This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: YZVPLKz3rQ+Xuuf/cxCaqnhZnMkhjYv1Vf+gRfWmhJ8= Subject key identifier: 8C:5C:E2:8A:31:CD:01:B4:21:74:0F:BD:7A:62:82:23:DB:06:5F:DE Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 71925C65869180A536023C9DF6395381CE73503F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 052F Signing time: Sat 06 Dec 2025 10:50:55 +0000 Manifest this update: Sat 06 Dec 2025 10:45:55 +0000 Manifest next update: Tue 09 Dec 2025 13:54:55 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: uOxXFI4RI8jn+kvN2HaosQl4nLPkcrbtNv0iS8lm25g=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:92:5c:65:86:91:80:a5:36:02:3c:9d:f6:39:53:81:ce:73:50:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Dec 6 10:45:55 2025 GMT Not After : Dec 9 13:54:55 2025 GMT Subject: CN=8C5CE28A31CD01B421740FBD7A628223DB065FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:d9:e4:90:97:b1:37:a0:f6:11:a3:cf:04: d1:c5:27:9e:3a:96:0a:c7:cf:92:b8:47:dd:1e:ca: 3b:33:83:94:ad:fd:9a:9d:82:cf:95:fc:aa:b2:46: 23:25:45:20:6e:31:70:38:b8:dd:dd:8b:c2:8c:42: 7a:2b:14:f8:37:ad:de:cb:7e:91:c4:e7:37:b2:8b: e9:3b:69:6a:c1:03:24:62:22:f7:b8:7f:5d:4b:21: 40:6d:2a:1f:8f:ff:60:bb:e5:3b:58:20:ea:88:1f: 62:51:7a:90:4b:0f:b0:17:2c:8e:10:ba:7f:36:c3: 9b:5f:2d:2b:08:93:1a:25:5f:68:36:f7:ed:8b:ed: 98:df:49:36:86:84:ed:c3:06:44:e7:ea:94:14:f7: 7c:8a:32:e5:e5:2c:7a:29:09:67:de:64:af:6f:36: cc:a3:01:5e:69:8f:3b:02:05:74:45:df:8d:59:bb: 42:ac:11:71:e6:76:ca:b8:ea:07:fb:59:25:9a:96: 7c:31:dd:43:d5:2c:bb:02:03:53:68:83:b1:1e:ad: 19:f0:f2:1c:d8:65:ab:f9:7e:92:9c:44:20:b9:58: 78:3a:43:26:e4:51:89:dd:bb:09:0f:b0:a3:be:d6: 96:48:6d:21:22:34:4f:b3:87:54:49:14:7b:9e:b3: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:E2:8A:31:CD:01:B4:21:74:0F:BD:7A:62:82:23:DB:06:5F:DE X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6c:4a:d3:72:2b:2b:9b:f6:84:a1:04:32:7a:46:a6:eb:4c: 29:72:3e:6f:4b:8b:3e:63:fd:86:5b:e4:20:3a:98:5c:55:10: 00:da:6c:52:7b:2e:87:2e:7c:8e:e2:cf:98:43:ef:41:e5:c4: a9:7b:20:37:8c:00:6b:e9:01:c7:8c:dc:59:9a:9a:31:2b:11: fd:fe:4b:43:1e:16:eb:15:c8:65:fa:7f:9b:74:30:77:ed:ec: 8e:ce:65:6a:62:bb:54:18:9a:db:a0:7c:a4:25:5f:d2:b8:cb: 98:14:cf:67:1a:81:f8:6c:ad:18:c8:90:c1:9d:0f:03:1c:8b: 62:a7:db:e2:df:90:2b:a7:3b:ae:2f:b4:0e:aa:82:5d:c2:92: 57:45:e0:d4:5d:79:78:10:c3:14:1a:1e:4d:c3:31:7c:a5:c2: 58:64:20:23:89:9f:43:80:d7:34:4b:68:8a:32:5c:10:ac:8a: 6b:39:a4:b4:3d:61:2e:c2:af:34:77:1a:c8:84:77:bd:4d:53: c8:f4:2d:88:49:5d:c5:48:e4:b1:60:06:0c:e8:2b:f5:d8:91: 72:d6:66:8c:0a:ce:27:96:6e:f1:b8:e3:70:1b:a2:f8:89:83: d3:fe:74:ad:cd:1e:67:d7:37:24:b6:62:8a:40:f8:8f:62:3e: 9d:79:17:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZJcZYaRgKU2Ajyd9jlTgc5zUD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTEyMDYxMDQ1NTVaFw0yNTEyMDkxMzU0NTVaMDMxMTAvBgNV BAMTKDhDNUNFMjhBMzFDRDAxQjQyMTc0MEZCRDdBNjI4MjIzREIwNjVGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPtnkkJexN6D2EaPPBNHFJ546 lgrHz5K4R90eyjszg5St/Zqdgs+V/KqyRiMlRSBuMXA4uN3di8KMQnorFPg3rd7L fpHE5zeyi+k7aWrBAyRiIve4f11LIUBtKh+P/2C75TtYIOqIH2JRepBLD7AXLI4Q un82w5tfLSsIkxolX2g29+2L7ZjfSTaGhO3DBkTn6pQU93yKMuXlLHopCWfeZK9v NsyjAV5pjzsCBXRF341Zu0KsEXHmdsq46gf7WSWalnwx3UPVLLsCA1Nog7EerRnw 8hzYZav5fpKcRCC5WHg6QybkUYnduwkPsKO+1pZIbSEiNE+zh1RJFHueswGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjFziijHNAbQhdA+9emKCI9sGX94wHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5sStNyKyub9oShBDJ6RqbrTClyPm9Liz5j /YZb5CA6mFxVEADabFJ7LocufI7iz5hD70HlxKl7IDeMAGvpAceM3FmamjErEf3+ S0MeFusVyGX6f5t0MHft7I7OZWpiu1QYmtugfKQlX9K4y5gUz2cagfhsrRjIkMGd DwMci2Kn2+LfkCunO64vtA6qgl3CkldF4NRdeXgQwxQaHk3DMXylwlhkICOJn0OA 1zRLaIoyXBCsims5pLQ9YS7CrzR3GsiEd71NU8j0LYhJXcVI5LFgBgzoK/XYkXLW ZowKzieWbvG443AboviJg9P+dK3NHmfXNyS2YopA+I9iPp15F6s= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:05 2025 by rpki-client