This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft File: F2E8B493535CE192E2A343E44990C2B86B854E0F.mft (raw, json) Hash identifier: EX8X+kUzPT84edb5H8VOU0CmEo87LWSjiX3F96M38Vk= Subject key identifier: AC:F5:7E:13:DC:7F:14:93:07:96:61:F7:3A:A4:EA:5C:C3:3D:D1:0A Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 0F5DBB266CE86FDC5B7E0996EF7BF0222EDEBDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft Manifest number: E8 Signing time: Sat 06 Dec 2025 19:41:09 +0000 Manifest this update: Sat 06 Dec 2025 19:36:09 +0000 Manifest next update: Wed 10 Dec 2025 02:03:09 +0000 Files and hashes: 1: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew=) 2: F2E8B493535CE192E2A343E44990C2B86B854E0F.crl (hash: lmp9Z11Xm3dLQf2TbnZvTWDGIYHa2fndTCO6w+PXgJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5d:bb:26:6c:e8:6f:dc:5b:7e:09:96:ef:7b:f0:22:2e:de:bd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Dec 6 19:36:09 2025 GMT Not After : Dec 10 02:03:09 2025 GMT Subject: CN=ACF57E13DC7F1493079661F73AA4EA5CC33DD10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:35:59:cb:3c:60:09:8b:30:b6:bb:e0:2c: 02:b2:ef:b3:f3:e7:eb:74:36:37:ea:70:2f:17:f4: 42:f5:ff:29:f8:d1:6f:9a:61:9b:a7:1d:15:ed:d0: 63:16:34:94:9e:27:5b:7f:33:df:5b:3d:ec:60:b0: bd:c2:2a:b6:1b:a6:48:83:b5:9b:b2:20:d4:01:b3: 56:2b:d1:11:06:80:73:3e:da:48:c2:e1:67:62:10: bd:1d:80:e7:fa:30:81:fe:ac:3b:a0:06:c9:f3:ce: d6:e5:80:4a:4f:43:71:bd:3d:4d:a7:7b:0c:13:15: 07:8c:2b:48:11:e1:ae:a7:84:6c:b4:f6:76:65:9f: fb:53:96:09:c5:c7:71:c8:74:95:e3:d5:9f:4c:59: c8:fb:80:77:0d:2f:79:ed:d6:04:ea:b6:e3:02:d6: 71:5a:0e:5f:ad:30:44:1e:6e:dc:ef:f4:51:34:67: f4:3d:c4:60:88:3a:71:f4:bb:a1:e7:11:01:19:31: 19:df:61:36:5f:09:13:bd:ff:d1:28:83:47:e3:c3: 1a:a5:36:76:10:4d:e7:84:ee:7d:e8:10:7f:2a:2c: b6:47:91:25:94:53:ce:d1:a1:98:fe:5e:56:8b:cf: 28:af:60:e6:aa:e2:fe:55:53:95:1c:2f:f9:30:d6: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:7E:13:DC:7F:14:93:07:96:61:F7:3A:A4:EA:5C:C3:3D:D1:0A X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b0:c2:e3:0f:29:c7:d3:cb:fc:23:20:30:cf:d4:98:37:a1: 1a:49:2c:10:da:fb:74:05:d7:ff:63:fb:c7:cd:a7:e8:f0:8b: 86:7c:4a:b2:bc:dd:b3:16:db:52:95:62:6a:d1:1e:93:04:8b: f5:43:10:56:4d:ba:19:b4:2f:ac:ed:af:6f:18:99:e9:73:09: fc:f7:71:9e:56:9a:56:cb:ac:8d:7e:f4:3c:af:fa:d1:03:7f: 48:45:c2:42:67:23:b9:fb:1a:86:c1:af:53:7d:15:fc:a1:a6: 06:6a:94:43:76:f3:82:a0:4b:7b:be:4c:29:19:c5:42:78:f2: d1:21:7b:98:75:9d:94:47:5e:b3:00:3a:bb:52:a8:22:9a:3f: 6c:77:97:11:18:ab:20:33:1b:58:6c:4f:f6:ba:20:61:a5:29: 18:4d:e9:c7:6b:19:5e:49:04:8d:09:18:86:eb:d5:99:56:7c: 4d:26:27:c1:67:fe:82:80:3d:3c:0e:8d:3f:2a:5e:13:70:6c: e7:03:6d:e8:41:59:1d:cd:cf:6c:f1:dd:3a:9a:e5:85:7d:a4: 1c:bb:95:9f:ad:68:8b:10:86:bb:ab:61:6d:d5:f6:33:36:d4: ba:f0:db:aa:85:d1:13:65:93:f1:b4:39:76:ed:0b:ac:82:63: ae:be:16:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD127Jmzob9xbfgmW73vwIi7eve0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTEyMDYxOTM2MDlaFw0yNTEyMTAwMjAzMDlaMDMxMTAvBgNV BAMTKEFDRjU3RTEzREM3RjE0OTMwNzk2NjFGNzNBQTRFQTVDQzMzREQxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSDVZyzxgCYswtrvgLAKy77Pz 5+t0NjfqcC8X9EL1/yn40W+aYZunHRXt0GMWNJSeJ1t/M99bPexgsL3CKrYbpkiD tZuyINQBs1Yr0REGgHM+2kjC4WdiEL0dgOf6MIH+rDugBsnzztblgEpPQ3G9PU2n ewwTFQeMK0gR4a6nhGy09nZln/tTlgnFx3HIdJXj1Z9MWcj7gHcNL3nt1gTqtuMC 1nFaDl+tMEQebtzv9FE0Z/Q9xGCIOnH0u6HnEQEZMRnfYTZfCRO9/9Eog0fjwxql NnYQTeeE7n3oEH8qLLZHkSWUU87RoZj+XlaLzyivYOaq4v5VU5UcL/kw1hXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPV+E9x/FJMHlmH3OqTqXMM90QowHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMy Qjg2Qjg1NEUwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuwwuMPKcfTy/wjIDDP1Jg3oRpJLBDa+3QF 1/9j+8fNp+jwi4Z8SrK83bMW21KVYmrRHpMEi/VDEFZNuhm0L6ztr28YmelzCfz3 cZ5WmlbLrI1+9Dyv+tEDf0hFwkJnI7n7GobBr1N9FfyhpgZqlEN284KgS3u+TCkZ xUJ48tEhe5h1nZRHXrMAOrtSqCKaP2x3lxEYqyAzG1hsT/a6IGGlKRhN6cdrGV5J BI0JGIbr1ZlWfE0mJ8Fn/oKAPTwOjT8qXhNwbOcDbehBWR3Nz2zx3Tqa5YV9pBy7 lZ+taIsQhrurYW3V9jM21Lrw26qF0RNlk/G0OXbtC6yCY66+Fro= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:04 2025 by rpki-client