This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: LrihcJua7SOWCFi1LOiSKc/syDcD2sYQzrr5yQMNhLw= Subject key identifier: 2C:BE:D8:BE:FF:84:B3:2C:9B:FE:C5:40:2C:23:9C:AA:BA:94:4C:AD Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 5F3EDED202F9D9777BF132ED1F707056B92DFC99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 0302 Signing time: Sat 06 Dec 2025 22:00:03 +0000 Manifest this update: Sat 06 Dec 2025 21:55:03 +0000 Manifest next update: Wed 10 Dec 2025 01:52:03 +0000 Files and hashes: 1: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 2: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 3: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 4: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 5: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 6: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: FLWeCsbmekEfOhZMHy4O61ahjQHqBvxFr6SqsJ2IVNI=) 7: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3e:de:d2:02:f9:d9:77:7b:f1:32:ed:1f:70:70:56:b9:2d:fc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Dec 6 21:55:03 2025 GMT Not After : Dec 10 01:52:03 2025 GMT Subject: CN=2CBED8BEFF84B32C9BFEC5402C239CAABA944CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:b9:8a:1c:2a:95:83:50:3f:f8:53:03:b5: 9e:02:3b:30:de:d7:38:de:34:c7:22:da:43:a3:7c: e9:c4:8b:28:5b:a4:e8:ea:a1:81:4d:cb:fa:a6:46: f6:5b:6d:e9:db:10:18:21:76:f6:a6:74:a0:f9:38: 97:fd:d3:57:2c:ec:b5:7c:c2:98:f8:62:69:bc:92: 5f:ac:48:2f:5e:b0:e0:36:3a:42:9c:fd:20:43:51: f3:ef:50:ae:04:cd:1f:96:f8:fd:57:dd:f7:a3:1e: 00:e7:4f:22:06:48:f8:09:33:57:cb:9e:6c:9e:fa: ea:21:f1:97:7a:d5:57:46:de:76:93:91:aa:14:20: a4:67:e3:d7:b8:a5:7f:93:03:74:9c:04:dc:d1:c8: 80:e6:b6:4e:88:63:ad:a9:ce:bc:31:3e:ef:8c:5a: 0c:65:70:34:71:6a:d9:bd:72:48:ef:e6:c3:6e:6b: de:e2:e7:a0:d3:aa:f3:89:a7:25:2a:61:e5:ff:d0: 80:f2:09:dd:0d:83:68:4f:33:c6:94:3e:6a:62:61: 58:ad:66:8a:f4:02:8c:3f:71:1e:9e:72:e4:c9:d7: ca:96:54:60:c2:fc:bf:11:5e:19:c9:c7:4c:ed:ba: 69:3a:e6:9e:d4:64:03:43:2a:f8:c3:44:9a:d8:23: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:D8:BE:FF:84:B3:2C:9B:FE:C5:40:2C:23:9C:AA:BA:94:4C:AD X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ae:ef:49:16:77:7f:db:84:1e:fd:e6:e5:5c:e7:4e:7f:cf: ad:38:6f:ac:10:ad:17:4d:f3:25:02:30:41:36:de:d7:19:af: ff:b8:2c:80:a0:9b:59:0f:01:78:96:1e:53:8d:7d:d8:48:9f: 41:2d:3f:ea:81:32:7e:26:ad:14:0b:61:98:ee:98:7f:c2:97: 6b:02:fd:0f:f0:01:af:d9:81:b3:9f:cb:d5:7a:be:8e:1a:3d: 02:10:0d:d7:dd:1e:37:30:c1:31:b1:56:42:33:bd:0d:b8:d1: e0:fa:f4:f7:aa:39:0b:d9:99:21:09:16:f7:e4:e9:0e:9c:fe: 11:92:b7:4b:0a:e8:50:c8:ff:31:b8:0b:f9:f5:1a:9f:c5:f2: 8c:2d:fe:c9:9f:14:8d:38:9e:56:3f:92:0f:95:1c:82:3d:13: 80:3c:be:52:4f:c1:f6:cd:10:62:4b:2e:26:2b:c2:55:03:d7: 29:b4:63:9c:12:c0:34:1e:f1:a5:a0:2f:82:a3:2d:f3:53:87: 92:91:6f:08:6c:dc:04:e6:fc:bb:10:6b:45:03:16:a9:25:3f: bb:a5:08:1d:98:f5:89:00:99:bd:75:58:49:a3:1e:73:cf:d2: c8:ef:d7:f3:db:99:4c:94:83:06:d7:96:80:f7:64:f6:30:5b: c5:b7:e3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXz7e0gL52Xd78TLtH3BwVrkt/JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTEyMDYyMTU1MDNaFw0yNTEyMTAwMTUyMDNaMDMxMTAvBgNV BAMTKDJDQkVEOEJFRkY4NEIzMkM5QkZFQzU0MDJDMjM5Q0FBQkE5NDRDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ7mKHCqVg1A/+FMDtZ4COzDe 1zjeNMci2kOjfOnEiyhbpOjqoYFNy/qmRvZbbenbEBghdvamdKD5OJf901cs7LV8 wpj4Ymm8kl+sSC9esOA2OkKc/SBDUfPvUK4EzR+W+P1X3fejHgDnTyIGSPgJM1fL nmye+uoh8Zd61VdG3naTkaoUIKRn49e4pX+TA3ScBNzRyIDmtk6IY62pzrwxPu+M WgxlcDRxatm9ckjv5sNua97i56DTqvOJpyUqYeX/0IDyCd0Ng2hPM8aUPmpiYVit Zor0Aow/cR6ecuTJ18qWVGDC/L8RXhnJx0ztumk65p7UZANDKvjDRJrYI3gdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULL7Yvv+Esyyb/sVALCOcqrqUTK0wHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+u70kWd3/bhB795uVc505/z604b6wQrRdN 8yUCMEE23tcZr/+4LICgm1kPAXiWHlONfdhIn0EtP+qBMn4mrRQLYZjumH/Cl2sC /Q/wAa/ZgbOfy9V6vo4aPQIQDdfdHjcwwTGxVkIzvQ240eD69PeqOQvZmSEJFvfk 6Q6c/hGSt0sK6FDI/zG4C/n1Gp/F8owt/smfFI04nlY/kg+VHII9E4A8vlJPwfbN EGJLLiYrwlUD1ym0Y5wSwDQe8aWgL4KjLfNTh5KRbwhs3ATm/LsQa0UDFqklP7ul CB2Y9YkAmb11WEmjHnPP0sjv1/PbmUyUgwbXloD3ZPYwW8W348s= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:57 2025 by rpki-client