This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json) Hash identifier: pn5cTuYs1mjq03I2bpb1RXC7KzXIiXjc0t+TYRANCI0= Subject key identifier: 8F:0D:FE:7E:30:6E:AA:AD:B4:B8:30:92:75:97:FF:9D:A5:89:0B:C7 Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Certificate serial: 6278BDB2D88763686246DD2D73247696A6D64279 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft Manifest number: 0536 Signing time: Wed 03 Dec 2025 07:10:00 +0000 Manifest this update: Wed 03 Dec 2025 07:05:00 +0000 Manifest next update: Sat 06 Dec 2025 13:43:00 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=) 2: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: YJslt5npOLteH84DLt0ax26exOGlupNvlkxtmoqwH9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:78:bd:b2:d8:87:63:68:62:46:dd:2d:73:24:76:96:a6:d6:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Validity Not Before: Dec 3 07:05:00 2025 GMT Not After : Dec 6 13:43:00 2025 GMT Subject: CN=8F0DFE7E306EAAADB4B830927597FF9DA5890BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:36:a3:66:47:9a:64:cb:b5:a9:9c:95:88: c1:41:0a:f1:23:f1:df:ad:86:fe:67:8e:64:37:0d: 06:60:e2:58:4c:63:d6:b0:a9:17:8c:91:f3:86:81: 9c:32:99:83:04:75:e6:24:7b:c6:b0:7b:0d:f0:b4: 0e:3a:86:bf:06:bf:4a:16:b6:04:6c:e1:8c:13:07: b5:43:d8:02:08:b0:86:bd:a9:04:e1:f3:e6:42:80: cf:4a:63:20:c3:f5:ac:65:a5:de:cd:7c:96:a5:3b: 37:e3:06:6b:8c:15:61:3a:e9:53:c6:f0:dd:af:dc: 45:7b:29:20:fb:ad:4d:2e:b2:a4:56:e4:5e:b7:ad: 89:8e:79:ea:3e:ce:2f:a7:c2:7c:01:4f:85:4f:8c: 51:55:d9:39:de:a1:55:32:f3:5f:a3:e6:af:69:ec: 68:d5:d9:f7:5e:b7:84:9e:fc:07:46:25:55:32:a8: da:da:d0:b6:86:ec:03:18:6f:50:48:fe:38:6d:d3: ca:55:58:f9:2b:26:96:19:8d:8a:32:ec:37:f5:86: d2:17:5a:86:bd:ee:d0:ab:62:d9:d0:c6:00:30:76: 2f:71:79:85:be:e8:d3:c6:56:0c:ce:58:17:a2:ab: b0:81:5b:92:4e:b5:eb:22:27:c4:75:76:ee:27:c0: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:FE:7E:30:6E:AA:AD:B4:B8:30:92:75:97:FF:9D:A5:89:0B:C7 X509v3 Authority Key Identifier: keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ac:46:0f:59:9f:74:8f:02:c5:cd:14:e0:37:7d:c8:c0:75: b7:05:58:f7:dc:74:f3:a3:02:81:94:19:1d:e8:f5:e6:9e:71: c1:51:21:a9:8b:ed:0c:fb:54:07:69:dd:e0:8a:9d:98:5d:2d: 79:af:e0:c8:ae:5e:31:8d:da:0e:ab:27:c5:75:0a:a3:dc:f9: dd:3c:05:ed:b7:cc:70:69:07:6d:4a:21:c0:ab:90:5e:f0:92: 45:81:21:5a:f6:bf:b5:90:cd:b5:3f:24:5a:ac:1c:cf:9c:07: 3f:31:5d:11:c5:37:5a:e9:55:93:3f:ae:4a:21:c1:f4:79:38: 9e:c2:51:45:39:dc:8d:7c:c2:fa:be:6b:b5:3a:48:7d:c3:2c: 91:64:b5:24:64:15:49:4d:a6:98:de:e0:32:f3:fb:db:0c:f0: d9:c5:9c:02:e3:cd:ea:f2:98:7e:53:67:fe:a5:80:bb:20:a1: f1:3a:fe:c4:a6:14:ce:84:a6:52:66:5a:99:14:c0:07:2c:3c: d7:46:98:9a:8b:89:a7:42:8e:64:d9:b3:8c:f2:8d:a5:21:3a: ea:74:c3:a1:4d:8c:2e:14:ff:ad:20:8f:a7:1e:db:86:7d:1e: 6a:e3:00:3b:1c:f8:17:66:a5:9f:6a:6c:95:02:8d:70:73:dd: 2c:bb:84:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYni9stiHY2hiRt0tcyR2lqbWQnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy NkU4QkE5ODAeFw0yNTEyMDMwNzA1MDBaFw0yNTEyMDYxMzQzMDBaMDMxMTAvBgNV BAMTKDhGMERGRTdFMzA2RUFBQURCNEI4MzA5Mjc1OTdGRjlEQTU4OTBCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tTajZkeaZMu1qZyViMFBCvEj 8d+thv5njmQ3DQZg4lhMY9awqReMkfOGgZwymYMEdeYke8awew3wtA46hr8Gv0oW tgRs4YwTB7VD2AIIsIa9qQTh8+ZCgM9KYyDD9axlpd7NfJalOzfjBmuMFWE66VPG 8N2v3EV7KSD7rU0usqRW5F63rYmOeeo+zi+nwnwBT4VPjFFV2TneoVUy81+j5q9p 7GjV2fdet4Se/AdGJVUyqNra0LaG7AMYb1BI/jht08pVWPkrJpYZjYoy7Df1htIX Woa97tCrYtnQxgAwdi9xeYW+6NPGVgzOWBeiq7CBW5JOtesiJ8R1du4nwEZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjw3+fjBuqq20uDCSdZf/naWJC8cwHwYDVR0j BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4 QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2 ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2sRg9Zn3SPAsXNFOA3fcjAdbcFWPfcdPOj AoGUGR3o9eaeccFRIamL7Qz7VAdp3eCKnZhdLXmv4MiuXjGN2g6rJ8V1CqPc+d08 Be23zHBpB21KIcCrkF7wkkWBIVr2v7WQzbU/JFqsHM+cBz8xXRHFN1rpVZM/rkoh wfR5OJ7CUUU53I18wvq+a7U6SH3DLJFktSRkFUlNppje4DLz+9sM8NnFnALjzery mH5TZ/6lgLsgofE6/sSmFM6EplJmWpkUwAcsPNdGmJqLiadCjmTZs4zyjaUhOup0 w6FNjC4U/60gj6ce24Z9HmrjADsc+BdmpZ9qbJUCjXBz3Sy7hDM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:35 2025 by rpki-client