This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: BSEBnQtWVxhCmPCFnvGver+o/WGcnWKBkaaTe9P9N9w= Subject key identifier: C3:25:62:14:A8:D8:5B:3A:D2:DA:79:7C:F4:CD:DB:06:BF:3B:FC:12 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 10F4FC8C4C511D55D565242E17C2724613EDE400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 93 Signing time: Tue 02 Dec 2025 14:02:03 +0000 Manifest this update: Tue 02 Dec 2025 13:57:03 +0000 Manifest next update: Fri 05 Dec 2025 23:31:03 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: DW4KUcYE2VMxlnIxs4r0WX7HlD42jXoerPHvtYN5jZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f4:fc:8c:4c:51:1d:55:d5:65:24:2e:17:c2:72:46:13:ed:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Dec 2 13:57:03 2025 GMT Not After : Dec 5 23:31:03 2025 GMT Subject: CN=C3256214A8D85B3AD2DA797CF4CDDB06BF3BFC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:f2:0f:0b:9c:93:cb:78:c1:d1:69:7c:17: fb:64:5e:04:c7:e4:72:22:d2:dd:5c:b0:06:05:ef: 0e:84:ef:1f:d6:6b:eb:4b:18:df:53:98:b8:ed:a0: 13:03:51:45:d2:25:ac:12:83:f1:99:db:cf:30:c3: 74:8d:51:2e:bb:78:02:38:c1:2d:52:55:c1:b7:cb: e4:ba:b4:20:76:7a:03:59:ed:7c:d9:01:8a:4e:f6: e0:d2:db:79:58:a3:19:c6:5d:15:07:b0:7b:fd:6e: 65:b9:6f:3e:b8:e1:cc:e5:cc:2b:ad:78:b5:e9:a9: 56:fc:7e:60:ff:d1:f7:4b:c3:b9:b8:4d:5f:24:95: b5:07:cd:28:70:39:32:78:49:db:b9:37:f3:64:f8: 18:7d:4f:66:2c:f1:06:42:65:23:b3:8e:f5:46:35: 57:19:73:db:06:0a:a2:67:68:95:d2:ef:46:00:55: ed:45:fe:58:4d:a5:ab:17:49:04:94:f4:2b:a3:a1: 61:33:4e:dc:14:d3:b1:44:08:a5:33:48:85:58:14: 85:a9:d2:14:b0:98:65:84:69:8b:88:92:3a:b2:e6: 27:ed:34:90:78:39:d3:23:69:3c:73:80:d5:cf:b9: 9f:de:6a:d5:c0:36:8c:03:2a:dd:e7:c0:b0:0f:ff: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:25:62:14:A8:D8:5B:3A:D2:DA:79:7C:F4:CD:DB:06:BF:3B:FC:12 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:60:93:94:9f:f8:42:62:5c:d2:9e:f6:c3:79:98:f7:2f:ec: 1d:01:29:f3:1e:fb:7f:d7:9b:87:89:10:eb:95:55:16:f3:ab: 37:dc:8b:5f:c3:30:1e:bc:43:61:c1:ef:a2:d5:be:e6:20:38: b7:54:d8:6f:36:0c:4d:23:28:dd:96:e6:06:fb:91:db:1f:ed: d1:f0:14:df:eb:85:2e:db:89:8a:4e:a5:de:5f:51:16:dd:cc: 32:77:57:64:91:9f:bb:68:26:33:53:e4:91:be:0e:ae:bd:cf: 2f:bd:50:38:c4:f7:d0:ff:04:25:1d:73:f7:a5:cf:f7:07:b9: 9a:a0:60:3e:ce:5d:c2:b4:e1:d0:98:86:98:ed:e4:87:3f:cf: 5e:f1:14:89:b6:44:c4:76:e0:c7:e9:02:3e:d6:51:7e:7a:0a: 7c:95:2f:f7:55:43:0a:36:40:65:ec:50:7b:f5:e1:8e:09:47: 00:f6:e3:ee:44:b1:4c:d8:14:22:4c:47:8f:21:75:89:24:40: 3c:8d:5e:17:53:8f:3c:92:a8:a9:57:58:33:0a:7d:27:8d:5d: 7b:af:ca:df:88:20:d1:f5:10:c8:4c:de:bf:a5:6b:d2:c6:77: 41:2e:98:76:ff:bb:79:28:a6:f7:df:88:ef:30:f3:96:b9:08: 0a:25:fa:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPT8jExRHVXVZSQuF8JyRhPt5AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTEyMDIxMzU3MDNaFw0yNTEyMDUyMzMxMDNaMDMxMTAvBgNV BAMTKEMzMjU2MjE0QThEODVCM0FEMkRBNzk3Q0Y0Q0REQjA2QkYzQkZDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AfIPC5yTy3jB0Wl8F/tkXgTH 5HIi0t1csAYF7w6E7x/Wa+tLGN9TmLjtoBMDUUXSJawSg/GZ288ww3SNUS67eAI4 wS1SVcG3y+S6tCB2egNZ7XzZAYpO9uDS23lYoxnGXRUHsHv9bmW5bz644czlzCut eLXpqVb8fmD/0fdLw7m4TV8klbUHzShwOTJ4Sdu5N/Nk+Bh9T2Ys8QZCZSOzjvVG NVcZc9sGCqJnaJXS70YAVe1F/lhNpasXSQSU9CujoWEzTtwU07FECKUzSIVYFIWp 0hSwmGWEaYuIkjqy5iftNJB4OdMjaTxzgNXPuZ/eatXANowDKt3nwLAP/8MvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwyViFKjYWzrS2nl89M3bBr87/BIwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9gk5Sf+EJiXNKe9sN5mPcv7B0BKfMe+3/X m4eJEOuVVRbzqzfci1/DMB68Q2HB76LVvuYgOLdU2G82DE0jKN2W5gb7kdsf7dHw FN/rhS7biYpOpd5fURbdzDJ3V2SRn7toJjNT5JG+Dq69zy+9UDjE99D/BCUdc/el z/cHuZqgYD7OXcK04dCYhpjt5Ic/z17xFIm2RMR24MfpAj7WUX56CnyVL/dVQwo2 QGXsUHv14Y4JRwD24+5EsUzYFCJMR48hdYkkQDyNXhdTjzySqKlXWDMKfSeNXXuv yt+IINH1EMhM3r+la9LGd0EumHb/u3kopvffiO8w85a5CAol+lA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client