This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: yXinCiMkoQOu6iOmz8SJu/H/rzphMMcLUA1xVjiSvZ0= Subject key identifier: 14:91:5A:3A:BB:A5:8A:6E:C2:FE:19:1F:FC:DC:73:BE:91:AE:70:CA Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 1FF093A4648D7D8541B4146A64B997C7E6632EB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 0286 Signing time: Fri 05 Dec 2025 22:11:54 +0000 Manifest this update: Fri 05 Dec 2025 22:06:54 +0000 Manifest next update: Tue 09 Dec 2025 07:14:54 +0000 Files and hashes: 1: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: Ygk98r6v8EUCuWPyC1aTmYiRXJqlPAx2Ap/NuZFDVBI=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f0:93:a4:64:8d:7d:85:41:b4:14:6a:64:b9:97:c7:e6:63:2e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Dec 5 22:06:54 2025 GMT Not After : Dec 9 07:14:54 2025 GMT Subject: CN=14915A3ABBA58A6EC2FE191FFCDC73BE91AE70CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:7c:48:70:6e:30:6b:29:df:6c:3b:49:90: 53:b4:41:45:0d:0f:bf:9c:41:c9:01:4a:bc:c1:b2: 16:f0:7a:c0:34:8b:8f:ee:9f:5e:ef:39:e0:2d:01: d6:1f:83:3b:d8:73:b5:5b:83:4d:7e:2c:18:f0:50: 47:49:c2:08:60:07:57:f4:d6:8d:c2:54:67:6f:34: 04:56:dc:8c:7e:97:d1:a3:7a:22:4b:31:78:e9:10: ec:f4:ac:df:82:ac:2d:ce:62:8c:c8:a9:e2:0a:33: f3:e6:e2:1e:03:eb:f4:1e:e1:11:38:67:4e:88:aa: 51:76:b1:5a:f4:a3:5c:9a:b5:33:53:1b:f6:6d:c7: 32:25:6d:e6:69:3b:10:17:fb:d4:5c:a0:6e:c0:45: 9d:a9:44:60:97:2d:bd:05:46:b6:8f:2e:e4:dc:ac: ad:39:e3:ba:bb:a9:e9:02:49:0d:21:ae:31:48:c5: ba:ef:ae:87:6c:b0:9e:6f:23:91:fe:cc:81:a7:bb: 01:d9:90:8d:30:c2:8d:93:47:ce:60:4d:72:a8:4a: 17:cd:4b:03:23:48:06:b9:45:1b:94:62:93:45:ad: c8:80:14:5e:5e:84:5a:37:22:99:3b:a9:a0:07:92: 92:cb:41:aa:df:44:8c:38:28:7f:ca:a7:02:1a:de: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:5A:3A:BB:A5:8A:6E:C2:FE:19:1F:FC:DC:73:BE:91:AE:70:CA X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ab:6a:05:64:bc:09:bf:65:17:d5:98:3b:f1:ff:d7:f1:a8: 9a:9b:ce:da:24:bb:12:79:0a:62:39:f1:68:4f:ed:fd:dd:4b: bb:c5:00:72:3e:19:73:08:a7:de:92:1e:f2:af:e2:90:89:bd: 06:a5:1d:67:07:46:6b:6a:05:7d:9e:43:e9:fa:51:19:b2:80: 59:1e:8a:3d:8f:bd:6a:8d:d4:3d:86:16:33:26:ad:db:bd:da: e8:45:d7:2e:f5:b8:0b:16:21:fe:3a:05:a0:16:a6:83:84:49: b0:81:d4:0a:43:82:69:f0:f2:c8:f5:ab:87:c6:12:32:cf:a8: 1d:dc:a1:7a:d7:d3:3f:5f:96:cd:bb:4d:90:85:92:9f:40:c4: 8d:de:cc:d3:a7:76:ab:68:91:29:c2:5f:1c:a7:45:e0:3f:40: 73:ed:78:b7:4b:8c:a6:98:80:2a:09:4f:e0:62:27:33:75:ea: ff:b7:76:f7:03:45:89:fe:0b:77:ef:0c:10:76:60:9f:16:f8: d0:c4:a9:a8:a6:84:58:9c:52:ec:8d:4f:77:64:c3:c0:1b:64: 5d:c5:9f:8f:83:2b:d4:09:d5:d6:ad:2b:79:e0:b2:36:15:39: 70:34:e5:00:d2:fb:e3:a1:28:35:a1:d9:12:d0:8a:6c:50:ca: 4e:9d:cd:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/CTpGSNfYVBtBRqZLmXx+ZjLrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTEyMDUyMjA2NTRaFw0yNTEyMDkwNzE0NTRaMDMxMTAvBgNV BAMTKDE0OTE1QTNBQkJBNThBNkVDMkZFMTkxRkZDREM3M0JFOTFBRTcwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfHxIcG4waynfbDtJkFO0QUUN D7+cQckBSrzBshbwesA0i4/un17vOeAtAdYfgzvYc7Vbg01+LBjwUEdJwghgB1f0 1o3CVGdvNARW3Ix+l9GjeiJLMXjpEOz0rN+CrC3OYozIqeIKM/Pm4h4D6/Qe4RE4 Z06IqlF2sVr0o1yatTNTG/ZtxzIlbeZpOxAX+9RcoG7ARZ2pRGCXLb0FRraPLuTc rK0547q7qekCSQ0hrjFIxbrvrodssJ5vI5H+zIGnuwHZkI0wwo2TR85gTXKoShfN SwMjSAa5RRuUYpNFrciAFF5ehFo3Ipk7qaAHkpLLQarfRIw4KH/KpwIa3uaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJFaOrulim7C/hkf/NxzvpGucMowHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+ragVkvAm/ZRfVmDvx/9fxqJqbztokuxJ5 CmI58WhP7f3dS7vFAHI+GXMIp96SHvKv4pCJvQalHWcHRmtqBX2eQ+n6URmygFke ij2PvWqN1D2GFjMmrdu92uhF1y71uAsWIf46BaAWpoOESbCB1ApDgmnw8sj1q4fG EjLPqB3coXrX0z9fls27TZCFkp9AxI3ezNOndqtokSnCXxynReA/QHPteLdLjKaY gCoJT+BiJzN16v+3dvcDRYn+C3fvDBB2YJ8W+NDEqaimhFicUuyNT3dkw8AbZF3F n4+DK9QJ1datK3ngsjYVOXA05QDS++OhKDWh2RLQimxQyk6dzYY= -----END CERTIFICATE-----Generated at Sun Dec 7 03:54:53 2025 by rpki-client