This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: 5rlm4sImvn0ndlt9B/8hq7D5jifHqJUB+zSyluLy0u0= Subject key identifier: A4:75:22:EA:94:58:E4:40:58:61:CE:FC:0E:CC:6A:D8:1F:C6:90:D6 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 31733611DBC7DC15C6E526904CEA3510BC0AF31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 10:11:10 +0000 Manifest this update: Fri 05 Dec 2025 10:06:10 +0000 Manifest next update: Mon 08 Dec 2025 14:00:10 +0000 Files and hashes: 1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: FDmQhs0vgXkuWH4ZipJ93zxGU5UlzlqFitzZLubtEDg=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:73:36:11:db:c7:dc:15:c6:e5:26:90:4c:ea:35:10:bc:0a:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Dec 5 10:06:10 2025 GMT Not After : Dec 8 14:00:10 2025 GMT Subject: CN=A47522EA9458E4405861CEFC0ECC6AD81FC690D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:04:3d:d6:9d:9d:b9:19:89:e5:c8:ca:31: 79:fe:1d:0d:1b:10:6f:92:3c:46:8d:08:c6:da:e6: a6:e5:4a:e5:6d:5f:de:90:f3:43:8b:c7:be:1e:c8: b9:72:95:ed:5d:2b:95:8b:65:03:3c:ab:55:1e:a2: 1e:99:61:00:5f:27:d3:4d:6b:51:86:5a:9b:17:74: 35:6f:13:74:3a:33:0d:30:5f:cb:03:95:8d:55:03: 5c:ad:fa:4b:4e:ee:3b:68:fc:f4:d4:60:46:6b:24: e3:bf:47:85:79:d5:f3:b4:34:3e:cb:52:48:69:be: ed:27:69:a4:3e:2b:6d:f6:f3:ff:af:29:5b:33:63: db:1f:3c:20:5d:93:0c:ce:87:e2:7a:a7:d2:2a:7f: fd:2d:a5:cd:07:f3:c5:d2:1d:a4:98:ca:ae:5f:cb: b8:b8:f7:5e:d6:91:8f:a7:d4:74:5a:29:69:b2:a9: 6a:78:45:84:ff:1b:cf:e0:f8:20:24:18:93:8b:51: f2:4d:4a:28:b2:e4:84:5b:8c:f2:5c:a2:23:d1:d3: 36:7e:fb:d5:60:08:b6:ab:19:d1:10:c4:c5:54:33: 50:c6:52:d6:01:2e:c3:90:98:c8:8a:57:79:77:91: 11:82:bd:07:4d:75:fe:de:ef:73:06:fc:30:f1:bb: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:22:EA:94:58:E4:40:58:61:CE:FC:0E:CC:6A:D8:1F:C6:90:D6 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:84:b4:ba:da:50:db:89:eb:81:01:58:b7:bd:19:5a:0e:7a: eb:ec:37:27:1b:da:bf:2f:fc:bc:c9:56:b4:0a:56:64:5d:83: c5:77:d1:e8:75:53:c6:11:fb:72:83:7e:0e:ff:ee:64:d5:c9: a1:35:1b:c1:84:06:16:86:4d:d2:2c:6f:2e:b0:6f:68:a2:00: 85:bc:b6:85:86:1d:14:7b:79:77:98:2a:98:14:11:de:30:f7: 22:14:4a:67:63:02:35:fd:22:58:97:15:e8:d7:21:e0:db:71: 91:c9:c9:68:b0:07:ed:02:e3:1b:62:0e:70:19:a2:6a:a9:91: b5:f8:90:4d:d0:e0:11:1f:91:12:3a:eb:9e:ba:18:d6:23:e4: 6d:23:43:6d:35:a4:17:bb:86:fa:79:c5:9f:2b:ee:c9:9b:26: 09:ee:d6:d7:02:74:c7:fb:cb:df:ae:30:00:2f:60:ae:a9:93: 7b:8c:c5:e5:e8:7f:b5:23:25:a9:bb:a2:89:01:ec:cc:0f:9e: 4f:e3:43:d3:cb:e0:b9:d2:4d:6c:ae:8f:3c:22:ad:b4:7c:77: fa:5f:aa:2c:47:fd:ec:09:55:f0:d5:25:a1:a1:8a:0d:6f:f3: 01:4c:d8:61:19:4e:cc:fa:d5:9e:8a:c5:90:91:1f:89:d2:ee: 47:25:c6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXM2EdvH3BXG5SaQTOo1ELwK8x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTEyMDUxMDA2MTBaFw0yNTEyMDgxNDAwMTBaMDMxMTAvBgNV BAMTKEE0NzUyMkVBOTQ1OEU0NDA1ODYxQ0VGQzBFQ0M2QUQ4MUZDNjkwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5egQ91p2duRmJ5cjKMXn+HQ0b EG+SPEaNCMba5qblSuVtX96Q80OLx74eyLlyle1dK5WLZQM8q1Ueoh6ZYQBfJ9NN a1GGWpsXdDVvE3Q6Mw0wX8sDlY1VA1yt+ktO7jto/PTUYEZrJOO/R4V51fO0ND7L Ukhpvu0naaQ+K2328/+vKVszY9sfPCBdkwzOh+J6p9Iqf/0tpc0H88XSHaSYyq5f y7i4917WkY+n1HRaKWmyqWp4RYT/G8/g+CAkGJOLUfJNSiiy5IRbjPJcoiPR0zZ+ +9VgCLarGdEQxMVUM1DGUtYBLsOQmMiKV3l3kRGCvQdNdf7e73MG/DDxu0AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHUi6pRY5EBYYc78Dsxq2B/GkNYwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiEtLraUNuJ64EBWLe9GVoOeuvsNycb2r8v /LzJVrQKVmRdg8V30eh1U8YR+3KDfg7/7mTVyaE1G8GEBhaGTdIsby6wb2iiAIW8 toWGHRR7eXeYKpgUEd4w9yIUSmdjAjX9IliXFejXIeDbcZHJyWiwB+0C4xtiDnAZ omqpkbX4kE3Q4BEfkRI66566GNYj5G0jQ201pBe7hvp5xZ8r7smbJgnu1tcCdMf7 y9+uMAAvYK6pk3uMxeXof7UjJam7ookB7MwPnk/jQ9PL4LnSTWyujzwirbR8d/pf qixH/ewJVfDVJaGhig1v8wFM2GEZTsz61Z6KxZCRH4nS7kclxh8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:21 2025 by rpki-client