This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: zO/ytHLesOmORLVC1g3WZrLO8zE5Tp060KU2gwa922A= Subject key identifier: A2:AA:DA:0F:75:57:0F:28:72:58:BC:9E:1D:17:F8:EA:D3:41:E7:1E Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 32CE9DD682180ADE3592FBD808193FCD1F76D856 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0152 Signing time: Mon 15 Dec 2025 17:22:18 +0000 Manifest this update: Mon 15 Dec 2025 17:17:18 +0000 Manifest next update: Thu 18 Dec 2025 18:57:18 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: eG2hvAM6g3KXI/IzRv5Yf5DIApkzLzWFWdM/IL6ObQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 18:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ce:9d:d6:82:18:0a:de:35:92:fb:d8:08:19:3f:cd:1f:76:d8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Dec 15 17:17:18 2025 GMT Not After : Dec 18 18:57:18 2025 GMT Subject: CN=A2AADA0F75570F287258BC9E1D17F8EAD341E71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:e0:9c:eb:93:b9:cb:4c:25:ee:cc:8c:7b: 12:57:dc:8a:72:c7:8f:58:4b:a3:91:47:6e:7b:cb: 97:d8:11:54:ae:99:94:9c:e5:f9:7d:19:c0:b6:9a: 24:d5:2d:8a:a6:1f:2d:2d:0f:39:38:7e:d6:b6:5a: e4:95:ad:3a:8c:bc:b5:78:53:86:5c:2d:64:2a:01: 2e:fb:89:0d:ac:d1:e0:f8:66:ac:90:c0:12:5f:58: d8:bc:29:29:a8:a7:8c:c3:48:3d:85:89:57:5b:f2: 68:43:14:a7:bb:66:dc:3f:2e:95:de:50:8d:e7:c8: 42:c6:17:db:bc:43:fe:07:86:01:25:43:2f:81:43: ac:04:3c:c5:a7:bb:ca:52:a7:b8:83:9e:58:bc:40: 58:53:26:3a:d0:c3:c3:b2:3e:c6:f9:cc:fe:d2:7b: d6:ed:68:8c:fb:f2:03:55:63:06:fd:e3:f7:13:df: 3b:29:dc:b1:22:bd:eb:f4:af:68:d4:2a:9e:51:4c: f6:4c:5e:2b:63:6d:22:cc:1f:e6:b8:77:d3:1e:5d: 81:eb:2e:d9:30:b2:8f:a7:75:24:af:94:9e:73:75: d5:97:4d:9c:96:3e:73:76:a6:7d:a9:df:78:24:42: a0:4a:ee:6d:6e:d2:b5:a3:6c:c0:65:72:7e:f8:33: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:DA:0F:75:57:0F:28:72:58:BC:9E:1D:17:F8:EA:D3:41:E7:1E X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2c:36:34:61:d3:90:a9:e1:13:6c:4a:d7:ea:cc:64:e2:93: b1:5f:13:e7:c3:5f:dc:14:af:3e:ed:05:17:6b:25:8c:fa:ad: 6d:63:57:ba:ca:52:b0:7f:3e:7f:f6:89:12:1a:f6:b3:b9:66: cf:73:f7:58:a0:90:7a:ec:16:90:ec:56:31:ff:51:23:d6:78: f8:6a:68:3e:a9:2a:73:7e:29:c4:92:36:6b:21:c9:8d:de:64: af:20:cb:da:ca:da:75:f1:4c:83:21:f9:46:4e:6f:6f:fd:1c: d4:ef:f1:ea:68:73:8b:65:e5:53:b1:3e:75:24:75:3c:72:2f: de:0c:25:ce:19:5a:9d:d4:1a:c4:cb:c4:5f:26:36:e4:d0:0c: cd:0b:c6:ee:46:53:0a:24:0c:d5:62:a6:27:0a:3f:59:60:fc: 08:ab:d8:e4:18:df:5c:ac:62:3d:2b:76:87:dc:3f:91:58:2d: 0c:49:09:69:cb:36:a7:07:a1:93:bc:25:89:49:8b:9f:af:82: 00:f4:83:1d:74:85:9d:d8:ee:94:ad:0a:6b:f4:6a:8f:44:3a: e6:ef:82:3c:a8:2d:e9:19:51:5f:c7:c8:40:5e:07:41:87:5d: 7e:10:3c:cb:a1:5a:bb:3c:62:5c:35:45:2d:61:47:ff:64:36: 2b:fc:78:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMs6d1oIYCt41kvvYCBk/zR922FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTEyMTUxNzE3MThaFw0yNTEyMTgxODU3MThaMDMxMTAvBgNV BAMTKEEyQUFEQTBGNzU1NzBGMjg3MjU4QkM5RTFEMTdGOEVBRDM0MUU3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGeCc65O5y0wl7syMexJX3Ipy x49YS6ORR257y5fYEVSumZSc5fl9GcC2miTVLYqmHy0tDzk4fta2WuSVrTqMvLV4 U4ZcLWQqAS77iQ2s0eD4ZqyQwBJfWNi8KSmop4zDSD2FiVdb8mhDFKe7Ztw/LpXe UI3nyELGF9u8Q/4HhgElQy+BQ6wEPMWnu8pSp7iDnli8QFhTJjrQw8OyPsb5zP7S e9btaIz78gNVYwb94/cT3zsp3LEivev0r2jUKp5RTPZMXitjbSLMH+a4d9MeXYHr Ltkwso+ndSSvlJ5zddWXTZyWPnN2pn2p33gkQqBK7m1u0rWjbMBlcn74M3LjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqraD3VXDyhyWLyeHRf46tNB5x4wHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMsNjRh05Cp4RNsStfqzGTik7FfE+fDX9wU rz7tBRdrJYz6rW1jV7rKUrB/Pn/2iRIa9rO5Zs9z91igkHrsFpDsVjH/USPWePhq aD6pKnN+KcSSNmshyY3eZK8gy9rK2nXxTIMh+UZOb2/9HNTv8epoc4tl5VOxPnUk dTxyL94MJc4ZWp3UGsTLxF8mNuTQDM0Lxu5GUwokDNVipicKP1lg/Air2OQY31ys Yj0rdofcP5FYLQxJCWnLNqcHoZO8JYlJi5+vggD0gx10hZ3Y7pStCmv0ao9EOubv gjyoLekZUV/HyEBeB0GHXX4QPMuhWrs8Ylw1RS1hR/9kNiv8eCY= -----END CERTIFICATE-----Generated at Tue Dec 16 23:13:40 2025 by rpki-client