This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: p1rgYS5ue4vkdEE5jN5yp+sptSDfKXd4WAnCq3VMbwQ= Subject key identifier: 25:75:DD:F1:E9:3A:74:81:81:5A:64:8B:6F:6B:3E:98:DA:67:84:CD Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 283B61606F685E1AA68CD92126751C1273DE8431 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 01CC Signing time: Sun 28 Dec 2025 22:01:17 +0000 Manifest this update: Sun 28 Dec 2025 21:56:17 +0000 Manifest next update: Thu 01 Jan 2026 04:39:17 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: bd9TkL1bdKv0jYYlxvyJidw+EQE24FT0i4FP+SyFIxI=) 2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3b:61:60:6f:68:5e:1a:a6:8c:d9:21:26:75:1c:12:73:de:84:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Dec 28 21:56:17 2025 GMT Not After : Jan 1 04:39:17 2026 GMT Subject: CN=2575DDF1E93A7481815A648B6F6B3E98DA6784CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:99:56:ae:a8:da:3e:7c:1d:42:2d:68:1d: 1b:0e:e3:f0:f1:9f:69:03:d1:47:41:65:6c:3f:52: 3d:2b:88:cf:09:20:65:07:41:2f:cd:f3:39:26:9d: f7:1a:b3:75:ef:7a:4f:63:4a:47:fa:a6:84:3d:4c: 3e:55:c5:88:de:39:50:4d:34:5f:84:42:43:59:b1: 7b:a2:64:47:27:e9:be:8d:e0:b6:37:35:a8:19:89: c5:d1:e0:bb:ac:00:49:33:ea:43:a9:cd:ff:51:b0: ad:47:a4:7b:b5:3f:64:5f:98:f6:bc:5a:c6:d6:c6: 5b:4b:fd:3f:94:08:8a:45:c2:e9:49:4c:03:a3:ac: 37:82:aa:ea:ae:0d:d2:fa:f0:c3:3e:13:85:4f:83: 5a:15:69:4e:94:85:e7:2d:83:b8:06:c4:8c:5f:79: 0c:75:a0:2b:7a:11:19:6f:33:71:17:1b:e3:33:34: 99:96:54:12:5d:bf:3e:d5:d2:02:da:44:f2:ab:45: 29:e4:d5:23:26:8e:6a:c6:cf:ce:4a:5f:ce:6e:38: 93:27:5d:b2:0b:10:93:77:c5:72:95:82:f1:ab:70: 91:b4:14:25:a2:58:b4:af:b1:9f:cb:a8:40:c7:55: 67:d2:9b:3b:0b:f0:80:0a:ef:04:9d:00:f9:26:de: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:DD:F1:E9:3A:74:81:81:5A:64:8B:6F:6B:3E:98:DA:67:84:CD X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0d:0c:78:d8:e4:a0:ca:e2:34:68:a9:bf:10:9e:08:6b:14: 95:b1:e6:3a:3b:bd:46:17:db:6c:a3:7f:3d:a1:d8:50:f5:ff: 7a:11:f2:f4:38:67:01:5e:65:83:49:e3:b6:6d:d5:ae:35:62: 3d:12:40:19:b0:c6:80:86:4f:35:7b:c0:6e:55:57:aa:6c:7c: b5:99:14:02:42:7c:ef:71:c2:d4:10:b5:e4:c6:e4:55:35:58: b3:ae:95:13:8b:a8:13:af:7d:5d:32:a2:43:43:72:36:f0:a1: a2:82:33:f1:a9:71:ec:e1:4b:dd:af:93:44:0f:d2:92:b6:c8: fd:47:6b:f9:de:45:bd:51:96:cf:7c:6c:ec:b1:89:7c:ef:16: 68:cb:b0:8e:b6:32:7b:78:31:7e:ca:ed:d2:3c:65:9c:78:7d: 28:36:80:97:6e:bd:43:65:bb:67:22:29:5a:4c:26:ce:9d:15: 4e:b8:f4:74:7d:e4:51:3f:e8:df:c4:e2:96:c3:c7:ee:71:a8: 32:23:6d:a4:dd:e2:5b:47:57:b3:ea:6d:01:36:6e:d3:53:f0: 90:0b:c6:12:56:04:9c:6b:a8:79:a3:01:5e:d2:68:0d:f4:05: 61:e6:dd:a6:97:79:52:74:fe:ad:82:a6:bd:77:8e:0a:78:f8: 61:8a:85:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDthYG9oXhqmjNkhJnUcEnPehDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTEyMjgyMTU2MTdaFw0yNjAxMDEwNDM5MTdaMDMxMTAvBgNV BAMTKDI1NzVEREYxRTkzQTc0ODE4MTVBNjQ4QjZGNkIzRTk4REE2Nzg0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+ZlWrqjaPnwdQi1oHRsO4/Dx n2kD0UdBZWw/Uj0riM8JIGUHQS/N8zkmnfcas3Xvek9jSkf6poQ9TD5VxYjeOVBN NF+EQkNZsXuiZEcn6b6N4LY3NagZicXR4LusAEkz6kOpzf9RsK1HpHu1P2RfmPa8 WsbWxltL/T+UCIpFwulJTAOjrDeCququDdL68MM+E4VPg1oVaU6Uhectg7gGxIxf eQx1oCt6ERlvM3EXG+MzNJmWVBJdvz7V0gLaRPKrRSnk1SMmjmrGz85KX85uOJMn XbILEJN3xXKVgvGrcJG0FCWiWLSvsZ/LqEDHVWfSmzsL8IAK7wSdAPkm3r8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJXXd8ek6dIGBWmSLb2s+mNpnhM0wHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwNDHjY5KDK4jRoqb8QnghrFJWx5jo7vUYX 22yjfz2h2FD1/3oR8vQ4ZwFeZYNJ47Zt1a41Yj0SQBmwxoCGTzV7wG5VV6psfLWZ FAJCfO9xwtQQteTG5FU1WLOulROLqBOvfV0yokNDcjbwoaKCM/GpcezhS92vk0QP 0pK2yP1Ha/neRb1Rls98bOyxiXzvFmjLsI62Mnt4MX7K7dI8ZZx4fSg2gJduvUNl u2ciKVpMJs6dFU649HR95FE/6N/E4pbDx+5xqDIjbaTd4ltHV7PqbQE2btNT8JAL xhJWBJxrqHmjAV7SaA30BWHm3aaXeVJ0/q2Cpr13jgp4+GGKhVk= -----END CERTIFICATE-----Generated at Tue Dec 30 22:05:34 2025 by rpki-client