This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: Dymabjk1sgFscCNGTJhJsVr10xF9hkt2f9owoP2Fl/4= Subject key identifier: 0E:24:59:F2:D2:C4:33:97:CC:E1:E8:EA:B1:AA:C8:E3:71:3D:A7:A2 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 669F284A4B6F7E7BE47AE42E8ACAA38A1002A299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: F0 Signing time: Thu 18 Dec 2025 05:42:12 +0000 Manifest this update: Thu 18 Dec 2025 05:37:12 +0000 Manifest next update: Sun 21 Dec 2025 14:58:12 +0000 Files and hashes: 1: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) 2: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: f3CadU1AF25nHSl/xdfFZneNww64iEPGzZis6G8XnHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9f:28:4a:4b:6f:7e:7b:e4:7a:e4:2e:8a:ca:a3:8a:10:02:a2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Dec 18 05:37:12 2025 GMT Not After : Dec 21 14:58:12 2025 GMT Subject: CN=0E2459F2D2C43397CCE1E8EAB1AAC8E3713DA7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:8c:ee:c0:b8:ae:c3:d4:f3:7f:3d:57:10: 3f:6b:54:4c:25:ee:b3:7f:36:2e:10:8c:a7:cb:d7: 07:46:52:3f:9f:3a:2d:9f:f2:56:ac:98:7b:b1:c2: 17:f3:94:da:8f:e5:43:dd:55:7a:a3:f3:da:9c:64: cf:5e:12:ed:1f:e2:c2:8e:d1:16:85:fd:3f:6c:bd: 6d:c2:23:2f:e5:af:a3:be:11:80:19:c1:8f:fe:14: 3f:f7:24:f4:d6:46:da:4b:a5:31:07:f1:ae:9e:e3: 7d:f5:69:5a:c9:aa:0d:65:1e:30:ea:70:9a:d0:f1: 15:f3:e5:47:3c:b7:0e:bb:4f:ba:86:78:c6:ac:6d: eb:63:53:e5:2c:7b:4a:bf:db:4f:98:b3:3d:84:fd: b1:32:96:b1:8e:7b:ad:f1:79:a5:c9:ab:0b:9d:7a: a9:74:1b:2e:bb:74:73:ce:f2:a7:97:cc:6e:47:e3: 82:4c:b5:ac:6d:8e:79:ae:4c:4a:30:86:06:79:6e: dd:42:93:7c:dd:90:86:55:3e:85:32:37:9c:1f:80: 71:a4:ae:de:7f:ce:02:4a:06:0e:8b:21:52:99:a9: 32:1c:de:3f:d3:0c:f9:c6:71:94:05:6c:f0:ea:95: 43:35:59:01:54:49:1d:be:fc:a3:c8:65:bc:19:ce: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:24:59:F2:D2:C4:33:97:CC:E1:E8:EA:B1:AA:C8:E3:71:3D:A7:A2 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:18:ad:0d:06:2f:ca:41:6d:5a:10:9d:b9:f6:2b:dd:c1:df: 07:13:4f:6d:92:1b:54:88:4f:43:e3:44:05:39:db:2e:e8:3b: 7a:74:ae:c1:1a:33:62:81:da:2a:4f:4b:fc:49:74:57:6b:b8: ac:1f:11:65:e6:51:06:a5:df:7e:40:fe:0e:d0:e3:ef:9a:82: da:d4:15:ee:73:a3:a9:96:f8:17:bc:f9:f7:b8:77:fc:09:49: 41:cf:33:5d:d9:45:b8:dc:da:28:97:99:b1:e7:6b:f8:69:e5: 73:dd:b8:11:26:7d:d3:24:c5:c5:f5:b9:bf:6c:c9:e1:d9:1d: b8:e4:72:2b:8a:90:77:89:e9:84:ff:4a:f1:58:28:df:ef:4c: 05:10:fa:e2:44:19:aa:bf:cc:4b:78:40:3b:40:a4:b8:8e:94: d0:e0:74:4a:ba:81:a5:1d:c7:be:a9:c2:01:3e:e8:33:41:9c: 97:e0:7b:32:f6:68:9d:e2:f0:31:0e:d9:11:8a:77:78:12:1a: 2e:03:1e:76:df:bc:32:63:19:6e:a6:01:f5:6c:92:74:fe:be: 6e:40:15:95:50:e0:3d:7b:30:69:b3:fa:d4:a2:bd:12:36:fc: ee:99:ad:0d:24:4f:c6:48:ec:e0:54:09:32:c6:63:43:df:a6: d6:45:39:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZp8oSktvfnvkeuQuisqjihACopkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNTEyMTgwNTM3MTJaFw0yNTEyMjExNDU4MTJaMDMxMTAvBgNV BAMTKDBFMjQ1OUYyRDJDNDMzOTdDQ0UxRThFQUIxQUFDOEUzNzEzREE3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACYzuwLiuw9Tzfz1XED9rVEwl 7rN/Ni4QjKfL1wdGUj+fOi2f8lasmHuxwhfzlNqP5UPdVXqj89qcZM9eEu0f4sKO 0RaF/T9svW3CIy/lr6O+EYAZwY/+FD/3JPTWRtpLpTEH8a6e4331aVrJqg1lHjDq cJrQ8RXz5Uc8tw67T7qGeMasbetjU+Use0q/20+Ysz2E/bEylrGOe63xeaXJqwud eql0Gy67dHPO8qeXzG5H44JMtaxtjnmuTEowhgZ5bt1Ck3zdkIZVPoUyN5wfgHGk rt5/zgJKBg6LIVKZqTIc3j/TDPnGcZQFbPDqlUM1WQFUSR2+/KPIZbwZzrC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDiRZ8tLEM5fM4ejqsarI43E9p6IwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcYrQ0GL8pBbVoQnbn2K93B3wcTT22SG1SI T0PjRAU52y7oO3p0rsEaM2KB2ipPS/xJdFdruKwfEWXmUQal335A/g7Q4++agtrU Fe5zo6mW+Be8+fe4d/wJSUHPM13ZRbjc2iiXmbHna/hp5XPduBEmfdMkxcX1ub9s yeHZHbjkciuKkHeJ6YT/SvFYKN/vTAUQ+uJEGaq/zEt4QDtApLiOlNDgdEq6gaUd x76pwgE+6DNBnJfgezL2aJ3i8DEO2RGKd3gSGi4DHnbfvDJjGW6mAfVsknT+vm5A FZVQ4D17MGmz+tSivRI2/O6ZrQ0kT8ZI7OBUCTLGY0PfptZFOS4= -----END CERTIFICATE-----Generated at Thu Dec 18 15:26:29 2025 by rpki-client