This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: LH9UAtG+X/W8F8ujWsdweA/1xideUTaZZ1sYneV9rgQ= Subject key identifier: 59:2B:8F:EA:26:B6:44:86:FF:D5:D6:12:D1:DF:C8:5D:22:89:63:E0 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 4784910F164CCEDB4C984F51EB59530CEE40204C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0157 Signing time: Wed 17 Dec 2025 15:40:51 +0000 Manifest this update: Wed 17 Dec 2025 15:35:51 +0000 Manifest next update: Sat 20 Dec 2025 16:18:51 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: xaADAa3RZ7jwWezo10iRw3wWDzp5wZdTsUAoiTySpOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:84:91:0f:16:4c:ce:db:4c:98:4f:51:eb:59:53:0c:ee:40:20:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Dec 17 15:35:51 2025 GMT Not After : Dec 20 16:18:51 2025 GMT Subject: CN=592B8FEA26B64486FFD5D612D1DFC85D228963E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:07:41:5f:66:95:20:a8:0b:8a:21:d7:56: e7:df:c6:a5:c8:81:ee:5f:72:1d:5b:47:50:55:c0: e6:c3:89:39:a2:ea:fd:f8:b6:9a:3b:07:16:14:41: 04:6f:51:02:48:e6:95:de:2c:c4:7b:b0:77:91:31: 14:1b:9e:35:51:93:d9:f1:0d:3f:36:2d:02:33:b3: 38:c0:c5:ee:d6:88:0e:0f:1d:9a:54:48:85:13:09: 18:8f:42:ba:7d:eb:74:1d:08:74:3a:f9:fa:55:d5: ef:96:bc:bd:cd:cc:fc:11:06:c9:62:fc:5c:db:d2: 07:e3:3a:0d:da:88:41:99:9c:20:63:e6:5a:a6:23: 86:59:48:57:81:6a:5b:ef:05:5c:43:9e:57:69:82: 28:27:53:7c:3d:25:49:be:b4:6f:14:db:8b:4f:08: 34:99:77:3f:fb:ed:40:bc:c8:98:93:12:75:e4:5e: e4:b8:ff:9b:8f:30:5f:60:ba:42:37:4f:e4:4e:e6: cc:43:8b:c0:92:97:2f:7b:d9:ac:78:3a:f9:b2:b4: 78:38:a4:c2:70:8b:d0:3b:b6:de:d2:91:04:fe:82: 6d:90:1a:b4:55:b3:94:03:10:1a:e6:40:5c:e0:d7: 2c:df:27:27:c9:68:1a:c0:03:a4:7c:44:46:b0:08: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:8F:EA:26:B6:44:86:FF:D5:D6:12:D1:DF:C8:5D:22:89:63:E0 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:67:f5:97:e7:c9:7b:50:2a:1a:6b:57:dd:89:1c:8a:1b:4e: d4:9f:f0:60:e4:73:c5:a1:a1:06:3d:c3:d1:9c:61:dc:20:7b: db:da:f7:01:72:52:88:9a:bb:dc:c2:49:79:03:4d:b5:5e:6e: 61:b2:02:dd:76:0b:e7:f6:09:b9:2b:a0:bb:65:56:1a:0a:3b: 35:ac:5f:a2:5b:e4:e5:64:1e:b9:64:e4:c1:c6:af:d8:dc:64: 59:e4:bd:92:0b:d2:cf:d0:49:33:5f:6d:b5:b5:f4:9c:12:2d: e9:4e:03:8e:d2:22:81:a5:d5:51:9d:e4:bc:b4:99:18:06:98: 1f:9a:36:f7:ad:36:24:a5:16:f0:3c:bc:74:fa:a6:6b:e4:34: 4b:00:f4:30:7d:a7:09:de:ee:58:56:60:5f:23:ee:15:cb:cd: e3:22:f5:94:b7:b2:b1:04:0d:e9:cc:31:b4:1b:1f:a0:55:97: 85:ce:82:e4:1c:0f:75:fd:d1:5f:e0:b6:9f:e2:23:e5:31:80: 1d:e1:16:22:30:6f:b6:61:3a:be:5e:b7:45:5b:4e:2c:55:30: bb:a4:f0:17:4e:4d:c0:e8:fc:44:47:9c:43:94:b8:2f:13:3f: 11:38:d8:e4:15:0b:ad:ed:e0:80:02:23:8a:ff:39:b1:d5:a3: 9c:6e:9a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4SRDxZMzttMmE9R61lTDO5AIEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTEyMTcxNTM1NTFaFw0yNTEyMjAxNjE4NTFaMDMxMTAvBgNV BAMTKDU5MkI4RkVBMjZCNjQ0ODZGRkQ1RDYxMkQxREZDODVEMjI4OTYzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3gdBX2aVIKgLiiHXVuffxqXI ge5fch1bR1BVwObDiTmi6v34tpo7BxYUQQRvUQJI5pXeLMR7sHeRMRQbnjVRk9nx DT82LQIzszjAxe7WiA4PHZpUSIUTCRiPQrp963QdCHQ6+fpV1e+WvL3NzPwRBsli /Fzb0gfjOg3aiEGZnCBj5lqmI4ZZSFeBalvvBVxDnldpgignU3w9JUm+tG8U24tP CDSZdz/77UC8yJiTEnXkXuS4/5uPMF9gukI3T+RO5sxDi8CSly972ax4OvmytHg4 pMJwi9A7tt7SkQT+gm2QGrRVs5QDEBrmQFzg1yzfJyfJaBrAA6R8REawCMcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSuP6ia2RIb/1dYS0d/IXSKJY+AwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFn9ZfnyXtQKhprV92JHIobTtSf8GDkc8Wh oQY9w9GcYdwge9va9wFyUoiau9zCSXkDTbVebmGyAt12C+f2CbkroLtlVhoKOzWs X6Jb5OVkHrlk5MHGr9jcZFnkvZIL0s/QSTNfbbW19JwSLelOA47SIoGl1VGd5Ly0 mRgGmB+aNvetNiSlFvA8vHT6pmvkNEsA9DB9pwne7lhWYF8j7hXLzeMi9ZS3srEE DenMMbQbH6BVl4XOguQcD3X90V/gtp/iI+UxgB3hFiIwb7ZhOr5et0VbTixVMLuk 8BdOTcDo/ERHnEOUuC8TPxE42OQVC63t4IACI4r/ObHVo5xumsE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:12 2025 by rpki-client