This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: vbFgFxAqPSpOKEKRFyTY1Rj1nQvl8mHoqILALaeVtpw= Subject key identifier: 37:05:A4:17:8C:F1:6B:90:B5:2C:B6:0C:80:37:6A:3B:7D:AA:DC:BE Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 4ED25E2620EBD7FB245425CAE5972B9F2AF56EF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 0200 Signing time: Tue 23 Dec 2025 09:33:14 +0000 Manifest this update: Tue 23 Dec 2025 09:28:14 +0000 Manifest next update: Fri 26 Dec 2025 20:18:14 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: e0o0LsnF22nNmOOfsuBgpvjYPX+gPTqouwUJkXEy2Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d2:5e:26:20:eb:d7:fb:24:54:25:ca:e5:97:2b:9f:2a:f5:6e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Dec 23 09:28:14 2025 GMT Not After : Dec 26 20:18:14 2025 GMT Subject: CN=3705A4178CF16B90B52CB60C80376A3B7DAADCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:36:fc:5c:18:49:06:d6:1d:89:c7:4d:9f: 88:b1:cf:fe:56:17:7b:9a:39:fb:39:11:b2:a8:b6: b5:ad:a2:58:1c:db:98:81:30:9f:8a:0a:7c:5f:4e: 26:96:7b:dc:08:11:59:55:f1:34:3c:4d:34:c8:8e: 62:f1:00:9d:26:a8:26:ed:61:8e:7a:1d:58:ab:d4: 91:43:93:08:7e:d4:ee:02:16:1c:de:c1:9a:78:f6: 61:f5:85:3e:b3:5d:35:22:77:34:b5:45:03:f1:4b: a7:9b:2e:6e:18:b7:c9:6d:cc:cb:6a:ae:07:ee:28: d9:0f:c1:51:c5:02:01:8c:8f:ec:fc:c0:2e:cf:c3: b6:06:d5:19:f9:f3:0b:05:ee:5e:25:db:7b:e7:ea: de:8f:2e:73:cf:4b:36:eb:9a:0a:bc:07:84:a7:a1: 2b:1e:5f:61:ee:a7:67:f7:39:ef:b8:b0:64:1e:f7: 90:ce:68:79:f7:b0:6e:44:25:03:db:ff:f8:73:8c: 11:f0:8f:59:98:04:c6:5f:94:94:46:74:b5:04:70: c7:f7:32:ff:62:42:30:aa:32:c3:5d:f3:85:82:f6: 50:a4:80:d5:70:a3:83:00:c6:59:92:3a:04:08:ee: b1:7e:34:87:45:a8:c7:93:58:52:79:d0:10:8c:a4: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:05:A4:17:8C:F1:6B:90:B5:2C:B6:0C:80:37:6A:3B:7D:AA:DC:BE X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c0:a6:11:36:1f:5e:1a:58:69:e9:fe:54:57:94:3e:7a:33: 6d:88:7b:33:d1:c6:98:d9:ba:cc:ef:8c:f9:68:5d:f5:55:dd: 91:5d:95:f6:27:98:f3:40:59:34:aa:9a:a7:73:7e:a1:7d:3d: 33:98:5b:20:70:be:e1:7b:3b:25:76:2d:ab:bd:4a:ee:79:c0: 98:81:c1:0a:f6:27:d7:69:17:27:91:61:b3:e0:08:9f:24:9f: 5f:eb:2b:e0:59:05:ea:90:2b:af:1f:19:41:14:0c:39:77:54: e0:ce:60:48:2b:80:fc:0b:9c:98:6f:8a:5d:09:ce:0b:6b:04: c2:38:a9:e4:70:59:1a:cd:90:5c:f0:43:6f:dd:40:b7:cb:99: 13:12:00:11:0e:47:76:21:0b:3a:0a:21:48:a0:1b:99:d4:fa: 4c:6d:f1:75:73:13:66:a9:0e:da:74:b1:4b:de:5b:9d:19:7a: 49:23:9d:f5:1c:d1:09:d2:2c:54:6d:a1:6f:ac:59:47:51:b3: c5:6d:74:6b:78:01:82:ac:62:6d:00:77:cd:68:9d:93:b5:ad: 24:0c:d7:d6:49:be:ac:58:cf:3b:a2:a2:02:5b:70:b3:fa:86: c3:5e:44:b8:3d:13:20:e7:a8:60:4a:0a:59:06:b7:e3:c4:6e: 3e:ff:b2:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtJeJiDr1/skVCXK5Zcrnyr1bvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTEyMjMwOTI4MTRaFw0yNTEyMjYyMDE4MTRaMDMxMTAvBgNV BAMTKDM3MDVBNDE3OENGMTZCOTBCNTJDQjYwQzgwMzc2QTNCN0RBQURDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLTb8XBhJBtYdicdNn4ixz/5W F3uaOfs5EbKotrWtolgc25iBMJ+KCnxfTiaWe9wIEVlV8TQ8TTTIjmLxAJ0mqCbt YY56HVir1JFDkwh+1O4CFhzewZp49mH1hT6zXTUidzS1RQPxS6ebLm4Yt8ltzMtq rgfuKNkPwVHFAgGMj+z8wC7Pw7YG1Rn58wsF7l4l23vn6t6PLnPPSzbrmgq8B4Sn oSseX2Hup2f3Oe+4sGQe95DOaHn3sG5EJQPb//hzjBHwj1mYBMZflJRGdLUEcMf3 Mv9iQjCqMsNd84WC9lCkgNVwo4MAxlmSOgQI7rF+NIdFqMeTWFJ50BCMpKUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwWkF4zxa5C1LLYMgDdqO32q3L4wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvAphE2H14aWGnp/lRXlD56M22IezPRxpjZ uszvjPloXfVV3ZFdlfYnmPNAWTSqmqdzfqF9PTOYWyBwvuF7OyV2Lau9Su55wJiB wQr2J9dpFyeRYbPgCJ8kn1/rK+BZBeqQK68fGUEUDDl3VODOYEgrgPwLnJhvil0J zgtrBMI4qeRwWRrNkFzwQ2/dQLfLmRMSABEOR3YhCzoKIUigG5nU+kxt8XVzE2ap Dtp0sUveW50ZekkjnfUc0QnSLFRtoW+sWUdRs8VtdGt4AYKsYm0Ad81onZO1rSQM 19ZJvqxYzzuiogJbcLP6hsNeRLg9EyDnqGBKClkGt+PEbj7/sjw= -----END CERTIFICATE-----Generated at Thu Dec 25 00:36:36 2025 by rpki-client