This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: 5HbtAlKLXxAe6hgfejDPajTADd3VjOR5jGIWsw+wB0E= Subject key identifier: 08:AD:97:B7:33:6F:5F:C4:C6:DB:4B:C0:26:49:90:18:CA:97:A1:07 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 21BA2D768E8B565C337DC1E6518D0863184655D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 048C Signing time: Sat 06 Dec 2025 00:01:45 +0000 Manifest this update: Fri 05 Dec 2025 23:56:45 +0000 Manifest next update: Tue 09 Dec 2025 07:19:45 +0000 Files and hashes: 1: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: Vb1O7Wh78mjVcycaO6EZ+pcMKqIp5XoqWfB0e7UGYaw=) 2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=) 3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=) 4: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:2d:76:8e:8b:56:5c:33:7d:c1:e6:51:8d:08:63:18:46:55:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Dec 5 23:56:45 2025 GMT Not After : Dec 9 07:19:45 2025 GMT Subject: CN=08AD97B7336F5FC4C6DB4BC026499018CA97A107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:c0:66:fb:ab:fa:2f:00:f9:0b:4e:0f:a4: de:39:16:49:ac:48:2f:a9:ce:6e:a3:b4:c1:64:98: 23:56:51:19:bb:a9:2a:cf:14:21:38:5c:64:ae:78: 4f:c1:13:f2:27:55:97:92:f9:0c:21:3a:89:6f:73: e2:0e:fc:11:a8:4d:fc:a8:d3:b6:23:75:05:39:4b: 91:6f:90:60:a5:44:9d:80:9d:5a:a4:1e:3d:96:a3: bd:ec:f0:14:94:12:3e:82:b1:c5:65:8a:70:ef:f8: cf:fb:33:ef:d6:d6:d9:79:0f:c4:e5:5b:cc:b3:8f: c1:1e:fc:33:ee:76:07:33:63:5a:01:e7:a9:64:2d: b1:14:d7:7d:d9:c8:86:ea:c9:74:b1:d3:62:35:61: 8f:b9:75:2a:69:61:9a:76:8b:41:4d:6b:21:75:33: 43:82:df:fa:6d:3e:49:1a:0a:42:16:00:a5:2c:82: 9d:52:2b:7a:dd:65:29:40:fe:8b:4a:bc:d6:bf:f2: c8:7b:02:e6:0b:63:0c:db:61:f2:0e:70:74:2f:5d: 91:45:ac:1d:fb:e7:f2:94:f8:8e:5e:28:e6:65:62: af:85:f0:9e:d8:c5:96:ac:15:4c:b5:83:0c:77:34: 64:17:67:85:c4:bc:06:ec:26:96:a9:bd:da:81:2d: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:97:B7:33:6F:5F:C4:C6:DB:4B:C0:26:49:90:18:CA:97:A1:07 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d1:a9:3c:c5:38:89:0a:fa:2a:4b:27:bc:e1:0b:e7:e1:5b: 07:23:29:4b:3e:b0:99:37:d1:8f:ad:c5:f8:07:92:ad:74:3a: 76:df:ed:1a:51:5e:56:a7:26:e0:58:38:0f:eb:9f:44:3f:cd: 91:b8:af:3a:3e:e9:17:2b:4d:05:bc:f2:bc:c9:b9:58:95:88: e1:b9:1f:a8:4e:65:db:bd:bd:62:81:2d:23:f0:ba:bd:23:a7: 8b:76:ba:f0:b0:6f:0f:2f:0e:06:51:1b:59:f1:b1:08:79:af: 96:68:fc:11:6b:a9:7c:5a:f9:64:c0:3d:ee:48:ab:a8:7b:5c: 79:20:6a:ca:f8:38:16:68:42:fb:a5:e4:e3:6f:e3:c4:6d:3d: df:34:83:bb:2c:65:c4:dc:de:a5:36:51:35:ed:10:82:2d:ee: e8:17:0c:c6:69:05:f3:2e:a6:da:46:90:1a:7a:c3:48:59:12: a0:5d:77:26:60:5b:4a:3c:5e:d2:93:02:f7:11:d5:11:e3:2a: 1c:e9:cb:bd:c6:46:31:b7:73:30:fe:a4:90:81:e5:ed:db:e3: 01:2a:62:05:94:f3:9a:4b:ef:77:6c:2c:65:8d:55:ea:41:6c: da:48:5a:df:9e:c7:17:1e:d7:ba:47:09:4a:59:55:fd:e8:38: 37:77:f8:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbotdo6LVlwzfcHmUY0IYxhGVdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTEyMDUyMzU2NDVaFw0yNTEyMDkwNzE5NDVaMDMxMTAvBgNV BAMTKDA4QUQ5N0I3MzM2RjVGQzRDNkRCNEJDMDI2NDk5MDE4Q0E5N0ExMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3cBm+6v6LwD5C04PpN45Fkms SC+pzm6jtMFkmCNWURm7qSrPFCE4XGSueE/BE/InVZeS+QwhOolvc+IO/BGoTfyo 07YjdQU5S5FvkGClRJ2AnVqkHj2Wo73s8BSUEj6CscVlinDv+M/7M+/W1tl5D8Tl W8yzj8Ee/DPudgczY1oB56lkLbEU133ZyIbqyXSx02I1YY+5dSppYZp2i0FNayF1 M0OC3/ptPkkaCkIWAKUsgp1SK3rdZSlA/otKvNa/8sh7AuYLYwzbYfIOcHQvXZFF rB375/KU+I5eKOZlYq+F8J7YxZasFUy1gwx3NGQXZ4XEvAbsJpapvdqBLWfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCK2XtzNvX8TG20vAJkmQGMqXoQcwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfRqTzFOIkK+ipLJ7zhC+fhWwcjKUs+sJk3 0Y+txfgHkq10Onbf7RpRXlanJuBYOA/rn0Q/zZG4rzo+6RcrTQW88rzJuViViOG5 H6hOZdu9vWKBLSPwur0jp4t2uvCwbw8vDgZRG1nxsQh5r5Zo/BFrqXxa+WTAPe5I q6h7XHkgasr4OBZoQvul5ONv48RtPd80g7ssZcTc3qU2UTXtEIIt7ugXDMZpBfMu ptpGkBp6w0hZEqBddyZgW0o8XtKTAvcR1RHjKhzpy73GRjG3czD+pJCB5e3b4wEq YgWU85pL73dsLGWNVepBbNpIWt+exxce17pHCUpZVf3oODd3+Lw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:21 2025 by rpki-client