This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json) Hash identifier: 9DyWAvYOLyGBpZjmjgzo5KW0TA3941GwmSHTdphJnoE= Subject key identifier: FA:E4:FA:D6:2F:61:FD:DD:B6:C0:56:E0:6D:C2:73:5F:0A:80:2A:24 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 22FB30FFD8E32B9A31CBBE83039A4E4DBB716E6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft Manifest number: 048A Signing time: Mon 01 Dec 2025 19:41:45 +0000 Manifest this update: Mon 01 Dec 2025 19:36:45 +0000 Manifest next update: Thu 04 Dec 2025 23:04:45 +0000 Files and hashes: 1: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: G/e6ReemFm9pq50kRCT82liYyLXlI8R2Y844zvDP6Ng=) 2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=) 3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=) 4: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fb:30:ff:d8:e3:2b:9a:31:cb:be:83:03:9a:4e:4d:bb:71:6e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Dec 1 19:36:45 2025 GMT Not After : Dec 4 23:04:45 2025 GMT Subject: CN=FAE4FAD62F61FDDDB6C056E06DC2735F0A802A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:b4:ef:a9:dd:48:d9:ec:56:d0:df:44:60: c0:7f:ed:9c:f1:fe:4e:0c:c8:58:b9:5b:d1:57:2c: a1:7f:d6:44:16:4e:a0:60:38:98:d5:cc:46:14:50: 10:14:da:d6:1c:bc:5b:49:d6:ed:36:6b:8e:de:ae: 63:0b:9f:63:98:cc:84:5d:68:ff:3e:8a:d3:cc:b8: 89:94:17:b4:21:8f:c7:ff:18:e4:93:32:cb:4d:ff: b4:bc:e4:a2:71:40:15:cf:06:08:db:27:ae:bc:09: 15:4a:15:94:c4:7d:ed:74:eb:1b:c2:ae:b5:fb:15: 7d:87:05:c3:98:95:5e:93:7c:11:0b:86:20:ff:6b: 8d:35:0b:7b:e8:04:08:db:3a:bf:fb:bf:e4:b7:f1: 1e:3f:66:14:1b:6f:6c:f8:f4:b0:28:8c:a4:45:f0: 7d:35:22:b5:b2:3b:9f:06:f7:6e:32:c8:a0:08:fa: c0:5b:28:e5:fd:49:92:58:9e:03:c0:f0:d9:bc:1d: d5:54:d0:33:df:26:40:13:77:ba:8d:29:98:34:73: ab:11:fc:0c:16:bf:bb:0c:d9:bb:df:f7:6a:fc:97: 49:65:92:d5:bc:a8:f0:d2:c3:9e:5d:12:85:af:9e: db:bd:83:ce:ce:bc:c4:4f:98:c2:86:3b:a6:a4:6e: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:FA:D6:2F:61:FD:DD:B6:C0:56:E0:6D:C2:73:5F:0A:80:2A:24 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:12:47:1f:01:31:34:50:5f:69:45:d4:a5:32:81:fd:08:2a: 60:21:59:83:54:43:2a:70:04:80:c2:ec:54:d8:67:a8:00:90: 5a:53:bc:f2:3c:86:1a:89:2c:03:1b:1a:8b:e4:66:ff:ee:68: ea:1d:08:66:dd:a4:13:75:5b:96:0e:6a:0f:20:95:56:67:51: 27:09:0e:01:9d:10:ec:35:38:e6:07:bb:33:50:98:60:14:d8: 73:94:5d:6a:91:69:d9:4d:d8:47:88:86:7a:fb:4c:d4:c0:7e: ba:80:ac:a0:be:49:e2:07:b6:d7:5e:b1:d9:bc:16:cf:e7:40: 8a:a8:f1:b1:7b:91:b8:be:de:f2:c0:fc:6d:9c:83:05:f2:1f: 13:9e:0d:ba:de:ad:cf:e7:95:db:b2:d8:83:d8:cb:21:03:ed: 63:bc:6e:a4:fc:b1:dd:e5:b2:a6:81:fe:24:19:73:a9:44:ba: f9:0c:15:b4:c1:0e:92:69:7e:1d:6e:73:94:98:19:f6:1f:7e: dd:bd:1a:85:93:ba:17:c6:21:e2:e0:c2:25:40:f7:8f:33:45: be:a9:6b:44:54:ad:d1:03:77:d2:29:d0:33:a1:d0:c1:04:52: 49:71:14:cc:1f:9c:47:b7:af:b5:95:5c:94:5a:2b:a8:c8:5e: 6b:8f:7f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvsw/9jjK5oxy76DA5pOTbtxbm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTEyMDExOTM2NDVaFw0yNTEyMDQyMzA0NDVaMDMxMTAvBgNV BAMTKEZBRTRGQUQ2MkY2MUZERERCNkMwNTZFMDZEQzI3MzVGMEE4MDJBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF7Tvqd1I2exW0N9EYMB/7Zzx /k4MyFi5W9FXLKF/1kQWTqBgOJjVzEYUUBAU2tYcvFtJ1u02a47ermMLn2OYzIRd aP8+itPMuImUF7Qhj8f/GOSTMstN/7S85KJxQBXPBgjbJ668CRVKFZTEfe106xvC rrX7FX2HBcOYlV6TfBELhiD/a401C3voBAjbOr/7v+S38R4/ZhQbb2z49LAojKRF 8H01IrWyO58G924yyKAI+sBbKOX9SZJYngPA8Nm8HdVU0DPfJkATd7qNKZg0c6sR /AwWv7sM2bvf92r8l0llktW8qPDSw55dEoWvntu9g87OvMRPmMKGO6akbkNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+uT61i9h/d22wFbgbcJzXwqAKiQwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1YzczY2MtOTg1ZS00ZTkyLWJh NjktY2Q4YmZmZTRhNTNkLzAvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRC QTQyMEU4MkZCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoSRx8BMTRQX2lF1KUygf0IKmAhWYNUQypw BIDC7FTYZ6gAkFpTvPI8hhqJLAMbGovkZv/uaOodCGbdpBN1W5YOag8glVZnUScJ DgGdEOw1OOYHuzNQmGAU2HOUXWqRadlN2EeIhnr7TNTAfrqArKC+SeIHttdesdm8 Fs/nQIqo8bF7kbi+3vLA/G2cgwXyHxOeDbrerc/nlduy2IPYyyED7WO8bqT8sd3l sqaB/iQZc6lEuvkMFbTBDpJpfh1uc5SYGfYfft29GoWTuhfGIeLgwiVA948zRb6p a0RUrdEDd9Ip0DOh0MEEUklxFMwfnEe3r7WVXJRaK6jIXmuPfzQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:34 2025 by rpki-client