This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: f3w2uYY0izy6gJF2DcmPbKngzC8z4+G7zxLgktw4Pl0= Subject key identifier: 2F:8B:B6:5A:45:00:EB:56:C7:26:81:A5:1B:18:29:E6:22:59:25:55 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 6D7FA36410EF003CBF423727DA5AB6A6D30C173C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 012D Signing time: Sat 06 Dec 2025 18:40:38 +0000 Manifest this update: Sat 06 Dec 2025 18:35:38 +0000 Manifest next update: Wed 10 Dec 2025 04:57:38 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: Nj4V5waJtE47OgMlsOYyzWTzrIwuJCp9+TMs/OADMQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7f:a3:64:10:ef:00:3c:bf:42:37:27:da:5a:b6:a6:d3:0c:17:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Dec 6 18:35:38 2025 GMT Not After : Dec 10 04:57:38 2025 GMT Subject: CN=2F8BB65A4500EB56C72681A51B1829E622592555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:be:24:5b:1f:49:9c:0f:bf:53:5b:bc:e3: e1:f5:bd:a9:41:20:fe:ca:6a:7f:3e:ad:85:ed:50: 4e:b0:4e:46:7a:e1:f5:f0:1f:09:bd:15:88:c7:3b: 6b:06:e9:2a:4f:cc:8f:68:c2:82:37:74:d1:a6:69: ed:3c:35:3e:e8:c5:c7:5d:2e:c7:79:7e:a2:a9:77: aa:b1:9d:ae:af:53:ac:08:d4:2c:d6:2d:7b:fe:68: 54:77:f7:f9:a0:af:af:c4:32:9e:37:00:98:ac:85: 9d:be:a1:71:f8:e5:d6:4c:a8:60:fe:4c:7e:69:d8: a5:3d:69:d7:66:9e:2c:c7:5d:61:f5:a3:83:84:3a: 5d:32:49:1c:5b:e6:f2:83:8c:c7:2e:42:5c:1c:0f: b3:d7:82:df:f6:f2:2e:cf:5b:08:04:62:aa:5e:86: e0:46:b3:f7:6b:06:c3:d7:7e:96:61:65:48:5e:1f: 09:34:ee:76:3f:d8:b6:7f:a4:5b:b5:67:b9:28:8b: 36:2b:4b:00:91:d5:1b:a1:2e:7e:1c:52:62:e0:9e: 94:03:c7:5a:ab:03:9e:74:03:f4:40:e5:29:01:6e: 52:8c:8e:e5:f4:9b:77:1a:8a:6a:ee:8a:8a:f7:ca: fd:d5:71:8f:b4:fe:c5:9c:c0:d1:f6:37:09:11:f8: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:B6:5A:45:00:EB:56:C7:26:81:A5:1B:18:29:E6:22:59:25:55 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:36:0a:07:e0:3b:34:8f:ad:2b:96:ca:73:c3:66:f0:12:cf: 9d:af:e1:53:18:ab:8c:2f:e6:8a:55:3e:97:04:4d:84:72:b0: 72:fa:c8:ba:bd:70:fe:8b:e4:5d:9c:dd:32:69:92:8d:d8:ee: e7:11:5f:6b:23:11:31:83:95:b0:07:0c:9f:77:54:bd:66:93: 9f:a1:5c:b3:a6:98:d9:53:dd:95:6c:fd:dd:48:d0:69:98:9a: 3c:7f:43:2d:87:33:23:4e:0b:c6:02:90:e4:13:29:8a:3f:43: 26:64:96:b4:57:01:f4:01:a6:bc:b6:a4:eb:9c:64:90:6a:8e: 55:58:b9:9f:34:10:b0:52:63:05:2d:45:95:28:21:97:b6:62: 74:f6:e2:88:da:8b:12:46:48:87:cc:88:b4:1b:3a:0c:3b:67: 20:21:d7:d0:bc:0f:1f:3b:1e:a7:da:63:2e:5d:81:20:53:ec: b2:cc:d7:3c:31:7e:1e:8b:64:46:18:54:e8:2f:e7:e5:97:e2: c5:81:80:04:6d:07:fe:72:50:6d:6d:88:1b:8b:5f:54:ef:de: 6c:84:af:20:a9:47:21:f3:0b:33:eb:df:b6:0a:c4:37:3a:9a: 30:89:4d:12:c2:f4:e4:8d:0e:94:1c:ac:55:37:f6:f0:a0:b0: 19:d2:99:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbX+jZBDvADy/Qjcn2lq2ptMMFzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTEyMDYxODM1MzhaFw0yNTEyMTAwNDU3MzhaMDMxMTAvBgNV BAMTKDJGOEJCNjVBNDUwMEVCNTZDNzI2ODFBNTFCMTgyOUU2MjI1OTI1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUL4kWx9JnA+/U1u84+H1valB IP7Kan8+rYXtUE6wTkZ64fXwHwm9FYjHO2sG6SpPzI9owoI3dNGmae08NT7oxcdd Lsd5fqKpd6qxna6vU6wI1CzWLXv+aFR39/mgr6/EMp43AJishZ2+oXH45dZMqGD+ TH5p2KU9addmnizHXWH1o4OEOl0ySRxb5vKDjMcuQlwcD7PXgt/28i7PWwgEYqpe huBGs/drBsPXfpZhZUheHwk07nY/2LZ/pFu1Z7koizYrSwCR1RuhLn4cUmLgnpQD x1qrA550A/RA5SkBblKMjuX0m3caimruior3yv3VcY+0/sWcwNH2NwkR+I/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4u2WkUA61bHJoGlGxgp5iJZJVUwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC42CgfgOzSPrSuWynPDZvASz52v4VMYq4wv 5opVPpcETYRysHL6yLq9cP6L5F2c3TJpko3Y7ucRX2sjETGDlbAHDJ93VL1mk5+h XLOmmNlT3ZVs/d1I0GmYmjx/Qy2HMyNOC8YCkOQTKYo/QyZklrRXAfQBpry2pOuc ZJBqjlVYuZ80ELBSYwUtRZUoIZe2YnT24ojaixJGSIfMiLQbOgw7ZyAh19C8Dx87 HqfaYy5dgSBT7LLM1zwxfh6LZEYYVOgv5+WX4sWBgARtB/5yUG1tiBuLX1Tv3myE ryCpRyHzCzPr37YKxDc6mjCJTRLC9OSNDpQcrFU39vCgsBnSmU4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:35:28 2025 by rpki-client