This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: hmjD0p9AQkwUn+gJKvx6h9VMMxL1OhF8pAeK8yRw8TA= Subject key identifier: 10:CB:C9:F4:58:0F:72:01:67:3C:A3:87:DE:C4:C1:1B:F9:0C:12:7C Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 5AC67E19511A570E4070AF6B208AE3184036BBD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: F9 Signing time: Fri 05 Dec 2025 01:50:38 +0000 Manifest this update: Fri 05 Dec 2025 01:45:38 +0000 Manifest next update: Mon 08 Dec 2025 09:37:38 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 3: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: LbLq3uSJeFd9316YwJc8UWthTk0fnvzStoSaCxlERzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c6:7e:19:51:1a:57:0e:40:70:af:6b:20:8a:e3:18:40:36:bb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Dec 5 01:45:38 2025 GMT Not After : Dec 8 09:37:38 2025 GMT Subject: CN=10CBC9F4580F7201673CA387DEC4C11BF90C127C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:fe:b8:5e:0e:12:ca:dc:5c:12:88:fa:9a: c7:ed:36:c4:a2:b8:7d:bf:a1:50:50:e3:e8:8f:4a: 48:a9:b4:9f:f8:52:35:54:68:b7:85:04:6a:e3:ac: c2:7d:c5:4f:18:25:32:f3:a2:5c:47:b3:05:09:e1: e4:53:58:ed:ce:cb:04:10:cb:5b:3a:c2:01:03:d4: 4b:b6:8e:e3:9e:e0:01:70:66:48:1a:aa:41:f4:1f: 32:b7:1b:21:c7:28:3c:9a:55:23:b4:88:35:a2:c2: 5c:78:de:03:c5:60:a8:ff:f7:25:25:fe:a4:5d:c1: 0b:49:5b:f6:61:5d:31:cf:a6:4d:98:58:fd:ef:7e: dc:97:62:91:5a:46:1c:30:ff:92:9a:29:95:cf:24: 2f:b5:98:63:f7:6f:fb:3e:62:4e:5f:4e:4a:1f:c3: 8e:1c:5d:ae:f1:00:7e:ce:14:77:e4:cf:be:e6:9d: 3c:5c:66:c2:93:f4:f8:2e:6b:28:0c:19:d0:3d:d8: 51:f6:d9:57:c4:52:ac:45:11:e0:c7:21:df:a6:3b: f5:59:ae:f3:f0:9e:7e:39:40:c9:71:45:db:90:30: 5c:53:61:e7:1d:b4:e9:38:81:e4:c6:05:dc:7d:0b: a2:77:3d:33:0c:c4:41:e6:b6:38:85:17:51:a0:d5: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CB:C9:F4:58:0F:72:01:67:3C:A3:87:DE:C4:C1:1B:F9:0C:12:7C X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b9:cc:30:f4:19:62:3e:aa:41:ee:fe:3b:14:b0:27:fb:33: 94:65:27:a3:9e:c4:56:cb:71:28:9b:23:be:04:d3:2a:e9:f6: 4a:6a:ff:b8:b1:94:d3:65:6c:65:b1:90:8b:20:35:2b:06:5d: bd:a1:2d:06:45:56:a3:9a:b4:2a:99:c7:24:3e:c3:20:cf:22: 06:5d:41:5c:89:59:31:1f:d9:cb:f9:7c:18:60:24:30:8c:97: d7:56:30:72:d0:f0:66:58:02:27:b8:3c:01:64:a7:61:d2:28: b9:8e:1f:1d:3d:8a:00:40:cd:78:90:0e:a2:bf:75:60:f1:d9: 4f:ab:c5:fd:4a:b7:d9:df:1d:a0:f2:96:3b:81:cd:ef:ab:f0: ce:22:c6:1e:4a:f5:96:09:c2:e6:3a:02:94:0c:f4:48:de:72: e3:e0:bc:2f:22:73:25:c5:af:96:d0:0a:49:75:e8:79:21:db: c3:6a:8d:92:84:f9:ab:1a:e0:c2:70:23:3f:6b:9f:e3:ad:c3: c1:14:eb:98:e7:68:aa:a6:3c:93:82:f4:7d:fc:3c:1a:bd:34: ce:f7:3d:63:0d:78:78:e1:4c:3d:20:21:fd:c8:76:56:ab:e4: 71:87:a6:65:10:ed:0f:93:c1:39:0a:c1:bc:f4:94:2d:f2:5c: 7f:be:4b:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsZ+GVEaVw5AcK9rIIrjGEA2u9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTEyMDUwMTQ1MzhaFw0yNTEyMDgwOTM3MzhaMDMxMTAvBgNV BAMTKDEwQ0JDOUY0NTgwRjcyMDE2NzNDQTM4N0RFQzRDMTFCRjkwQzEyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmf64Xg4SytxcEoj6msftNsSi uH2/oVBQ4+iPSkiptJ/4UjVUaLeFBGrjrMJ9xU8YJTLzolxHswUJ4eRTWO3OywQQ y1s6wgED1Eu2juOe4AFwZkgaqkH0HzK3GyHHKDyaVSO0iDWiwlx43gPFYKj/9yUl /qRdwQtJW/ZhXTHPpk2YWP3vftyXYpFaRhww/5KaKZXPJC+1mGP3b/s+Yk5fTkof w44cXa7xAH7OFHfkz77mnTxcZsKT9PguaygMGdA92FH22VfEUqxFEeDHId+mO/VZ rvPwnn45QMlxRduQMFxTYecdtOk4geTGBdx9C6J3PTMMxEHmtjiFF1Gg1edBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMvJ9FgPcgFnPKOH3sTBG/kMEnwwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW5zDD0GWI+qkHu/jsUsCf7M5RlJ6OexFbL cSibI74E0yrp9kpq/7ixlNNlbGWxkIsgNSsGXb2hLQZFVqOatCqZxyQ+wyDPIgZd QVyJWTEf2cv5fBhgJDCMl9dWMHLQ8GZYAie4PAFkp2HSKLmOHx09igBAzXiQDqK/ dWDx2U+rxf1Kt9nfHaDyljuBze+r8M4ixh5K9ZYJwuY6ApQM9EjecuPgvC8icyXF r5bQCkl16Hkh28NqjZKE+asa4MJwIz9rn+Otw8EU65jnaKqmPJOC9H38PBq9NM73 PWMNeHjhTD0gIf3Idlar5HGHpmUQ7Q+TwTkKwbz0lC3yXH++SyI= -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:53 2025 by rpki-client