This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: 0STMRYxZWXkFglK/o9lL3XtJl3DsHygylt69uiCE8AY= Subject key identifier: 5F:86:30:DA:EE:B7:B4:AE:1E:60:41:DB:43:39:D4:3F:92:00:30:EA Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 69F68AB676F8B81F421F72D8388F9EBF64FBE7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0536 Signing time: Tue 23 Dec 2025 01:11:37 +0000 Manifest this update: Tue 23 Dec 2025 01:06:37 +0000 Manifest next update: Fri 26 Dec 2025 08:06:37 +0000 Files and hashes: 1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) 2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: LmyGwGKEvbSN6lBU9fFebXtjCn9mSWsQF1D3rKHNFjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f6:8a:b6:76:f8:b8:1f:42:1f:72:d8:38:8f:9e:bf:64:fb:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Dec 23 01:06:37 2025 GMT Not After : Dec 26 08:06:37 2025 GMT Subject: CN=5F8630DAEEB7B4AE1E6041DB4339D43F920030EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:10:02:3f:af:64:b4:5e:cc:96:8f:63:b1: f9:43:0e:bd:fb:97:a1:73:4a:a3:47:c1:aa:8d:a2: 66:ed:7f:50:f0:e4:c3:93:04:6e:2d:d5:46:1c:bc: 80:ac:d7:02:e6:b0:48:fd:a0:66:15:3c:b6:44:22: 3c:a5:a7:34:8e:ee:fa:38:86:68:df:65:46:c1:34: 4e:d5:b4:c8:f9:f8:10:ec:a3:52:a6:cb:54:1e:1b: 8c:10:c8:60:57:2c:6c:8a:eb:48:38:06:4f:34:e6: 90:5d:db:b9:b1:a1:54:9b:08:48:7f:06:77:37:27: a1:29:d3:8a:7f:e2:69:15:fe:18:31:e6:f2:a4:8f: 59:3d:d4:a3:03:be:fc:73:71:80:c0:f3:34:5e:b8: 9c:c8:27:d0:c6:18:e8:29:d2:c3:f3:a0:1f:54:14: 68:27:99:73:e9:47:e2:85:e9:99:14:ef:04:f4:31: b8:bd:95:86:ab:78:0b:b1:b0:7e:95:a5:f0:35:cc: 07:a2:76:f3:a9:cb:97:12:1f:e0:75:7b:4c:f8:c8: ef:3e:32:3f:1c:35:f0:7f:17:9e:c5:e4:70:51:f1: f3:53:8e:f1:1b:df:f7:4f:e9:a8:ec:15:a8:54:cc: a0:eb:5e:86:82:f0:c3:cc:9b:ba:cf:19:2a:bb:d1: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:30:DA:EE:B7:B4:AE:1E:60:41:DB:43:39:D4:3F:92:00:30:EA X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a9:ae:10:96:3c:67:2a:2b:72:85:18:71:06:80:6a:25:04: 6a:26:4a:f4:45:9f:6d:56:f0:23:f4:1c:88:6c:0f:44:26:ee: 48:11:d1:8a:9d:5c:65:91:46:ac:6e:56:3a:e3:3e:71:92:1d: 66:cb:29:c2:d3:a7:f0:ec:97:d0:71:c0:48:69:db:e0:90:15: 7d:e4:e5:d5:cf:75:f4:e7:42:a0:2b:28:dd:ab:99:91:9d:1c: f8:4e:f1:86:fb:1e:a3:50:23:4b:e6:9d:e3:e0:83:51:26:7c: 3a:4b:34:57:74:ff:3e:fc:0f:13:98:59:77:53:aa:f8:d1:ca: eb:f2:02:97:5b:6f:86:32:5d:60:a7:35:ca:ab:97:12:5e:e5: 19:ba:42:cf:92:3c:c7:05:86:72:4b:86:09:d7:da:7a:16:87: ff:09:87:02:10:63:4c:2b:27:59:f7:6f:56:8e:bd:4f:f6:5c: 6a:33:04:06:86:9d:05:07:8f:00:5c:c1:b9:d1:21:c6:29:28: 13:91:e0:22:fd:84:69:68:cf:f0:37:4b:85:f9:29:3f:6b:8e: c2:f4:eb:a1:72:96:e2:5a:48:a6:c7:d4:e4:85:37:ab:9f:8d: 76:48:01:01:b2:39:3d:3f:7b:2f:31:b6:98:c9:df:c4:35:c5: ba:ec:1a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafaKtnb4uB9CH3LYOI+ev2T75/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTEyMjMwMTA2MzdaFw0yNTEyMjYwODA2MzdaMDMxMTAvBgNV BAMTKDVGODYzMERBRUVCN0I0QUUxRTYwNDFEQjQzMzlENDNGOTIwMDMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32xACP69ktF7Mlo9jsflDDr37 l6FzSqNHwaqNombtf1Dw5MOTBG4t1UYcvICs1wLmsEj9oGYVPLZEIjylpzSO7vo4 hmjfZUbBNE7VtMj5+BDso1Kmy1QeG4wQyGBXLGyK60g4Bk805pBd27mxoVSbCEh/ Bnc3J6Ep04p/4mkV/hgx5vKkj1k91KMDvvxzcYDA8zReuJzIJ9DGGOgp0sPzoB9U FGgnmXPpR+KF6ZkU7wT0Mbi9lYareAuxsH6VpfA1zAeidvOpy5cSH+B1e0z4yO8+ Mj8cNfB/F57F5HBR8fNTjvEb3/dP6ajsFahUzKDrXoaC8MPMm7rPGSq70fShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4Yw2u63tK4eYEHbQznUP5IAMOowHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCprhCWPGcqK3KFGHEGgGolBGomSvRFn21W 8CP0HIhsD0Qm7kgR0YqdXGWRRqxuVjrjPnGSHWbLKcLTp/Dsl9BxwEhp2+CQFX3k 5dXPdfTnQqArKN2rmZGdHPhO8Yb7HqNQI0vmnePgg1EmfDpLNFd0/z78DxOYWXdT qvjRyuvyApdbb4YyXWCnNcqrlxJe5Rm6Qs+SPMcFhnJLhgnX2noWh/8JhwIQY0wr J1n3b1aOvU/2XGozBAaGnQUHjwBcwbnRIcYpKBOR4CL9hGloz/A3S4X5KT9rjsL0 66FyluJaSKbH1OSFN6ufjXZIAQGyOT0/ey8xtpjJ38Q1xbrsGuE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:13 2025 by rpki-client