This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: Fzc7snavtYjNNKzevmQUX0z0an7CtBLyN3kM+o4L0Cw= Subject key identifier: AE:A6:84:1C:12:5F:EE:7E:DE:52:E8:D0:B6:92:EE:52:40:F0:68:40 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 40FEC8B86771565A757124B870362280A54147A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 0131 Signing time: Mon 15 Dec 2025 19:20:39 +0000 Manifest this update: Mon 15 Dec 2025 19:15:39 +0000 Manifest next update: Fri 19 Dec 2025 01:16:39 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: Wjyu+osxlJcVxIs3QBebc3KDYwIOLVUCPACxbZyqKAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 01:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fe:c8:b8:67:71:56:5a:75:71:24:b8:70:36:22:80:a5:41:47:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Dec 15 19:15:39 2025 GMT Not After : Dec 19 01:16:39 2025 GMT Subject: CN=AEA6841C125FEE7EDE52E8D0B692EE5240F06840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:f5:be:e1:89:63:53:6b:b6:ca:c1:a7:ef: f1:48:c3:1a:53:d7:8d:8a:b3:e6:dd:67:41:e9:93: 92:dd:05:b2:4d:58:b0:c3:2e:ee:3d:0d:8d:87:1a: 25:a3:08:91:5d:52:1d:2e:33:fa:2e:8e:ec:88:08: 53:45:f3:a2:e1:7e:52:f8:6f:0e:9f:38:19:92:b3: 32:54:97:27:5c:da:a6:04:fd:16:03:69:59:d9:28: 98:07:8f:98:ed:e2:d7:a8:f4:71:5e:94:3a:48:88: d1:ad:cb:01:87:cd:c0:76:5e:37:84:ad:56:7e:b2: 25:02:cf:d1:e5:c5:b2:8e:a9:6d:96:f4:a6:39:cf: ac:0f:27:b4:22:21:5a:a2:3a:45:ea:2c:ce:ce:87: 63:6a:10:98:29:58:e5:11:18:69:c0:46:1a:49:c9: a5:32:6b:fe:65:5e:d6:f9:c0:04:af:ea:c9:26:4d: 32:16:65:50:d5:08:ed:ba:12:70:f9:8a:36:9a:bb: ff:42:fc:ae:84:06:04:e2:56:da:ba:49:2b:99:0f: 3d:77:ff:b1:86:29:10:6c:cd:00:0c:2e:61:d2:e3: ad:a0:81:3f:12:b8:3f:d3:86:6a:83:cc:7c:41:53: 40:50:bf:84:15:0a:d0:47:4e:51:85:44:b1:9d:84: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:84:1C:12:5F:EE:7E:DE:52:E8:D0:B6:92:EE:52:40:F0:68:40 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a3:19:24:3c:ba:1e:f9:d9:9b:ff:c5:ef:ef:1c:3c:ef:1a: fd:8e:bd:f2:b8:9c:46:8f:e8:eb:85:d1:95:0b:4a:10:ab:61: 5b:d3:e1:81:36:c3:e6:bd:2e:57:8b:02:51:57:91:5b:7d:83: 76:aa:0d:47:9d:38:72:81:4b:8e:a5:14:ef:f6:f7:cf:86:ae: 13:01:c1:27:87:5e:7e:1f:0b:74:81:b4:b2:42:90:9e:58:79: d0:bb:81:f4:0b:ac:61:c5:d0:f2:0b:44:fb:e0:20:70:f3:e3: 8a:c5:10:55:d0:c2:ca:97:04:8e:3b:5b:bd:92:ae:f9:03:62: 5b:16:72:0f:d3:a2:cf:52:77:72:b8:e6:55:f5:ec:1c:2f:6d: 71:5a:b5:59:1a:0a:36:a1:66:2c:b7:bd:88:2e:a1:c5:c1:ee: 07:99:a5:72:91:f6:0b:56:27:7a:fd:3d:72:62:a3:33:0d:98: 6d:61:95:e1:a6:f5:c5:a4:db:eb:23:67:57:45:d6:1f:71:d0: ea:ae:cd:d3:04:91:a6:3b:12:f7:f6:7e:28:f6:41:87:07:d2: 37:85:43:48:f8:4f:5c:9a:48:62:60:0f:5c:94:5f:37:48:37: ba:7e:5c:63:c6:19:b6:98:e7:50:61:c3:21:c8:64:a4:35:d5: c9:20:49:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQP7IuGdxVlp1cSS4cDYigKVBR6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTEyMTUxOTE1MzlaFw0yNTEyMTkwMTE2MzlaMDMxMTAvBgNV BAMTKEFFQTY4NDFDMTI1RkVFN0VERTUyRThEMEI2OTJFRTUyNDBGMDY4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgPW+4YljU2u2ysGn7/FIwxpT 142Ks+bdZ0Hpk5LdBbJNWLDDLu49DY2HGiWjCJFdUh0uM/oujuyICFNF86LhflL4 bw6fOBmSszJUlydc2qYE/RYDaVnZKJgHj5jt4teo9HFelDpIiNGtywGHzcB2XjeE rVZ+siUCz9HlxbKOqW2W9KY5z6wPJ7QiIVqiOkXqLM7Oh2NqEJgpWOURGGnARhpJ yaUya/5lXtb5wASv6skmTTIWZVDVCO26EnD5ijaau/9C/K6EBgTiVtq6SSuZDz13 /7GGKRBszQAMLmHS462ggT8SuD/ThmqDzHxBU0BQv4QVCtBHTlGFRLGdhEGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqaEHBJf7n7eUujQtpLuUkDwaEAwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqjGSQ8uh752Zv/xe/vHDzvGv2OvfK4nEaP 6OuF0ZULShCrYVvT4YE2w+a9LleLAlFXkVt9g3aqDUedOHKBS46lFO/298+GrhMB wSeHXn4fC3SBtLJCkJ5YedC7gfQLrGHF0PILRPvgIHDz44rFEFXQwsqXBI47W72S rvkDYlsWcg/Tos9Sd3K45lX17BwvbXFatVkaCjahZiy3vYguocXB7geZpXKR9gtW J3r9PXJiozMNmG1hleGm9cWk2+sjZ1dF1h9x0OquzdMEkaY7Evf2fij2QYcH0jeF Q0j4T1yaSGJgD1yUXzdIN7p+XGPGGbaY51BhwyHIZKQ11ckgSUM= -----END CERTIFICATE-----Generated at Tue Dec 16 04:35:45 2025 by rpki-client