This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: qLwTxqMUbETqG1LcEFcPXgBBLBWB2HCnbZgJHAPrW7E= Subject key identifier: 1C:AF:51:1D:F2:55:7E:90:41:F8:33:47:9D:70:3C:F4:41:04:D5:80 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 454BB034BC6082AD263AD0E710BE2E31BBD2B7EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 051B Signing time: Sat 06 Dec 2025 13:22:14 +0000 Manifest this update: Sat 06 Dec 2025 13:17:14 +0000 Manifest next update: Tue 09 Dec 2025 18:21:14 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: aWP5IhPG3HUQTW3qpDrfHoUOxEDMmsXG7u4B6D01RKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4b:b0:34:bc:60:82:ad:26:3a:d0:e7:10:be:2e:31:bb:d2:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Dec 6 13:17:14 2025 GMT Not After : Dec 9 18:21:14 2025 GMT Subject: CN=1CAF511DF2557E9041F833479D703CF44104D580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:eb:1f:c7:93:3f:82:2a:2f:65:c4:6d:a9: 2d:04:03:10:e9:20:4a:be:df:83:5a:b4:ff:2f:a7: 04:b9:7b:b3:97:02:01:79:91:90:69:89:4b:1d:22: 6a:d1:f8:09:af:8a:95:b3:f1:7d:9d:d4:57:a2:7b: 9c:66:72:9b:66:7b:f7:c4:1f:6a:c8:29:8d:d0:e4: 75:97:d7:ac:48:3f:08:95:e9:3b:af:96:cc:06:d0: 2f:a2:da:58:7c:c8:40:be:53:15:d5:67:d0:12:1a: df:77:fc:0f:82:1b:fd:c5:03:70:5e:0c:87:27:ce: 69:fa:da:ae:7f:f7:f3:1f:13:ee:9e:72:8f:19:54: 15:f8:dd:a7:37:dd:ca:20:bf:f2:a4:ef:bd:0f:20: 6a:eb:a8:ef:a5:a2:18:7f:82:74:1b:5c:94:90:77: 8c:04:e9:43:dd:f9:57:85:c5:da:73:81:36:26:b8: be:37:86:c0:1c:6c:1a:6c:f9:af:c3:aa:3b:21:88: aa:96:f1:fd:5e:7c:29:fb:1e:b0:a8:d0:74:eb:51: cb:61:dd:63:23:cc:dd:a3:1a:65:64:ad:e5:13:a1: 74:48:56:35:c2:67:07:6b:84:5c:20:ec:84:c8:b0: 03:d3:8d:71:2c:68:23:48:56:0e:18:d3:5e:9c:15: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AF:51:1D:F2:55:7E:90:41:F8:33:47:9D:70:3C:F4:41:04:D5:80 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:f3:99:aa:9e:da:86:09:78:7c:5d:3e:8f:15:51:20:19: dc:9c:fb:50:f5:28:3d:3b:1f:d7:eb:9e:6e:71:d7:f8:87:c5: ed:15:a8:5b:44:83:d7:48:fe:c5:1f:20:f4:38:06:de:ed:50: cb:8c:a3:6a:d0:0a:c7:18:86:17:90:dd:85:47:c7:2c:4f:db: 7e:6e:b9:4e:fb:c7:a8:9d:3c:53:ce:c1:1b:d9:35:13:84:33: dd:8b:8d:dc:1c:80:9f:12:01:1b:58:e5:03:be:59:0e:32:45: 48:a9:f2:7d:54:f7:03:56:7e:ad:7f:6d:e4:1e:99:b0:bb:ef: 42:cc:5a:81:72:43:2f:41:52:97:fe:30:52:9a:ec:4c:11:fa: d9:c8:61:b5:27:e9:78:ed:8e:3b:da:0a:01:4e:63:9f:0d:4c: ee:94:a9:32:36:4a:09:6e:49:22:69:85:73:64:89:d5:f1:0e: de:53:91:aa:8d:20:a2:44:77:8b:a7:cd:cc:28:cc:13:0d:7a: 0d:36:cb:b7:76:f3:a3:e9:ae:49:52:52:dc:d8:33:73:69:ab: 6f:92:66:4c:ad:a2:22:f2:62:92:f9:49:62:17:97:89:98:b6: a2:50:68:2f:30:d1:bb:90:a7:09:68:d5:88:84:4d:a3:71:9a: e6:d7:ca:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUuwNLxggq0mOtDnEL4uMbvSt+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTEyMDYxMzE3MTRaFw0yNTEyMDkxODIxMTRaMDMxMTAvBgNV BAMTKDFDQUY1MTFERjI1NTdFOTA0MUY4MzM0NzlENzAzQ0Y0NDEwNEQ1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCte+sfx5M/giovZcRtqS0EAxDp IEq+34NatP8vpwS5e7OXAgF5kZBpiUsdImrR+AmvipWz8X2d1Feie5xmcptme/fE H2rIKY3Q5HWX16xIPwiV6TuvlswG0C+i2lh8yEC+UxXVZ9ASGt93/A+CG/3FA3Be DIcnzmn62q5/9/MfE+6eco8ZVBX43ac33cogv/Kk770PIGrrqO+lohh/gnQbXJSQ d4wE6UPd+VeFxdpzgTYmuL43hsAcbBps+a/DqjshiKqW8f1efCn7HrCo0HTrUcth 3WMjzN2jGmVkreUToXRIVjXCZwdrhFwg7ITIsAPTjXEsaCNIVg4Y016cFeM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHK9RHfJVfpBB+DNHnXA89EEE1YAwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADux85mqntqGCXh8XT6PFVEgGdyc+1D1KD07 H9frnm5x1/iHxe0VqFtEg9dI/sUfIPQ4Bt7tUMuMo2rQCscYhheQ3YVHxyxP235u uU77x6idPFPOwRvZNROEM92LjdwcgJ8SARtY5QO+WQ4yRUip8n1U9wNWfq1/beQe mbC770LMWoFyQy9BUpf+MFKa7EwR+tnIYbUn6XjtjjvaCgFOY58NTO6UqTI2Sglu SSJphXNkidXxDt5TkaqNIKJEd4unzcwozBMNeg02y7d286PprklSUtzYM3Npq2+S ZkytoiLyYpL5SWIXl4mYtqJQaC8w0buQpwlo1YiETaNxmubXyuw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:23 2025 by rpki-client