This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft (raw, json) Hash identifier: nuTKs/Lkvo+LWyvg8MUb2/Uzm1sfECDcXowJXVpzeqo= Subject key identifier: 07:EA:1C:9C:7D:16:96:49:9F:25:E6:27:D0:DC:93:E8:C0:EA:E5:B9 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 32C9AB889E93BB6DA8C85E453B6FFA7F59C75631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft Manifest number: 04CA Signing time: Thu 18 Dec 2025 04:12:00 +0000 Manifest this update: Thu 18 Dec 2025 04:07:00 +0000 Manifest next update: Sun 21 Dec 2025 05:02:00 +0000 Files and hashes: 1: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: APKnqzs0AhNltyzReDLYt5pEaL3GFsO7SJudc2pHP5w=) 2: F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl (hash: t/jnVHUg5eAEQTPH/17aVhLuZ4JAHcEzrMNXo1iqaAM=) 3: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU=) 4: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: 0gt4Ot6+F7fSlrKRykoZVwa5I+j2zIdyxVjYLmEYd1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c9:ab:88:9e:93:bb:6d:a8:c8:5e:45:3b:6f:fa:7f:59:c7:56:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Dec 18 04:07:00 2025 GMT Not After : Dec 21 05:02:00 2025 GMT Subject: CN=07EA1C9C7D1696499F25E627D0DC93E8C0EAE5B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:a7:28:ca:e6:14:1e:aa:28:c3:7a:47:05: 32:5a:e6:d1:54:fa:2c:75:7b:0b:00:d9:0d:6b:49: 25:23:a8:90:18:5f:57:24:31:f8:88:5c:12:cd:35: 65:8f:0b:ac:03:12:d0:33:9b:6d:4a:39:20:f5:e8: 30:34:75:dc:d1:a8:2b:a0:a2:aa:ff:3a:05:be:05: 5c:65:87:0b:9f:2f:b1:8c:73:4c:3a:b5:9a:2d:3d: 1f:7b:c4:0b:1f:1e:d0:01:5a:fd:8d:cb:f8:90:cb: 5b:88:ff:82:c3:3d:14:4e:bf:a9:16:e3:80:94:99: a4:5d:b4:42:82:11:84:c4:82:4a:ae:72:9c:fa:c4: 60:5b:32:e8:f9:ed:48:b9:aa:5d:20:6d:08:e4:1b: e2:21:39:78:13:cc:01:2c:ed:43:72:32:58:7c:c2: 66:a0:03:ae:d8:0f:8c:59:0b:d4:9c:61:5c:66:6a: 98:31:e6:95:16:4b:b1:66:03:e2:0f:ee:dc:77:a7: 9b:fe:cc:1c:c5:4b:7b:69:5b:32:a5:24:dd:89:ef: c7:d5:11:d2:e2:0f:42:91:13:c6:7c:17:85:a2:ba: 46:d7:c6:e0:70:8c:6e:0b:ae:79:53:e6:9f:b4:69: ec:8c:42:86:0b:53:00:58:47:d9:22:29:9d:5f:00: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:1C:9C:7D:16:96:49:9F:25:E6:27:D0:DC:93:E8:C0:EA:E5:B9 X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f8:5b:f5:f4:3c:18:9a:ed:28:c7:ca:fd:d9:56:07:57:f7: 60:0e:b8:29:5f:92:ad:bc:88:7a:8b:4e:64:5e:7e:49:39:70: b6:3f:b9:c2:cf:a8:73:ca:f3:ec:9f:29:14:fc:16:3a:72:5b: a7:b5:2a:46:64:6f:85:5b:55:38:ad:8e:1a:2d:7f:de:7a:fd: 51:c8:6b:11:37:78:d5:26:e2:06:48:83:45:a2:97:b7:45:81: 03:f0:da:5c:99:52:9e:d8:dd:1c:48:35:fa:ef:05:bb:06:be: 4f:72:d2:e1:ec:be:b1:2a:27:37:c9:f1:8d:33:04:d3:54:29: 71:90:64:df:83:54:8d:e7:36:1c:d1:6b:93:9d:fb:90:67:28: 03:cb:92:cd:3a:83:30:31:fa:ea:d6:c5:61:dc:c0:f3:9b:6d: 9c:9c:e9:fa:fb:53:e6:d7:32:5c:82:52:c1:4d:db:c9:c5:b8: ae:2e:c8:d5:9e:34:78:8c:42:6f:62:9e:4d:e3:c9:0f:2f:49: 73:6a:26:55:06:18:2a:3b:78:2c:14:88:9f:7c:5a:1c:14:3e: ee:d6:60:c8:d7:fc:5e:eb:4c:67:47:ad:ed:69:98:2e:6a:bc: 25:c2:f5:99:5a:b7:88:df:60:82:53:cf:f0:41:e8:d4:c2:18: ac:da:b1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsmriJ6Tu22oyF5FO2/6f1nHVjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNTEyMTgwNDA3MDBaFw0yNTEyMjEwNTAyMDBaMDMxMTAvBgNV BAMTKDA3RUExQzlDN0QxNjk2NDk5RjI1RTYyN0QwREM5M0U4QzBFQUU1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89acoyuYUHqoow3pHBTJa5tFU +ix1ewsA2Q1rSSUjqJAYX1ckMfiIXBLNNWWPC6wDEtAzm21KOSD16DA0ddzRqCug oqr/OgW+BVxlhwufL7GMc0w6tZotPR97xAsfHtABWv2Ny/iQy1uI/4LDPRROv6kW 44CUmaRdtEKCEYTEgkqucpz6xGBbMuj57Ui5ql0gbQjkG+IhOXgTzAEs7UNyMlh8 wmagA67YD4xZC9ScYVxmapgx5pUWS7FmA+IP7tx3p5v+zBzFS3tpWzKlJN2J78fV EdLiD0KRE8Z8F4WiukbXxuBwjG4LrnlT5p+0aeyMQoYLUwBYR9kiKZ1fABFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+ocnH0WlkmfJeYn0NyT6MDq5bkwHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlE NUMwNjI0MDc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr4W/X0PBia7SjHyv3ZVgdX92AOuClfkq28 iHqLTmRefkk5cLY/ucLPqHPK8+yfKRT8FjpyW6e1KkZkb4VbVTitjhotf956/VHI axE3eNUm4gZIg0Wil7dFgQPw2lyZUp7Y3RxINfrvBbsGvk9y0uHsvrEqJzfJ8Y0z BNNUKXGQZN+DVI3nNhzRa5Od+5BnKAPLks06gzAx+urWxWHcwPObbZyc6fr7U+bX MlyCUsFN28nFuK4uyNWeNHiMQm9ink3jyQ8vSXNqJlUGGCo7eCwUiJ98WhwUPu7W YMjX/F7rTGdHre1pmC5qvCXC9Zlat4jfYIJTz/BB6NTCGKzasfE= -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:21 2025 by rpki-client