This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: kR/PlNgpTUUN3ZYY/lHIw5UFSt6YFSNYzH/eFZwHULk= Subject key identifier: 54:D2:49:89:2E:78:2D:66:36:F3:AA:60:6B:14:3D:B8:78:F9:81:65 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 0C8F55F3D1EF316764545E3CA734B34C9C1A1A53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: AE Signing time: Tue 16 Dec 2025 10:31:25 +0000 Manifest this update: Tue 16 Dec 2025 10:26:25 +0000 Manifest next update: Fri 19 Dec 2025 10:31:25 +0000 Files and hashes: 1: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: tc452YvXgfdLHsFy/Wo7SvW7rcFuhlt/VG57zE8CAZk=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 10:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8f:55:f3:d1:ef:31:67:64:54:5e:3c:a7:34:b3:4c:9c:1a:1a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Dec 16 10:26:25 2025 GMT Not After : Dec 19 10:31:25 2025 GMT Subject: CN=54D249892E782D6636F3AA606B143DB878F98165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:48:5a:6f:41:13:e8:ad:10:65:b9:a5:c5: c2:e6:a7:e7:c6:e6:91:98:2b:d0:c9:c2:8e:9e:98: dc:45:c3:33:d3:b3:b7:db:d5:38:e1:52:fa:77:cb: 6c:9c:cb:cd:69:3a:a0:57:68:5a:a5:79:1c:58:b4: d4:18:0a:9b:33:3a:d4:68:f0:39:81:12:cd:25:fd: 40:79:c4:bc:61:1e:14:f9:b0:dd:3a:7d:a7:d9:00: 73:e4:1e:e2:1a:d8:0d:2a:3f:d0:c1:ba:be:a5:22: 63:60:3f:3c:f6:d0:a6:14:14:e8:11:00:20:d8:52: 38:21:5f:ca:bf:51:1e:4a:d9:a1:a8:3d:49:1c:e2: 39:bc:8f:7d:7b:f2:f8:d3:5e:c2:4c:a0:50:2d:dd: 50:34:56:6c:df:4b:74:62:aa:86:60:0c:a9:fc:34: d0:fd:bd:07:b1:bc:3f:69:ba:58:8b:82:8d:dd:92: b2:82:5f:67:b1:25:0f:41:52:e5:5c:78:ff:9e:2b: a1:f4:93:3b:79:c3:55:62:6c:d1:75:ba:ba:b7:d7: 07:3f:38:fd:3f:b3:21:6d:a6:b4:c1:a2:f1:27:a2: 96:cb:fb:47:bc:ed:e0:a8:fe:1b:b0:0e:eb:92:de: 80:78:1f:26:b1:9e:2b:e8:bf:9d:70:13:62:c2:cc: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D2:49:89:2E:78:2D:66:36:F3:AA:60:6B:14:3D:B8:78:F9:81:65 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d0:fa:d9:e9:d6:51:8e:3f:14:7d:96:c5:a3:03:b4:20:e3: 47:21:d6:db:e8:fa:9f:c0:5d:2e:ce:70:bf:71:b1:3d:9f:77: a4:8a:ae:24:ba:6c:f5:e9:2b:76:b1:f0:9b:a2:2e:c3:ed:a5: c0:92:8e:a2:e3:9a:63:f2:34:b3:04:e7:b2:90:ca:49:18:c5: 38:26:5b:63:c6:44:20:de:93:ce:11:9e:19:33:d0:d2:62:30: 31:94:23:db:5e:e5:22:8b:c9:02:2f:0c:e6:73:ee:68:f3:81: 01:a4:27:4f:69:3b:2a:73:9a:88:93:f0:71:97:5e:2d:24:aa: f8:c5:4c:df:8f:b4:b3:62:f2:6d:be:aa:88:c9:9b:26:d9:f1: 3d:7f:7f:49:38:e4:67:52:a0:92:db:59:ca:a5:d7:d4:48:12: a0:64:83:dc:85:40:f9:af:85:22:19:47:22:a0:48:d9:1e:dd: a4:3e:99:70:3d:69:44:fb:1d:8a:51:f2:ef:d6:20:f4:cf:ac: 36:12:a9:d7:34:5d:b3:aa:3f:5f:19:91:ec:cc:4a:24:11:2b: fe:11:08:89:a7:e9:c5:dd:1e:92:5c:95:a3:21:45:ac:76:39: 2e:ae:b2:2a:10:b3:66:4d:5b:0e:59:79:f8:b1:89:c4:7f:1a: e0:23:2e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDI9V89HvMWdkVF48pzSzTJwaGlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTEyMTYxMDI2MjVaFw0yNTEyMTkxMDMxMjVaMDMxMTAvBgNV BAMTKDU0RDI0OTg5MkU3ODJENjYzNkYzQUE2MDZCMTQzREI4NzhGOTgxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC570hab0ET6K0QZbmlxcLmp+fG 5pGYK9DJwo6emNxFwzPTs7fb1TjhUvp3y2ycy81pOqBXaFqleRxYtNQYCpszOtRo 8DmBEs0l/UB5xLxhHhT5sN06fafZAHPkHuIa2A0qP9DBur6lImNgPzz20KYUFOgR ACDYUjghX8q/UR5K2aGoPUkc4jm8j3178vjTXsJMoFAt3VA0VmzfS3RiqoZgDKn8 NND9vQexvD9puliLgo3dkrKCX2exJQ9BUuVceP+eK6H0kzt5w1VibNF1urq31wc/ OP0/syFtprTBovEnopbL+0e87eCo/huwDuuS3oB4Hyaxnivov51wE2LCzCrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVNJJiS54LWY286pgaxQ9uHj5gWUwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnQ+tnp1lGOPxR9lsWjA7Qg40ch1tvo+p/A XS7OcL9xsT2fd6SKriS6bPXpK3ax8JuiLsPtpcCSjqLjmmPyNLME57KQykkYxTgm W2PGRCDek84Rnhkz0NJiMDGUI9te5SKLyQIvDOZz7mjzgQGkJ09pOypzmoiT8HGX Xi0kqvjFTN+PtLNi8m2+qojJmybZ8T1/f0k45GdSoJLbWcql19RIEqBkg9yFQPmv hSIZRyKgSNke3aQ+mXA9aUT7HYpR8u/WIPTPrDYSqdc0XbOqP18ZkezMSiQRK/4R CImn6cXdHpJclaMhRax2OS6usioQs2ZNWw5ZefixicR/GuAjLsY= -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:42 2025 by rpki-client