This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: wsOEAMmG6wPZPo6O7U0A4VCq1UaiXEyke94DgfOub2Q= Subject key identifier: C1:6F:E2:0F:03:62:FB:5A:6E:C9:4C:7A:9F:4F:49:E6:7F:F6:28:44 Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 133FEEEE28A569565A68A6FD59CFFD8E5D63445B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 0127 Signing time: Tue 02 Dec 2025 19:01:39 +0000 Manifest this update: Tue 02 Dec 2025 18:56:39 +0000 Manifest next update: Fri 05 Dec 2025 19:22:39 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) 3: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: p6eKAYRdHLFekf4pOaoBoUGiAiWpwJ+9xcbkMkRwzF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3f:ee:ee:28:a5:69:56:5a:68:a6:fd:59:cf:fd:8e:5d:63:44:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Dec 2 18:56:39 2025 GMT Not After : Dec 5 19:22:39 2025 GMT Subject: CN=C16FE20F0362FB5A6EC94C7A9F4F49E67FF62844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:fe:3e:72:4f:f0:6c:8f:9f:55:6c:58:f0: 34:ef:71:00:55:e9:5a:71:74:9c:18:37:c9:ce:1a: 1d:99:36:cc:b9:bf:0d:27:a9:7f:7a:5b:c7:2a:2e: 4d:3d:cd:b5:22:0a:a6:f6:6c:3f:66:97:56:9c:d7: db:2d:ae:93:0c:c9:7d:51:02:8f:b1:57:04:bf:b6: a5:36:89:1a:76:32:d3:ba:29:8a:a4:fe:df:6b:1d: f0:b7:7d:05:0b:32:9f:59:a9:c2:13:60:d8:7f:71: c4:a1:f7:bd:bb:a5:4b:88:e4:e2:cb:c1:b6:24:16: 07:74:48:fc:df:ee:82:16:77:c8:9e:ac:d5:d4:94: ae:10:13:11:95:57:c4:10:96:21:b1:82:5d:ae:51: 1c:3a:19:7e:0c:9c:db:99:2a:01:57:48:f3:fd:0d: fd:c4:29:7d:09:11:85:0d:2c:a1:ce:d0:f0:64:4a: d7:cb:82:db:40:a7:5f:ac:5f:d8:3d:e0:4d:30:ca: dd:22:48:de:96:dd:61:f2:f7:05:97:ca:62:be:6a: 61:92:80:7b:c4:c8:82:d7:34:da:44:f4:d7:c1:d5: 1a:9f:e6:33:d9:a6:4c:32:c9:1d:9e:b3:ab:fb:c1: 62:cf:a4:ed:5e:6e:87:54:b7:48:75:d3:a3:8a:2a: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:E2:0F:03:62:FB:5A:6E:C9:4C:7A:9F:4F:49:E6:7F:F6:28:44 X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:06:bb:8d:7c:2c:8f:21:c2:6a:d5:94:0c:e6:8c:3c:00:f3: 4b:d7:44:1d:f3:1f:34:e8:f0:5d:97:51:83:e7:1f:6b:df:bd: 44:f8:bd:95:d3:ce:ef:8c:c7:a5:1b:48:d1:78:72:52:1f:79: 5e:eb:61:23:bc:91:bb:ea:fb:32:a3:17:47:41:44:e7:ea:e3: 97:cb:85:ec:04:8e:d0:a2:14:ac:17:09:0a:7d:85:e5:6c:76: f5:48:63:8c:9f:43:58:57:0d:ac:1e:b0:0b:48:13:72:cd:e6: 66:bd:d4:e3:33:86:55:35:fc:31:52:59:b6:a3:5d:b6:2b:56: ff:e2:ea:16:6f:d8:25:45:21:4f:14:d0:b7:15:85:bb:5b:12: a3:76:67:5e:23:76:07:8f:94:8c:6a:b4:7e:9a:d6:22:53:4a: 79:b3:0c:3e:25:8b:9a:69:dc:dc:d7:c8:d6:7a:65:1b:6a:e5: 89:b6:c8:ab:e9:92:38:38:84:20:a7:20:69:c8:cf:44:cd:6d: ac:f8:7d:3a:7c:18:5b:02:28:d5:45:aa:17:5d:b5:c9:ce:59: b6:20:8d:c8:e7:fb:a3:c7:63:cc:86:cc:51:0d:f6:70:3a:04: 5f:47:59:75:df:bd:cf:29:24:1b:9f:e8:e4:3f:0c:dc:89:8a: fe:74:f1:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEz/u7iilaVZaaKb9Wc/9jl1jRFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTEyMDIxODU2MzlaFw0yNTEyMDUxOTIyMzlaMDMxMTAvBgNV BAMTKEMxNkZFMjBGMDM2MkZCNUE2RUM5NEM3QTlGNEY0OUU2N0ZGNjI4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73f4+ck/wbI+fVWxY8DTvcQBV 6VpxdJwYN8nOGh2ZNsy5vw0nqX96W8cqLk09zbUiCqb2bD9ml1ac19strpMMyX1R Ao+xVwS/tqU2iRp2MtO6KYqk/t9rHfC3fQULMp9ZqcITYNh/ccSh9727pUuI5OLL wbYkFgd0SPzf7oIWd8ierNXUlK4QExGVV8QQliGxgl2uURw6GX4MnNuZKgFXSPP9 Df3EKX0JEYUNLKHO0PBkStfLgttAp1+sX9g94E0wyt0iSN6W3WHy9wWXymK+amGS gHvEyILXNNpE9NfB1Rqf5jPZpkwyyR2es6v7wWLPpO1ebodUt0h106OKKlpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwW/iDwNi+1puyUx6n09J5n/2KEQwHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMGu418LI8hwmrVlAzmjDwA80vXRB3zHzTo 8F2XUYPnH2vfvUT4vZXTzu+Mx6UbSNF4clIfeV7rYSO8kbvq+zKjF0dBROfq45fL hewEjtCiFKwXCQp9heVsdvVIY4yfQ1hXDawesAtIE3LN5ma91OMzhlU1/DFSWbaj XbYrVv/i6hZv2CVFIU8U0LcVhbtbEqN2Z14jdgePlIxqtH6a1iJTSnmzDD4li5pp 3NzXyNZ6ZRtq5Ym2yKvpkjg4hCCnIGnIz0TNbaz4fTp8GFsCKNVFqhddtcnOWbYg jcjn+6PHY8yGzFEN9nA6BF9HWXXfvc8pJBuf6OQ/DNyJiv508YU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:20 2025 by rpki-client