This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft File: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json) Hash identifier: PxtLNB5Nf1fNWV8RAkdEeetb2Y677AUHNcUUEGuyb80= Subject key identifier: D7:A6:12:14:61:DE:81:D2:6B:B6:5D:7B:AC:40:8B:C9:2D:E0:62:1E Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C Certificate issuer: /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Certificate serial: 2FA060A613D194F686021F80351701B4F8112C6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft Manifest number: 0133 Signing time: Wed 17 Dec 2025 14:01:35 +0000 Manifest this update: Wed 17 Dec 2025 13:56:35 +0000 Manifest next update: Sat 20 Dec 2025 18:10:35 +0000 Files and hashes: 1: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: +h5vANuOWbLOfnmgttooZAc2KtS5uqsAXLhVPAMy5Hg=) 2: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: mpA7r4n5AsM3pCamORvl0shKqIyo/JWeKgRAvasmRM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a0:60:a6:13:d1:94:f6:86:02:1f:80:35:17:01:b4:f8:11:2c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C Validity Not Before: Dec 17 13:56:35 2025 GMT Not After : Dec 20 18:10:35 2025 GMT Subject: CN=D7A6121461DE81D26BB65D7BAC408BC92DE0621E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:ca:c9:1c:e6:d2:5d:bc:65:2d:37:3d:7d: 1b:20:47:da:97:8c:49:10:8e:04:e0:08:ac:10:8b: c4:c1:8c:ed:61:7f:0e:6c:d3:8c:ec:a9:f5:71:c1: 4f:1b:83:65:71:3d:2f:92:46:0d:04:ed:dd:8c:18: 19:cf:7a:17:a7:eb:fb:ab:1f:68:d2:73:03:a4:7e: 16:c5:58:41:4f:65:54:ec:a3:ee:13:f9:29:62:41: 02:fb:f9:2e:d3:e2:c2:0c:ec:66:97:15:10:b1:c3: d5:cd:26:1b:fb:ef:fe:42:9f:71:a2:ce:c1:a4:44: a0:e5:a6:55:58:28:68:f4:a1:51:16:59:53:e3:58: bd:14:d9:a2:6a:be:33:82:9c:31:b8:91:26:a5:2f: 1a:18:e8:77:a0:94:6a:bb:d1:fd:32:28:56:a0:c5: 4a:49:0a:71:ce:ce:48:b4:9a:c9:27:f7:b5:7e:e2: c5:8d:fc:2f:16:af:a8:b0:5d:3a:42:0a:28:c0:03: 1a:b3:2b:b8:62:e5:5a:0d:f6:26:ac:14:24:13:41: 1c:ce:f0:16:aa:51:70:a6:72:a0:d9:9c:9e:01:ac: 59:65:32:ab:88:dc:d6:c9:88:3d:5b:8c:75:f8:50: 1a:a1:59:c1:2d:6e:1a:6b:e8:b2:e6:24:01:4e:1b: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A6:12:14:61:DE:81:D2:6B:B6:5D:7B:AC:40:8B:C9:2D:E0:62:1E X509v3 Authority Key Identifier: keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:af:03:1a:ca:a4:9d:c5:21:b0:d6:fd:54:0e:bc:f8:64:51: f3:9d:d0:94:5c:7f:f1:d7:4c:45:e2:b1:72:54:c4:76:36:4c: 7c:70:52:8d:a3:09:a6:81:94:8b:1c:ed:63:97:a4:b1:8f:61: bd:75:cc:14:d3:e3:01:43:dc:49:d9:84:2e:75:b9:32:32:72: 0b:72:a7:0a:8c:b2:19:7c:bf:dd:cd:0b:16:82:9a:7c:1b:c0: ec:25:d6:ca:00:f6:5a:02:fb:42:8c:7b:76:65:3e:80:65:ea: d3:e1:5b:a0:e1:c9:d6:4a:cf:df:6c:da:a9:e9:37:9b:c6:2e: 36:ec:d2:b4:5e:85:cf:ce:d7:45:73:6c:c9:42:83:62:d8:b6: 4d:63:0b:d8:eb:a5:39:46:77:22:a6:b9:1e:d4:23:65:9b:0a: c1:0d:0c:43:dc:7b:ec:3b:d2:bc:ad:c8:39:23:9a:e6:42:c7: 41:5c:2b:a6:31:41:09:6f:07:0a:f8:6a:00:0a:a1:36:20:c6: 44:c0:ef:ca:d9:7d:93:5e:46:2c:a1:1f:0c:50:10:91:da:89: fe:93:85:67:16:0a:c0:2d:c4:19:24:e0:a2:e1:f7:0f:e2:24: af:5a:d1:dc:96:20:f8:bf:73:e1:46:df:8e:03:45:64:11:51: 69:df:46:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6BgphPRlPaGAh+ANRcBtPgRLG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUy MkZBMzI2QzAeFw0yNTEyMTcxMzU2MzVaFw0yNTEyMjAxODEwMzVaMDMxMTAvBgNV BAMTKEQ3QTYxMjE0NjFERTgxRDI2QkI2NUQ3QkFDNDA4QkM5MkRFMDYyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDd8rJHObSXbxlLTc9fRsgR9qX jEkQjgTgCKwQi8TBjO1hfw5s04zsqfVxwU8bg2VxPS+SRg0E7d2MGBnPehen6/ur H2jScwOkfhbFWEFPZVTso+4T+SliQQL7+S7T4sIM7GaXFRCxw9XNJhv77/5Cn3Gi zsGkRKDlplVYKGj0oVEWWVPjWL0U2aJqvjOCnDG4kSalLxoY6HeglGq70f0yKFag xUpJCnHOzki0mskn97V+4sWN/C8Wr6iwXTpCCijAAxqzK7hi5VoN9iasFCQTQRzO 8BaqUXCmcqDZnJ4BrFllMquI3NbJiD1bjHX4UBqhWcEtbhpr6LLmJAFOGzWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16YSFGHegdJrtl17rECLyS3gYh4wHwYDVR0j BBgwFoAU9aRTS3TQzu7PWgXwm8nvRSL6MmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTcwZTkzNC04NzUxLTRhNjEtOTk1MC1kNGZhNDgwY2RhNDEvMC9GNUE0NTM0Qjc0 RDBDRUVFQ0Y1QTA1RjA5QkM5RUY0NTIyRkEzMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVGNDUyMkZB MzI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvRjVBNDUzNEI3NEQwQ0VFRUNGNUEwNUYwOUJDOUVG NDUyMkZBMzI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6vAxrKpJ3FIbDW/VQOvPhkUfOd0JRcf/HX TEXisXJUxHY2THxwUo2jCaaBlIsc7WOXpLGPYb11zBTT4wFD3EnZhC51uTIycgty pwqMshl8v93NCxaCmnwbwOwl1soA9loC+0KMe3ZlPoBl6tPhW6DhydZKz99s2qnp N5vGLjbs0rRehc/O10VzbMlCg2LYtk1jC9jrpTlGdyKmuR7UI2WbCsENDEPce+w7 0rytyDkjmuZCx0FcK6YxQQlvBwr4agAKoTYgxkTA78rZfZNeRiyhHwxQEJHaif6T hWcWCsAtxBkk4KLh9w/iJK9a0dyWIPi/c+FG344DRWQRUWnfRiw= -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:36 2025 by rpki-client