This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json) Hash identifier: gDc8f0XiXuoK1bH4j4LS/ST0HQg9A5gvEW3GGDXo1kA= Subject key identifier: 9C:F9:0F:DA:52:37:37:66:16:C1:23:E9:90:D9:A6:13:1D:95:00:36 Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Certificate serial: 05C81A4B5A1CCEE2298AF8FA9D0073BEFE4C4B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft Manifest number: 0189 Signing time: Fri 05 Dec 2025 13:52:21 +0000 Manifest this update: Fri 05 Dec 2025 13:47:21 +0000 Manifest next update: Mon 08 Dec 2025 22:59:21 +0000 Files and hashes: 1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: f0VSyOpJ2ADDLLHgHTf1zZG7qNrmGPM5ysKfV3ZAdfI=) 2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=) 3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=) 4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c8:1a:4b:5a:1c:ce:e2:29:8a:f8:fa:9d:00:73:be:fe:4c:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Validity Not Before: Dec 5 13:47:21 2025 GMT Not After : Dec 8 22:59:21 2025 GMT Subject: CN=9CF90FDA5237376616C123E990D9A6131D950036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:2c:71:03:db:0f:63:cb:c2:d0:03:c2:ab: 1b:d0:68:d9:72:ed:17:f1:0d:b8:d6:24:1d:7b:b6: 31:d5:87:ce:eb:9d:14:9d:39:83:91:ff:20:01:d5: 09:4f:c4:fc:ca:3c:a8:86:b0:fe:32:db:4c:40:b9: e6:c5:a8:43:db:12:31:27:04:64:6a:75:ad:e2:73: a2:a3:97:e9:ed:06:81:6c:21:fe:b6:3d:ed:10:8a: 91:80:58:45:05:a1:6c:77:82:26:d4:d5:df:50:e8: 10:6a:0c:9b:f8:20:20:83:a8:57:c2:55:ae:be:2c: 65:3d:f3:7a:be:7b:14:32:f8:36:43:4d:26:2e:1a: b6:ef:74:9c:1d:45:32:1e:47:39:9c:1a:37:3d:51: 16:4e:64:97:da:01:e2:2c:cd:6e:f4:df:6a:07:60: 39:f8:57:18:13:5f:dc:5f:75:20:24:57:26:56:85: 59:57:ef:53:4a:8d:52:b6:92:0b:f6:07:cf:ae:23: 7c:ab:33:40:90:8d:3e:bc:6c:8d:a7:7e:53:43:5e: 9c:6b:b7:27:94:e2:02:d3:88:b1:d9:f3:52:51:f1: 6c:58:b4:48:9f:b4:04:2f:1a:94:4d:34:33:3a:20: a5:17:37:7b:70:ce:57:eb:38:36:3d:fb:73:5b:a2: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F9:0F:DA:52:37:37:66:16:C1:23:E9:90:D9:A6:13:1D:95:00:36 X509v3 Authority Key Identifier: keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:93:4a:a3:c8:2a:58:59:8e:35:b2:37:13:f0:fb:b6:b6:03: 2c:44:0e:4d:db:99:09:b4:94:23:13:6f:06:0e:8c:3c:9c:19: 51:e8:a9:0c:f0:d8:82:5c:ab:63:c7:e8:9f:68:fe:84:79:ff: 81:3d:e7:fc:30:d3:3d:5b:b0:a3:6d:44:57:c6:ae:ea:83:26: 5d:19:4f:b6:2a:64:86:2c:15:34:60:25:f7:96:f6:7b:36:f4: dc:35:1a:fb:8a:6f:a0:42:a9:37:62:4a:25:c3:fe:4e:5a:57: f3:42:3b:cc:68:4e:fe:2f:cb:4e:38:0f:28:50:86:3c:09:9b: 97:4d:62:b1:92:64:be:98:ce:89:f5:8b:13:b9:3c:c1:c9:24: cc:88:a5:f3:c7:7f:88:b9:83:35:98:83:53:38:91:64:03:a5: ff:03:5f:16:fa:ab:9f:75:ab:31:60:4e:d3:4c:e7:eb:13:b4: 7d:39:82:1b:a8:f1:c6:e2:80:ce:20:2e:24:4c:46:a3:96:cd: 36:56:35:d4:d5:5a:ec:45:15:13:9f:5d:c2:92:4c:6d:9a:f9: 1c:a2:86:95:f3:4e:7e:60:c1:52:c0:a5:7e:f0:11:de:51:ef: ae:db:1c:0d:a3:66:34:a9:82:03:53:e7:8f:d1:5f:82:03:2b: 2e:17:dc:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcgaS1oczuIpivj6nQBzvv5MSzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQw Q0M4OUI5ODAeFw0yNTEyMDUxMzQ3MjFaFw0yNTEyMDgyMjU5MjFaMDMxMTAvBgNV BAMTKDlDRjkwRkRBNTIzNzM3NjYxNkMxMjNFOTkwRDlBNjEzMUQ5NTAwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtCxxA9sPY8vC0APCqxvQaNly 7RfxDbjWJB17tjHVh87rnRSdOYOR/yAB1QlPxPzKPKiGsP4y20xAuebFqEPbEjEn BGRqda3ic6Kjl+ntBoFsIf62Pe0QipGAWEUFoWx3gibU1d9Q6BBqDJv4ICCDqFfC Va6+LGU983q+exQy+DZDTSYuGrbvdJwdRTIeRzmcGjc9URZOZJfaAeIszW7032oH YDn4VxgTX9xfdSAkVyZWhVlX71NKjVK2kgv2B8+uI3yrM0CQjT68bI2nflNDXpxr tyeU4gLTiLHZ81JR8WxYtEiftAQvGpRNNDM6IKUXN3twzlfrODY9+3Nbomj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPkP2lI3N2YWwSPpkNmmEx2VADYwHwYDVR0j BBgwFoAU+fRa7iU1qhOeyicoBuFb9AzIm5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMC9GOUY0NUFFRTI1 MzVBQTEzOUVDQTI3MjgwNkUxNUJGNDBDQzg5Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVCRjQwQ0M4 OUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY3YTdmMGUtOGQwNy00NWRlLTgy NTItM2JmZmMwNWU1NjQ5LzAvRjlGNDVBRUUyNTM1QUExMzlFQ0EyNzI4MDZFMTVC RjQwQ0M4OUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+TSqPIKlhZjjWyNxPw+7a2AyxEDk3bmQm0 lCMTbwYOjDycGVHoqQzw2IJcq2PH6J9o/oR5/4E95/ww0z1bsKNtRFfGruqDJl0Z T7YqZIYsFTRgJfeW9ns29Nw1GvuKb6BCqTdiSiXD/k5aV/NCO8xoTv4vy044DyhQ hjwJm5dNYrGSZL6Yzon1ixO5PMHJJMyIpfPHf4i5gzWYg1M4kWQDpf8DXxb6q591 qzFgTtNM5+sTtH05ghuo8cbigM4gLiRMRqOWzTZWNdTVWuxFFROfXcKSTG2a+Ryi hpXzTn5gwVLApX7wEd5R767bHA2jZjSpggNT54/RX4IDKy4X3Ig= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:29 2025 by rpki-client