This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft (raw, json) Hash identifier: PGABNBSO+G1gDQdocANqRtcAfm5L3trtsMqyjjWG6MQ= Subject key identifier: BB:2B:BB:A9:F4:0E:9C:DB:C5:7F:51:B7:81:71:7C:EB:38:2A:B3:78 Authority key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Certificate issuer: /CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Certificate serial: 11A318AEE95512DA439AFA559EB472AF9CAA2D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft Manifest number: 0534 Signing time: Sat 06 Dec 2025 17:11:14 +0000 Manifest this update: Sat 06 Dec 2025 17:06:14 +0000 Manifest next update: Tue 09 Dec 2025 19:16:14 +0000 Files and hashes: 1: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl (hash: EMhypDOQC3iwUmiwK5jYX5ejuAkgljJ4dDQV8cqRnyg=) 2: 3130332e3135352e32362e302f32342d3234203d3e20313431303537.roa (hash: zvD1gWyZUcS44IboIaWL1frQd2y5H3jWJXa/wy/mGcM=) 3: 323030313a6466343a616138303a3a2f34382d3438203d3e20313431303537.roa (hash: tTehZh9UKuAWzLXm3C0kYFHgqql5m+DDpx9m9vm/Bjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a3:18:ae:e9:55:12:da:43:9a:fa:55:9e:b4:72:af:9c:aa:2d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Validity Not Before: Dec 6 17:06:14 2025 GMT Not After : Dec 9 19:16:14 2025 GMT Subject: CN=BB2BBBA9F40E9CDBC57F51B781717CEB382AB378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:1b:70:2d:72:98:1d:e5:f5:21:0b:42:b2: 5a:59:c4:a6:49:ea:de:b0:6a:d3:7e:fb:1b:34:ee: 58:0b:7e:b5:96:80:52:e6:b8:e0:4e:b2:30:47:30: 6c:d7:3e:b7:93:83:91:40:d8:df:d2:d3:1d:d4:18: 4c:14:3b:f4:f6:6b:a9:a0:88:65:d6:6f:76:74:59: 42:d2:80:ec:a2:45:d5:de:23:7b:1e:7a:3f:02:53: d4:a8:04:11:12:54:4e:59:4c:85:d5:60:46:d5:ed: 4c:f7:04:50:4b:3a:9a:b0:a6:a4:53:33:66:24:7d: 1d:11:e8:b2:1f:0a:13:91:f6:b6:9b:dd:5a:54:0f: ee:d9:0f:2a:6e:4c:5a:e3:49:b3:30:1d:4d:d2:40: 92:89:a2:34:07:40:b8:05:80:17:3b:64:24:ea:e6: fe:c7:ae:1b:89:34:cb:c3:76:22:2d:97:de:a0:02: bd:2f:ff:8d:8f:bf:1f:0b:00:18:75:e1:7e:de:8c: 28:b6:87:75:18:1a:a6:ec:c3:ab:05:25:77:2f:16: ed:ba:21:c8:68:a0:e8:a0:fa:a5:36:11:90:f6:d9: 84:c8:16:03:2d:b3:7b:d1:83:70:d5:15:e9:63:42: 13:3a:b7:0c:b8:99:a4:60:c5:14:a1:5d:d7:0f:a8: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:BB:A9:F4:0E:9C:DB:C5:7F:51:B7:81:71:7C:EB:38:2A:B3:78 X509v3 Authority Key Identifier: keyid:F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:43:16:18:62:c7:b2:d8:92:ab:a7:84:7f:25:75:e9:9c:b4: 9e:44:6e:d7:2b:20:b9:40:60:45:43:a4:d1:fe:33:68:60:3d: 17:67:d1:ff:b3:f9:f4:84:23:bc:e7:be:51:42:84:1a:4e:5c: d1:a1:05:eb:ea:4b:bb:0f:45:8e:3b:ab:3d:b7:06:cb:8b:d0: 7e:a3:0f:12:e5:95:c0:2a:cc:5b:28:d9:2a:80:3f:c1:04:45: 12:94:57:a9:39:bd:9a:b9:4a:04:0d:ef:db:2e:d9:92:20:b4: bd:cd:ea:89:c4:d3:1a:e8:bc:48:81:15:62:3f:e5:0b:98:18: 3c:d4:5c:3a:29:54:e5:e0:9b:7f:33:8a:93:15:9f:ad:e5:77: cd:43:b4:33:b6:5a:ed:9c:8f:61:de:fd:71:65:fd:1e:0c:f6: 3d:a2:32:c1:4c:40:ec:6d:4b:4b:27:ec:18:f2:be:fa:40:2a: 2c:97:18:12:7a:0f:f6:66:56:b4:67:49:c4:64:f8:42:c4:2d: 2e:0a:01:12:ae:80:f6:a8:f3:b7:b6:34:3c:30:a7:0c:41:6b: ee:08:37:55:80:7d:ec:08:66:38:ec:9e:17:85:7b:4f:82:e2: 9b:cb:61:21:d3:d2:86:51:24:ce:a7:10:7f:72:f2:4f:fd:4e: 90:58:ec:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaMYrulVEtpDmvpVnrRyr5yqLZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1 OTFDRkUzRjAeFw0yNTEyMDYxNzA2MTRaFw0yNTEyMDkxOTE2MTRaMDMxMTAvBgNV BAMTKEJCMkJCQkE5RjQwRTlDREJDNTdGNTFCNzgxNzE3Q0VCMzgyQUIzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+BtwLXKYHeX1IQtCslpZxKZJ 6t6watN++xs07lgLfrWWgFLmuOBOsjBHMGzXPreTg5FA2N/S0x3UGEwUO/T2a6mg iGXWb3Z0WULSgOyiRdXeI3seej8CU9SoBBESVE5ZTIXVYEbV7Uz3BFBLOpqwpqRT M2YkfR0R6LIfChOR9rab3VpUD+7ZDypuTFrjSbMwHU3SQJKJojQHQLgFgBc7ZCTq 5v7HrhuJNMvDdiItl96gAr0v/42Pvx8LABh14X7ejCi2h3UYGqbsw6sFJXcvFu26 IchooOig+qU2EZD22YTIFgMts3vRg3DVFeljQhM6twy4maRgxRShXdcPqHYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyu7qfQOnNvFf1G3gXF86zgqs3gwHwYDVR0j BBgwFoAU8ihreNLJbPPN8GeonT9UgVkc/j8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMC9GMjI4NkI3OEQy Qzk2Q0YzQ0RGMDY3QTg5RDNGNTQ4MTU5MUNGRTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0ODE1OTFD RkUzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI0ZGExNTItMDAyNC00MzZkLTk5 MGQtMzIzODA2ZTAxNjk5LzAvRjIyODZCNzhEMkM5NkNGM0NERjA2N0E4OUQzRjU0 ODE1OTFDRkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBDFhhix7LYkqunhH8ldemctJ5EbtcrILlA YEVDpNH+M2hgPRdn0f+z+fSEI7znvlFChBpOXNGhBevqS7sPRY47qz23BsuL0H6j DxLllcAqzFso2SqAP8EERRKUV6k5vZq5SgQN79su2ZIgtL3N6onE0xrovEiBFWI/ 5QuYGDzUXDopVOXgm38zipMVn63ld81DtDO2Wu2cj2He/XFl/R4M9j2iMsFMQOxt S0sn7BjyvvpAKiyXGBJ6D/ZmVrRnScRk+ELELS4KARKugPao87e2NDwwpwxBa+4I N1WAfewIZjjsnheFe0+C4pvLYSHT0oZRJM6nEH9y8k/9TpBY7Nw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:17 2025 by rpki-client