This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft File: F1F25C19AB419E370912452242B8B55038581157.mft (raw, json) Hash identifier: LfY/hcAWBNSaMXT4DV/fC9ORRHlXymA279wEYVEYbng= Subject key identifier: 53:4E:D0:AD:80:56:90:35:75:12:43:7A:67:A1:AD:5D:E7:18:71:BF Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 Certificate issuer: /CN=F1F25C19AB419E370912452242B8B55038581157 Certificate serial: 31FCF4DB4C35E5F8492A16A4E499E1CE0AD4084B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft Manifest number: 01AA Signing time: Fri 05 Dec 2025 02:11:24 +0000 Manifest this update: Fri 05 Dec 2025 02:06:24 +0000 Manifest next update: Mon 08 Dec 2025 02:29:24 +0000 Files and hashes: 1: F1F25C19AB419E370912452242B8B55038581157.crl (hash: bHdPL+OftQTqEeDjU1NTXlS92ZqSZyimmzAVZu2lmjA=) 2: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: Nf1gJItG6184KCSXBcwB3dOHt5qHqt2wOtxt68ogTdg=) 3: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: jpWaT+oGFZ1feNV4Ontzk7N9Bf3lE1R8kV74EOaQmlQ=) 4: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: 3rPKYUZalojIRm9OVoB6zRFi27r01gp3XfIoDBOCPmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fc:f4:db:4c:35:e5:f8:49:2a:16:a4:e4:99:e1:ce:0a:d4:08:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F25C19AB419E370912452242B8B55038581157 Validity Not Before: Dec 5 02:06:24 2025 GMT Not After : Dec 8 02:29:24 2025 GMT Subject: CN=534ED0AD805690357512437A67A1AD5DE71871BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:51:28:3b:91:9b:32:f8:52:2f:42:46:9a: b1:14:00:7c:f6:dc:c0:1b:a2:7d:90:44:14:ae:3c: bc:8b:cc:ad:a7:9b:18:63:97:eb:35:7b:91:23:7a: bc:fa:a8:7a:da:3b:e6:5b:14:d4:ff:2d:6e:e2:6a: b2:60:08:ab:30:5d:99:4a:c5:09:51:70:3e:92:45: 75:2e:d8:d2:83:43:08:6d:34:69:e3:4c:a9:ff:cc: 5b:8f:4b:01:2b:a7:f3:cc:97:09:9f:aa:be:96:df: d4:0d:ef:72:a7:4c:96:7f:53:ca:6d:4c:a3:2d:08: 5a:26:71:4e:f5:af:95:02:4c:df:b5:f6:01:1e:e1: 1c:19:66:ec:c9:1a:07:a2:98:00:56:ac:50:cb:89: 0a:87:bd:75:00:0c:1c:54:e9:9a:79:2b:e9:41:74: d2:39:95:eb:67:b9:ce:d1:af:3c:b1:fd:1c:dc:58: 47:43:68:55:2a:2a:94:96:f8:85:b2:85:65:95:17: e4:70:f1:46:33:d5:85:9d:2d:2b:21:02:f7:87:df: 31:85:22:90:32:c5:9c:bc:21:c6:72:1d:cf:17:23: f1:13:35:9d:04:a7:ca:dd:1f:13:6f:f2:c9:69:5d: 2f:9f:e0:d5:a5:79:19:21:df:65:0d:ae:15:25:ef: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:D0:AD:80:56:90:35:75:12:43:7A:67:A1:AD:5D:E7:18:71:BF X509v3 Authority Key Identifier: keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9d:99:6e:6e:8a:59:3f:e3:ae:47:d6:38:51:52:3d:77:87: cd:d9:45:0f:e6:c2:ee:43:8b:35:7b:91:f1:2a:25:50:62:16: 30:10:c3:09:9e:d4:96:f2:cd:55:eb:ea:ec:9a:67:a8:dd:1d: 51:18:64:eb:a2:b0:80:5e:45:09:8a:07:2b:b0:e8:a3:43:c8: 6a:00:90:5f:ae:0a:05:e7:38:6a:cd:fe:3e:c0:59:b0:35:d8: bf:f4:ac:23:94:24:9c:26:07:45:01:b3:14:0c:bb:f8:f6:73: 17:16:bf:25:e6:5e:06:5f:41:66:ef:02:24:17:28:96:49:a6: 10:2b:3a:75:ec:f2:ef:45:bf:f2:3c:8a:bf:3b:8e:7b:88:63: 3a:49:50:cb:2a:69:31:26:90:e6:13:40:31:31:47:35:aa:a5: b9:42:2b:50:11:49:06:17:53:86:53:5b:a8:8d:06:2a:57:2b: 6c:9a:29:c0:7a:90:05:33:7c:00:44:53:99:c4:ab:4b:7f:bf: 4d:8c:6c:68:9b:9d:3d:43:14:75:5a:30:7b:03:df:bb:cd:21: 57:c4:e1:44:d5:aa:d9:a1:5c:5b:db:05:a2:05:e2:0f:1a:4a: b9:95:f4:45:2e:da:e1:aa:d9:90:ea:fb:7f:39:5f:2c:b7:c2: bc:2e:30:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfz020w15fhJKhak5JnhzgrUCEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAz ODU4MTE1NzAeFw0yNTEyMDUwMjA2MjRaFw0yNTEyMDgwMjI5MjRaMDMxMTAvBgNV BAMTKDUzNEVEMEFEODA1NjkwMzU3NTEyNDM3QTY3QTFBRDVERTcxODcxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAFEoO5GbMvhSL0JGmrEUAHz2 3MAbon2QRBSuPLyLzK2nmxhjl+s1e5Ejerz6qHraO+ZbFNT/LW7iarJgCKswXZlK xQlRcD6SRXUu2NKDQwhtNGnjTKn/zFuPSwErp/PMlwmfqr6W39QN73KnTJZ/U8pt TKMtCFomcU71r5UCTN+19gEe4RwZZuzJGgeimABWrFDLiQqHvXUADBxU6Zp5K+lB dNI5letnuc7Rrzyx/RzcWEdDaFUqKpSW+IWyhWWVF+Rw8UYz1YWdLSshAveH3zGF IpAyxZy8IcZyHc8XI/ETNZ0Ep8rdHxNv8slpXS+f4NWleRkh32UNrhUl785/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU07QrYBWkDV1EkN6Z6GtXecYcb8wHwYDVR0j BBgwFoAU8fJcGatBnjcJEkUiQri1UDhYEVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTMzMDYzMy1hN2QxLTRkMGEtYTFjYy1iNmMzZWVkZmJjMTcvMC9GMUYyNUMxOUFC NDE5RTM3MDkxMjQ1MjI0MkI4QjU1MDM4NTgxMTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1NTAzODU4 MTE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvRjFGMjVDMTlBQjQxOUUzNzA5MTI0NTIyNDJCOEI1 NTAzODU4MTE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2dmW5uilk/465H1jhRUj13h83ZRQ/mwu5D izV7kfEqJVBiFjAQwwme1JbyzVXr6uyaZ6jdHVEYZOuisIBeRQmKByuw6KNDyGoA kF+uCgXnOGrN/j7AWbA12L/0rCOUJJwmB0UBsxQMu/j2cxcWvyXmXgZfQWbvAiQX KJZJphArOnXs8u9Fv/I8ir87jnuIYzpJUMsqaTEmkOYTQDExRzWqpblCK1ARSQYX U4ZTW6iNBipXK2yaKcB6kAUzfABEU5nEq0t/v02MbGibnT1DFHVaMHsD37vNIVfE 4UTVqtmhXFvbBaIF4g8aSrmV9EUu2uGq2ZDq+385Xyy3wrwuMII= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:13 2025 by rpki-client