This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 2gqaMb0F6cBIvqBSt12WP+9ZzkxBJmpQDldyDTdW/BY= Subject key identifier: 08:D9:0E:0F:31:9C:69:B6:DC:03:31:DF:76:DB:8E:30:83:9F:1A:E6 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 49C4EB2C33C4B0FE1CB4D656B9D9DAC4976D6070 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: A5 Signing time: Fri 05 Dec 2025 15:51:19 +0000 Manifest this update: Fri 05 Dec 2025 15:46:19 +0000 Manifest next update: Mon 08 Dec 2025 22:08:19 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: FvOVcJlOg4/kb0BfYmxCgH20xo8KvIMTZk/9hP5MFwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c4:eb:2c:33:c4:b0:fe:1c:b4:d6:56:b9:d9:da:c4:97:6d:60:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Dec 5 15:46:19 2025 GMT Not After : Dec 8 22:08:19 2025 GMT Subject: CN=08D90E0F319C69B6DC0331DF76DB8E30839F1AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:60:64:86:78:00:81:6a:3e:36:cd:75:1e: be:59:18:f5:38:cb:39:71:1a:6e:c9:81:05:8a:23: c3:15:e6:41:1c:3e:b2:0b:b0:12:28:53:c2:2f:74: a7:34:77:26:4a:11:09:fc:77:ca:3e:a9:a6:1b:50: b8:c3:53:37:f5:7e:56:30:c4:5d:65:ed:6a:ec:4b: c3:1f:d9:ea:c4:bf:4e:83:55:94:fe:66:d2:5b:e8: 75:7d:43:33:89:3d:c1:ed:17:a8:36:83:2e:22:41: 76:a2:df:f5:52:93:75:53:39:b0:60:09:4e:40:12: 63:ec:9d:54:53:57:88:2e:a0:78:f9:d9:88:f4:df: 6e:15:28:f9:a5:b0:3f:9b:b9:ac:0c:8f:82:d5:12: 69:13:d9:61:23:f1:de:36:24:af:b7:51:8f:f0:20: 06:4c:b8:90:b7:2d:1c:a9:8a:07:23:0a:ac:5e:e6: de:f1:7d:f6:e5:5e:71:c3:66:7d:4e:cd:c9:c8:40: a7:cc:07:ac:34:b4:24:57:15:5f:e5:11:2c:29:4b: ca:0e:aa:ad:40:e9:03:53:5c:ab:cf:5b:51:44:d4: 43:ac:84:d1:c6:bc:0a:a0:24:13:c5:cd:ad:ee:0a: ba:95:d6:ff:53:98:ef:a6:9c:dc:c2:a4:03:1c:c1: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D9:0E:0F:31:9C:69:B6:DC:03:31:DF:76:DB:8E:30:83:9F:1A:E6 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2a:e1:7a:0c:90:28:01:3f:b0:31:22:d4:23:c0:54:23:c3: 84:fb:d1:fd:2a:1c:a2:3b:de:b7:cd:b5:2f:98:0e:55:25:0e: 4c:4b:5a:02:6e:10:8c:13:69:b9:18:39:1b:0c:13:6a:b4:24: 29:99:46:92:00:ea:05:e7:26:ee:8f:b4:dc:27:80:9b:ea:e1: 8e:2e:d6:13:ac:f5:9b:ff:d0:08:b7:91:0c:fc:6e:8e:01:f9: ea:e1:b0:f3:e6:e4:b2:3a:df:45:5c:aa:c5:fa:16:f2:d0:c9: 27:a9:b1:4c:90:f5:e3:88:2c:5d:56:07:78:80:f4:6e:c8:53: 14:ae:b9:c0:06:e3:63:f0:0d:65:19:90:c5:9d:15:77:42:4d: 68:71:61:5f:c0:77:2e:e1:56:2f:a1:49:02:99:10:2c:91:8c: 55:e9:76:4b:4b:bb:c2:70:99:e6:2a:ef:54:d6:71:c7:31:69: d6:e4:aa:21:35:4f:a7:9f:7d:a7:c0:80:27:6f:b1:84:90:5a: df:4d:87:4a:3b:7d:06:80:76:4e:56:79:92:da:74:ca:7f:5d: fa:99:0a:3c:15:93:92:5c:24:73:77:39:c6:1b:84:26:14:5f: b4:37:c2:67:37:fc:a1:a1:10:c4:38:a0:6e:46:97:41:da:11: f0:6a:87:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScTrLDPEsP4ctNZWudnaxJdtYHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTEyMDUxNTQ2MTlaFw0yNTEyMDgyMjA4MTlaMDMxMTAvBgNV BAMTKDA4RDkwRTBGMzE5QzY5QjZEQzAzMzFERjc2REI4RTMwODM5RjFBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVmBkhngAgWo+Ns11Hr5ZGPU4 yzlxGm7JgQWKI8MV5kEcPrILsBIoU8IvdKc0dyZKEQn8d8o+qaYbULjDUzf1flYw xF1l7WrsS8Mf2erEv06DVZT+ZtJb6HV9QzOJPcHtF6g2gy4iQXai3/VSk3VTObBg CU5AEmPsnVRTV4guoHj52Yj0324VKPmlsD+buawMj4LVEmkT2WEj8d42JK+3UY/w IAZMuJC3LRypigcjCqxe5t7xffblXnHDZn1OzcnIQKfMB6w0tCRXFV/lESwpS8oO qq1A6QNTXKvPW1FE1EOshNHGvAqgJBPFza3uCrqV1v9TmO+mnNzCpAMcwX0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNkODzGcabbcAzHfdtuOMIOfGuYwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkq4XoMkCgBP7AxItQjwFQjw4T70f0qHKI7 3rfNtS+YDlUlDkxLWgJuEIwTabkYORsME2q0JCmZRpIA6gXnJu6PtNwngJvq4Y4u 1hOs9Zv/0Ai3kQz8bo4B+erhsPPm5LI630VcqsX6FvLQySepsUyQ9eOILF1WB3iA 9G7IUxSuucAG42PwDWUZkMWdFXdCTWhxYV/Ady7hVi+hSQKZECyRjFXpdktLu8Jw meYq71TWcccxadbkqiE1T6effafAgCdvsYSQWt9Nh0o7fQaAdk5WeZLadMp/XfqZ CjwVk5JcJHN3OcYbhCYUX7Q3wmc3/KGhEMQ4oG5Gl0HaEfBqhxA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:47 2025 by rpki-client