This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: YkfO3Lj/gPxir7w+IbixhRHAkp1um3LTVYoa+Y2Fmkg= Subject key identifier: 13:C2:CB:C8:FD:68:7D:D8:81:C6:F1:D9:BD:20:0A:8C:B9:DF:F8:38 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 32574350D0A361F2B4379696C282FE33C393BBD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: D2 Signing time: Sat 06 Dec 2025 03:21:14 +0000 Manifest this update: Sat 06 Dec 2025 03:16:14 +0000 Manifest next update: Tue 09 Dec 2025 09:26:14 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: YvPhSmi9BBj10DXQNaD9PUlLu5brfqOlbp8b9HHHv1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:43:50:d0:a3:61:f2:b4:37:96:96:c2:82:fe:33:c3:93:bb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Dec 6 03:16:14 2025 GMT Not After : Dec 9 09:26:14 2025 GMT Subject: CN=13C2CBC8FD687DD881C6F1D9BD200A8CB9DFF838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:1b:4c:b4:64:7f:50:12:c7:c3:49:7c:8e: 1f:a5:80:fa:83:f6:0c:b4:a1:b1:fe:46:56:e0:fb: 27:17:b4:7d:d7:1f:35:47:90:4b:03:f2:00:9b:05: 08:f3:1d:ac:8a:19:b7:5a:b7:fa:eb:65:6d:78:fd: 66:75:6c:d5:91:93:72:c0:87:6c:86:20:d9:98:4a: 7a:6a:a2:c4:89:0c:e3:53:2f:6d:fe:bc:9e:d3:c3: b3:67:7e:8a:06:65:4f:45:08:9c:b2:24:9b:27:84: 32:03:3f:68:e2:4a:b9:f1:41:23:2c:91:8e:5c:74: 51:3c:6d:a3:e4:03:a8:5c:0a:40:ed:29:47:2d:57: 50:0a:36:d3:4b:ac:b6:48:15:cf:4d:86:fa:ad:1a: 16:95:be:c8:7e:5d:a2:a8:d8:51:a7:d7:59:1c:89: 3b:37:3f:64:38:60:0f:15:64:59:6f:ee:54:53:4d: 3b:fb:0b:42:f8:a4:6d:91:16:6d:ec:68:5d:e3:ff: 38:9b:2e:04:99:1d:cc:f6:83:4a:0e:80:90:15:4f: 82:72:ff:59:65:75:f4:b7:73:2b:9a:eb:3f:4c:40: 00:b2:de:ce:8c:11:af:ef:78:cc:70:92:f6:1f:7d: 11:1f:05:78:0b:a6:ec:c8:85:ce:9b:82:59:f6:3b: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:CB:C8:FD:68:7D:D8:81:C6:F1:D9:BD:20:0A:8C:B9:DF:F8:38 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:5b:46:34:d0:df:71:fc:fa:a4:70:6b:da:73:8f:39:2f: 2b:2b:23:73:e1:c7:0d:78:3d:74:0c:54:0c:42:9b:51:af:8b: 44:1d:af:6c:ef:b7:fd:2e:66:dd:ee:34:ba:b5:fd:a0:88:47: 1c:6a:a5:fe:42:98:21:9d:f2:9c:84:47:8e:dc:aa:3b:85:a9: b4:c5:3e:2b:c7:b6:49:3a:7a:41:34:32:8c:c5:2e:d1:14:1c: 3a:26:99:90:52:19:75:f5:da:c6:fb:a7:60:ba:0e:bc:0f:c5: fb:65:bf:65:76:71:43:d1:52:28:af:f5:ea:b7:51:b1:64:ab: 60:47:86:37:9a:32:51:50:65:8f:c8:c2:cd:d0:09:6a:1c:63: 60:d1:12:52:06:f5:7c:fd:8c:96:ff:db:86:cf:08:55:fa:ea: e3:5a:5a:4c:a2:6b:e4:03:4e:08:21:60:4e:b1:d4:a4:1f:5a: 3f:48:c9:14:cb:be:a4:3d:9c:ad:59:8d:9f:2e:c0:a5:5a:a9: 31:60:1d:e2:0f:1b:e0:74:aa:94:b6:7b:bb:1f:a4:d0:fe:95: e4:8f:34:18:f6:7d:90:be:5c:96:d6:4e:8c:ab:a5:9d:54:fc: da:08:b0:f4:a9:ec:e8:98:15:a4:47:bd:34:b1:1b:aa:b8:3b: 39:b6:0b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMldDUNCjYfK0N5aWwoL+M8OTu9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTEyMDYwMzE2MTRaFw0yNTEyMDkwOTI2MTRaMDMxMTAvBgNV BAMTKDEzQzJDQkM4RkQ2ODdERDg4MUM2RjFEOUJEMjAwQThDQjlERkY4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPRtMtGR/UBLHw0l8jh+lgPqD 9gy0obH+Rlbg+ycXtH3XHzVHkEsD8gCbBQjzHayKGbdat/rrZW14/WZ1bNWRk3LA h2yGINmYSnpqosSJDONTL23+vJ7Tw7NnfooGZU9FCJyyJJsnhDIDP2jiSrnxQSMs kY5cdFE8baPkA6hcCkDtKUctV1AKNtNLrLZIFc9NhvqtGhaVvsh+XaKo2FGn11kc iTs3P2Q4YA8VZFlv7lRTTTv7C0L4pG2RFm3saF3j/zibLgSZHcz2g0oOgJAVT4Jy /1lldfS3cyua6z9MQACy3s6MEa/veMxwkvYffREfBXgLpuzIhc6bgln2O6A5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8LLyP1ofdiBxvHZvSAKjLnf+DgwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX6W0Y00N9x/PqkcGvac485LysrI3Phxw14 PXQMVAxCm1Gvi0Qdr2zvt/0uZt3uNLq1/aCIRxxqpf5CmCGd8pyER47cqjuFqbTF PivHtkk6ekE0MozFLtEUHDommZBSGXX12sb7p2C6DrwPxftlv2V2cUPRUiiv9eq3 UbFkq2BHhjeaMlFQZY/Iws3QCWocY2DRElIG9Xz9jJb/24bPCFX66uNaWkyia+QD TgghYE6x1KQfWj9IyRTLvqQ9nK1ZjZ8uwKVaqTFgHeIPG+B0qpS2e7sfpND+leSP NBj2fZC+XJbWToyrpZ1U/NoIsPSp7OiYFaRHvTSxG6q4Ozm2C7Y= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:49 2025 by rpki-client