This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft File: F52826976E7EBDBF89B93A42A1682E42B84289FB.mft (raw, json) Hash identifier: igAJoMFO6ic/wpERc3rJA8zkNl3zbRGRqPbE0ZqX1Hg= Subject key identifier: 51:4C:D6:25:6E:87:AA:10:93:84:A5:38:CF:B4:BC:36:6E:FB:76:29 Authority key identifier: F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB Certificate issuer: /CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Certificate serial: 2869434E9A3D70872CAFB6028ACAC7328A779391 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft Manifest number: EC Signing time: Mon 08 Dec 2025 12:22:12 +0000 Manifest this update: Mon 08 Dec 2025 12:17:12 +0000 Manifest next update: Fri 12 Dec 2025 00:04:12 +0000 Files and hashes: 1: F52826976E7EBDBF89B93A42A1682E42B84289FB.crl (hash: xC0okvbrxgoBAcTuyomXmkJbFQiVevbA9lDwMYRP8t8=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: P+pivHFq6sWXzePMBy9uzAKbTKafmuscGwm8u/xXNts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:69:43:4e:9a:3d:70:87:2c:af:b6:02:8a:ca:c7:32:8a:77:93:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F52826976E7EBDBF89B93A42A1682E42B84289FB Validity Not Before: Dec 8 12:17:12 2025 GMT Not After : Dec 12 00:04:12 2025 GMT Subject: CN=514CD6256E87AA109384A538CFB4BC366EFB7629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:7f:26:8b:b9:ee:ac:10:bb:e9:0a:49:18: 24:17:a1:32:9f:f0:7f:fa:f4:a9:9c:15:11:e5:af: 02:87:10:5c:66:99:ac:c7:d0:50:04:0b:e8:10:37: 53:b2:b4:b7:9e:70:e9:24:63:de:0a:d6:f5:18:94: fc:5e:55:8d:ea:33:be:c2:d4:81:4f:7e:99:85:7b: 35:00:81:a9:4c:be:ae:58:95:5c:3b:63:a4:07:50: fc:51:27:c1:7b:df:a2:0b:e9:c4:04:c3:ad:ab:09: 59:c8:1f:82:2a:1b:43:87:f7:34:d5:a7:d1:a1:da: b8:01:52:14:a1:5d:14:8c:1d:9e:ba:1e:c7:36:45: 1e:63:9b:41:b5:b0:9d:30:20:66:c6:a7:32:54:e6: b4:c9:00:13:2e:07:6e:8d:8c:e3:fe:5a:07:c1:f9: 42:90:6f:0a:25:c7:cf:bf:95:d4:d2:24:4a:ec:ec: 9a:62:08:ff:18:3a:e6:26:f6:10:df:17:d8:49:c8: 26:c2:5d:dc:ae:ea:59:77:60:b5:89:ef:9e:28:79: 55:5c:16:36:64:2f:12:e2:99:17:3d:70:6b:c3:02: 0a:82:22:b9:79:2c:20:49:48:85:70:de:09:ff:62: 37:13:61:3b:0c:a4:dd:8a:2e:17:3a:43:7c:67:04: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4C:D6:25:6E:87:AA:10:93:84:A5:38:CF:B4:BC:36:6E:FB:76:29 X509v3 Authority Key Identifier: keyid:F5:28:26:97:6E:7E:BD:BF:89:B9:3A:42:A1:68:2E:42:B8:42:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F52826976E7EBDBF89B93A42A1682E42B84289FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/F52826976E7EBDBF89B93A42A1682E42B84289FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:65:b2:3f:f0:b2:1f:a3:26:1a:69:af:ae:cf:c0:d6:46: 86:4b:a2:53:4f:71:73:20:96:21:21:a0:90:94:08:6a:c6:40: 8e:b6:e5:32:41:cc:f5:dc:9a:50:71:2b:8e:70:4c:24:7d:57: 6d:5d:78:fc:aa:b1:23:49:a0:95:71:9a:2c:a3:e9:95:ac:9b: 97:e6:ee:62:de:29:2d:2b:a4:4a:e9:26:d5:54:00:19:31:2b: 14:3a:32:85:6a:c0:3e:f2:e0:34:ba:e6:66:46:86:67:d3:b2: 81:ed:87:63:eb:d7:6c:44:7b:e6:0e:b6:82:3d:73:f8:61:6c: 4f:6e:ea:6d:0c:31:e2:27:42:37:4b:a6:d4:96:ad:ed:4a:95: ef:5b:4f:6f:58:65:ec:61:b2:a2:50:ae:ce:7a:9f:0b:a2:62: ad:40:27:df:70:34:f1:8e:24:41:4b:0c:4b:dd:7a:e3:85:eb: a5:1f:da:10:62:6f:6a:79:7c:c9:bb:3d:27:63:61:d0:f2:fd: 6e:f3:0b:77:b6:2c:d4:c4:c0:34:46:b6:2a:7c:86:12:f8:b1: 3a:85:e4:cf:6c:4d:94:b9:60:d2:b2:4c:cc:4e:75:41:d4:b9: 8e:db:12:6b:5d:2b:c2:0b:5e:6d:28:2b:16:ba:04:01:d3:53: 61:be:6c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGlDTpo9cIcsr7YCisrHMop3k5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJC ODQyODlGQjAeFw0yNTEyMDgxMjE3MTJaFw0yNTEyMTIwMDA0MTJaMDMxMTAvBgNV BAMTKDUxNENENjI1NkU4N0FBMTA5Mzg0QTUzOENGQjRCQzM2NkVGQjc2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPX8mi7nurBC76QpJGCQXoTKf 8H/69KmcFRHlrwKHEFxmmazH0FAEC+gQN1OytLeecOkkY94K1vUYlPxeVY3qM77C 1IFPfpmFezUAgalMvq5YlVw7Y6QHUPxRJ8F736IL6cQEw62rCVnIH4IqG0OH9zTV p9Gh2rgBUhShXRSMHZ66Hsc2RR5jm0G1sJ0wIGbGpzJU5rTJABMuB26NjOP+WgfB +UKQbwolx8+/ldTSJErs7JpiCP8YOuYm9hDfF9hJyCbCXdyu6ll3YLWJ754oeVVc FjZkLxLimRc9cGvDAgqCIrl5LCBJSIVw3gn/YjcTYTsMpN2KLhc6Q3xnBMv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUzWJW6HqhCThKU4z7S8Nm77dikwHwYDVR0j BBgwFoAU9Sgml25+vb+JuTpCoWguQrhCifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMS9GNTI4MjY5NzZF N0VCREJGODlCOTNBNDJBMTY4MkU0MkI4NDI4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJFNDJCODQy ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRjUyODI2OTc2RTdFQkRCRjg5QjkzQTQyQTE2ODJF NDJCODQyODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoPZbI/8LIfoyYaaa+uz8DWRoZLolNPcXMg liEhoJCUCGrGQI625TJBzPXcmlBxK45wTCR9V21dePyqsSNJoJVxmiyj6ZWsm5fm 7mLeKS0rpErpJtVUABkxKxQ6MoVqwD7y4DS65mZGhmfTsoHth2Pr12xEe+YOtoI9 c/hhbE9u6m0MMeInQjdLptSWre1Kle9bT29YZexhsqJQrs56nwuiYq1AJ99wNPGO JEFLDEvdeuOF66Uf2hBib2p5fMm7PSdjYdDy/W7zC3e2LNTEwDRGtip8hhL4sTqF 5M9sTZS5YNKyTMxOdUHUuY7bEmtdK8ILXm0oKxa6BAHTU2G+bB0= -----END CERTIFICATE-----Generated at Wed Dec 10 04:19:57 2025 by rpki-client