This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: /aKOux42/HZvkpoAhYmEAx9Xcp4uHDMJkEjn/KJCzkk= Subject key identifier: 8A:56:97:5B:F7:E5:F9:AD:54:9E:2F:BB:EB:E1:B4:0D:75:5B:36:0A Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 3ABE51D5C477CAE750C6F8FA2C964ED5739EC2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02E0 Signing time: Mon 01 Dec 2025 09:32:07 +0000 Manifest this update: Mon 01 Dec 2025 09:27:07 +0000 Manifest next update: Thu 04 Dec 2025 20:44:07 +0000 Files and hashes: 1: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: 7AMbJ91oiIwDHIH9tbFf1iHEXLkFbbnuQ3GAJy+P7mg=) 2: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) 3: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 4: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:be:51:d5:c4:77:ca:e7:50:c6:f8:fa:2c:96:4e:d5:73:9e:c2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Dec 1 09:27:07 2025 GMT Not After : Dec 4 20:44:07 2025 GMT Subject: CN=8A56975BF7E5F9AD549E2FBBEBE1B40D755B360A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:cf:9c:4d:dd:ab:78:70:72:4c:a7:f1:8a: 1f:37:cf:2b:92:7d:c7:53:28:4c:11:87:07:63:fd: fb:6e:e4:1e:8d:f7:a2:7d:c7:d1:38:cb:63:52:9b: 44:93:40:be:8d:7c:b6:a6:18:cd:de:8e:66:04:99: d7:b2:dc:d9:f6:a9:ee:15:50:4c:dd:25:9d:c7:6e: 13:52:4c:f3:59:23:49:67:35:a1:da:c9:fa:42:a3: 4c:d3:40:c9:a6:53:5d:c8:3d:e5:67:1f:58:7e:ec: 41:b9:cd:f2:0e:cb:ed:a7:6d:85:ec:50:96:b6:53: 98:1b:a8:3d:20:56:88:aa:8d:01:e8:4b:aa:51:71: 2c:f1:70:ea:67:71:0f:43:93:cb:f6:e1:1d:83:f9: c0:f7:c1:8f:ba:fc:93:d2:fc:28:ff:2d:6d:f6:6e: c9:ad:55:93:ce:40:7c:4b:43:96:b5:4b:2e:cf:a6: fb:e2:5c:a8:e8:e9:ef:6e:bd:c6:5d:d7:eb:7b:c7: 69:95:7f:c7:41:45:87:a6:5c:31:39:31:8b:f9:64: f1:4c:af:e1:81:73:c8:9a:54:d8:6a:31:85:48:5c: 58:8f:9c:df:8a:ef:d2:db:9a:85:1a:da:b2:f3:90: 6c:56:d8:6f:9a:19:8f:5d:87:6a:53:ff:91:1c:d6: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:97:5B:F7:E5:F9:AD:54:9E:2F:BB:EB:E1:B4:0D:75:5B:36:0A X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:2f:cf:5a:8f:7a:36:b6:7b:c6:f9:95:c6:28:f6:4b:12: 94:16:85:7a:d8:ed:f0:68:e1:52:01:d7:3b:aa:a0:9f:16:25: c7:ca:84:4a:d7:72:f1:02:cf:69:7b:23:6f:e6:24:02:1c:72: c5:e2:39:6e:e3:34:bf:34:05:20:61:e7:03:f0:55:ea:17:50: e3:5b:7e:28:8d:87:9a:89:b2:57:f3:93:8c:d2:a4:6b:4c:94: 28:a7:75:b6:e2:f6:32:34:02:07:c6:65:30:6f:eb:ca:d2:3d: 5a:7b:00:5a:58:06:a9:f1:b1:4a:fe:70:a3:00:f0:10:7e:8b: b7:7d:ad:ab:25:90:57:f8:58:7e:35:7b:51:9f:04:e5:ff:55: 78:19:93:ca:11:c7:9a:28:d6:f0:6d:6a:fc:f8:35:73:89:8f: 8d:d1:4d:1c:4b:4d:b1:fc:7c:12:20:cc:53:9d:15:a6:22:01: 05:22:e7:9b:47:44:a3:95:40:b9:3e:ec:8c:c3:46:c9:5e:79: ca:6b:91:94:82:17:5b:62:25:65:f7:31:f3:b9:75:3e:66:cb: 10:59:97:d2:62:56:c6:91:3c:ad:56:4e:ed:21:1f:4f:7f:36: a7:b0:36:e7:63:10:4c:e2:ad:92:50:99:5b:35:b2:ec:f9:1b: 81:fd:ee:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOr5R1cR3yudQxvj6LJZO1XOewtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTEyMDEwOTI3MDdaFw0yNTEyMDQyMDQ0MDdaMDMxMTAvBgNV BAMTKDhBNTY5NzVCRjdFNUY5QUQ1NDlFMkZCQkVCRTFCNDBENzU1QjM2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48M+cTd2reHByTKfxih83zyuS fcdTKEwRhwdj/ftu5B6N96J9x9E4y2NSm0STQL6NfLamGM3ejmYEmdey3Nn2qe4V UEzdJZ3HbhNSTPNZI0lnNaHayfpCo0zTQMmmU13IPeVnH1h+7EG5zfIOy+2nbYXs UJa2U5gbqD0gVoiqjQHoS6pRcSzxcOpncQ9Dk8v24R2D+cD3wY+6/JPS/Cj/LW32 bsmtVZPOQHxLQ5a1Sy7PpvviXKjo6e9uvcZd1+t7x2mVf8dBRYemXDE5MYv5ZPFM r+GBc8iaVNhqMYVIXFiPnN+K79LbmoUa2rLzkGxW2G+aGY9dh2pT/5Ec1mrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilaXW/fl+a1Uni+76+G0DXVbNgowHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBYL89aj3o2tnvG+ZXGKPZLEpQWhXrY7fBo 4VIB1zuqoJ8WJcfKhErXcvECz2l7I2/mJAIccsXiOW7jNL80BSBh5wPwVeoXUONb fiiNh5qJslfzk4zSpGtMlCindbbi9jI0AgfGZTBv68rSPVp7AFpYBqnxsUr+cKMA 8BB+i7d9raslkFf4WH41e1GfBOX/VXgZk8oRx5oo1vBtavz4NXOJj43RTRxLTbH8 fBIgzFOdFaYiAQUi55tHRKOVQLk+7IzDRsleecprkZSCF1tiJWX3MfO5dT5myxBZ l9JiVsaRPK1WTu0hH09/NqewNudjEEzirZJQmVs1suz5G4H97gw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:28 2025 by rpki-client