This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: caYcmsU79R/37JsqNcuPgClP02psqSEtU4aNDbruhVQ= Subject key identifier: AE:CB:AA:52:5D:24:CE:A8:A1:B0:26:11:2B:77:95:7E:6B:A3:D1:7D Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 1C58AD31D3FDF3789FDF5FAAEA7BE1846496017A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: D7 Signing time: Wed 17 Dec 2025 07:11:13 +0000 Manifest this update: Wed 17 Dec 2025 07:06:13 +0000 Manifest next update: Sat 20 Dec 2025 15:48:13 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: hiofdoti3OB8JQYblnQEUF1nBi9WCAGSOnziL0I+Vf4=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:58:ad:31:d3:fd:f3:78:9f:df:5f:aa:ea:7b:e1:84:64:96:01:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Dec 17 07:06:13 2025 GMT Not After : Dec 20 15:48:13 2025 GMT Subject: CN=AECBAA525D24CEA8A1B026112B77957E6BA3D17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:16:2b:da:7b:e0:d5:13:9a:9e:d6:b8:16: d8:c5:21:62:0c:fd:e1:57:19:65:3c:60:83:fd:09: 40:d9:47:3e:cd:12:1a:88:ac:00:e5:10:2f:60:84: be:57:57:54:9b:6d:70:f7:6d:62:7b:69:85:ff:34: 20:88:b0:08:4f:6e:0a:b4:e1:63:a6:6e:fe:ff:a3: 29:0e:6d:40:b6:96:fc:83:ad:ba:e7:ce:59:5a:94: 22:9a:2b:ef:e7:58:71:3a:da:bd:e0:12:a2:56:85: 72:bc:8f:24:36:cc:2d:9c:06:c0:17:04:bf:3a:1b: 2f:45:f6:cb:79:ae:be:f2:69:a6:3f:3d:c9:6e:9d: d2:76:97:99:58:0d:66:f8:3d:bb:22:3c:98:48:c4: 99:e3:1d:48:0d:14:c8:fd:dd:c4:23:55:f3:72:9c: e0:73:fb:04:f2:23:3b:75:1d:f6:9d:cd:47:03:fc: cc:e3:24:25:0d:92:34:6d:cc:ed:51:b9:58:85:84: 21:57:c2:00:32:c7:c4:a5:56:69:b7:4a:9d:cb:3c: 96:de:0d:c3:2f:c4:e3:d0:fd:6c:c1:d5:de:9f:28: 2c:b9:a3:6f:74:00:51:b7:18:eb:1f:d2:52:70:92: 39:fa:ee:d6:d4:69:1d:d8:b8:db:81:2a:f0:84:b8: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CB:AA:52:5D:24:CE:A8:A1:B0:26:11:2B:77:95:7E:6B:A3:D1:7D X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0b:91:b9:d5:a2:97:70:a3:8e:4e:8f:21:a5:69:62:11:16: a0:1d:3c:d0:89:1b:8e:f2:63:cc:6f:4e:85:35:b0:e7:57:fa: 6d:cd:24:d9:5d:3f:4f:2c:98:ab:3c:c3:1e:a1:83:8d:9b:c0: c5:01:30:4a:11:15:46:33:5b:b0:e8:b6:ee:c7:5e:77:0d:ea: c1:49:19:f4:14:84:2a:1b:85:a8:ca:5a:b8:b2:84:78:e8:4d: a8:c5:a6:34:57:56:d3:f7:c2:bc:f9:3c:fe:cb:b6:3c:cd:7f: 55:92:fb:2b:54:e8:82:14:8c:f5:4a:2c:6e:5a:54:3e:87:5f: 27:c3:f6:0e:45:7b:43:af:13:21:72:6b:65:e0:a2:90:a0:de: ce:2d:f9:92:a9:a6:d1:f1:b7:2d:c3:ba:64:42:c1:41:c4:b4: 34:4c:5d:95:fb:09:6f:cd:0e:81:a3:90:c1:df:5e:ce:06:f5: fb:fc:fe:b4:a4:89:3b:85:c2:5f:18:40:ac:51:52:82:47:cf: 47:a0:cc:06:5c:0f:b7:d8:4a:4b:ab:d5:cb:f9:40:2b:49:9a: c6:8c:e0:8d:46:bd:16:c5:13:16:86:62:dd:68:d8:5b:1a:fc: fe:83:b8:30:f6:90:11:c7:f1:c7:30:b4:f9:82:01:9b:d4:c2: 53:2d:a3:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFitMdP983if31+q6nvhhGSWAXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTEyMTcwNzA2MTNaFw0yNTEyMjAxNTQ4MTNaMDMxMTAvBgNV BAMTKEFFQ0JBQTUyNUQyNENFQThBMUIwMjYxMTJCNzc5NTdFNkJBM0QxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60BYr2nvg1ROanta4FtjFIWIM /eFXGWU8YIP9CUDZRz7NEhqIrADlEC9ghL5XV1SbbXD3bWJ7aYX/NCCIsAhPbgq0 4WOmbv7/oykObUC2lvyDrbrnzllalCKaK+/nWHE62r3gEqJWhXK8jyQ2zC2cBsAX BL86Gy9F9st5rr7yaaY/PclundJ2l5lYDWb4PbsiPJhIxJnjHUgNFMj93cQjVfNy nOBz+wTyIzt1HfadzUcD/MzjJCUNkjRtzO1RuViFhCFXwgAyx8SlVmm3Sp3LPJbe DcMvxOPQ/WzB1d6fKCy5o290AFG3GOsf0lJwkjn67tbUaR3YuNuBKvCEuAhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrsuqUl0kzqihsCYRK3eVfmuj0X0wHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkLkbnVopdwo45OjyGlaWIRFqAdPNCJG47y Y8xvToU1sOdX+m3NJNldP08smKs8wx6hg42bwMUBMEoRFUYzW7Dotu7HXncN6sFJ GfQUhCobhajKWriyhHjoTajFpjRXVtP3wrz5PP7LtjzNf1WS+ytU6IIUjPVKLG5a VD6HXyfD9g5Fe0OvEyFya2XgopCg3s4t+ZKpptHxty3DumRCwUHEtDRMXZX7CW/N DoGjkMHfXs4G9fv8/rSkiTuFwl8YQKxRUoJHz0egzAZcD7fYSkur1cv5QCtJmsaM 4I1GvRbFExaGYt1o2Fsa/P6DuDD2kBHH8ccwtPmCAZvUwlMto70= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:15 2025 by rpki-client