This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json) Hash identifier: t/qcrnG3rh2b3+6wkuzmbVJX/mcmfG8ETPAyL1dIdUo= Subject key identifier: 5D:82:E8:DC:7D:88:7A:44:E1:5E:D4:09:91:20:46:EF:E2:63:A4:FD Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Certificate serial: 6974040804AB3E0DC7068EA180777438BE71DF7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft Manifest number: 0204 Signing time: Tue 02 Dec 2025 10:41:09 +0000 Manifest this update: Tue 02 Dec 2025 10:36:09 +0000 Manifest next update: Fri 05 Dec 2025 16:48:09 +0000 Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=) 2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: 0Q6AQAQalGsMMohymHoO33QTLB0bnNXudTwzaZoK4rY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:04:08:04:ab:3e:0d:c7:06:8e:a1:80:77:74:38:be:71:df:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C Validity Not Before: Dec 2 10:36:09 2025 GMT Not After : Dec 5 16:48:09 2025 GMT Subject: CN=5D82E8DC7D887A44E15ED409912046EFE263A4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:ae:f0:bd:e5:a3:e2:01:76:94:e9:19:da: a5:7e:c5:9f:3f:d1:e5:39:a5:30:ed:bd:6b:07:82: 72:c9:ba:f1:b9:b5:d2:6f:79:eb:19:41:8f:cd:0e: ff:4a:19:ee:00:6d:ea:2f:e2:fd:d4:28:b7:f7:00: 3b:02:da:4d:c2:da:b1:41:54:f4:be:f4:c5:e0:f2: 3b:ee:fc:96:67:2e:5f:fa:cf:e4:a8:4a:c2:07:76: 0d:4f:a9:ac:b0:2f:f0:dc:f2:2f:4d:fd:f7:f8:ba: 76:8b:2e:2c:66:d7:c2:7a:a7:a1:0e:5d:ef:ba:1a: 25:bd:09:28:85:db:bb:a0:3b:fb:14:43:c6:60:24: 4a:18:4d:50:e7:26:96:35:3d:ed:40:51:7a:03:aa: aa:8d:24:c1:74:88:da:da:fb:7d:3a:3c:18:99:f6: 08:c8:9c:de:ca:a3:2d:d6:09:ff:2a:f2:4f:8b:6c: d0:56:42:b9:5a:70:24:c1:ea:cd:04:ca:c0:1e:89: 40:59:2b:d4:69:c5:f2:82:9d:1e:8f:1e:7c:06:11: 6c:95:80:14:88:7e:27:01:d8:a1:ff:68:47:4d:08: 22:16:75:c0:10:f1:54:19:b2:3c:c5:50:98:d9:62: fe:6e:b4:2d:a2:4f:b0:9d:87:8e:33:eb:04:ef:b9: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:E8:DC:7D:88:7A:44:E1:5E:D4:09:91:20:46:EF:E2:63:A4:FD X509v3 Authority Key Identifier: keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:23:a3:78:be:2b:66:aa:59:b2:5e:9b:b9:45:f3:11:ef:ec: 45:48:09:eb:b5:98:40:b4:12:32:19:28:43:a7:ae:b5:f0:08: a8:1b:bb:e7:08:ec:7e:fc:a3:e3:60:24:6e:ef:ca:25:51:a6: 6a:29:d6:f0:e4:ec:32:73:32:ca:6d:fb:f8:f8:05:29:7d:4f: bf:c2:b3:86:2b:a2:0e:a9:23:03:6f:2d:df:af:ef:b8:90:eb: db:0b:6a:95:0e:46:07:9c:0b:7a:f6:97:f9:30:bb:c4:52:9a: 39:b3:2f:b4:09:35:05:14:d9:52:c9:a6:52:e1:3b:88:50:be: e1:a3:8e:14:d6:b1:5e:8b:a4:10:59:0b:58:7e:e6:d3:4f:57: 25:d3:94:eb:93:3d:f3:d6:99:84:93:72:c7:96:28:d8:1e:0d: d8:8c:17:08:80:a6:94:a3:06:28:59:39:37:59:a0:35:e1:23: 89:f5:e8:fd:ed:3b:2f:92:97:4d:94:e5:a9:2f:f0:d2:27:78: fc:99:4c:f0:4b:b8:44:57:2a:8c:2a:fd:ab:1a:eb:b2:9d:ce: a4:c5:8b:5b:47:d7:79:22:fa:2b:0b:67:41:7d:02:bc:30:3a: 23:ed:77:e0:a3:54:96:8b:9c:d1:d0:e7:7c:8c:23:73:73:88: 33:fd:36:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXQECASrPg3HBo6hgHd0OL5x33swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3 MEYxQUM1QzAeFw0yNTEyMDIxMDM2MDlaFw0yNTEyMDUxNjQ4MDlaMDMxMTAvBgNV BAMTKDVEODJFOERDN0Q4ODdBNDRFMTVFRDQwOTkxMjA0NkVGRTI2M0E0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfS67wveWj4gF2lOkZ2qV+xZ8/ 0eU5pTDtvWsHgnLJuvG5tdJveesZQY/NDv9KGe4Abeov4v3UKLf3ADsC2k3C2rFB VPS+9MXg8jvu/JZnLl/6z+SoSsIHdg1PqaywL/Dc8i9N/ff4unaLLixm18J6p6EO Xe+6GiW9CSiF27ugO/sUQ8ZgJEoYTVDnJpY1Pe1AUXoDqqqNJMF0iNra+306PBiZ 9gjInN7Koy3WCf8q8k+LbNBWQrlacCTB6s0EysAeiUBZK9RpxfKCnR6PHnwGEWyV gBSIficB2KH/aEdNCCIWdcAQ8VQZsjzFUJjZYv5utC2iT7Cdh44z6wTvuZqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYLo3H2IekThXtQJkSBG7+JjpP0wHwYDVR0j BBgwFoAU+Zn4foaDg/tdqXSnMrIfp3DxrFwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThkYjQyOC0xOTVjLTQ5MGEtYWJjMi0zY2I2ZjBkNTYwYTMvMC9GOTk5Rjg3RTg2 ODM4M0ZCNURBOTc0QTczMkIyMUZBNzcwRjFBQzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFGQTc3MEYx QUM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZGI0MjgtMTk1Yy00OTBhLWFi YzItM2NiNmYwZDU2MGEzLzAvRjk5OUY4N0U4NjgzODNGQjVEQTk3NEE3MzJCMjFG QTc3MEYxQUM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMjo3i+K2aqWbJem7lF8xHv7EVICeu1mEC0 EjIZKEOnrrXwCKgbu+cI7H78o+NgJG7vyiVRpmop1vDk7DJzMspt+/j4BSl9T7/C s4Yrog6pIwNvLd+v77iQ69sLapUORgecC3r2l/kwu8RSmjmzL7QJNQUU2VLJplLh O4hQvuGjjhTWsV6LpBBZC1h+5tNPVyXTlOuTPfPWmYSTcseWKNgeDdiMFwiAppSj BihZOTdZoDXhI4n16P3tOy+Sl02U5akv8NInePyZTPBLuERXKowq/asa67KdzqTF i1tH13ki+isLZ0F9ArwwOiPtd+CjVJaLnNHQ53yMI3NziDP9Npc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:58 2025 by rpki-client