This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: MCRaV87isWfzGKWgF9KA6PZ9RNe2qmwT1Lqk8/BnLRo= Subject key identifier: B3:B1:F8:AC:B0:35:66:FE:F5:19:52:BF:D7:29:3F:C5:BB:A2:FD:D0 Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 4B0042D2FDCCA79605F1E0DD6B794D260F0230B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: 0112 Signing time: Fri 05 Dec 2025 14:11:05 +0000 Manifest this update: Fri 05 Dec 2025 14:06:05 +0000 Manifest next update: Mon 08 Dec 2025 21:01:05 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: OeeMNOyztTTW27Kz0TAajZmWtZJSRnqG7dM1WSSDqVo=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:00:42:d2:fd:cc:a7:96:05:f1:e0:dd:6b:79:4d:26:0f:02:30:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Dec 5 14:06:05 2025 GMT Not After : Dec 8 21:01:05 2025 GMT Subject: CN=B3B1F8ACB03566FEF51952BFD7293FC5BBA2FDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:94:f1:b1:f0:b0:97:2e:6b:4a:91:70:b6: bc:e8:5b:a0:b3:db:fb:94:8b:81:90:c7:2d:ff:36: f9:c0:77:4c:cc:1e:e2:04:66:f7:3a:06:f4:d6:42: a3:bb:f2:a2:01:49:28:0a:02:56:db:a3:9b:dc:64: 7d:6d:ad:a5:da:32:bb:30:9b:88:d1:36:2f:64:7f: 45:78:7f:3c:57:dd:e0:8d:56:91:10:23:a8:f9:f5: 28:21:f9:45:9b:aa:9d:76:bd:cd:5f:7d:fd:d6:c1: 46:36:23:f7:e1:1b:d7:69:99:d2:08:a9:be:37:ca: 0b:17:90:e7:bd:ee:56:68:d7:0d:d1:2b:31:6b:53: 86:2d:18:84:14:08:7d:d9:2a:69:0e:04:6a:35:50: 32:87:68:10:2c:b7:8a:a7:95:43:67:83:50:40:9a: 4d:5e:33:64:79:98:ac:b4:72:98:dc:4c:91:e6:5a: aa:69:0e:d2:e1:c9:2e:7e:3f:61:68:cf:4a:0a:76: 3e:e6:d1:b0:bd:dc:0d:72:e5:41:40:24:c9:cc:dd: 0f:9f:db:ca:1a:c2:37:bd:33:4b:37:ca:4b:91:34: 9c:3a:98:de:af:ed:0b:13:d6:94:09:08:90:f8:e3: 73:87:c3:89:9f:31:74:c0:d9:e3:15:d6:41:c9:ab: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B1:F8:AC:B0:35:66:FE:F5:19:52:BF:D7:29:3F:C5:BB:A2:FD:D0 X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0a:bc:d4:a4:5b:6f:7b:a3:ca:aa:fd:5a:fc:26:80:53:91: 26:20:d3:e3:58:3a:34:99:7e:92:5e:29:c6:0b:5a:2a:7f:49: 89:83:93:11:76:62:0e:0a:23:ce:ab:a7:6b:19:7e:30:67:3b: c6:57:49:83:57:ee:71:2a:a6:6f:52:c6:83:c1:ac:3b:a3:4b: d6:8c:86:7f:e6:49:b6:5f:40:04:9d:cf:91:8b:b1:33:08:ad: ef:7d:38:ae:16:19:43:8f:4f:83:cb:35:ea:38:f3:cc:2a:62: 1f:d1:2f:59:4a:58:69:25:0c:dc:7b:74:75:15:70:62:b8:f0: ae:98:dc:e9:9e:57:d6:8f:00:54:01:09:b9:24:6a:31:97:6f: b4:3f:91:90:9b:21:81:5e:0f:e4:9b:62:81:60:f3:71:39:a7: 16:c0:18:19:01:53:05:d8:56:15:89:eb:5a:cb:89:2b:89:5a: 2a:0c:bd:a1:5f:8e:41:48:9f:78:0b:76:c1:e2:3f:54:fa:c1: 19:e6:f6:b2:7a:d3:50:67:f7:72:06:98:30:18:78:7e:c0:6c: e2:f4:75:89:ed:a3:2d:82:6d:4c:10:75:76:08:6f:d5:9a:d7: 42:21:a2:cd:96:2f:b6:2e:31:9d:0a:7e:60:19:e1:02:6b:8f: 2f:9c:1b:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwBC0v3Mp5YF8eDda3lNJg8CMLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTEyMDUxNDA2MDVaFw0yNTEyMDgyMTAxMDVaMDMxMTAvBgNV BAMTKEIzQjFGOEFDQjAzNTY2RkVGNTE5NTJCRkQ3MjkzRkM1QkJBMkZERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bJTxsfCwly5rSpFwtrzoW6Cz 2/uUi4GQxy3/NvnAd0zMHuIEZvc6BvTWQqO78qIBSSgKAlbbo5vcZH1traXaMrsw m4jRNi9kf0V4fzxX3eCNVpEQI6j59Sgh+UWbqp12vc1fff3WwUY2I/fhG9dpmdII qb43ygsXkOe97lZo1w3RKzFrU4YtGIQUCH3ZKmkOBGo1UDKHaBAst4qnlUNng1BA mk1eM2R5mKy0cpjcTJHmWqppDtLhyS5+P2Foz0oKdj7m0bC93A1y5UFAJMnM3Q+f 28oawje9M0s3ykuRNJw6mN6v7QsT1pQJCJD443OHw4mfMXTA2eMV1kHJq79TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs7H4rLA1Zv71GVK/1yk/xbui/dAwHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIKvNSkW297o8qq/Vr8JoBTkSYg0+NYOjSZ fpJeKcYLWip/SYmDkxF2Yg4KI86rp2sZfjBnO8ZXSYNX7nEqpm9SxoPBrDujS9aM hn/mSbZfQASdz5GLsTMIre99OK4WGUOPT4PLNeo488wqYh/RL1lKWGklDNx7dHUV cGK48K6Y3OmeV9aPAFQBCbkkajGXb7Q/kZCbIYFeD+SbYoFg83E5pxbAGBkBUwXY VhWJ61rLiSuJWioMvaFfjkFIn3gLdsHiP1T6wRnm9rJ601Bn93IGmDAYeH7AbOL0 dYntoy2CbUwQdXYIb9Wa10Ihos2WL7YuMZ0KfmAZ4QJrjy+cGxo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:52 2025 by rpki-client