This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: 0WtVWYxmBMLNHdwNNSIkOUx/gNQoVGK5zRj2AxGgxsA= Subject key identifier: 65:C5:B1:7A:2A:0A:2F:F3:A4:2A:66:25:96:AA:B0:9A:0C:9D:20:17 Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 509C7EA1D97ADE196C91810DF97F51737FACFCE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: F4 Signing time: Wed 24 Dec 2025 10:01:49 +0000 Manifest this update: Wed 24 Dec 2025 09:56:49 +0000 Manifest next update: Sat 27 Dec 2025 13:36:49 +0000 Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 2: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: zfdcMZz46hhYBJrE+pdZ8UsACOg/BxR0bmD4/9NE2zI=) 3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9c:7e:a1:d9:7a:de:19:6c:91:81:0d:f9:7f:51:73:7f:ac:fc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Dec 24 09:56:49 2025 GMT Not After : Dec 27 13:36:49 2025 GMT Subject: CN=65C5B17A2A0A2FF3A42A662596AAB09A0C9D2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:f1:b1:1f:69:7b:11:d9:26:f9:fc:f8:c1: 39:e0:69:92:dc:16:fa:b8:c3:13:1b:90:e9:93:82: e1:85:1b:54:b5:50:ae:3c:e7:09:eb:8b:36:ff:a2: 93:d5:a8:10:6f:b9:c0:da:97:0f:d3:c5:12:33:1a: bf:1b:dd:24:51:30:1d:4f:3e:f0:f2:51:f5:10:15: 64:25:49:f8:da:b3:9e:b1:5d:d7:2d:97:85:13:f1: c1:d2:7e:b1:d0:6a:be:2a:7d:d5:3c:20:05:39:6a: 7e:ee:b2:04:91:00:ca:67:0d:c9:8b:c8:7f:56:a2: ce:55:db:4a:b0:a9:a5:4c:f8:a4:9a:e3:4b:88:65: d0:f2:16:3b:28:d7:6b:74:7e:a6:94:ca:ee:3d:c4: 1f:46:30:c5:0b:72:58:62:23:b5:4f:93:60:77:12: 14:1e:1c:ac:0b:7f:07:9e:ae:7f:87:5d:e8:f6:55: e3:9b:d0:f6:a9:50:42:39:9a:cb:f4:c1:65:00:a7: 9a:30:e3:7d:5f:7e:a8:e2:0b:f8:fd:7c:ed:76:9b: 9f:dd:81:81:97:fb:43:da:51:4c:db:06:4d:02:81: 55:77:93:56:eb:57:68:49:67:8f:aa:2b:cd:41:eb: c7:4a:e1:a4:0a:c5:23:c7:97:c5:ec:52:da:73:2e: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:B1:7A:2A:0A:2F:F3:A4:2A:66:25:96:AA:B0:9A:0C:9D:20:17 X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:50:0f:17:c8:2c:74:33:1b:1a:64:e7:20:66:41:92:9d: 60:fa:bf:9a:ae:1d:5a:1e:a2:88:1d:11:3b:cd:80:9f:fd:d0: 24:27:eb:0b:b7:b4:ba:f7:bd:29:5d:27:da:10:39:02:01:d5: fc:f8:4d:8d:cc:8a:ee:62:2e:98:39:a4:47:01:64:2e:04:a8: 44:27:2b:4f:8d:80:c1:3d:57:93:9a:0b:57:c9:f4:61:c7:fb: d5:3b:26:40:2e:ec:be:bf:0b:4b:cc:e4:a2:e1:22:39:f8:b1: cd:5f:75:9a:ef:21:06:52:cb:a6:3a:06:69:4a:08:dd:e9:e9: 58:cc:c2:cb:92:8f:6c:40:5f:c9:fd:26:26:50:c4:f5:3b:d9: 9c:73:f4:be:34:60:61:47:50:98:9b:1e:bb:bb:84:a2:b5:28: 42:c1:15:3f:8a:b6:b5:2d:20:11:2a:28:51:b6:fc:78:99:15: e3:56:c6:9d:dc:fc:61:b5:f8:52:fc:c1:80:84:c9:11:81:68: bb:09:44:52:a2:dd:cd:bc:b4:62:95:90:58:76:14:6f:5b:2a: 6f:10:98:b1:3a:9f:84:84:4d:f1:05:82:14:ee:cd:66:24:75: 5c:50:93:4f:c8:c9:ef:09:fa:8a:7a:05:7a:9b:e2:67:7f:e1: a7:b6:8a:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJx+odl63hlskYEN+X9Rc3+s/OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTEyMjQwOTU2NDlaFw0yNTEyMjcxMzM2NDlaMDMxMTAvBgNV BAMTKDY1QzVCMTdBMkEwQTJGRjNBNDJBNjYyNTk2QUFCMDlBMEM5RDIwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjPGxH2l7Edkm+fz4wTngaZLc Fvq4wxMbkOmTguGFG1S1UK485wnrizb/opPVqBBvucDalw/TxRIzGr8b3SRRMB1P PvDyUfUQFWQlSfjas56xXdctl4UT8cHSfrHQar4qfdU8IAU5an7usgSRAMpnDcmL yH9Wos5V20qwqaVM+KSa40uIZdDyFjso12t0fqaUyu49xB9GMMULclhiI7VPk2B3 EhQeHKwLfweern+HXej2VeOb0PapUEI5msv0wWUAp5ow431ffqjiC/j9fO12m5/d gYGX+0PaUUzbBk0CgVV3k1brV2hJZ4+qK81B68dK4aQKxSPHl8XsUtpzLjiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcWxeioKL/OkKmYllqqwmgydIBcwHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdQUA8XyCx0MxsaZOcgZkGSnWD6v5quHVoe oogdETvNgJ/90CQn6wu3tLr3vSldJ9oQOQIB1fz4TY3Miu5iLpg5pEcBZC4EqEQn K0+NgME9V5OaC1fJ9GHH+9U7JkAu7L6/C0vM5KLhIjn4sc1fdZrvIQZSy6Y6BmlK CN3p6VjMwsuSj2xAX8n9JiZQxPU72Zxz9L40YGFHUJibHru7hKK1KELBFT+KtrUt IBEqKFG2/HiZFeNWxp3c/GG1+FL8wYCEyRGBaLsJRFKi3c28tGKVkFh2FG9bKm8Q mLE6n4SETfEFghTuzWYkdVxQk0/Iye8J+op6BXqb4md/4ae2ih0= -----END CERTIFICATE-----Generated at Thu Dec 25 06:57:25 2025 by rpki-client