This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: fBckR53PYkqRK2ettMjLs11FEMBkPRZQn0JjN+twvoQ= Subject key identifier: CF:81:C3:C1:10:51:67:68:D7:E9:9C:09:C7:38:F5:44:BB:7C:44:51 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 23567659954DB8DA5E330BDC601627714394D420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 013F Signing time: Wed 03 Dec 2025 09:21:12 +0000 Manifest this update: Wed 03 Dec 2025 09:16:12 +0000 Manifest next update: Sat 06 Dec 2025 17:39:12 +0000 Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: CADdODhlwrtv7aHSOcyvhK/IDuhX6EVBNzN87XcC7go=) 2: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: 6ZT9YKsmkLbTx5w5LvxpW14Hn/gDoG/vw5nHblHr0Rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:56:76:59:95:4d:b8:da:5e:33:0b:dc:60:16:27:71:43:94:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Dec 3 09:16:12 2025 GMT Not After : Dec 6 17:39:12 2025 GMT Subject: CN=CF81C3C110516768D7E99C09C738F544BB7C4451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:7e:2a:c6:3c:21:53:93:63:ff:cf:bb:7b: 76:70:71:8f:9d:03:ae:09:5b:ee:06:cf:6d:51:53: bc:8d:33:a2:02:4a:0a:36:fd:25:5e:bc:d0:f7:db: ea:95:58:d8:1a:61:a2:bd:3c:96:b1:04:f9:b7:ae: 5f:15:55:57:71:e2:c3:18:a6:34:fe:9e:43:26:83: 9a:8c:6c:a3:ca:ed:1c:5a:52:d8:b3:99:35:04:5f: 25:53:83:b2:01:74:1a:36:b0:07:aa:15:48:73:4a: b9:1c:91:ab:36:bd:2c:70:0d:b5:fc:11:5f:9e:b7: cb:88:ea:5c:5d:13:1a:6f:e0:56:f8:12:d5:c0:ee: 62:f6:e7:a7:fb:d4:b0:fe:11:7e:81:2b:e4:48:71: 1a:ea:3c:b2:b0:92:1a:4b:c4:98:f2:f2:93:ba:e1: 50:33:4a:4d:de:66:4f:aa:c2:5e:b6:53:92:bb:13: e8:73:86:8a:5e:a1:01:d4:95:d5:49:19:cd:0d:71: 2f:ee:a6:ec:ec:f2:0c:8b:b0:3b:6e:f4:2f:95:84: 2f:bf:f6:c7:7b:67:86:89:df:35:ce:22:c6:a4:22: 02:2c:4b:37:50:80:ab:fd:9b:a8:6c:5b:4d:3f:bc: cd:66:65:78:cd:e4:64:f3:53:6b:6c:fd:2d:b5:86: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:C3:C1:10:51:67:68:D7:E9:9C:09:C7:38:F5:44:BB:7C:44:51 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3c:42:e0:12:c8:69:0a:68:1c:55:e1:57:c1:27:a7:92:93: a3:70:9a:65:2c:4b:e1:0a:fa:98:e0:c6:c9:df:ec:33:8d:02: ed:17:01:73:39:d8:9e:5b:0f:a0:f5:9f:d5:18:9c:fb:12:36: 6e:9c:2b:d9:0b:65:19:da:66:88:d2:a0:e5:f3:35:4f:5d:eb: 70:c8:84:dd:11:3b:89:84:3f:4c:68:f8:97:e1:a1:a8:ca:c5: 29:51:ed:c3:c6:f5:08:3b:f1:79:fc:94:c1:0d:e8:b8:de:28: 04:07:7d:45:0f:88:42:d4:51:7c:1c:5b:58:83:37:bb:92:5f: 1b:c9:ed:6d:7a:e9:05:a3:5c:26:22:0d:9d:34:d0:22:6b:51: d4:fe:56:9c:8d:98:0d:c0:5a:06:5f:2c:df:5b:6f:a2:66:53: 7f:45:29:04:9b:4f:c2:34:9e:6a:d0:b7:31:33:c1:d0:84:8a: 60:11:69:78:0b:0e:65:ca:b7:91:92:4f:29:5e:99:4a:ca:91: 35:2d:a5:58:f1:8d:c6:40:f8:a7:12:79:ff:83:f4:90:9e:f7: 6d:a8:c2:ea:57:1c:2f:9a:32:f5:a5:2c:60:91:ce:cc:24:26: 18:17:3c:b8:53:63:29:3f:7b:c4:91:f8:6d:17:24:b6:e6:d4: 89:e8:92:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1Z2WZVNuNpeMwvcYBYncUOU1CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTEyMDMwOTE2MTJaFw0yNTEyMDYxNzM5MTJaMDMxMTAvBgNV BAMTKENGODFDM0MxMTA1MTY3NjhEN0U5OUMwOUM3MzhGNTQ0QkI3QzQ0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO934qxjwhU5Nj/8+7e3ZwcY+d A64JW+4Gz21RU7yNM6ICSgo2/SVevND32+qVWNgaYaK9PJaxBPm3rl8VVVdx4sMY pjT+nkMmg5qMbKPK7RxaUtizmTUEXyVTg7IBdBo2sAeqFUhzSrkckas2vSxwDbX8 EV+et8uI6lxdExpv4Fb4EtXA7mL256f71LD+EX6BK+RIcRrqPLKwkhpLxJjy8pO6 4VAzSk3eZk+qwl62U5K7E+hzhopeoQHUldVJGc0NcS/upuzs8gyLsDtu9C+VhC+/ 9sd7Z4aJ3zXOIsakIgIsSzdQgKv9m6hsW00/vM1mZXjN5GTzU2ts/S21hpa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4HDwRBRZ2jX6ZwJxzj1RLt8RFEwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMI8QuASyGkKaBxV4VfBJ6eSk6NwmmUsS+EK +pjgxsnf7DONAu0XAXM52J5bD6D1n9UYnPsSNm6cK9kLZRnaZojSoOXzNU9d63DI hN0RO4mEP0xo+JfhoajKxSlR7cPG9Qg78Xn8lMEN6LjeKAQHfUUPiELUUXwcW1iD N7uSXxvJ7W166QWjXCYiDZ000CJrUdT+VpyNmA3AWgZfLN9bb6JmU39FKQSbT8I0 nmrQtzEzwdCEimARaXgLDmXKt5GSTylemUrKkTUtpVjxjcZA+KcSef+D9JCe922o wupXHC+aMvWlLGCRzswkJhgXPLhTYyk/e8SR+G0XJLbm1InokiU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:56 2025 by rpki-client