This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft File: F137C794398E5F88909A244EC978EA476CCF76CC.mft (raw, json) Hash identifier: IOVRAxavZo4xVfroiDBi0Q9oXQtzabQlSOGcii/2O7w= Subject key identifier: 49:D5:49:F0:75:28:02:A2:72:DD:7C:5B:E4:0A:16:DB:A0:72:A3:73 Authority key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC Certificate issuer: /CN=F137C794398E5F88909A244EC978EA476CCF76CC Certificate serial: 446417F27C7DB55DD44E1B230F7DF9ABBAE32F9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft Manifest number: 01E8 Signing time: Tue 16 Dec 2025 02:02:00 +0000 Manifest this update: Tue 16 Dec 2025 01:57:00 +0000 Manifest next update: Fri 19 Dec 2025 05:22:00 +0000 Files and hashes: 1: 3130332e35352e3232342e302f32332d3234203d3e20313530343832.roa (hash: bYXObqHIEuwgYntbLAkXiZDYp6ozXDo0Cjhn/uYq1JU=) 2: F137C794398E5F88909A244EC978EA476CCF76CC.crl (hash: tm6KioITmKNLp3moJNZnfrsjT21VkjTKaoRjZXoHnjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 05:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:64:17:f2:7c:7d:b5:5d:d4:4e:1b:23:0f:7d:f9:ab:ba:e3:2f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F137C794398E5F88909A244EC978EA476CCF76CC Validity Not Before: Dec 16 01:57:00 2025 GMT Not After : Dec 19 05:22:00 2025 GMT Subject: CN=49D549F0752802A272DD7C5BE40A16DBA072A373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:94:7b:c7:34:b6:df:ac:59:04:93:91:6b: 3a:60:ba:d2:83:91:7d:1f:74:6d:5f:b0:31:7f:6b: 3d:0b:ef:17:d0:79:6f:5a:b0:60:ea:d2:12:7e:bb: 77:95:59:ee:8d:82:0e:33:7e:ae:d6:70:10:8f:1e: 3b:95:a1:dc:bf:e1:66:d1:98:18:06:77:29:44:76: 25:66:be:87:55:3a:f1:00:1f:7f:74:eb:5b:05:0d: e3:02:c2:12:ce:ae:8b:42:e7:0d:e6:8b:ea:fc:98: 7e:ba:bd:f4:46:0b:ff:ca:79:92:cc:4f:22:32:f7: 6b:c9:4f:54:9e:87:f4:3f:49:b0:10:00:fd:0b:f4: 87:db:4d:28:69:dd:7e:78:1e:24:7b:3a:4a:34:b8: e7:f6:3d:30:8d:15:91:52:7a:5b:52:3d:49:94:f4: 56:0a:fd:71:8e:09:44:f2:3a:e3:42:82:45:6d:c4: 21:68:d6:e4:fb:83:4c:8b:19:ae:2c:23:ea:84:29: 3e:1a:9b:3e:b8:86:30:3d:fd:48:93:eb:3c:14:30: f9:f4:12:ec:77:21:37:95:8c:11:21:e8:43:06:d1: 76:e7:e7:9f:d7:b1:2b:77:0f:0e:76:7a:02:bd:c1: c8:2d:c1:6a:52:04:8a:a1:ef:02:60:cf:9e:b0:aa: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D5:49:F0:75:28:02:A2:72:DD:7C:5B:E4:0A:16:DB:A0:72:A3:73 X509v3 Authority Key Identifier: keyid:F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3a:22:d9:74:05:f1:d6:49:16:46:77:15:28:30:7f:81:23: b3:35:11:80:fe:8c:0c:c2:4d:bb:fa:ad:a8:aa:f2:28:d7:9e: 48:3d:42:d9:44:47:ac:fa:8d:75:f3:11:41:db:3f:1c:6f:9b: 84:52:39:a7:dc:64:38:d9:79:11:e5:85:b6:05:5c:78:f3:a6: 44:8c:1f:eb:77:28:96:41:c3:f0:43:95:d5:e2:d3:ea:2d:6f: 15:94:bd:83:37:71:80:e5:9a:93:c9:7a:a6:88:84:b4:96:53: 56:39:2d:b7:c1:0c:f4:67:4c:ef:1f:58:dc:fc:94:1f:bd:63: bd:6e:89:f2:d4:69:c0:07:5d:91:bd:c7:70:93:6c:c2:42:b9: c3:9c:3e:98:17:b0:07:18:a0:d4:b1:1e:0a:f8:7b:a1:f9:4f: 47:1e:19:69:01:2f:3b:3d:fe:3b:c4:65:df:b6:ef:d3:b3:25: 72:5f:18:70:d1:b8:9b:ed:a4:30:a1:be:31:e9:ef:ee:3e:64: 07:69:2d:d4:66:c1:0d:30:31:e1:15:4f:cb:9b:36:13:54:08: 29:eb:0d:15:e1:5d:49:f7:33:3c:43:dd:2c:16:88:38:ee:0c: 73:d8:0a:7d:e6:4d:48:02:68:40:f6:be:8b:64:3c:71:0d:be: 08:8f:99:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGQX8nx9tV3UThsjD335q7rjL5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2 Q0NGNzZDQzAeFw0yNTEyMTYwMTU3MDBaFw0yNTEyMTkwNTIyMDBaMDMxMTAvBgNV BAMTKDQ5RDU0OUYwNzUyODAyQTI3MkREN0M1QkU0MEExNkRCQTA3MkEzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WZR7xzS236xZBJORazpgutKD kX0fdG1fsDF/az0L7xfQeW9asGDq0hJ+u3eVWe6Ngg4zfq7WcBCPHjuVody/4WbR mBgGdylEdiVmvodVOvEAH39061sFDeMCwhLOrotC5w3mi+r8mH66vfRGC//KeZLM TyIy92vJT1Seh/Q/SbAQAP0L9IfbTShp3X54HiR7Oko0uOf2PTCNFZFSeltSPUmU 9FYK/XGOCUTyOuNCgkVtxCFo1uT7g0yLGa4sI+qEKT4amz64hjA9/UiT6zwUMPn0 Eux3ITeVjBEh6EMG0Xbn55/XsSt3Dw52egK9wcgtwWpSBIqh7wJgz56wqsptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdVJ8HUoAqJy3Xxb5AoW26Byo3MwHwYDVR0j BBgwFoAU8TfHlDmOX4iQmiROyXjqR2zPdswwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMC9GMTM3Qzc5NDM5 OEU1Rjg4OTA5QTI0NEVDOTc4RUE0NzZDQ0Y3NkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVBNDc2Q0NG NzZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmMmM3MzMtZDY3Zi00ODEzLWI4 ZjctMDU4ZDk1YTA5NTg3LzAvRjEzN0M3OTQzOThFNUY4ODkwOUEyNDRFQzk3OEVB NDc2Q0NGNzZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF86Itl0BfHWSRZGdxUoMH+BI7M1EYD+jAzC Tbv6raiq8ijXnkg9QtlER6z6jXXzEUHbPxxvm4RSOafcZDjZeRHlhbYFXHjzpkSM H+t3KJZBw/BDldXi0+otbxWUvYM3cYDlmpPJeqaIhLSWU1Y5LbfBDPRnTO8fWNz8 lB+9Y71uifLUacAHXZG9x3CTbMJCucOcPpgXsAcYoNSxHgr4e6H5T0ceGWkBLzs9 /jvEZd+279OzJXJfGHDRuJvtpDChvjHp7+4+ZAdpLdRmwQ0wMeEVT8ubNhNUCCnr DRXhXUn3MzxD3SwWiDjuDHPYCn3mTUgCaED2votkPHENvgiPmUc= -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:33 2025 by rpki-client