This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: KKQVmUjKpw9oxyObaZ1B4KkDVVr9W9IPUa7WqXyZmTM= Subject key identifier: EE:EE:7E:00:34:D9:55:2D:AC:81:7D:03:20:AB:97:1A:27:73:C5:39 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 48ED81B26D60C739D75C7F7819CD948F7AE216E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 028B Signing time: Wed 17 Dec 2025 19:21:59 +0000 Manifest this update: Wed 17 Dec 2025 19:16:59 +0000 Manifest next update: Sun 21 Dec 2025 00:01:59 +0000 Files and hashes: 1: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: lDTbdBrztIv67cXR83EvW171BBfgkcOWOduLTBZxfkk=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ed:81:b2:6d:60:c7:39:d7:5c:7f:78:19:cd:94:8f:7a:e2:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Dec 17 19:16:59 2025 GMT Not After : Dec 21 00:01:59 2025 GMT Subject: CN=EEEE7E0034D9552DAC817D0320AB971A2773C539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:c0:2a:16:40:ad:33:af:af:95:a3:59:63: ea:42:35:33:a8:bd:9d:0e:44:a6:64:48:9c:62:12: 6d:1f:4d:75:95:e0:1c:9a:74:43:b6:b2:c7:53:5d: 91:b5:6a:84:04:6b:63:19:67:05:a6:b0:1a:d8:f7: 56:3d:78:73:34:3b:1b:2e:57:81:73:19:c1:80:c8: 5d:62:34:cb:04:c4:ba:e9:71:7e:69:be:fd:29:84: af:fd:26:42:10:50:01:ea:86:98:db:2d:ce:31:64: c9:38:ed:3a:d6:15:26:cd:a5:3f:f5:47:62:c6:b3: c2:3d:17:f3:3f:7c:39:f6:38:13:a0:5e:64:fb:89: eb:4b:39:46:3b:6e:6e:0d:73:10:90:4f:7d:87:3d: cc:10:1b:43:59:c9:5c:60:4c:06:44:c8:80:25:24: c6:1f:9a:43:60:ff:0b:0e:b3:f8:32:7d:fa:7b:40: 44:e8:27:80:28:b7:4f:5d:ee:6e:37:99:27:00:e2: 2f:65:32:5a:5c:ee:91:1b:49:ae:79:84:fd:45:51: 47:58:dc:42:32:07:68:a8:c7:7e:f1:08:ba:c8:a1: f8:9e:a8:0b:02:60:3b:b1:cd:0c:1a:92:b8:32:b1: 25:39:35:43:5a:f9:27:c9:5c:01:76:42:17:4e:1f: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:7E:00:34:D9:55:2D:AC:81:7D:03:20:AB:97:1A:27:73:C5:39 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:63:2c:46:1e:3d:d4:17:ab:6f:1a:f4:ab:02:84:2b:1e:11: e5:da:fe:94:24:08:a9:07:ee:2b:a7:a9:fd:7a:6a:3b:38:6e: 8e:58:34:c1:18:70:f5:84:a3:c4:9a:c0:67:ef:db:84:73:b9: c0:1b:c2:10:54:97:e4:60:de:b8:a1:22:78:14:81:ee:43:1f: ce:98:09:a7:c4:81:bf:c3:3e:28:29:50:97:8b:81:5c:11:1d: 56:45:d2:65:2c:f4:99:20:5e:25:cd:19:58:a7:1d:a5:8c:df: 45:7c:3c:95:89:59:29:73:16:ff:5f:db:6e:aa:92:53:a5:d1: ce:65:a9:0b:9d:bb:53:d9:12:ad:a7:29:53:d4:37:b1:f9:57: 58:0d:d3:08:de:7e:4d:32:8d:1b:5e:2d:30:ee:f1:f5:bb:02: 08:77:f8:cd:8d:9a:04:b9:4c:a1:23:fd:cc:08:5d:53:d8:1b: 0b:04:c7:ea:0c:63:5c:60:37:51:14:fe:e6:bb:60:98:84:17: 57:5a:6d:84:9c:49:74:8b:c1:26:2e:44:5b:53:81:63:40:66: 3e:0a:85:b2:80:32:fe:da:ec:ec:c0:55:da:98:16:69:ba:85: 99:a8:59:ba:e6:7d:85:a3:90:9f:42:5f:80:ad:82:c3:79:25: 4a:f8:41:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO2Bsm1gxznXXH94Gc2Uj3riFuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTEyMTcxOTE2NTlaFw0yNTEyMjEwMDAxNTlaMDMxMTAvBgNV BAMTKEVFRUU3RTAwMzREOTU1MkRBQzgxN0QwMzIwQUI5NzFBMjc3M0M1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ecAqFkCtM6+vlaNZY+pCNTOo vZ0ORKZkSJxiEm0fTXWV4ByadEO2ssdTXZG1aoQEa2MZZwWmsBrY91Y9eHM0Oxsu V4FzGcGAyF1iNMsExLrpcX5pvv0phK/9JkIQUAHqhpjbLc4xZMk47TrWFSbNpT/1 R2LGs8I9F/M/fDn2OBOgXmT7ietLOUY7bm4NcxCQT32HPcwQG0NZyVxgTAZEyIAl JMYfmkNg/wsOs/gyffp7QEToJ4Aot09d7m43mScA4i9lMlpc7pEbSa55hP1FUUdY 3EIyB2iox37xCLrIofieqAsCYDuxzQwakrgysSU5NUNa+SfJXAF2QhdOHzKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7u5+ADTZVS2sgX0DIKuXGidzxTkwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRjLEYePdQXq28a9KsChCseEeXa/pQkCKkH 7iunqf16ajs4bo5YNMEYcPWEo8SawGfv24RzucAbwhBUl+Rg3rihIngUge5DH86Y CafEgb/DPigpUJeLgVwRHVZF0mUs9JkgXiXNGVinHaWM30V8PJWJWSlzFv9f226q klOl0c5lqQudu1PZEq2nKVPUN7H5V1gN0wjefk0yjRteLTDu8fW7Agh3+M2NmgS5 TKEj/cwIXVPYGwsEx+oMY1xgN1EU/ua7YJiEF1dabYScSXSLwSYuRFtTgWNAZj4K hbKAMv7a7OzAVdqYFmm6hZmoWbrmfYWjkJ9CX4CtgsN5JUr4QUw= -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:48 2025 by rpki-client