This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: YGUKJkonxaTgGvZqV2kO9W8NO0JeC+ij8ptZLUjNpug= Subject key identifier: 2C:AF:43:B7:01:67:F6:39:B5:5B:2B:78:98:18:9E:33:BF:99:77:38 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 0317D51A1D35B9E50B254E64620FDF5AF66085C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: E1 Signing time: Sat 06 Dec 2025 16:12:02 +0000 Manifest this update: Sat 06 Dec 2025 16:07:02 +0000 Manifest next update: Tue 09 Dec 2025 21:22:02 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: a2kJJmA7wyxoq/j/hG8w1HkFf53s1gSUjEn6nf1BK+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:17:d5:1a:1d:35:b9:e5:0b:25:4e:64:62:0f:df:5a:f6:60:85:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Dec 6 16:07:02 2025 GMT Not After : Dec 9 21:22:02 2025 GMT Subject: CN=2CAF43B70167F639B55B2B7898189E33BF997738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:ea:5a:6f:02:06:c4:6d:8a:1f:4d:6e:59: 02:5f:1a:a2:49:3d:ff:97:41:08:8b:46:48:4d:03: d1:a2:79:ce:f9:28:1a:38:82:15:03:b8:cf:c9:1d: 61:87:97:90:f0:e4:ee:04:b9:87:91:02:71:9e:72: 26:d8:e3:53:55:a9:d1:07:16:d4:3a:39:5f:ea:63: f5:5d:a3:99:e9:47:be:a2:b6:86:27:81:f0:de:e0: 21:82:d8:e1:7d:8a:14:ef:19:00:f1:8d:2d:b2:9a: 35:c1:32:9f:85:f9:47:03:7f:a1:c2:61:07:a5:c1: 3c:13:36:ff:44:35:5e:f6:48:75:57:68:c2:c7:15: 91:49:1b:33:55:b2:87:c6:eb:e3:27:fa:db:e6:ca: a9:aa:91:3f:4d:04:bd:1d:89:c3:73:62:67:b1:c6: 3a:d0:c2:df:46:b5:38:fb:0e:73:d3:2d:0f:5b:b4: 1b:cd:96:fd:c1:f0:5d:46:56:82:4c:9d:f6:08:65: fa:b6:81:3f:59:63:7f:a0:4a:fe:1b:76:87:60:de: cc:50:9a:d7:75:f9:54:ed:e7:74:9e:4a:63:6b:f0: 0e:77:8a:00:7e:a1:2c:8f:df:8b:17:5a:42:de:ce: 54:86:24:51:56:c6:32:c8:41:fa:d7:e4:2a:47:79: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:43:B7:01:67:F6:39:B5:5B:2B:78:98:18:9E:33:BF:99:77:38 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ab:7d:7f:94:ca:b4:05:82:c1:e1:49:89:55:b8:00:17:ce: 9f:b8:ba:55:c4:ad:aa:ed:0e:46:93:c6:04:9a:9a:bd:ff:09: 63:57:85:4e:62:a4:99:2e:df:fb:81:58:0c:d9:03:b9:c2:67: c5:02:af:66:5c:4b:b6:b7:4a:06:17:c1:96:c4:40:04:94:d0: 65:5a:5b:13:0e:13:5f:ee:37:0c:f6:53:fe:3d:90:ea:70:e3: bc:9c:4b:61:28:1b:2b:7d:18:cf:c2:75:d5:70:d8:19:26:41: 9a:a2:e9:68:bf:87:28:52:9f:c1:eb:b6:d0:b1:49:1d:e6:81: 72:1e:66:91:1a:8a:aa:61:8b:ef:87:52:e7:ad:51:e4:5a:b7: 9b:b6:bb:dc:29:ab:dd:93:95:49:37:cb:74:dc:a1:df:21:08: 1b:11:92:5e:90:19:78:3e:29:80:c1:13:51:6f:d1:7b:f1:3f: d5:c6:14:2c:4b:65:d6:c5:2c:ac:1e:11:0c:fb:b7:02:cd:0e: f8:eb:64:ba:78:66:b2:2a:be:64:9f:72:79:0a:a0:af:5a:ca: 70:28:b5:96:2a:74:2a:4d:f9:a8:4c:b3:ff:e1:09:40:63:68: fc:89:ec:ef:cb:52:fa:15:52:1e:59:a8:a0:15:49:fb:d9:28: 2c:45:4c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxfVGh01ueULJU5kYg/fWvZghcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTEyMDYxNjA3MDJaFw0yNTEyMDkyMTIyMDJaMDMxMTAvBgNV BAMTKDJDQUY0M0I3MDE2N0Y2MzlCNTVCMkI3ODk4MTg5RTMzQkY5OTc3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm+pabwIGxG2KH01uWQJfGqJJ Pf+XQQiLRkhNA9Giec75KBo4ghUDuM/JHWGHl5Dw5O4EuYeRAnGecibY41NVqdEH FtQ6OV/qY/Vdo5npR76itoYngfDe4CGC2OF9ihTvGQDxjS2ymjXBMp+F+UcDf6HC YQelwTwTNv9ENV72SHVXaMLHFZFJGzNVsofG6+Mn+tvmyqmqkT9NBL0dicNzYmex xjrQwt9GtTj7DnPTLQ9btBvNlv3B8F1GVoJMnfYIZfq2gT9ZY3+gSv4bdodg3sxQ mtd1+VTt53SeSmNr8A53igB+oSyP34sXWkLezlSGJFFWxjLIQfrX5CpHeZGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULK9DtwFn9jm1Wyt4mBieM7+ZdzgwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyrfX+UyrQFgsHhSYlVuAAXzp+4ulXErart DkaTxgSamr3/CWNXhU5ipJku3/uBWAzZA7nCZ8UCr2ZcS7a3SgYXwZbEQASU0GVa WxMOE1/uNwz2U/49kOpw47ycS2EoGyt9GM/CddVw2BkmQZqi6Wi/hyhSn8HrttCx SR3mgXIeZpEaiqphi++HUuetUeRat5u2u9wpq92TlUk3y3Tcod8hCBsRkl6QGXg+ KYDBE1Fv0XvxP9XGFCxLZdbFLKweEQz7twLNDvjrZLp4ZrIqvmSfcnkKoK9aynAo tZYqdCpN+ahMs//hCUBjaPyJ7O/LUvoVUh5ZqKAVSfvZKCxFTCI= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:55 2025 by rpki-client