This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: e2ZMcSNyGM158vmWcGxa2c4g1YKvpwe/XoZFAxQls8E= Subject key identifier: 76:27:A8:37:D8:1A:5D:D0:5F:8D:40:EA:48:57:CA:0E:41:51:DC:10 Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 73E0485450108F7F7EE2B1105E6CFA50E8437E36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 20 Signing time: Thu 18 Dec 2025 05:51:39 +0000 Manifest this update: Thu 18 Dec 2025 05:46:39 +0000 Manifest next update: Sun 21 Dec 2025 06:40:39 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: 0z/NENZ8IiotpOMkyoNJ+zVxFjNnhRbofzDstPU78nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e0:48:54:50:10:8f:7f:7e:e2:b1:10:5e:6c:fa:50:e8:43:7e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Dec 18 05:46:39 2025 GMT Not After : Dec 21 06:40:39 2025 GMT Subject: CN=7627A837D81A5DD05F8D40EA4857CA0E4151DC10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2c:6f:70:a9:05:ce:cb:a8:1e:44:fe:ff:f7: 56:e3:1c:76:ae:55:83:26:f7:bb:26:70:b6:0e:bb: 0b:ae:8b:8c:cc:ed:e5:bd:4d:f2:9c:cc:68:eb:a8: ff:84:c1:9f:92:68:a2:f7:c0:92:67:00:9f:00:b9: be:e5:42:d8:d5:4d:61:49:7b:a6:e3:4e:c8:81:44: db:9b:45:b3:39:6d:08:a1:e9:36:f0:f7:4f:9e:cd: 6e:c0:04:61:1e:fd:43:13:85:25:29:69:2a:d4:ea: 52:0c:80:2f:69:33:d1:a0:34:31:a6:e2:12:ac:61: 28:9a:35:42:d6:98:e6:b3:21:91:da:1c:f3:0f:08: 15:fc:bd:12:c9:a7:22:cd:a0:de:3b:fb:1b:59:b7: 50:e6:48:aa:73:3a:c1:59:be:ce:31:e7:64:9e:97: e9:a6:71:d3:b6:ad:65:fc:ea:98:f1:d9:bc:fe:56: aa:d1:a8:f3:79:bd:0d:87:27:7a:94:2d:c3:0e:a4: 3b:03:ec:b2:e6:3b:4f:e3:52:13:a1:8d:43:0a:55: f2:b7:42:b4:18:37:be:6d:77:cc:bd:b1:46:cb:d7: 86:cd:90:0d:ba:c4:9c:75:a4:66:f6:fc:4d:a1:c4: f3:c4:d9:0b:5f:12:83:99:c8:52:3b:db:87:a9:f0: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:A8:37:D8:1A:5D:D0:5F:8D:40:EA:48:57:CA:0E:41:51:DC:10 X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:87:75:f0:8a:38:11:49:d7:a8:48:d2:24:61:2e:11:56:1d: d3:c6:af:90:2d:42:c2:fe:15:fe:f2:39:13:5e:7e:3d:c0:0e: a6:18:b5:99:07:8e:f9:46:2d:15:8b:96:ec:ee:b9:9e:cf:ef: 36:0a:ec:b6:b2:3b:80:09:42:b6:2b:31:be:02:89:c5:c2:de: c9:d7:18:3b:16:d2:35:e2:c4:58:33:2c:2c:8d:0c:38:bb:0f: 75:60:f9:a1:95:c7:a6:17:b3:d0:a3:26:f6:e5:b0:f6:f1:8a: 90:50:c0:5a:0a:6f:38:ba:61:c7:60:a5:b2:c7:6f:45:55:10: a4:09:86:9f:e7:a2:c7:b3:a5:12:fc:73:bd:c9:cc:66:5f:84: 12:3d:3f:a1:8f:b7:f3:ba:b7:d0:05:4f:e5:fc:e8:f6:31:b8: 21:ab:11:22:64:63:63:12:e5:5a:0e:df:85:47:2b:fb:b8:32: 25:2c:ab:9e:8d:1d:b1:43:89:6f:c6:39:15:d7:3e:df:c2:7d: 74:f5:60:c5:e9:17:5d:b8:39:df:13:77:ae:59:e6:c1:65:ed: a0:7c:7f:7f:4d:69:a4:25:f2:95:a5:48:91:bc:b1:23:17:e1: 09:5a:fe:6c:2f:5f:9c:42:d2:fd:b1:00:c2:5b:5f:f4:58:aa: 57:d9:84:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+BIVFAQj39+4rEQXmz6UOhDfjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNTEyMTgwNTQ2MzlaFw0yNTEyMjEwNjQwMzlaMDMxMTAvBgNV BAMTKDc2MjdBODM3RDgxQTVERDA1RjhENDBFQTQ4NTdDQTBFNDE1MURDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLG9wqQXOy6geRP7/91bjHHau VYMm97smcLYOuwuui4zM7eW9TfKczGjrqP+EwZ+SaKL3wJJnAJ8Aub7lQtjVTWFJ e6bjTsiBRNubRbM5bQih6Tbw90+ezW7ABGEe/UMThSUpaSrU6lIMgC9pM9GgNDGm 4hKsYSiaNULWmOazIZHaHPMPCBX8vRLJpyLNoN47+xtZt1DmSKpzOsFZvs4x52Se l+mmcdO2rWX86pjx2bz+VqrRqPN5vQ2HJ3qULcMOpDsD7LLmO0/jUhOhjUMKVfK3 QrQYN75td8y9sUbL14bNkA26xJx1pGb2/E2hxPPE2QtfEoOZyFI724ep8LFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdieoN9gaXdBfjUDqSFfKDkFR3BAwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuHdfCKOBFJ16hI0iRhLhFWHdPGr5AtQsL+ Ff7yORNefj3ADqYYtZkHjvlGLRWLluzuuZ7P7zYK7LayO4AJQrYrMb4CicXC3snX GDsW0jXixFgzLCyNDDi7D3Vg+aGVx6YXs9CjJvblsPbxipBQwFoKbzi6YcdgpbLH b0VVEKQJhp/nosezpRL8c73JzGZfhBI9P6GPt/O6t9AFT+X86PYxuCGrESJkY2MS 5VoO34VHK/u4MiUsq56NHbFDiW/GORXXPt/CfXT1YMXpF124Od8Td65Z5sFl7aB8 f39NaaQl8pWlSJG8sSMX4Qla/mwvX5xC0v2xAMJbX/RYqlfZhK0= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:33 2025 by rpki-client