a8:41:54: 86:e3:fa:14:5e:e5:da:60:b5:34:7d:7e:b4:af:1d:7a:1c:73: ba:26:c7:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVqvSbmdYA+CGxr8pRBOJBs9jAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZG QkNGMzg2MDAeFw0yNTEyMDUwNzQ2MjRaFw0yNTEyMDgwODM4MjRaMDMxMTAvBgNV BAMTKEQ3QTkxMTNBMDhEN0MxMTUzMUY1Qjc0RkU0Qjk3RjZEQzdBRkNDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8HnpoM0sDCqCHr5S6+eQDYmY 0ldwtzC9RrsdKEecxAzNPuLTPIGx4TMLTVfb0XjWUlTZ5iOk+aTmk4hOxceevj2d Z+aOCIKQhyE3wxo4RwFUXYdQbk//jeK8ScqKH3SvNuMIhhDCbm721qsbCOWuODWY AcaBuvIeM/4ADCtWx5zvmVezLoAZ0hrGFsTmIPkYx79Of3tYKTjsx/vpDBKJ6jqs JMgEk1A/LSH2V0BZmOK6rO7E3nVSCFOnAh8iHYUi8vLvGXGEejDAUjVjPrnDC2hL Y48iwysws5zUIkxJoGIjQfuOpoiIHmRiE+cQWBGjr+QEwE5vs4uVtFYVKLUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16kROgjXwRUx9bdP5Ll/bcevzOwwHwYDVR0j BBgwFoAU9ZCGKcV15GIw+HSJvyCe5vvPOGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2RkYjc5Zi0yYzM3LTQ3YWYtYjk1ZC0xNTMxMTQ2M2IzNDMvMC9GNTkwODYyOUM1 NzVFNDYyMzBGODc0ODlCRjIwOUVFNkZCQ0YzODYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlFRTZGQkNG Mzg2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvRjU5MDg2MjlDNTc1RTQ2MjMwRjg3NDg5QkYyMDlF RTZGQkNGMzg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs1IOF7Nd5gX70tQdMZznPn/RyUCgQMTMKD DqWxQqIdJM7gHzxxWx5IlKnTs4O6oSh977t437J9/pn0r6JJ4LbvO1HpWH1Uncji GJiVeD37ewd6XSe2ProYRusHDK66gUreKeoFSVCDKx5raNEgIVmrCD014Rz662bO kmF/PxG0EnLi1Kiv/h3II2iR0h7Q0Bg1UGIThyCmx7VzFcNQNIFjWz7Bjj1xJAzE q4LqFeADXtG4f8TLBLfE3x3RlqugJwPvGL6fm8F+yd77XCOetiHXNh/GA7Jy9+ue dJCKE7sZXnazdf0dNqhBVIbj+hRe5dpgtTR9frSvHXocc7omx0w= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:48 2025 by rpki-client