This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: gxrG8SsXm0LrfgBqYmXFDwAPpK6KDiTJD7xrLE3vu4I= Subject key identifier: F8:CB:BF:53:39:46:54:C2:2B:D1:06:4F:28:AF:0A:FA:80:7D:23:F9 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 669F17DC112CFB1E804210B944055D0EAE291647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: FD Signing time: Sat 06 Dec 2025 09:21:08 +0000 Manifest this update: Sat 06 Dec 2025 09:16:08 +0000 Manifest next update: Tue 09 Dec 2025 20:21:08 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: 5xWqtzS+TirBDARPdwZvGAMUyhwSvjcuZW3kHSrR1FA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9f:17:dc:11:2c:fb:1e:80:42:10:b9:44:05:5d:0e:ae:29:16:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Dec 6 09:16:08 2025 GMT Not After : Dec 9 20:21:08 2025 GMT Subject: CN=F8CBBF53394654C22BD1064F28AF0AFA807D23F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:29:70:3d:4d:15:c9:24:13:18:50:49:c5: 2f:4d:8d:c2:fb:27:c6:63:8f:d5:9e:0f:f9:2f:61: ae:fc:20:52:27:eb:87:cd:b5:96:32:7f:86:d5:b6: b4:02:85:4f:ab:25:c6:53:74:3e:4e:50:0a:25:9c: e2:06:4b:d9:b5:c9:c6:e0:2e:ff:bd:d3:bf:ab:ac: fa:ab:29:e0:c5:32:22:90:69:3f:6c:a1:34:08:d5: 45:7e:98:1f:44:32:31:d6:02:0a:03:f5:87:1d:94: 90:04:dc:7e:57:09:0e:eb:14:43:56:9a:9d:89:cc: 5c:d6:f9:4d:c0:d0:19:25:4e:cc:95:7e:7d:70:52: 45:3d:f3:d3:56:f5:a3:72:14:d8:93:a0:b1:42:27: 4a:81:52:ba:4a:e5:e5:5a:6e:67:6d:71:7a:ad:1e: 6d:57:10:80:80:4d:6c:9d:16:74:f4:ba:3a:35:21: 58:93:24:fe:81:7e:da:38:92:12:c6:9f:1f:61:94: 3d:da:21:39:4d:d1:25:c6:85:43:9c:4b:45:86:3e: 2a:38:ff:0b:3f:9d:e1:48:dd:78:2a:ff:4e:65:19: d6:9b:0e:77:b8:63:de:70:7e:0d:a8:9f:3b:cd:2f: 1b:63:2e:21:a8:3a:b7:4b:15:10:51:c3:85:1b:0c: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CB:BF:53:39:46:54:C2:2B:D1:06:4F:28:AF:0A:FA:80:7D:23:F9 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:97:37:e9:7b:2a:27:ab:b3:11:0c:5b:46:6d:36:6e:7c:4a: 00:a0:4c:b0:91:1c:a5:00:73:62:f7:00:47:ff:c7:73:1a:dd: e4:0e:4f:a2:49:58:0d:1f:92:94:80:11:5b:57:b8:f2:8e:4b: 30:de:79:d2:75:98:63:ea:f3:d5:ec:32:e3:43:03:3f:55:53: ae:1f:54:f6:63:c9:5e:8c:44:cd:29:fc:3d:74:e3:78:10:43: 49:1c:a4:03:65:ab:ff:a8:27:28:e3:a0:6b:93:4b:31:55:6c: b7:ec:35:fc:09:a9:c3:8d:63:d8:10:b6:6f:8c:5e:2a:40:e5: 2e:67:77:26:f7:5e:db:7e:37:0f:b2:3f:b0:c8:36:e6:23:62: 7c:c9:a1:d4:42:4d:f2:86:66:77:46:85:fa:0e:fb:3c:06:fd: 8f:c1:fd:bd:47:f0:0e:42:a6:a4:d2:cd:05:09:e5:dc:65:f3: 82:b5:9d:90:5a:60:5b:56:e1:aa:25:8c:ce:a9:a8:8b:3b:4e: 05:1b:a1:e4:60:d5:b4:67:0f:89:6a:9e:20:9d:b6:c6:94:a8: f2:ae:86:fb:27:90:37:51:80:a6:5e:ef:fb:0a:79:74:cc:63: 29:77:77:c4:1a:4d:fc:37:38:54:c7:23:79:45:13:34:28:a5: a6:5b:dc:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZp8X3BEs+x6AQhC5RAVdDq4pFkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTEyMDYwOTE2MDhaFw0yNTEyMDkyMDIxMDhaMDMxMTAvBgNV BAMTKEY4Q0JCRjUzMzk0NjU0QzIyQkQxMDY0RjI4QUYwQUZBODA3RDIzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrClwPU0VySQTGFBJxS9NjcL7 J8Zjj9WeD/kvYa78IFIn64fNtZYyf4bVtrQChU+rJcZTdD5OUAolnOIGS9m1ycbg Lv+907+rrPqrKeDFMiKQaT9soTQI1UV+mB9EMjHWAgoD9YcdlJAE3H5XCQ7rFENW mp2JzFzW+U3A0BklTsyVfn1wUkU989NW9aNyFNiToLFCJ0qBUrpK5eVabmdtcXqt Hm1XEICATWydFnT0ujo1IViTJP6Bfto4khLGnx9hlD3aITlN0SXGhUOcS0WGPio4 /ws/neFI3Xgq/05lGdabDne4Y95wfg2onzvNLxtjLiGoOrdLFRBRw4UbDFrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Mu/UzlGVMIr0QZPKK8K+oB9I/kwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuXN+l7KiersxEMW0ZtNm58SgCgTLCRHKUA c2L3AEf/x3Ma3eQOT6JJWA0fkpSAEVtXuPKOSzDeedJ1mGPq89XsMuNDAz9VU64f VPZjyV6MRM0p/D1043gQQ0kcpANlq/+oJyjjoGuTSzFVbLfsNfwJqcONY9gQtm+M XipA5S5ndyb3Xtt+Nw+yP7DINuYjYnzJodRCTfKGZndGhfoO+zwG/Y/B/b1H8A5C pqTSzQUJ5dxl84K1nZBaYFtW4aoljM6pqIs7TgUboeRg1bRnD4lqniCdtsaUqPKu hvsnkDdRgKZe7/sKeXTMYyl3d8QaTfw3OFTHI3lFEzQopaZb3CE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:03 2025 by rpki-client