This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: AYXNTXBl5VAoMwpru6pul07qSi+jc3w0sjM9TG/BDDs= Subject key identifier: 39:77:F6:4B:FF:32:CD:FC:38:E2:E2:01:44:4D:76:4B:16:7E:6B:31 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 0FCB5B8B94E8A0C7092A5422EA9EBB550B45552E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: FB Signing time: Wed 17 Dec 2025 21:21:36 +0000 Manifest this update: Wed 17 Dec 2025 21:16:36 +0000 Manifest next update: Sat 20 Dec 2025 23:03:36 +0000 Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) 2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: 8l9UDg5z9N2ip7I+or14Kb4iVLQeTkmCZD5GVBmoMMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cb:5b:8b:94:e8:a0:c7:09:2a:54:22:ea:9e:bb:55:0b:45:55:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Dec 17 21:16:36 2025 GMT Not After : Dec 20 23:03:36 2025 GMT Subject: CN=3977F64BFF32CDFC38E2E201444D764B167E6B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:73:2a:f4:f8:8a:f6:6a:0b:df:3d:90:61: 4a:45:86:58:08:84:6a:85:a2:43:93:e2:d4:4d:69: 62:64:5d:3f:de:3f:a0:b8:fb:aa:a6:a9:d5:bd:93: 17:0f:00:32:32:54:0a:a9:90:fb:9a:20:ef:64:a3: 78:07:76:04:f0:ef:1a:21:84:4f:86:79:c9:55:a6: 2a:80:d2:4a:7c:fe:36:d2:fc:91:de:dc:fd:34:52: da:b4:da:c0:47:59:ca:3f:25:fa:2d:a5:0e:af:28: d8:7b:a4:d8:2a:37:8f:b9:f6:55:88:3e:d2:d1:07: 62:ae:c0:02:ab:d9:bd:5b:5d:a2:ef:c8:61:47:5f: 95:59:cd:7f:8d:c9:4a:8f:d1:c8:82:0b:0b:9f:5f: d9:59:b7:0f:cf:23:08:89:6c:db:3e:2c:04:ea:0f: 38:04:17:e1:1d:22:8e:05:55:06:a0:f0:86:09:c2: e3:5a:b4:17:a5:16:04:32:7f:aa:69:39:f9:9e:91: c0:3e:d0:d0:bb:b5:c2:46:66:4a:3e:97:e4:15:ff: e3:87:8f:45:9e:2e:be:ba:1e:ad:4f:ac:a8:d6:57: b3:dc:c9:72:e2:5d:2b:ca:32:a8:fd:94:59:40:e1: 98:86:9b:d0:95:bf:54:24:ee:57:67:5f:b3:c6:8b: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:F6:4B:FF:32:CD:FC:38:E2:E2:01:44:4D:76:4B:16:7E:6B:31 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:00:e8:5f:54:07:3e:27:3b:c8:ae:d5:57:bb:db:6b:1b: d8:84:63:42:86:b6:fd:41:18:56:5c:5e:a2:33:87:f8:4a:7f: 2c:52:3e:41:13:dd:ec:97:2f:8c:f3:4b:71:69:25:c6:2e:ef: c0:ad:ee:65:bb:16:a0:d2:df:ef:e7:34:c7:1f:96:5d:4e:a0: 7e:c8:b6:1c:03:3c:20:f0:75:db:03:f1:eb:78:61:fc:c0:ee: 98:1e:67:a5:8b:d8:0b:f4:f8:1b:97:af:ae:df:d4:48:4c:70: 6f:b4:da:a9:f4:9f:4c:63:28:5a:a4:0a:e4:f6:2e:c7:fd:04: eb:fa:ae:de:cd:de:9d:59:7c:cc:83:d8:31:9b:92:a0:22:0a: a8:78:8e:ed:09:df:c4:a7:51:85:15:26:75:d7:c6:1f:3a:31: 37:32:3d:fe:62:b6:87:0e:9f:6a:42:8a:63:00:9a:42:af:42: 32:0f:4f:97:ab:ac:63:cc:9b:16:3f:0c:30:60:ab:67:07:7f: 5a:39:c9:e5:76:af:cb:38:c8:57:1c:9c:fa:73:0b:61:2c:55: 86:78:ae:60:a9:16:4f:f0:db:08:12:81:4a:d7:8b:2e:0b:0b: 0c:33:e5:98:32:b6:7d:c2:52:dd:13:53:8c:8f:fc:7d:7c:8a: fa:9d:21:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8tbi5TooMcJKlQi6p67VQtFVS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTEyMTcyMTE2MzZaFw0yNTEyMjAyMzAzMzZaMDMxMTAvBgNV BAMTKDM5NzdGNjRCRkYzMkNERkMzOEUyRTIwMTQ0NEQ3NjRCMTY3RTZCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RXMq9PiK9moL3z2QYUpFhlgI hGqFokOT4tRNaWJkXT/eP6C4+6qmqdW9kxcPADIyVAqpkPuaIO9ko3gHdgTw7xoh hE+GeclVpiqA0kp8/jbS/JHe3P00Utq02sBHWco/JfotpQ6vKNh7pNgqN4+59lWI PtLRB2KuwAKr2b1bXaLvyGFHX5VZzX+NyUqP0ciCCwufX9lZtw/PIwiJbNs+LATq DzgEF+EdIo4FVQag8IYJwuNatBelFgQyf6ppOfmekcA+0NC7tcJGZko+l+QV/+OH j0WeLr66Hq1PrKjWV7PcyXLiXSvKMqj9lFlA4ZiGm9CVv1Qk7ldnX7PGiw4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXf2S/8yzfw44uIBRE12SxZ+azEwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDiAOhfVAc+JzvIrtVXu9trG9iEY0KGtv1B GFZcXqIzh/hKfyxSPkET3eyXL4zzS3FpJcYu78Ct7mW7FqDS3+/nNMcfll1OoH7I thwDPCDwddsD8et4YfzA7pgeZ6WL2Av0+BuXr67f1EhMcG+02qn0n0xjKFqkCuT2 Lsf9BOv6rt7N3p1ZfMyD2DGbkqAiCqh4ju0J38SnUYUVJnXXxh86MTcyPf5itocO n2pCimMAmkKvQjIPT5errGPMmxY/DDBgq2cHf1o5yeV2r8s4yFccnPpzC2EsVYZ4 rmCpFk/w2wgSgUrXiy4LCwwz5Zgytn3CUt0TU4yP/H18ivqdIWk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:05 2025 by rpki-client