This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: ymNO9a/dxFP+uIhH73p0tgiauWuj2ut7sNirKEwFnTM= Subject key identifier: 0F:20:A2:8F:90:2D:9D:E6:F4:DA:01:92:78:3F:E8:F4:5F:77:EB:8C Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 72ABBE7F518537FEF5E4F76EC5B740E36E4F5D65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 81 Signing time: Fri 05 Dec 2025 14:01:18 +0000 Manifest this update: Fri 05 Dec 2025 13:56:18 +0000 Manifest next update: Mon 08 Dec 2025 14:10:18 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: R57i3FFhkpCHY2mIONUovdnY0kwJeTjiejfVRaGxJ+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ab:be:7f:51:85:37:fe:f5:e4:f7:6e:c5:b7:40:e3:6e:4f:5d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Dec 5 13:56:18 2025 GMT Not After : Dec 8 14:10:18 2025 GMT Subject: CN=0F20A28F902D9DE6F4DA0192783FE8F45F77EB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a3:09:4d:06:21:f4:f6:9e:5c:77:76:b2:35: 46:61:d7:cb:c9:cf:eb:1a:d3:70:06:02:89:c1:b4: dd:21:c2:46:f3:77:20:02:9c:12:e0:36:0a:3b:f2: 25:a2:08:dd:1e:77:eb:ac:cb:ce:1e:9e:a0:46:fc: 5a:25:b2:60:22:1b:5f:7a:9f:5e:60:86:1c:09:d3: 39:00:4a:08:e0:fc:7b:37:3c:1c:07:0f:6b:30:25: 96:77:6a:0b:28:a3:d9:a0:00:e8:f3:8c:78:ae:67: cc:97:8e:bf:fd:b6:2c:78:74:32:98:fc:c3:fc:61: 57:53:e0:e1:55:46:48:f3:0e:c3:03:c3:b4:f7:10: 4f:b9:ea:6d:11:6c:cc:93:4f:08:1d:1e:38:6f:6f: 8e:66:2a:fe:8a:21:6e:c0:c4:95:37:e2:3e:2e:98: 93:8f:43:50:05:23:30:e8:09:4d:35:b7:67:b0:76: cb:92:78:cd:48:e1:46:d3:33:49:a2:01:3c:92:ac: 1b:92:01:16:74:cd:68:07:89:c3:d2:0f:41:25:c2: d5:be:70:3e:17:c9:4a:b3:c7:92:03:2b:e5:20:d7: 2a:45:de:c5:83:37:7f:51:f2:32:06:95:21:84:fd: 06:f4:8b:bb:92:37:ad:3d:c8:04:e9:8b:e3:27:5c: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:20:A2:8F:90:2D:9D:E6:F4:DA:01:92:78:3F:E8:F4:5F:77:EB:8C X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:30:16:b4:0d:bf:1b:c2:22:36:9f:f0:90:a8:48:51:16: d3:d1:fc:84:ee:80:65:1d:29:ab:00:58:6a:e1:e5:36:3b:86: 0a:8c:ad:b9:f9:bb:58:11:8e:76:ab:d7:cf:45:93:e4:07:ca: 32:25:dd:ad:2f:9c:8b:57:e9:b1:5f:79:8e:41:2c:a4:ce:8d: da:11:91:8c:5a:ff:05:92:9f:b9:d2:c6:84:c7:c9:3d:21:8a: 40:eb:95:c9:a7:63:83:8c:95:13:9b:43:1c:94:aa:3d:5b:a3: a1:dd:01:aa:10:6d:bb:dd:54:5b:c9:3b:5f:aa:64:68:67:b6: ac:39:f6:aa:2f:dd:60:a4:47:6c:42:f4:12:0c:68:09:2c:6a: 30:12:9c:9f:7b:bb:49:1b:07:8e:16:fe:7d:58:03:7a:c1:4e: ae:06:86:a2:93:17:d6:f6:30:e9:1e:f2:d4:77:86:fa:3d:8a: 30:7d:1b:b9:cd:24:62:2a:eb:3b:5a:ad:d3:bd:ae:c1:e3:f3: 58:9a:ee:9b:ab:eb:60:2d:41:27:63:5b:8d:d8:68:14:6e:20: b2:1f:58:7d:82:54:0a:30:77:37:f8:4e:23:48:4d:97:f4:cd: d3:fa:2a:4c:ca:75:fb:3d:2a:4b:b1:98:fe:3c:3d:4d:75:3e: a1:d2:e6:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqu+f1GFN/715PduxbdA425PXWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTEyMDUxMzU2MThaFw0yNTEyMDgxNDEwMThaMDMxMTAvBgNV BAMTKDBGMjBBMjhGOTAyRDlERTZGNERBMDE5Mjc4M0ZFOEY0NUY3N0VCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzowlNBiH09p5cd3ayNUZh18vJ z+sa03AGAonBtN0hwkbzdyACnBLgNgo78iWiCN0ed+usy84enqBG/FolsmAiG196 n15ghhwJ0zkASgjg/Hs3PBwHD2swJZZ3agsoo9mgAOjzjHiuZ8yXjr/9tix4dDKY /MP8YVdT4OFVRkjzDsMDw7T3EE+56m0RbMyTTwgdHjhvb45mKv6KIW7AxJU34j4u mJOPQ1AFIzDoCU01t2ewdsuSeM1I4UbTM0miATySrBuSARZ0zWgHicPSD0ElwtW+ cD4XyUqzx5IDK+Ug1ypF3sWDN39R8jIGlSGE/Qb0i7uSN609yATpi+MnXAstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyCij5Atneb02gGSeD/o9F9364wwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRgMBa0Db8bwiI2n/CQqEhRFtPR/ITugGUd KasAWGrh5TY7hgqMrbn5u1gRjnar189Fk+QHyjIl3a0vnItX6bFfeY5BLKTOjdoR kYxa/wWSn7nSxoTHyT0hikDrlcmnY4OMlRObQxyUqj1bo6HdAaoQbbvdVFvJO1+q ZGhntqw59qov3WCkR2xC9BIMaAksajASnJ97u0kbB44W/n1YA3rBTq4GhqKTF9b2 MOke8tR3hvo9ijB9G7nNJGIq6ztardO9rsHj81ia7pur62AtQSdjW43YaBRuILIf WH2CVAowdzf4TiNITZf0zdP6KkzKdfs9KkuxmP48PU11PqHS5kw= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:27 2025 by rpki-client