This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft (raw, json) Hash identifier: e4PzLKeTZIwQIxkTKf0xIe/gq71w2M7bQL+RfbTC3cg= Subject key identifier: 07:82:D2:A2:41:CE:F9:BA:E6:84:26:2D:CA:B3:6C:4E:26:AF:B8:B0 Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 3DA481A3325E8104C78D0FC698979DD049AB2A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft Manifest number: 020B Signing time: Sat 06 Dec 2025 17:01:27 +0000 Manifest this update: Sat 06 Dec 2025 16:56:27 +0000 Manifest next update: Tue 09 Dec 2025 17:20:27 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: 2AxkviF5pv7j1kTQ3v8XjI6k7pg1zXnW3iJ2qwjQWV0=) 2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: bNck8LpKpp26kW2UN16eMZ1fOvjILY8XEu10GDGQj+I=) 3: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl (hash: WhpNWzPpXDJIy3bWtltTw9Sf+jyLdTSPlfIA0Eg5Tt0=) 4: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg=) 5: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: aoGZEwGfwxorrH0vm0ZUZnYbhYMMuOl+o+RcX6GAvoE=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:81:a3:32:5e:81:04:c7:8d:0f:c6:98:97:9d:d0:49:ab:2a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Dec 6 16:56:27 2025 GMT Not After : Dec 9 17:20:27 2025 GMT Subject: CN=0782D2A241CEF9BAE684262DCAB36C4E26AFB8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:17:2b:3c:18:16:3c:07:2c:35:0f:e9:14: 9f:f6:c8:59:79:3b:67:a0:71:f4:e5:c3:59:26:73: 09:ba:af:af:fb:63:d0:39:2a:e0:f2:74:2d:0d:93: c8:04:b1:ee:f3:7c:6a:22:cd:c8:e6:22:b0:2e:b6: 04:0e:c2:1d:26:7e:7c:0e:43:7f:3f:f4:89:19:7b: fb:0e:41:94:fa:47:43:b6:2e:d8:40:56:be:3a:df: c5:23:b7:b9:31:d6:fa:f4:7a:47:d1:3f:a0:e1:3a: ea:a2:3e:bb:5b:f1:a3:77:5b:fc:ac:85:80:06:ef: cb:f1:e6:c3:08:2f:ec:85:4f:60:48:c9:50:ab:ec: 28:d4:76:97:82:d0:67:07:f2:b4:c7:a9:70:c1:d9: 76:95:cb:a6:42:ab:bb:86:6f:eb:f4:71:84:7c:f1: 6e:c6:40:7c:5b:bb:9f:25:a5:a9:54:9b:6e:b4:96: f5:ed:47:56:36:26:55:55:86:11:e7:1a:ea:e2:33: 51:0f:40:3f:f5:51:4f:39:64:27:66:07:47:48:5a: 6e:ac:5f:95:e4:9e:75:a1:16:c6:b8:94:c0:93:1f: b0:2a:a1:6f:71:19:04:32:1d:dc:94:32:e4:67:1f: 6f:d9:75:7f:b1:78:8e:dc:14:1d:0a:80:cf:77:d1: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:82:D2:A2:41:CE:F9:BA:E6:84:26:2D:CA:B3:6C:4E:26:AF:B8:B0 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6f:37:7c:69:62:6d:ae:2a:d3:4c:c4:95:73:92:36:14:62: 7c:50:79:12:b4:87:21:61:5e:ed:cb:a5:0d:13:26:0c:6a:02: 65:f0:a8:2c:83:5d:fa:b9:60:07:33:17:e4:b7:3e:cf:01:21: 28:3a:39:31:44:cf:0f:fe:b2:7f:09:19:c5:6d:6c:a3:d1:5f: 44:e9:1b:91:53:94:0c:28:f6:ef:d6:ed:b1:d7:04:22:e2:36: 8b:92:74:e4:29:43:43:d9:bc:ae:b5:18:63:13:61:30:05:5e: 7f:09:52:d0:2e:ef:c0:1e:25:00:ce:cd:f1:bf:96:53:1a:98: b8:20:7b:12:0b:eb:a4:f4:0a:fd:8f:e1:ce:29:6b:6a:e9:2d: c7:ae:d9:78:67:2f:ef:20:75:21:d5:63:55:b3:4d:42:3a:88: f5:31:7d:40:81:e4:87:ad:07:01:5d:75:bc:6d:a4:89:a2:4f: 1d:57:12:cc:d5:2c:83:d8:b2:42:67:ba:9a:1e:f5:bf:a6:ba: 48:45:e6:a7:ff:a6:88:8d:3d:65:a5:f4:3c:7c:fd:9d:a9:f6: e3:79:84:f3:a7:d0:76:aa:7d:ca:23:cd:6f:67:db:18:ad:29: 77:40:16:15:b9:8f:a1:10:c3:56:98:9f:86:b3:f2:a0:8e:cf: 6f:bb:bf:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaSBozJegQTHjQ/GmJed0EmrKm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTEyMDYxNjU2MjdaFw0yNTEyMDkxNzIwMjdaMDMxMTAvBgNV BAMTKDA3ODJEMkEyNDFDRUY5QkFFNjg0MjYyRENBQjM2QzRFMjZBRkI4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNBcrPBgWPAcsNQ/pFJ/2yFl5 O2egcfTlw1kmcwm6r6/7Y9A5KuDydC0Nk8gEse7zfGoizcjmIrAutgQOwh0mfnwO Q38/9IkZe/sOQZT6R0O2LthAVr4638Ujt7kx1vr0ekfRP6DhOuqiPrtb8aN3W/ys hYAG78vx5sMIL+yFT2BIyVCr7CjUdpeC0GcH8rTHqXDB2XaVy6ZCq7uGb+v0cYR8 8W7GQHxbu58lpalUm260lvXtR1Y2JlVVhhHnGuriM1EPQD/1UU85ZCdmB0dIWm6s X5XknnWhFsa4lMCTH7AqoW9xGQQyHdyUMuRnH2/ZdX+xeI7cFB0KgM930QHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4LSokHO+brmhCYtyrNsTiavuLAwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYy NjkyQzQwNkQ5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdvN3xpYm2uKtNMxJVzkjYUYnxQeRK0hyFh Xu3LpQ0TJgxqAmXwqCyDXfq5YAczF+S3Ps8BISg6OTFEzw/+sn8JGcVtbKPRX0Tp G5FTlAwo9u/W7bHXBCLiNouSdOQpQ0PZvK61GGMTYTAFXn8JUtAu78AeJQDOzfG/ llMamLggexIL66T0Cv2P4c4pa2rpLceu2XhnL+8gdSHVY1WzTUI6iPUxfUCB5Iet BwFddbxtpImiTx1XEszVLIPYskJnupoe9b+mukhF5qf/poiNPWWl9Dx8/Z2p9uN5 hPOn0HaqfcojzW9n2xitKXdAFhW5j6EQw1aYn4az8qCOz2+7v2I= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:13 2025 by rpki-client