This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: vFyddoXezYnV7b7dPpdPGEnjKg353Vx1v9ycEz+Fogk= Subject key identifier: D0:56:DD:F4:BF:66:7B:BE:E0:C7:6C:4E:B5:03:BF:C8:DE:16:99:8C Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 098C71906FD1D3D9486D63D4838CEC3490B2C701 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: B0 Signing time: Sat 06 Dec 2025 09:30:02 +0000 Manifest this update: Sat 06 Dec 2025 09:25:02 +0000 Manifest next update: Tue 09 Dec 2025 20:53:02 +0000 Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: DxrvBG2EwoDi5CWPRxZjQftZXgHK8QtqiBt20+LN2E8=) 2: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: eLoJQcRR7UviwY1rgXoVkCmTBMM5/WsPMnoDlvo+6Xo=) 3: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: rvcSx7tGueeD+ap0O9VamU9zLtyA+1mEAzC50bGgqLY=) 4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: cPfXuq0p2jW4xPUhE/apIJeWsmib6FpPpP3zgdnQtuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8c:71:90:6f:d1:d3:d9:48:6d:63:d4:83:8c:ec:34:90:b2:c7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Dec 6 09:25:02 2025 GMT Not After : Dec 9 20:53:02 2025 GMT Subject: CN=D056DDF4BF667BBEE0C76C4EB503BFC8DE16998C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:cc:a6:6d:94:a9:62:3b:b6:f0:30:3b:a4: ae:8c:15:2f:13:04:5f:c1:dd:e8:55:9a:b2:91:44: a3:06:c7:e9:c8:55:34:59:24:4f:66:33:12:3f:3f: 96:d2:5c:72:71:b8:3e:6e:0c:62:70:f9:5b:7d:77: ff:34:00:7b:d1:4d:b2:3e:4f:79:d1:e0:60:2c:ee: 6b:98:2d:5a:f3:66:1c:be:d1:4f:cb:8b:90:2f:d2: d2:ba:ba:d8:95:2b:7c:e9:a9:26:ce:85:7e:af:fd: 9f:ad:8d:1b:23:13:75:65:82:5b:a0:e6:d9:36:e8: 3f:cf:03:1a:02:71:15:d9:fe:31:58:f5:73:b4:16: 59:7e:53:88:47:ae:e2:e7:2e:5d:e5:15:e2:d3:c7: b3:fc:29:62:f2:d0:fe:2a:ce:bd:9e:89:0b:47:c6: 9a:8b:49:a8:0e:50:41:49:cb:84:24:4c:2f:d8:c1: e5:d4:28:60:75:4b:fe:92:33:eb:9d:15:a4:b7:54: 87:ca:50:b5:4a:f6:c2:af:1a:fa:96:b1:95:25:98: 84:55:fc:b1:a7:c1:8e:05:73:be:63:3c:5e:2c:89: 97:48:9e:15:de:86:8f:05:fc:41:2c:4c:b0:31:1e: 54:db:ca:f5:14:0d:7f:c6:7e:3d:f6:f0:69:b4:e8: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:DD:F4:BF:66:7B:BE:E0:C7:6C:4E:B5:03:BF:C8:DE:16:99:8C X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1f:58:94:c6:a4:e9:87:15:fd:9e:b1:5f:e3:f0:44:14:8c: 5a:9f:ba:b7:91:98:74:f2:e8:0b:5d:34:a3:2b:4a:aa:a2:18: 8c:08:27:ea:93:b3:1f:7e:8d:1c:49:78:32:56:cb:43:04:2b: 60:44:21:09:18:9d:63:dc:2b:f5:49:0c:09:ed:b2:35:08:13: 8f:4a:1b:28:37:33:75:f3:be:85:93:c2:75:00:8a:d5:80:59: 37:c5:bc:55:e4:9d:0d:2e:33:b8:e3:30:fd:a6:cf:63:19:8f: 0e:2c:cb:6f:de:5c:2f:a3:46:ec:1e:76:38:42:9d:be:c1:93: 0b:4c:51:fa:c0:7e:ad:d4:ad:40:bc:3c:33:71:e8:6f:0d:da: 26:a4:37:1a:0a:51:53:57:f1:31:4a:27:70:6e:fd:49:48:1d: 36:70:81:d2:64:b4:ed:ad:12:96:e5:bb:43:59:a0:81:8f:81: d8:bf:23:d2:c9:b3:7a:95:5f:8f:0d:72:fd:5a:fc:6b:7c:e9: b3:d9:b1:69:6b:fb:6c:8e:86:2b:87:0c:cf:39:e2:68:a9:3c: b8:dd:aa:0e:23:bc:b9:3b:47:58:06:fc:63:58:41:73:17:c8: c3:a0:81:07:b1:89:eb:4b:a4:b5:3f:2e:42:07:0b:3b:ad:75: 82:55:f0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYxxkG/R09lIbWPUg4zsNJCyxwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNTEyMDYwOTI1MDJaFw0yNTEyMDkyMDUzMDJaMDMxMTAvBgNV BAMTKEQwNTZEREY0QkY2NjdCQkVFMEM3NkM0RUI1MDNCRkM4REUxNjk5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm48ymbZSpYju28DA7pK6MFS8T BF/B3ehVmrKRRKMGx+nIVTRZJE9mMxI/P5bSXHJxuD5uDGJw+Vt9d/80AHvRTbI+ T3nR4GAs7muYLVrzZhy+0U/Li5Av0tK6utiVK3zpqSbOhX6v/Z+tjRsjE3Vlglug 5tk26D/PAxoCcRXZ/jFY9XO0Fll+U4hHruLnLl3lFeLTx7P8KWLy0P4qzr2eiQtH xpqLSagOUEFJy4QkTC/YweXUKGB1S/6SM+udFaS3VIfKULVK9sKvGvqWsZUlmIRV /LGnwY4Fc75jPF4siZdInhXeho8F/EEsTLAxHlTbyvUUDX/Gfj328Gm06GEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Fbd9L9me77gx2xOtQO/yN4WmYwwHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgfWJTGpOmHFf2esV/j8EQUjFqfureRmHTy 6AtdNKMrSqqiGIwIJ+qTsx9+jRxJeDJWy0MEK2BEIQkYnWPcK/VJDAntsjUIE49K Gyg3M3XzvoWTwnUAitWAWTfFvFXknQ0uM7jjMP2mz2MZjw4sy2/eXC+jRuwedjhC nb7BkwtMUfrAfq3UrUC8PDNx6G8N2iakNxoKUVNX8TFKJ3Bu/UlIHTZwgdJktO2t Epblu0NZoIGPgdi/I9LJs3qVX48Ncv1a/Gt86bPZsWlr+2yOhiuHDM854mipPLjd qg4jvLk7R1gG/GNYQXMXyMOggQexietLpLU/LkIHCzutdYJV8Ec= -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:29 2025 by rpki-client