This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: lAqZigOYacFcR8KJYybGvxOg4Gmc8jNwPR2YKAHOT1k= Subject key identifier: A3:20:5C:85:12:38:29:00:27:92:A6:EE:DB:93:81:7A:11:CD:BC:1C Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 59942283798D019882DB68703A22220276D8F441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 053E Signing time: Tue 16 Dec 2025 04:01:52 +0000 Manifest this update: Tue 16 Dec 2025 03:56:52 +0000 Manifest next update: Fri 19 Dec 2025 07:26:52 +0000 Files and hashes: 1: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: JOR+0EmASrKpatRGbZfsNpjALJCvgPJJauEX2UmCCnQ=) 2: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 4: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:94:22:83:79:8d:01:98:82:db:68:70:3a:22:22:02:76:d8:f4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Dec 16 03:56:52 2025 GMT Not After : Dec 19 07:26:52 2025 GMT Subject: CN=A3205C85123829002792A6EEDB93817A11CDBC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5b:64:ea:bc:49:74:57:0e:64:77:f8:81:99: ba:6c:18:81:a8:96:52:82:23:74:f7:e1:c4:c0:46: 48:92:f2:2f:33:1c:27:9b:82:78:0a:2e:ee:b0:54: 24:3f:c4:1a:5e:97:61:14:0e:6a:64:33:b9:53:ca: 99:97:4c:5b:d9:9b:0f:3b:23:88:f3:e0:3d:6e:f1: 77:28:b2:3c:8d:ea:a4:7e:87:0c:1a:48:74:ff:2a: b6:97:cf:08:b6:75:3e:65:dc:2f:fd:b5:29:26:9a: 36:3a:8a:a5:ad:10:56:33:e3:61:03:2e:59:d7:0c: d7:6a:01:f1:fa:0e:07:48:b6:11:fa:67:d8:af:77: 74:9e:70:8d:88:ea:91:24:4c:33:8d:cc:d4:0a:d9: f8:29:5c:31:5c:00:42:84:bd:3f:cd:5a:69:56:3d: c4:f8:f6:13:c2:29:2d:f4:c5:06:2a:75:8b:64:0e: 18:fc:fe:4b:7a:5f:4c:6c:27:4b:f2:3b:a6:af:3e: 56:63:a6:0a:1b:fe:ff:f0:50:a9:93:80:82:08:70: de:87:da:8e:97:1a:95:4e:a4:28:93:05:db:86:7e: 7a:da:fc:b7:95:7f:ee:09:92:59:05:79:23:90:1c: 5c:23:19:b3:d9:3a:fe:51:af:2d:34:a8:ac:ae:f5: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:20:5C:85:12:38:29:00:27:92:A6:EE:DB:93:81:7A:11:CD:BC:1C X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b8:dc:d6:70:e4:ee:5a:95:73:84:92:33:d9:5f:4c:12:3a: 47:8c:20:97:b9:99:99:db:99:3b:56:e8:6a:5b:ac:c8:f7:b2: 8f:ee:14:4b:c4:0b:1b:b3:3c:e5:4f:89:eb:fe:c1:bd:70:52: e1:3b:e9:22:c0:84:95:81:45:5c:f7:76:9e:26:f2:58:4c:21: 49:3c:04:b7:7b:4b:89:fe:1c:77:a8:93:3c:b2:90:fc:54:fa: d2:7d:87:1e:c3:89:5a:fe:12:2f:f8:2a:11:37:9c:ba:7e:09: 82:3b:56:f8:e3:39:00:d4:dd:64:69:30:1c:a5:1e:41:49:1a: 2b:8a:f0:aa:aa:58:b8:61:c4:11:f8:86:0d:77:b9:95:0b:bc: 03:be:6b:ae:49:fb:33:59:f2:a4:32:76:0c:b7:92:b7:00:8b: 0e:0a:41:f1:37:25:30:c7:27:16:f2:b1:f2:3d:f5:7a:8f:c0: ef:7c:af:c1:80:c6:9f:21:81:f3:43:4f:5a:e5:9c:6e:6c:2a: d1:d0:18:5e:27:cb:d3:94:79:04:7d:e2:f4:94:55:4a:b6:cf: d3:9d:d8:b5:61:ea:94:6f:38:9e:42:d9:9c:26:38:61:3c:e0: 91:4b:28:f3:d6:3b:b8:4c:94:1b:d4:09:f1:e6:a7:10:d1:29: 0f:42:0b:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZQig3mNAZiC22hwOiIiAnbY9EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTEyMTYwMzU2NTJaFw0yNTEyMTkwNzI2NTJaMDMxMTAvBgNV BAMTKEEzMjA1Qzg1MTIzODI5MDAyNzkyQTZFRURCOTM4MTdBMTFDREJDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9W2TqvEl0Vw5kd/iBmbpsGIGo llKCI3T34cTARkiS8i8zHCebgngKLu6wVCQ/xBpel2EUDmpkM7lTypmXTFvZmw87 I4jz4D1u8XcosjyN6qR+hwwaSHT/KraXzwi2dT5l3C/9tSkmmjY6iqWtEFYz42ED LlnXDNdqAfH6DgdIthH6Z9ivd3SecI2I6pEkTDONzNQK2fgpXDFcAEKEvT/NWmlW PcT49hPCKS30xQYqdYtkDhj8/kt6X0xsJ0vyO6avPlZjpgob/v/wUKmTgIIIcN6H 2o6XGpVOpCiTBduGfnra/LeVf+4JklkFeSOQHFwjGbPZOv5Rry00qKyu9ZZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyBchRI4KQAnkqbu25OBehHNvBwwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu43NZw5O5alXOEkjPZX0wSOkeMIJe5mZnb mTtW6GpbrMj3so/uFEvECxuzPOVPiev+wb1wUuE76SLAhJWBRVz3dp4m8lhMIUk8 BLd7S4n+HHeokzyykPxU+tJ9hx7DiVr+Ei/4KhE3nLp+CYI7VvjjOQDU3WRpMByl HkFJGiuK8KqqWLhhxBH4hg13uZULvAO+a65J+zNZ8qQydgy3krcAiw4KQfE3JTDH JxbysfI99XqPwO98r8GAxp8hgfNDT1rlnG5sKtHQGF4ny9OUeQR94vSUVUq2z9Od 2LVh6pRvOJ5C2ZwmOGE84JFLKPPWO7hMlBvUCfHmpxDRKQ9CC3Q= -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:14 2025 by rpki-client