This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: eKzTUEyLdsijZNd9+Hv5OKo8YkNbtcVk0H9IHt1/5iI= Subject key identifier: F8:F1:6D:75:7F:9C:3B:8D:AD:93:B2:1D:34:4B:8F:6A:6F:17:A1:D3 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 586FC059761FD691A50D16504D0FB623693CA66A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 053A Signing time: Sat 06 Dec 2025 16:20:50 +0000 Manifest this update: Sat 06 Dec 2025 16:15:50 +0000 Manifest next update: Wed 10 Dec 2025 02:37:50 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo=) 2: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: vj18qPibTRnW2q43Aqk+wiktj+cOcmbC0HEob2SB8vQ=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: JFOIJs50h687qC8bpxxJdwCT4qWgGzzf4owWeGTBCcg=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: c7lD2035nwAuocF3S+Kkx7XFX+D5GmobD9VRSTS7t1w=) 5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: PqeFBMmCxWfD824pPn9xm7j9NLtgK4mpMJgmDQzThss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6f:c0:59:76:1f:d6:91:a5:0d:16:50:4d:0f:b6:23:69:3c:a6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Dec 6 16:15:50 2025 GMT Not After : Dec 10 02:37:50 2025 GMT Subject: CN=F8F16D757F9C3B8DAD93B21D344B8F6A6F17A1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:c5:5a:3b:21:e0:e0:fe:e7:c1:3b:92:5c: d3:cc:8f:8a:97:02:b8:ee:16:12:18:3f:18:9e:fd: 23:19:94:de:08:ec:61:b9:ce:7e:9b:61:62:a0:11: 66:44:e7:42:fc:e2:40:db:6f:a0:b6:62:9f:0e:e6: 92:3c:7c:9d:1a:86:d9:9d:6f:83:8b:57:f5:8f:d3: 1d:f2:f8:71:94:fa:76:07:4d:c5:91:13:4e:a8:86: 12:55:27:9b:06:0f:df:04:33:17:52:49:d1:3f:cb: 46:9b:06:4a:55:8c:50:bf:0c:7d:5f:97:fa:66:9c: 0e:0d:f3:3d:65:ef:78:20:cc:42:6e:ad:a5:66:77: 6b:1f:8b:62:75:1c:f5:cb:4a:97:b1:64:61:28:1a: fd:07:b7:a8:68:65:f5:61:25:d0:cb:58:37:08:22: 67:01:be:3c:87:be:22:44:f2:24:76:ed:9f:43:66: 2c:03:1f:67:5d:90:bb:a2:9c:fa:0f:f3:0c:38:cf: 11:1a:8c:93:a9:c9:15:2e:a7:73:a5:55:98:f5:43: 18:80:8d:06:ef:4d:e5:ae:30:1e:91:a3:f3:cd:d3: 2f:a6:12:a4:04:12:93:64:0a:dc:dc:2a:4c:23:ae: 4d:1c:84:45:73:60:3e:0f:6b:bf:9a:bd:8e:16:ab: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:6D:75:7F:9C:3B:8D:AD:93:B2:1D:34:4B:8F:6A:6F:17:A1:D3 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b9:f1:3c:fd:d6:8d:3f:65:4f:ee:48:ab:33:25:26:ca:a5: 99:bb:93:f6:52:68:b1:2c:29:e1:99:9d:c8:79:7e:7f:f5:3e: 49:06:b4:33:04:ed:a8:42:1c:56:8f:fd:ad:5a:ca:a6:1d:60: 83:2c:97:c7:d3:ed:bc:57:d9:a2:34:d8:8f:5e:83:93:19:de: e3:d0:aa:2b:19:0c:48:6a:dd:aa:91:b5:33:48:cc:c2:1c:30: cd:b3:b0:3e:9e:e2:3f:68:8c:65:23:9a:36:fa:86:73:51:21: 88:1c:6d:73:18:0c:c5:86:65:32:68:dd:aa:3e:6d:8e:33:95: 25:3d:1c:72:49:30:e1:e2:b1:9d:cb:ed:ba:c2:78:0f:6d:2a: ca:c4:bf:c7:96:eb:f1:19:ac:cb:bc:1d:b3:49:ba:2c:c5:a0: f5:c0:bf:d2:42:05:04:63:97:5c:2d:03:71:24:c0:ec:24:03: f7:31:df:d8:39:cc:0a:00:5e:53:5f:a6:8f:ba:72:65:be:12: 27:66:9d:03:16:37:56:e3:39:60:30:02:63:0c:82:16:cb:fa: 62:0d:fb:0c:0a:df:bb:af:1b:3f:9e:99:a4:44:ea:b5:8c:5e: 2a:c4:e1:e9:aa:4f:cd:b9:e0:d0:55:57:c1:b0:8f:fb:a2:1f: 2c:06:23:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWG/AWXYf1pGlDRZQTQ+2I2k8pmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTEyMDYxNjE1NTBaFw0yNTEyMTAwMjM3NTBaMDMxMTAvBgNV BAMTKEY4RjE2RDc1N0Y5QzNCOERBRDkzQjIxRDM0NEI4RjZBNkYxN0ExRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAMVaOyHg4P7nwTuSXNPMj4qX ArjuFhIYPxie/SMZlN4I7GG5zn6bYWKgEWZE50L84kDbb6C2Yp8O5pI8fJ0ahtmd b4OLV/WP0x3y+HGU+nYHTcWRE06ohhJVJ5sGD98EMxdSSdE/y0abBkpVjFC/DH1f l/pmnA4N8z1l73ggzEJuraVmd2sfi2J1HPXLSpexZGEoGv0Ht6hoZfVhJdDLWDcI ImcBvjyHviJE8iR27Z9DZiwDH2ddkLuinPoP8ww4zxEajJOpyRUup3OlVZj1QxiA jQbvTeWuMB6Ro/PN0y+mEqQEEpNkCtzcKkwjrk0chEVzYD4Pa7+avY4Wq64lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PFtdX+cO42tk7IdNEuPam8XodMwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIe58Tz91o0/ZU/uSKszJSbKpZm7k/ZSaLEs KeGZnch5fn/1PkkGtDME7ahCHFaP/a1ayqYdYIMsl8fT7bxX2aI02I9eg5MZ3uPQ qisZDEhq3aqRtTNIzMIcMM2zsD6e4j9ojGUjmjb6hnNRIYgcbXMYDMWGZTJo3ao+ bY4zlSU9HHJJMOHisZ3L7brCeA9tKsrEv8eW6/EZrMu8HbNJuizFoPXAv9JCBQRj l1wtA3EkwOwkA/cx39g5zAoAXlNfpo+6cmW+EidmnQMWN1bjOWAwAmMMghbL+mIN +wwK37uvGz+emaRE6rWMXirE4emqT8254NBVV8Gwj/uiHywGI+Y= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:06 2025 by rpki-client