This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: L009KoUrvfCARu94x0+f8KJHOI3eWK15emkB+jV709E= Subject key identifier: 91:E4:2E:12:1A:C6:37:3C:9D:80:94:3F:2C:6F:62:D0:DF:DF:1B:0D Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 1C1B24332A9F74EB6550E0A37A643950A5A97917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 1B Signing time: Sat 06 Dec 2025 20:21:43 +0000 Manifest this update: Sat 06 Dec 2025 20:16:43 +0000 Manifest next update: Tue 09 Dec 2025 22:37:43 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: ySZKY62pCq7+olVOUyh5dIi7Y1DoThUwdJ5sBqt7kyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1b:24:33:2a:9f:74:eb:65:50:e0:a3:7a:64:39:50:a5:a9:79:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Dec 6 20:16:43 2025 GMT Not After : Dec 9 22:37:43 2025 GMT Subject: CN=91E42E121AC6373C9D80943F2C6F62D0DFDF1B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:22:01:15:e6:26:36:69:98:53:5d:be:e4: 91:fe:f3:42:c6:3a:b5:83:01:cd:32:8c:66:f3:7c: e8:06:be:a8:fa:de:a9:f0:18:48:8f:fb:b2:91:d2: 7e:93:d5:d2:6b:40:79:61:70:65:d6:33:85:0c:18: 6b:f0:00:17:8b:11:b5:07:18:c2:84:f3:b5:da:e4: 73:1f:c6:1e:a6:ef:5f:46:7c:74:ec:7d:22:d4:63: 7f:7f:1c:9d:66:b0:6f:22:bc:ce:d7:28:2d:61:78: ca:a8:22:19:54:d1:73:f4:d2:d6:a6:30:41:42:7f: 1e:90:11:ac:f6:ef:1e:43:97:05:65:e5:47:c6:9b: 4f:54:ce:26:09:cb:8b:db:62:e6:66:42:40:46:64: f7:aa:6e:8a:40:2f:be:e9:f1:c5:03:a3:65:15:73: c2:4c:01:70:6c:df:e8:87:63:43:a4:6b:13:81:95: b3:ff:01:9e:f5:e2:90:b9:99:a0:b7:91:c6:25:79: ad:e8:17:a5:ba:ad:1b:e6:8b:85:58:69:24:ab:41: f3:c8:4e:9f:c7:3d:ad:70:68:ba:76:fc:5f:9a:a2: 8d:a1:30:d6:ed:42:d2:49:45:ec:ed:5c:48:08:7c: b7:a0:84:ce:e9:c8:ad:05:a5:81:5d:ab:86:d9:5b: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:2E:12:1A:C6:37:3C:9D:80:94:3F:2C:6F:62:D0:DF:DF:1B:0D X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a5:ef:4b:01:0c:c7:9a:68:74:6d:ec:aa:34:32:65:45:ba: 83:31:b9:e9:be:48:fe:f8:cf:5f:37:be:f4:01:58:65:ea:04: 05:f8:88:e0:3e:4c:f0:63:14:d0:2b:98:1e:18:c3:9a:5e:3c: 6c:e0:fa:bb:78:af:c8:59:e0:5c:ea:17:90:00:0f:01:a8:e7: ba:ca:6f:c0:a0:65:bb:77:43:e0:a9:62:aa:75:84:d4:67:54: 1f:42:35:0b:d5:44:5c:c4:ec:2d:69:92:c7:2d:88:03:09:f5: 6a:eb:27:1a:13:c2:6a:8a:bc:5f:d8:44:19:38:44:9b:3f:44: e5:ac:37:eb:a4:ef:2b:3c:bb:8d:80:73:e3:5e:94:ee:37:7d: 8e:71:da:6a:3a:f0:0b:70:7c:01:9f:33:be:6d:24:e6:dc:e0: 88:4b:a1:68:03:08:b6:07:88:ee:41:6e:d2:09:be:2b:d7:93: b0:cc:f6:24:74:2f:6c:63:73:00:0d:1c:b6:4b:2f:af:b4:52: 85:bf:37:b4:c9:a5:f6:51:80:dc:a3:75:d0:bd:0a:cd:82:cf: 8f:27:0e:04:e1:25:53:d2:c8:82:d4:b3:f8:ab:a2:c1:44:96: 8f:1b:cb:84:cf:23:87:5a:1e:3c:81:59:16:92:72:9a:70:23: e6:d1:63:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBskMyqfdOtlUOCjemQ5UKWpeRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNTEyMDYyMDE2NDNaFw0yNTEyMDkyMjM3NDNaMDMxMTAvBgNV BAMTKDkxRTQyRTEyMUFDNjM3M0M5RDgwOTQzRjJDNkY2MkQwREZERjFCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ciIBFeYmNmmYU12+5JH+80LG OrWDAc0yjGbzfOgGvqj63qnwGEiP+7KR0n6T1dJrQHlhcGXWM4UMGGvwABeLEbUH GMKE87Xa5HMfxh6m719GfHTsfSLUY39/HJ1msG8ivM7XKC1heMqoIhlU0XP00tam MEFCfx6QEaz27x5DlwVl5UfGm09UziYJy4vbYuZmQkBGZPeqbopAL77p8cUDo2UV c8JMAXBs3+iHY0OkaxOBlbP/AZ714pC5maC3kcYlea3oF6W6rRvmi4VYaSSrQfPI Tp/HPa1waLp2/F+aoo2hMNbtQtJJReztXEgIfLeghM7pyK0FpYFdq4bZWzYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeQuEhrGNzydgJQ/LG9i0N/fGw0wHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCl70sBDMeaaHRt7Ko0MmVFuoMxuem+SP74 z183vvQBWGXqBAX4iOA+TPBjFNArmB4Yw5pePGzg+rt4r8hZ4FzqF5AADwGo57rK b8CgZbt3Q+CpYqp1hNRnVB9CNQvVRFzE7C1pksctiAMJ9WrrJxoTwmqKvF/YRBk4 RJs/ROWsN+uk7ys8u42Ac+NelO43fY5x2mo68AtwfAGfM75tJObc4IhLoWgDCLYH iO5BbtIJvivXk7DM9iR0L2xjcwANHLZLL6+0UoW/N7TJpfZRgNyjddC9Cs2Cz48n DgThJVPSyILUs/irosFElo8by4TPI4daHjyBWRaScppwI+bRY+Q= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:34 2025 by rpki-client