This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: GPiS2GLGmROGU9rYH3PREgC/nAgSqqYsU1tZfKz+iS4= Subject key identifier: 93:D5:7F:19:1E:6A:89:00:08:F0:F5:B8:D6:53:25:2F:C1:76:8A:51 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 55B50F73A3D1CD4A31D8BF9E7A64C6CEB40B84CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: EF Signing time: Sat 06 Dec 2025 08:52:21 +0000 Manifest this update: Sat 06 Dec 2025 08:47:21 +0000 Manifest next update: Tue 09 Dec 2025 09:10:21 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: 3RkCY2xkPlSOqvWBhaQqExUVnkDev/VZXbSytz7eHw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b5:0f:73:a3:d1:cd:4a:31:d8:bf:9e:7a:64:c6:ce:b4:0b:84:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Dec 6 08:47:21 2025 GMT Not After : Dec 9 09:10:21 2025 GMT Subject: CN=93D57F191E6A890008F0F5B8D653252FC1768A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:0e:99:f4:d8:ce:39:15:0e:3e:ad:9c:1a: ab:6f:49:24:cb:ba:01:80:4c:aa:dc:0f:70:31:3c: 51:c4:77:cd:21:bf:a0:a4:90:00:3a:5c:2c:1c:58: db:80:d7:cb:f4:39:d4:9f:4f:23:0f:67:18:af:56: e9:ad:4a:e5:ba:ac:8c:b9:95:cc:3a:d2:ad:13:54: fc:ab:cb:db:67:8e:91:27:7d:1e:df:6c:a4:54:9a: 11:87:d0:e3:a2:f2:75:58:fb:ef:2b:1f:fe:d7:80: 13:f1:63:43:a1:09:5e:9a:2f:84:e3:2c:4d:e5:a7: 44:c4:40:e9:9a:23:a8:cb:c6:0a:8f:55:91:8d:ad: af:fe:08:c1:bf:58:ac:b5:32:c8:d6:bd:53:8e:85: 64:1e:9e:c9:dc:e4:1a:64:47:76:4b:7e:66:e2:e8: 71:ac:56:59:8e:c9:3c:bc:93:7e:0c:37:e1:65:a8: f8:01:95:be:68:cb:8c:b0:fa:72:d1:b9:15:c9:e7: 68:03:8d:4b:7b:05:20:ca:60:6b:bf:35:25:c6:92: 46:73:ec:f0:63:61:b8:90:ed:95:e3:a5:3d:02:bf: df:36:07:0e:22:64:59:f1:08:75:be:10:7f:23:06: 27:46:0f:e3:14:95:7c:a5:06:f5:e9:96:b3:ef:00: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:7F:19:1E:6A:89:00:08:F0:F5:B8:D6:53:25:2F:C1:76:8A:51 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0c:74:68:94:1a:00:ab:1f:0b:d1:f5:1e:11:d7:ea:ea:02: e7:66:04:cb:bf:df:32:5e:06:06:97:7e:29:8c:5d:01:2f:a1: f3:f5:dc:5a:e7:33:1f:aa:ba:c9:fd:29:95:b9:6a:38:89:c3: 03:24:ab:d5:ca:59:3c:ef:51:3c:5e:53:18:98:51:8a:ea:d5: ad:9d:3a:24:64:bd:ab:f0:3d:32:cf:bc:6f:6e:f5:a0:84:cc: 4a:5b:e1:b3:db:02:bd:31:71:c0:37:ab:52:1e:39:d4:fc:9d: 05:22:45:0b:73:a7:95:96:00:66:85:64:67:a2:2a:3c:e2:83: 95:88:d8:44:30:bd:ac:4b:2c:8a:6f:83:5f:0f:a6:d0:32:6d: b8:e5:ef:51:df:6d:a4:bf:2a:68:1f:c7:0f:64:e7:91:b4:70: 30:f9:77:f5:a7:bb:62:f1:63:c6:e7:3f:6f:2b:9d:29:90:31: 94:50:7b:c8:cf:f2:dc:40:34:08:ec:41:75:a2:2b:a0:dd:3f: 87:f9:94:c6:12:7c:c8:71:53:ee:a3:3f:6f:9e:bd:bb:83:61: 8d:b8:52:f6:aa:70:ff:37:f6:7a:cd:fa:86:f7:fb:78:ac:c7: 38:af:59:3a:0a:c8:45:e3:47:a2:55:f5:ad:80:1b:81:bf:bb: f5:01:d8:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbUPc6PRzUox2L+eemTGzrQLhMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTEyMDYwODQ3MjFaFw0yNTEyMDkwOTEwMjFaMDMxMTAvBgNV BAMTKDkzRDU3RjE5MUU2QTg5MDAwOEYwRjVCOEQ2NTMyNTJGQzE3NjhBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLQ6Z9NjOORUOPq2cGqtvSSTL ugGATKrcD3AxPFHEd80hv6CkkAA6XCwcWNuA18v0OdSfTyMPZxivVumtSuW6rIy5 lcw60q0TVPyry9tnjpEnfR7fbKRUmhGH0OOi8nVY++8rH/7XgBPxY0OhCV6aL4Tj LE3lp0TEQOmaI6jLxgqPVZGNra/+CMG/WKy1MsjWvVOOhWQensnc5BpkR3ZLfmbi 6HGsVlmOyTy8k34MN+FlqPgBlb5oy4yw+nLRuRXJ52gDjUt7BSDKYGu/NSXGkkZz 7PBjYbiQ7ZXjpT0Cv982Bw4iZFnxCHW+EH8jBidGD+MUlXylBvXplrPvAFBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9V/GR5qiQAI8PW41lMlL8F2ilEwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcMdGiUGgCrHwvR9R4R1+rqAudmBMu/3zJe BgaXfimMXQEvofP13FrnMx+qusn9KZW5ajiJwwMkq9XKWTzvUTxeUxiYUYrq1a2d OiRkvavwPTLPvG9u9aCEzEpb4bPbAr0xccA3q1IeOdT8nQUiRQtzp5WWAGaFZGei Kjzig5WI2EQwvaxLLIpvg18PptAybbjl71HfbaS/Kmgfxw9k55G0cDD5d/Wnu2Lx Y8bnP28rnSmQMZRQe8jP8txANAjsQXWiK6DdP4f5lMYSfMhxU+6jP2+evbuDYY24 UvaqcP839nrN+ob3+3isxzivWToKyEXjR6JV9a2AG4G/u/UB2Ds= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:09 2025 by rpki-client