This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: fEPWfq6f89V4rg4pBMAOFp2ZikwRk8r6nfJY/UKpstA= Subject key identifier: 6C:A4:6D:97:55:CD:62:5E:CB:22:60:68:3D:EA:66:A3:B6:FF:E3:5C Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 181BF21296A0C533442B4F92E899ABBE232C4818 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0150 Signing time: Wed 03 Dec 2025 11:10:59 +0000 Manifest this update: Wed 03 Dec 2025 11:05:59 +0000 Manifest next update: Sat 06 Dec 2025 12:26:59 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: wrMxqvA8zuUgb8s7V463SRz2x4H8yPPJdOFqt67QcMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1b:f2:12:96:a0:c5:33:44:2b:4f:92:e8:99:ab:be:23:2c:48:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Dec 3 11:05:59 2025 GMT Not After : Dec 6 12:26:59 2025 GMT Subject: CN=6CA46D9755CD625ECB2260683DEA66A3B6FFE35C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:be:7a:fc:d2:85:7e:40:90:57:ee:9d:ed: 0d:dc:0d:12:65:92:82:12:66:e6:34:42:a9:2f:a2: a4:98:5c:37:c9:30:41:87:36:ac:85:7f:c6:01:21: f0:38:94:de:74:cf:0d:63:2e:7c:16:9c:c7:e0:35: 01:16:38:dc:3d:4e:80:ca:02:4c:72:7a:da:46:91: 28:16:18:8f:50:06:41:69:ad:5b:25:14:b3:00:f4: fe:53:99:77:80:84:e4:24:05:7f:b5:50:05:f2:f3: 43:f4:ae:6f:51:6b:31:c0:7c:c0:51:c8:86:b6:3f: 9d:c4:7f:96:49:a0:72:48:5e:9f:a6:d9:43:1a:f2: 3a:f9:03:99:48:6d:bd:a6:9f:cf:fd:ee:4a:44:d9: 63:51:b8:9a:74:3e:22:ae:0b:97:63:19:de:35:8c: c7:cd:5c:65:6f:a0:c6:21:29:80:b3:d9:5a:20:d5: 1f:85:6c:e0:4a:ee:86:ff:27:c2:71:bc:6b:95:e7: b8:12:53:bb:97:07:bd:9a:a6:e3:0e:05:19:d5:18: 2e:52:df:4e:cc:16:65:e0:0e:4c:1d:df:25:a9:8b: b9:93:4e:f6:18:78:3f:d1:2f:8a:91:3b:ef:94:1a: 9e:09:dd:73:ef:10:f6:82:fa:9a:4a:9e:c2:f8:a1: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A4:6D:97:55:CD:62:5E:CB:22:60:68:3D:EA:66:A3:B6:FF:E3:5C X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:02:17:b1:9a:be:d4:aa:16:4c:da:37:a2:0c:ff:49:71:0d: b5:58:f5:93:cb:0d:a0:ba:db:a6:21:df:89:68:e4:a8:70:ef: 6f:25:fb:7d:6b:52:12:82:62:65:60:a5:c1:f2:00:a6:5c:5e: 9c:b0:d9:82:3d:96:12:cb:a2:46:38:c1:df:37:49:fe:45:c4: 27:fa:8c:bd:7d:91:ed:2f:8e:fb:5d:77:45:77:91:98:95:32: 1b:61:1c:1e:3b:b9:7e:c9:f8:6f:57:66:d2:4d:48:35:05:61: 21:a6:d4:87:77:26:72:9b:d3:d5:4b:90:22:fd:af:10:57:ab: 4e:7b:5c:09:79:35:07:6b:af:54:96:b9:f2:80:67:69:89:9c: 88:26:76:b4:fd:19:cf:21:21:2b:c0:6b:1a:1a:51:8b:d9:8c: 11:9b:a6:d1:5c:65:1a:9e:bf:93:22:2d:cd:f0:ce:7f:8d:55: 01:c3:69:27:33:43:ea:c2:f0:18:94:99:ef:0d:82:0a:57:bc: a8:c7:a1:d6:07:bf:f5:9e:13:57:8b:20:a9:9a:ff:1f:70:37: 8a:b5:08:77:6c:6f:f5:3d:8e:a5:ed:5a:54:31:e7:ce:d0:cc: ae:c6:0c:4d:31:aa:03:19:da:96:40:ab:e7:59:7a:04:3e:cc: e4:09:1e:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBvyEpagxTNEK0+S6JmrviMsSBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTEyMDMxMTA1NTlaFw0yNTEyMDYxMjI2NTlaMDMxMTAvBgNV BAMTKDZDQTQ2RDk3NTVDRDYyNUVDQjIyNjA2ODNERUE2NkEzQjZGRkUzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnb56/NKFfkCQV+6d7Q3cDRJl koISZuY0QqkvoqSYXDfJMEGHNqyFf8YBIfA4lN50zw1jLnwWnMfgNQEWONw9ToDK AkxyetpGkSgWGI9QBkFprVslFLMA9P5TmXeAhOQkBX+1UAXy80P0rm9RazHAfMBR yIa2P53Ef5ZJoHJIXp+m2UMa8jr5A5lIbb2mn8/97kpE2WNRuJp0PiKuC5djGd41 jMfNXGVvoMYhKYCz2Vog1R+FbOBK7ob/J8JxvGuV57gSU7uXB72apuMOBRnVGC5S 307MFmXgDkwd3yWpi7mTTvYYeD/RL4qRO++UGp4J3XPvEPaC+ppKnsL4odkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKRtl1XNYl7LImBoPepmo7b/41wwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4CF7GavtSqFkzaN6IM/0lxDbVY9ZPLDaC6 26Yh34lo5Khw728l+31rUhKCYmVgpcHyAKZcXpyw2YI9lhLLokY4wd83Sf5FxCf6 jL19ke0vjvtdd0V3kZiVMhthHB47uX7J+G9XZtJNSDUFYSGm1Id3JnKb09VLkCL9 rxBXq057XAl5NQdrr1SWufKAZ2mJnIgmdrT9Gc8hISvAaxoaUYvZjBGbptFcZRqe v5MiLc3wzn+NVQHDaSczQ+rC8BiUme8NggpXvKjHodYHv/WeE1eLIKma/x9wN4q1 CHdsb/U9jqXtWlQx587QzK7GDE0xqgMZ2pZAq+dZegQ+zOQJHjI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:09 2025 by rpki-client