This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: E8G3dQwjvwNDBuq5ZVyvtUGNregt+vQJ3t8VETcwYzo= Subject key identifier: AC:5D:B9:86:07:B0:35:FE:4E:2D:C5:E2:A7:86:56:CD:60:0B:FC:35 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 1CC6380464053D1374AF36C8AE4888CDEBB0259E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 94 Signing time: Thu 04 Dec 2025 23:32:03 +0000 Manifest this update: Thu 04 Dec 2025 23:27:03 +0000 Manifest next update: Mon 08 Dec 2025 05:18:03 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: z3xbw+F5nhj5HTu2Np7oOuOkiVYdn7g2/WgIKIl/gf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c6:38:04:64:05:3d:13:74:af:36:c8:ae:48:88:cd:eb:b0:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Dec 4 23:27:03 2025 GMT Not After : Dec 8 05:18:03 2025 GMT Subject: CN=AC5DB98607B035FE4E2DC5E2A78656CD600BFC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:4f:89:49:26:e6:c6:05:86:3f:73:1a:92: ca:1d:8a:f6:9c:84:bf:e3:f4:d6:d2:43:93:a9:af: e4:cc:9a:d1:28:0d:f2:31:34:11:bd:3e:c6:e1:65: 34:96:98:ec:71:ca:bc:05:0b:02:72:d0:06:ab:b2: ff:d0:7b:23:86:b2:e2:84:4c:ad:cf:36:df:e0:c5: 22:d5:1b:8a:ff:e9:f8:94:05:bb:b9:46:ca:ef:3b: 11:ff:68:1c:0d:37:0e:96:55:de:97:8d:b4:fe:f3: 6f:53:71:ff:e6:b7:7a:87:a4:61:3a:25:04:e3:57: ab:76:e0:1f:1a:58:d8:a1:e4:53:0f:33:38:f4:56: 48:86:1a:f7:c7:11:b6:a7:9d:f4:63:ac:a9:f3:71: 24:c0:cc:4f:ae:fa:a6:45:84:a5:07:25:75:e0:ea: 09:ab:29:ce:2f:25:45:4a:7a:5e:28:e9:a8:c8:b8: d5:5d:15:c2:19:cd:a7:b6:20:63:40:c9:35:c0:ff: f3:bc:9b:65:7f:73:ce:39:50:a4:d0:7e:32:88:ad: e9:1f:12:3f:6d:94:e2:bc:45:8a:1a:53:0d:9c:e0: a3:9e:79:5f:a6:06:fd:b1:a6:07:c7:52:26:a7:75: c8:d3:a6:73:91:8b:ca:db:7c:1f:79:4b:ca:62:60: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5D:B9:86:07:B0:35:FE:4E:2D:C5:E2:A7:86:56:CD:60:0B:FC:35 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:c7:46:08:74:28:89:d4:77:80:6f:32:48:b6:34:6f:37: 24:3b:e1:96:69:55:df:fb:8f:f8:cf:9c:c3:50:23:6f:94:87: 21:bc:76:f8:e3:20:91:46:a3:28:0d:23:de:12:ee:bf:cc:0f: 7e:4e:6d:b7:a8:f9:ae:03:74:e7:87:ab:cd:f9:dd:83:99:d7: f6:62:6b:23:98:3a:a7:8a:25:08:7e:19:4d:f9:55:a3:cf:37: e7:43:78:4c:c9:e9:55:2c:19:ba:a4:7b:33:88:81:00:59:3e: 98:7c:2c:f1:de:f0:1f:ab:82:5c:09:99:c8:26:d0:9b:2c:ae: d5:d2:f3:16:2b:4c:20:f5:cc:1c:3b:b6:08:ce:c7:a4:33:bb: 4e:0a:8e:c2:41:b7:ac:61:05:a3:4b:aa:8c:d6:f2:ed:c9:d0: bc:61:6a:50:f6:30:7e:ea:1c:e8:f2:b9:95:5e:e0:1f:96:b9: 11:fe:24:ee:fc:04:71:c9:33:db:82:03:e1:49:49:50:56:fb: 13:7d:38:30:1b:02:f8:95:cd:64:67:36:fb:43:d9:62:5f:81: e7:e2:af:64:34:c9:ca:be:fe:ac:5a:09:d6:4c:8b:bc:70:f4: a6:07:50:9e:85:77:6f:1d:e4:a3:07:02:c8:df:ef:aa:bd:52: 1d:f6:36:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMY4BGQFPRN0rzbIrkiIzeuwJZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTEyMDQyMzI3MDNaFw0yNTEyMDgwNTE4MDNaMDMxMTAvBgNV BAMTKEFDNURCOTg2MDdCMDM1RkU0RTJEQzVFMkE3ODY1NkNENjAwQkZDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIA0+JSSbmxgWGP3Maksodivac hL/j9NbSQ5Opr+TMmtEoDfIxNBG9PsbhZTSWmOxxyrwFCwJy0Aarsv/QeyOGsuKE TK3PNt/gxSLVG4r/6fiUBbu5RsrvOxH/aBwNNw6WVd6XjbT+829Tcf/mt3qHpGE6 JQTjV6t24B8aWNih5FMPMzj0VkiGGvfHEbannfRjrKnzcSTAzE+u+qZFhKUHJXXg 6gmrKc4vJUVKel4o6ajIuNVdFcIZzae2IGNAyTXA//O8m2V/c845UKTQfjKIrekf Ej9tlOK8RYoaUw2c4KOeeV+mBv2xpgfHUiandcjTpnORi8rbfB95S8piYGDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrF25hgewNf5OLcXip4ZWzWAL/DUwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK56x0YIdCiJ1HeAbzJItjRvNyQ74ZZpVd/7 j/jPnMNQI2+UhyG8dvjjIJFGoygNI94S7r/MD35Obbeo+a4DdOeHq8353YOZ1/Zi ayOYOqeKJQh+GU35VaPPN+dDeEzJ6VUsGbqkezOIgQBZPph8LPHe8B+rglwJmcgm 0JssrtXS8xYrTCD1zBw7tgjOx6Qzu04KjsJBt6xhBaNLqozW8u3J0LxhalD2MH7q HOjyuZVe4B+WuRH+JO78BHHJM9uCA+FJSVBW+xN9ODAbAviVzWRnNvtD2WJfgefi r2Q0ycq+/qxaCdZMi7xw9KYHUJ6Fd28d5KMHAsjf76q9Uh32Nj8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:11 2025 by rpki-client