This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft File: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json) Hash identifier: MMGkx3SDPUXjjqm9NmMDQjjNjXersVC6ERsdCqdoFec= Subject key identifier: EF:0E:33:65:F9:27:66:AD:BC:7A:D2:A0:1F:A0:26:D1:6B:9C:72:DC Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Certificate serial: 5F36148009766BAEF06CC275B9C06E0A4CAC26DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft Manifest number: 0112 Signing time: Sat 06 Dec 2025 04:22:05 +0000 Manifest this update: Sat 06 Dec 2025 04:17:05 +0000 Manifest next update: Tue 09 Dec 2025 14:09:05 +0000 Files and hashes: 1: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: ir0ZvkvZJnLQWXN1k0QaVIU7IaSxuOaJ+8kzPc23uzQ=) 2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:14:80:09:76:6b:ae:f0:6c:c2:75:b9:c0:6e:0a:4c:ac:26:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22 Validity Not Before: Dec 6 04:17:05 2025 GMT Not After : Dec 9 14:09:05 2025 GMT Subject: CN=EF0E3365F92766ADBC7AD2A01FA026D16B9C72DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:e6:46:3f:4d:37:bd:99:e9:ee:69:23:cc: 4a:ef:0e:a1:02:68:e2:48:40:3f:31:31:20:75:7b: b3:60:1d:87:73:31:ef:dc:90:47:d3:32:db:a1:2d: a4:14:94:91:bb:64:e3:d4:c9:83:7c:b2:0d:2b:69: 57:9e:01:26:3b:ee:3f:e2:41:68:90:9c:ab:f6:09: 0d:97:06:ac:b4:cf:5d:02:39:00:7e:52:73:20:92: ea:63:f4:ea:b5:19:9c:19:1b:73:d1:33:5f:3d:ad: 2f:43:0a:37:9f:1c:d1:02:b2:15:fc:33:98:f2:2b: ce:48:c7:38:e3:cf:09:43:00:96:63:7c:c7:86:43: 7e:84:65:88:64:f7:35:85:49:6d:b6:b4:27:58:d2: 57:9c:98:55:3c:4d:6e:64:a5:e9:1d:9c:7e:f3:3b: b5:30:8b:ca:6a:b6:d0:12:97:0f:17:41:7e:8c:55: 40:ac:41:ce:18:a4:19:c4:b6:61:d5:d2:37:62:87: a2:60:ef:02:92:8d:b9:74:89:c0:2b:92:d6:93:ae: 27:a0:14:74:ca:2c:bb:19:3e:b1:d9:8d:ee:16:de: 65:60:c4:e9:55:d0:18:f4:31:4e:f6:ea:30:b1:50: 30:d4:b5:40:d4:a4:bb:21:16:96:b8:78:22:49:f5: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:33:65:F9:27:66:AD:BC:7A:D2:A0:1F:A0:26:D1:6B:9C:72:DC X509v3 Authority Key Identifier: keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7c:5e:8f:c5:06:0e:4c:7b:bf:59:cf:2f:e2:8b:86:19:68: 46:60:6d:92:c0:5a:d8:bd:68:d6:30:64:07:e2:70:e8:22:7b: bc:64:b7:6f:74:6c:b0:ee:4c:37:6d:c2:c6:64:a4:6f:99:e6: 47:8f:63:b1:f3:44:3a:4c:86:bc:8e:3e:1f:39:3a:34:f2:8c: a5:0e:51:9e:8b:f5:c1:b2:f9:35:bb:ec:52:dc:6e:d6:fd:a8: 82:4d:fa:c0:67:01:7a:eb:45:9b:8e:d5:69:ff:ed:96:bc:be: 56:f5:45:5d:92:e9:6e:97:65:94:3e:6e:30:c6:b5:c5:d5:ed: c5:5e:7a:e7:f9:33:fe:b2:81:16:ed:4d:13:78:92:8f:f5:10: af:fd:27:63:20:9c:0d:6b:a8:cf:12:a4:20:05:ac:b4:d1:9f: 7a:a3:bd:ab:de:d8:1a:3c:87:50:03:5d:b2:2b:76:40:40:21: eb:9b:4a:27:b8:f0:42:28:94:0b:b8:d2:ed:6e:be:fa:5a:7a: aa:03:e8:e8:49:b6:c8:5a:66:01:fc:47:81:0a:eb:c9:c7:bd: dd:e1:e7:36:df:2e:cc:69:a1:4f:fa:2f:83:e3:7e:0a:a2:56: 00:ba:9d:5f:a5:35:b3:c8:e7:ac:42:24:3e:3e:b8:cb:68:fa: eb:59:18:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzYUgAl2a67wbMJ1ucBuCkysJt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw Q0EwMUUyMjAeFw0yNTEyMDYwNDE3MDVaFw0yNTEyMDkxNDA5MDVaMDMxMTAvBgNV BAMTKEVGMEUzMzY1RjkyNzY2QURCQzdBRDJBMDFGQTAyNkQxNkI5QzcyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs+ZGP003vZnp7mkjzErvDqEC aOJIQD8xMSB1e7NgHYdzMe/ckEfTMtuhLaQUlJG7ZOPUyYN8sg0raVeeASY77j/i QWiQnKv2CQ2XBqy0z10COQB+UnMgkupj9Oq1GZwZG3PRM189rS9DCjefHNECshX8 M5jyK85IxzjjzwlDAJZjfMeGQ36EZYhk9zWFSW22tCdY0lecmFU8TW5kpekdnH7z O7Uwi8pqttASlw8XQX6MVUCsQc4YpBnEtmHV0jdih6Jg7wKSjbl0icArktaTrieg FHTKLLsZPrHZje4W3mVgxOlV0Bj0MU726jCxUDDUtUDUpLshFpa4eCJJ9eKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7w4zZfknZq28etKgH6Am0WucctwwHwYDVR0j BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew MUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQxZmMxYTItZWU3Ny00MDVmLTll MzEtYWRjNmRmYzliNzRjLzAvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQw OTIwQ0EwMUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF8Xo/FBg5Me79Zzy/ii4YZaEZgbZLAWti9 aNYwZAficOgie7xkt290bLDuTDdtwsZkpG+Z5kePY7HzRDpMhryOPh85OjTyjKUO UZ6L9cGy+TW77FLcbtb9qIJN+sBnAXrrRZuO1Wn/7Za8vlb1RV2S6W6XZZQ+bjDG tcXV7cVeeuf5M/6ygRbtTRN4ko/1EK/9J2MgnA1rqM8SpCAFrLTRn3qjvave2Bo8 h1ADXbIrdkBAIeubSie48EIolAu40u1uvvpaeqoD6OhJtshaZgH8R4EK68nHvd3h 5zbfLsxpoU/6L4PjfgqiVgC6nV+lNbPI56xCJD4+uMto+utZGLI= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:34 2025 by rpki-client