This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: QjHNOB/gL4HSVrR20p25nOHLBf+2up3YoXNx9mCpDt8= Subject key identifier: 24:79:56:01:CA:46:2F:28:AC:D5:92:7E:9B:18:FD:E6:E5:84:76:EE Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 263562BBDAD8A2C9A95FDAC1F38382256DB4AE1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01F8 Signing time: Fri 05 Dec 2025 15:12:01 +0000 Manifest this update: Fri 05 Dec 2025 15:07:01 +0000 Manifest next update: Mon 08 Dec 2025 20:11:01 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: kdfDjYhLp6E8VnjVGGpZ14ySWNYbvt+wynWaNnUpuIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:35:62:bb:da:d8:a2:c9:a9:5f:da:c1:f3:83:82:25:6d:b4:ae:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Dec 5 15:07:01 2025 GMT Not After : Dec 8 20:11:01 2025 GMT Subject: CN=24795601CA462F28ACD5927E9B18FDE6E58476EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:88:ae:74:ff:e3:ab:b3:ac:2d:b6:58:c1: d4:98:60:59:a2:d8:ee:74:e6:5e:d3:c1:bf:a0:9d: 25:68:b3:e8:7d:28:49:76:28:73:69:c8:4a:d8:2b: 6f:e3:5e:c1:1f:8f:7a:e0:49:7b:cd:c5:04:d4:5f: 2d:46:da:d4:6c:f6:47:05:07:3a:d3:58:50:46:45: 7c:0d:cf:31:fa:0a:66:17:ad:a3:3e:17:9e:16:6f: 36:e7:40:4a:dd:6e:30:52:14:1a:66:f4:63:8e:8d: 80:bc:0c:b9:97:ca:38:38:67:8b:6b:50:b0:6b:d6: 51:ac:d8:dc:9d:f6:91:bb:d2:20:d5:43:4c:b3:8c: 48:24:96:9d:27:3f:11:04:c8:1d:ca:c0:14:d1:49: 3d:7e:f0:7e:39:9a:62:21:5c:bd:87:67:45:c0:3a: 9e:1d:cb:57:8e:5d:99:15:5b:78:b6:c0:f6:f3:32: ff:bc:19:f7:24:9e:57:d3:17:3c:6c:23:79:a1:03: 18:4a:98:85:86:21:e6:80:61:a5:17:74:07:67:b3: 94:bd:27:ee:ff:d3:3e:03:db:c6:4a:71:13:58:cd: f2:4a:1e:88:b5:69:22:7f:8b:c7:1a:94:6b:4d:a1: 9c:55:d9:0d:f0:14:3b:46:2c:e0:d3:db:ae:8d:03: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:79:56:01:CA:46:2F:28:AC:D5:92:7E:9B:18:FD:E6:E5:84:76:EE X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f5:83:b2:56:e2:a5:37:b1:c3:78:a5:4c:58:7c:96:7f:57: 1e:07:64:14:8e:0a:8a:5d:a0:14:c8:6b:a2:27:12:7d:ce:d7: e0:93:f3:44:60:2e:44:aa:1a:d3:d6:f0:ac:62:6d:ee:d6:5b: 19:8e:85:97:82:5d:54:d3:fe:8b:02:be:dc:25:57:00:b2:16: 7e:42:4c:b5:6f:08:e3:63:64:bb:54:73:ee:31:90:ea:b3:47: 82:2b:e4:e9:a4:8f:b8:5b:ef:4b:48:ab:aa:1a:c8:41:20:5e: 2f:a8:69:01:ff:90:aa:49:3b:b6:4a:54:8b:10:34:51:f2:f1: ed:cc:cb:38:9f:b4:f6:76:0f:b3:21:c5:76:0a:d2:52:f9:07: d4:b9:ac:35:e8:d2:b1:69:8a:c0:0f:20:d4:15:17:cb:1f:8e: 1e:6d:5e:41:9f:43:2a:19:8d:6f:10:18:72:d0:a1:67:15:53: 48:2f:dd:34:ca:d3:81:b4:ca:90:77:c3:dd:03:eb:be:f2:a4: 2a:c6:69:94:13:34:f1:62:8e:6d:d7:8b:2e:72:79:a4:83:a9: 4a:97:90:0e:ae:12:47:da:21:66:3b:b5:68:98:c2:50:1e:63: 12:99:ea:1d:3e:69:6e:12:c3:83:db:7f:ff:46:ba:09:e2:05: e8:13:c3:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjViu9rYosmpX9rB84OCJW20rhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTEyMDUxNTA3MDFaFw0yNTEyMDgyMDExMDFaMDMxMTAvBgNV BAMTKDI0Nzk1NjAxQ0E0NjJGMjhBQ0Q1OTI3RTlCMThGREU2RTU4NDc2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui4iudP/jq7OsLbZYwdSYYFmi 2O505l7Twb+gnSVos+h9KEl2KHNpyErYK2/jXsEfj3rgSXvNxQTUXy1G2tRs9kcF BzrTWFBGRXwNzzH6CmYXraM+F54WbzbnQErdbjBSFBpm9GOOjYC8DLmXyjg4Z4tr ULBr1lGs2Nyd9pG70iDVQ0yzjEgklp0nPxEEyB3KwBTRST1+8H45mmIhXL2HZ0XA Op4dy1eOXZkVW3i2wPbzMv+8GfcknlfTFzxsI3mhAxhKmIWGIeaAYaUXdAdns5S9 J+7/0z4D28ZKcRNYzfJKHoi1aSJ/i8calGtNoZxV2Q3wFDtGLODT266NA7evAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHlWAcpGLyis1ZJ+mxj95uWEdu4wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM31g7JW4qU3scN4pUxYfJZ/Vx4HZBSOCopd oBTIa6InEn3O1+CT80RgLkSqGtPW8Kxibe7WWxmOhZeCXVTT/osCvtwlVwCyFn5C TLVvCONjZLtUc+4xkOqzR4Ir5Omkj7hb70tIq6oayEEgXi+oaQH/kKpJO7ZKVIsQ NFHy8e3MyziftPZ2D7MhxXYK0lL5B9S5rDXo0rFpisAPINQVF8sfjh5tXkGfQyoZ jW8QGHLQoWcVU0gv3TTK04G0ypB3w90D677ypCrGaZQTNPFijm3Xiy5yeaSDqUqX kA6uEkfaIWY7tWiYwlAeYxKZ6h0+aW4Sw4Pbf/9GugniBegTwxs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:57 2025 by rpki-client