This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: orM8LNnmTr/LMwlcekq4T88/+SlwptpmN6xNCTpcLe0= Subject key identifier: 81:87:28:81:C4:C1:F8:2D:B8:64:0D:8B:3C:E0:A9:A9:D1:E9:83:79 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 24C3D8E9A834972198F2F56A9A8681587D620400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 052E Signing time: Wed 03 Dec 2025 10:40:43 +0000 Manifest this update: Wed 03 Dec 2025 10:35:43 +0000 Manifest next update: Sat 06 Dec 2025 14:31:43 +0000 Files and hashes: 1: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI=) 3: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: TMWTWV8kf+Q3adqzG6h0IXru7FuaF3CfRKMAkUfjnMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c3:d8:e9:a8:34:97:21:98:f2:f5:6a:9a:86:81:58:7d:62:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Dec 3 10:35:43 2025 GMT Not After : Dec 6 14:31:43 2025 GMT Subject: CN=81872881C4C1F82DB8640D8B3CE0A9A9D1E98379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:77:bc:7c:10:10:ce:1a:16:f4:b0:8b:9f: 7b:a9:04:76:94:fc:2f:6d:6c:9e:99:63:b1:d3:f6: 21:02:3a:8e:0d:e7:8a:fa:0a:4d:38:41:78:fb:04: a5:ec:a0:3e:6a:4a:5f:79:ed:2f:6c:a7:65:f4:69: 63:66:bc:6b:be:18:e9:98:b6:4e:4a:62:7d:35:2f: a7:23:37:71:ac:b5:84:56:4a:da:b7:df:0d:82:fc: b5:56:e2:39:2c:9a:71:bf:9b:e0:b3:8e:23:8c:fc: dd:c6:72:2b:8f:18:ba:cf:e5:28:84:fb:12:52:a5: a7:f4:3a:20:77:7f:b6:a2:fc:c5:3a:fa:da:a9:9d: 8e:da:5e:06:26:23:47:06:ab:c3:1f:1c:a2:4f:50: 1a:26:67:63:63:f1:73:75:ef:89:cb:9a:ca:50:99: e9:04:90:21:e1:bd:db:5e:2b:1f:bb:d1:37:6b:48: cb:9e:7b:86:6d:a9:0f:27:54:58:ea:d2:c2:ba:e0: af:06:18:0f:03:3d:1b:89:27:bb:44:a7:13:22:ad: 0a:44:ca:1b:a5:fd:a8:a6:03:6c:9c:b9:8a:0e:aa: 28:dd:50:e5:4f:fa:dd:03:68:91:6f:7a:f5:7f:11: da:40:e9:2b:b9:bc:4e:d6:c4:34:49:1c:5d:db:24: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:28:81:C4:C1:F8:2D:B8:64:0D:8B:3C:E0:A9:A9:D1:E9:83:79 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:2f:28:8e:1f:42:8c:3c:51:55:6e:97:fa:86:0f:99:f1:3b: 7e:5b:16:e6:ea:79:2d:fa:54:28:6d:34:40:75:99:c6:19:ae: b9:58:d7:49:39:fa:7a:3a:02:82:2f:6f:85:30:49:40:23:b8: 81:22:1e:0f:8b:ff:6d:d1:44:bf:e0:20:29:60:02:88:cc:67: 59:a0:2e:0f:66:18:81:34:5f:0e:af:b7:75:e4:33:b2:60:9e: 6b:19:2f:42:49:ec:db:19:b5:2d:1f:03:fd:b0:ff:63:e4:aa: c4:7c:94:12:a9:95:b8:e1:b4:9c:6c:f2:b2:a9:83:ce:cb:fc: 07:a5:d9:78:7e:e3:cc:9f:ea:01:05:3c:1b:7f:b9:0a:66:4c: 6b:3a:5d:79:eb:f1:c9:c0:11:02:09:47:f7:8a:1e:a5:61:a0: fd:3b:89:d6:8c:77:26:ee:50:72:6a:9f:7e:93:43:64:fe:62: 6c:93:56:88:13:53:a8:83:7f:11:49:b6:de:0f:56:c9:4d:d8: b8:c4:09:4b:9b:06:97:ba:81:30:cc:f8:87:ab:08:cf:16:3a: 2f:b1:b2:f0:ed:d7:2d:9c:c7:96:19:68:31:7e:22:43:18:fc: a9:41:21:b5:13:dc:29:81:23:5c:c2:99:e2:17:ad:a6:a8:18: 4f:78:ac:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMPY6ag0lyGY8vVqmoaBWH1iBAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTEyMDMxMDM1NDNaFw0yNTEyMDYxNDMxNDNaMDMxMTAvBgNV BAMTKDgxODcyODgxQzRDMUY4MkRCODY0MEQ4QjNDRTBBOUE5RDFFOTgzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0Xe8fBAQzhoW9LCLn3upBHaU /C9tbJ6ZY7HT9iECOo4N54r6Ck04QXj7BKXsoD5qSl957S9sp2X0aWNmvGu+GOmY tk5KYn01L6cjN3GstYRWStq33w2C/LVW4jksmnG/m+CzjiOM/N3GciuPGLrP5SiE +xJSpaf0OiB3f7ai/MU6+tqpnY7aXgYmI0cGq8MfHKJPUBomZ2Nj8XN174nLmspQ mekEkCHhvdteKx+70TdrSMuee4ZtqQ8nVFjq0sK64K8GGA8DPRuJJ7tEpxMirQpE yhul/aimA2ycuYoOqijdUOVP+t0DaJFvevV/EdpA6Su5vE7WxDRJHF3bJNivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgYcogcTB+C24ZA2LPOCpqdHpg3kwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwvKI4fQow8UVVul/qGD5nxO35bFubqeS36 VChtNEB1mcYZrrlY10k5+no6AoIvb4UwSUAjuIEiHg+L/23RRL/gIClgAojMZ1mg Lg9mGIE0Xw6vt3XkM7JgnmsZL0JJ7NsZtS0fA/2w/2PkqsR8lBKplbjhtJxs8rKp g87L/Ael2Xh+48yf6gEFPBt/uQpmTGs6XXnr8cnAEQIJR/eKHqVhoP07idaMdybu UHJqn36TQ2T+YmyTVogTU6iDfxFJtt4PVslN2LjECUubBpe6gTDM+IerCM8WOi+x svDt1y2cx5YZaDF+IkMY/KlBIbUT3CmBI1zCmeIXraaoGE94rOE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:38 2025 by rpki-client