This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: ta21SyTJmcEanLN6ru1MJRbTtjaWEr+Lt8tRXX/6E0E= Subject key identifier: B7:B8:3D:96:B6:E9:50:0E:6E:D9:59:A5:23:62:F0:36:16:9F:82:C1 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 6050F6636DEB0D788C4A938D30C1FFC71F1C9D08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 0300 Signing time: Tue 02 Dec 2025 15:20:03 +0000 Manifest this update: Tue 02 Dec 2025 15:15:03 +0000 Manifest next update: Fri 05 Dec 2025 19:58:03 +0000 Files and hashes: 1: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 2: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=) 3: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 4: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: vOv0eHFnpRosBRgDwVG8Tfccbkcd3zIP+AwG8oMLFQ4=) 5: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=) 6: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) 7: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:f6:63:6d:eb:0d:78:8c:4a:93:8d:30:c1:ff:c7:1f:1c:9d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Dec 2 15:15:03 2025 GMT Not After : Dec 5 19:58:03 2025 GMT Subject: CN=B7B83D96B6E9500E6ED959A52362F036169F82C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:4b:9f:b2:fc:15:3f:50:96:15:33:d9:af: 81:ff:7a:6a:e2:c7:7e:58:aa:d3:a5:03:e0:85:83: 10:55:c7:a9:a9:9e:46:55:a5:ef:f5:bc:97:cc:2c: 64:50:96:8d:7b:35:dc:c2:c8:af:ae:cc:e9:a2:95: 31:de:2e:bf:ec:26:c9:40:53:a0:1d:89:8e:f5:20: b9:26:83:e4:93:ad:76:c8:ae:81:e6:25:3d:0b:d2: b4:66:c3:0f:8c:ef:37:68:45:7d:70:56:8d:4a:40: cf:c2:35:21:b9:df:27:2e:0f:12:87:32:85:6a:72: 64:6b:ab:3b:c6:ce:7c:e6:e6:47:93:27:d5:8c:0e: bf:a5:30:8b:37:fd:96:ea:be:2d:fb:61:a8:cf:8c: bc:37:32:24:e5:8c:c6:02:0e:0b:5f:db:91:14:e6: 5f:97:58:b7:dc:6b:9e:a8:66:32:83:40:88:88:e5: 1f:05:75:3d:5e:c8:f0:b0:42:50:6f:d3:3f:1d:d9: b3:40:2e:83:aa:03:19:1d:ba:21:7c:29:ff:5b:17: 5b:71:5b:89:70:a1:4f:11:4d:c4:e7:93:f8:29:74: 27:65:b8:a4:2e:1d:93:c6:33:5f:1e:09:35:d8:ab: 95:26:c1:eb:3d:1e:da:3a:c0:fe:d5:05:e6:f4:ca: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B8:3D:96:B6:E9:50:0E:6E:D9:59:A5:23:62:F0:36:16:9F:82:C1 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:bf:1e:7e:56:78:97:94:e1:2d:8a:bd:07:7f:07:5c:e2: 7a:64:48:83:a5:62:31:0a:48:e4:fb:fd:4c:17:71:07:5b:36: a0:38:81:6d:2c:5c:b5:3f:3b:4c:4d:f9:90:53:88:62:8b:6a: 12:d3:f4:48:32:43:61:5c:9e:32:c0:14:32:e5:3b:d1:1a:41: c7:9e:28:9b:50:f7:98:ac:fb:d1:c7:56:56:32:fe:d4:5b:67: 20:1c:62:03:4b:51:04:59:c6:96:bf:89:3a:66:af:f6:9c:fe: fc:89:0b:e1:eb:a9:4b:2b:9a:df:c9:33:99:4c:aa:9d:ed:e0: 27:fd:c7:69:e5:e5:f9:5a:42:e1:92:63:2c:c4:84:26:85:cd: cc:1a:dc:fe:39:b1:8d:33:1a:6b:2a:6c:89:64:a7:0a:0e:3c: 0e:87:c3:f9:5c:c3:d8:1b:c4:e9:54:60:5b:16:4e:90:a0:27: 89:5f:3e:2a:68:c4:fc:d0:8a:c7:46:82:8f:f4:fe:d1:b5:77: 81:2a:c9:32:a5:4e:f2:15:87:25:2e:0c:e8:b2:f4:98:1c:73: 39:c6:44:63:a9:e6:7e:7b:21:ab:b1:3c:11:ec:02:ba:bc:b6: 91:81:4d:da:37:07:a9:e9:7d:8b:cf:53:06:cf:91:98:60:6e: 6f:a1:59:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFD2Y23rDXiMSpONMMH/xx8cnQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTEyMDIxNTE1MDNaFw0yNTEyMDUxOTU4MDNaMDMxMTAvBgNV BAMTKEI3QjgzRDk2QjZFOTUwMEU2RUQ5NTlBNTIzNjJGMDM2MTY5RjgyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf20ufsvwVP1CWFTPZr4H/emri x35YqtOlA+CFgxBVx6mpnkZVpe/1vJfMLGRQlo17NdzCyK+uzOmilTHeLr/sJslA U6AdiY71ILkmg+STrXbIroHmJT0L0rRmww+M7zdoRX1wVo1KQM/CNSG53ycuDxKH MoVqcmRrqzvGznzm5keTJ9WMDr+lMIs3/Zbqvi37YajPjLw3MiTljMYCDgtf25EU 5l+XWLfca56oZjKDQIiI5R8FdT1eyPCwQlBv0z8d2bNALoOqAxkduiF8Kf9bF1tx W4lwoU8RTcTnk/gpdCdluKQuHZPGM18eCTXYq5Umwes9Hto6wP7VBeb0ykedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7g9lrbpUA5u2VmlI2LwNhafgsEwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErsvx5+VniXlOEtir0Hfwdc4npkSIOlYjEK SOT7/UwXcQdbNqA4gW0sXLU/O0xN+ZBTiGKLahLT9EgyQ2FcnjLAFDLlO9EaQcee KJtQ95is+9HHVlYy/tRbZyAcYgNLUQRZxpa/iTpmr/ac/vyJC+HrqUsrmt/JM5lM qp3t4Cf9x2nl5flaQuGSYyzEhCaFzcwa3P45sY0zGmsqbIlkpwoOPA6Hw/lcw9gb xOlUYFsWTpCgJ4lfPipoxPzQisdGgo/0/tG1d4EqyTKlTvIVhyUuDOiy9JgccznG RGOp5n57IauxPBHsArq8tpGBTdo3B6npfYvPUwbPkZhgbm+hWQo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:54 2025 by rpki-client