This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: UqpOJteA5cvl00JnhSNmyO2nvwLenV4LWl6YrPePNQU= Subject key identifier: 27:10:64:58:9F:85:75:D5:43:2C:F8:74:D0:3A:62:AE:10:AD:97:50 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 7ECAAFC5D30347212168BBE898270B8D824A799B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 012F Signing time: Sun 07 Dec 2025 10:32:03 +0000 Manifest this update: Sun 07 Dec 2025 10:27:03 +0000 Manifest next update: Wed 10 Dec 2025 19:47:03 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: Kpb7+t6QFkc2bbhpFI3xWuduHFBLa5o1GBmyviLn2Mo=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: +JuFG85/x7QzaCoYI5/f+ngEk0nIACmoHGyCt4qyPYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ca:af:c5:d3:03:47:21:21:68:bb:e8:98:27:0b:8d:82:4a:79:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Dec 7 10:27:03 2025 GMT Not After : Dec 10 19:47:03 2025 GMT Subject: CN=271064589F8575D5432CF874D03A62AE10AD9750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:12:63:59:88:c7:a3:ac:c0:6e:f2:cb:a5: 64:5d:b5:31:89:09:d0:1a:bc:44:cf:df:6c:3f:36: de:7f:25:0c:57:4c:20:97:94:14:ca:6d:e3:19:dc: df:6f:80:ec:fa:38:99:0a:a4:5a:18:0e:7f:63:52: 68:5f:83:cd:19:3d:4a:16:d5:86:87:9f:18:a5:79: 34:c5:b9:24:7f:e3:8e:84:2c:4b:81:2d:dc:85:51: 8f:8c:1d:80:33:84:52:5a:d6:99:92:bb:70:35:2b: e0:0b:5c:49:7e:b0:02:84:ec:45:3d:c7:18:18:73: cd:bf:a6:9d:c8:46:4b:18:45:4a:b9:f0:cd:97:7f: ac:a2:4d:3a:c6:a7:f2:64:97:c4:fa:48:74:5a:b0: 33:85:38:9f:7f:ee:59:55:40:67:e2:df:0a:df:47: 90:23:29:a0:18:d8:c6:17:1e:f8:84:cc:d3:98:d5: 03:bd:f4:a3:af:ba:f0:67:06:a5:c9:be:ba:d9:b5: 20:70:16:10:39:e6:f9:b6:a2:fa:72:43:51:e9:66: d3:5a:e5:4f:9a:ec:59:c6:3b:12:61:81:e5:0e:e1: 7d:79:5b:30:3a:10:14:68:4e:6b:ae:f7:fb:0f:d7: a7:b4:e0:e2:28:96:d1:45:18:74:0a:24:e6:7c:ba: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:64:58:9F:85:75:D5:43:2C:F8:74:D0:3A:62:AE:10:AD:97:50 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a3:dd:94:39:6e:9e:f2:0d:c7:5f:93:cf:a9:ea:2b:2f:34: 59:27:eb:7c:dc:54:52:4f:c9:32:ed:13:3e:61:56:f3:20:4f: 3d:4a:d1:66:11:8c:ec:3b:c7:97:63:19:cb:95:26:81:65:63: 4c:e8:f2:84:5b:90:83:19:06:18:75:3c:f1:c7:e0:d2:8c:8e: 9b:fe:e0:f2:22:fc:0a:67:a0:bd:80:ed:fc:92:8a:74:3b:ad: 52:00:ff:0f:b3:a7:c7:63:d4:16:e0:25:12:98:2b:45:85:c6: 62:b1:a9:fa:1c:dc:b8:56:b3:1b:fd:f4:a6:2d:e7:2d:f8:14: ca:dd:14:51:2d:65:a1:2d:fc:c0:53:8b:32:9b:bb:3c:20:bb: 28:d5:97:f3:99:5e:9b:c3:a8:d3:1b:65:2b:b0:e6:5e:0f:84: 31:47:e2:cb:80:23:da:8f:93:32:c2:0d:14:e3:a8:30:93:64: cd:04:71:b4:b7:c0:82:7c:20:66:aa:5f:3d:12:01:c8:ab:c5: 90:08:3f:02:0c:f3:38:b2:3c:9d:3b:67:98:c5:70:5d:de:8e: 9b:0c:47:7e:eb:d9:85:c9:a6:62:13:d4:0c:40:64:fe:27:0f: 35:20:56:31:ba:cb:33:67:4e:ce:89:fc:cf:81:ef:d7:55:a8: 0a:47:f1:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsqvxdMDRyEhaLvomCcLjYJKeZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNTEyMDcxMDI3MDNaFw0yNTEyMTAxOTQ3MDNaMDMxMTAvBgNV BAMTKDI3MTA2NDU4OUY4NTc1RDU0MzJDRjg3NEQwM0E2MkFFMTBBRDk3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RxJjWYjHo6zAbvLLpWRdtTGJ CdAavETP32w/Nt5/JQxXTCCXlBTKbeMZ3N9vgOz6OJkKpFoYDn9jUmhfg80ZPUoW 1YaHnxileTTFuSR/446ELEuBLdyFUY+MHYAzhFJa1pmSu3A1K+ALXEl+sAKE7EU9 xxgYc82/pp3IRksYRUq58M2Xf6yiTTrGp/Jkl8T6SHRasDOFOJ9/7llVQGfi3wrf R5AjKaAY2MYXHviEzNOY1QO99KOvuvBnBqXJvrrZtSBwFhA55vm2ovpyQ1HpZtNa 5U+a7FnGOxJhgeUO4X15WzA6EBRoTmuu9/sP16e04OIoltFFGHQKJOZ8unN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxBkWJ+FddVDLPh00DpirhCtl1AwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOj3ZQ5bp7yDcdfk8+p6isvNFkn63zcVFJP yTLtEz5hVvMgTz1K0WYRjOw7x5djGcuVJoFlY0zo8oRbkIMZBhh1PPHH4NKMjpv+ 4PIi/ApnoL2A7fySinQ7rVIA/w+zp8dj1BbgJRKYK0WFxmKxqfoc3LhWsxv99KYt 5y34FMrdFFEtZaEt/MBTizKbuzwguyjVl/OZXpvDqNMbZSuw5l4PhDFH4suAI9qP kzLCDRTjqDCTZM0EcbS3wIJ8IGaqXz0SAcirxZAIPwIM8ziyPJ07Z5jFcF3ejpsM R37r2YXJpmIT1AxAZP4nDzUgVjG6yzNnTs6J/M+B79dVqApH8cA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:33 2025 by rpki-client