This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: Vf4QE2n0u2Jf3oerWmmssANseTjgt/Hz+Sxz5SZODcQ= Subject key identifier: DE:15:47:2C:C6:17:CE:CB:B8:9D:C4:34:D7:8D:D6:5F:C4:17:83:91 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 0BF39AF7013247DD733BF157F28A4020608DF122 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 14:40:43 +0000 Manifest this update: Fri 05 Dec 2025 14:35:43 +0000 Manifest next update: Mon 08 Dec 2025 20:25:43 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: fhI7bC6L5kaRXhu30ploWPFQBfnswDGSFYVlnxhQhVw=) 3: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f3:9a:f7:01:32:47:dd:73:3b:f1:57:f2:8a:40:20:60:8d:f1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Dec 5 14:35:43 2025 GMT Not After : Dec 8 20:25:43 2025 GMT Subject: CN=DE15472CC617CECBB89DC434D78DD65FC4178391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:a5:8a:81:9a:8c:04:6e:a7:b0:19:3e:a7: 26:dc:31:4a:f8:32:8e:5a:34:7f:dc:23:a7:68:73: 05:0c:3b:f0:26:3b:c1:54:cd:13:9f:27:27:5b:15: 01:1d:80:68:4e:46:e4:9c:79:f3:35:29:09:04:85: 82:f2:b0:b4:67:c7:04:ce:36:06:ec:36:78:25:50: c2:a9:98:16:a3:51:d6:63:dc:3a:9b:57:9f:7d:37: be:dc:2e:9c:ff:1f:1d:c2:14:46:4c:27:76:47:c1: 4b:c3:5c:cc:90:0a:1f:bc:36:a5:3d:c0:ce:f9:b5: 0b:06:62:ab:ad:59:1f:e2:67:49:61:08:fc:19:3e: 2a:69:e0:36:0c:f8:12:da:6d:c4:4f:90:2d:2e:1e: cd:d0:bb:32:a1:93:d2:b1:8e:a9:2a:ab:6f:af:76: ea:6a:02:f4:45:54:12:a7:f6:b7:72:1c:42:2e:54: 2b:a3:1f:2a:69:26:bf:8c:fc:a0:c1:94:0b:32:6b: c0:05:c7:79:87:2e:80:4b:0e:15:39:6b:d1:5e:d9: fa:79:f2:d8:67:9a:4a:51:0f:af:dd:c6:73:d2:5c: c0:37:d9:83:ca:ef:53:c0:f0:4b:fe:88:2c:33:27: 50:96:42:94:e2:00:df:00:df:71:52:b9:77:d2:ab: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:47:2C:C6:17:CE:CB:B8:9D:C4:34:D7:8D:D6:5F:C4:17:83:91 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1d:27:86:11:74:0d:6c:b2:1d:1c:ee:9b:1d:46:d2:ab:46: 21:60:62:06:28:40:c6:e2:ef:b3:15:f9:aa:bc:df:ca:21:c8: 3f:af:82:17:e9:7e:94:db:ae:b7:90:b4:85:4e:88:01:19:59: 3e:10:b8:65:69:7e:a2:01:43:f8:12:ac:74:f2:56:b3:7e:c8: 46:b6:52:91:6a:7a:57:c9:7c:9e:b1:82:76:a7:86:af:c7:04: 5f:3d:2b:76:60:49:5b:8b:95:45:92:50:d0:a2:4a:d9:c7:57: 4b:d5:ea:22:a3:23:3e:87:74:d1:cf:03:49:5b:ff:ed:46:1e: 5d:1c:e4:2b:7e:0b:16:95:c7:79:41:8d:b5:8d:a3:63:fd:20: aa:d7:be:46:05:91:73:ab:27:45:61:15:e8:f5:08:59:81:69: 47:7b:3e:82:8c:6c:20:25:0f:a6:ae:9e:9d:d6:88:bf:dc:20: 90:60:e7:95:40:88:5e:8b:ec:36:cb:fe:ec:06:05:9a:59:e9: 87:72:a4:9a:4d:9d:94:ea:88:ff:e9:10:15:cb:af:d8:15:c0: 38:1e:57:08:0c:6c:31:9b:22:a3:6b:63:60:4c:0b:96:95:8d: c6:75:48:91:0a:36:62:0b:ed:27:cb:ad:db:f1:10:a4:e2:c5: 29:0b:79:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/Oa9wEyR91zO/FX8opAIGCN8SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTEyMDUxNDM1NDNaFw0yNTEyMDgyMDI1NDNaMDMxMTAvBgNV BAMTKERFMTU0NzJDQzYxN0NFQ0JCODlEQzQzNEQ3OERENjVGQzQxNzgzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTaWKgZqMBG6nsBk+pybcMUr4 Mo5aNH/cI6docwUMO/AmO8FUzROfJydbFQEdgGhORuScefM1KQkEhYLysLRnxwTO NgbsNnglUMKpmBajUdZj3DqbV599N77cLpz/Hx3CFEZMJ3ZHwUvDXMyQCh+8NqU9 wM75tQsGYqutWR/iZ0lhCPwZPipp4DYM+BLabcRPkC0uHs3QuzKhk9Kxjqkqq2+v dupqAvRFVBKn9rdyHEIuVCujHyppJr+M/KDBlAsya8AFx3mHLoBLDhU5a9Fe2fp5 8thnmkpRD6/dxnPSXMA32YPK71PA8Ev+iCwzJ1CWQpTiAN8A33FSuXfSqzO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hVHLMYXzsu4ncQ0143WX8QXg5EwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8dJ4YRdA1ssh0c7psdRtKrRiFgYgYoQMbi 77MV+aq838ohyD+vghfpfpTbrreQtIVOiAEZWT4QuGVpfqIBQ/gSrHTyVrN+yEa2 UpFqelfJfJ6xgnanhq/HBF89K3ZgSVuLlUWSUNCiStnHV0vV6iKjIz6HdNHPA0lb /+1GHl0c5Ct+CxaVx3lBjbWNo2P9IKrXvkYFkXOrJ0VhFej1CFmBaUd7PoKMbCAl D6aunp3WiL/cIJBg55VAiF6L7DbL/uwGBZpZ6YdypJpNnZTqiP/pEBXLr9gVwDge VwgMbDGbIqNrY2BMC5aVjcZ1SJEKNmIL7SfLrdvxEKTixSkLeTk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:42 2025 by rpki-client