This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: KoNjlkI0mkWJN1SyqFs0Zjso9xMCTxzBvz3lERjCguY= Subject key identifier: DA:21:C4:1F:0D:10:66:BC:DD:0E:33:EF:09:14:62:64:ED:B1:7E:09 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 74DD8BFDE2BD598F1CD2FC1A64F1876875E68CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: E6 Signing time: Wed 17 Dec 2025 23:52:03 +0000 Manifest this update: Wed 17 Dec 2025 23:47:03 +0000 Manifest next update: Sun 21 Dec 2025 06:10:03 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: Ah8OLAQNTt6Hl7iTPvTdlW9b2JU/tbvVyq6bNGjJK7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:8b:fd:e2:bd:59:8f:1c:d2:fc:1a:64:f1:87:68:75:e6:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Dec 17 23:47:03 2025 GMT Not After : Dec 21 06:10:03 2025 GMT Subject: CN=DA21C41F0D1066BCDD0E33EF09146264EDB17E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e7:ac:28:24:d6:44:42:a5:cc:e5:56:b8:92: ef:41:97:f7:78:a5:26:ef:a3:2e:82:1c:75:0d:38: e0:6b:90:51:04:e1:38:72:04:92:07:c2:1a:d7:a2: c8:bc:0c:25:47:e0:b1:94:0a:ce:8b:9e:91:c6:34: 1b:af:eb:8f:57:30:3b:bc:0f:67:74:50:ae:12:fb: 78:25:b3:9d:10:7e:e7:7d:d2:00:10:a9:c6:61:7b: 73:61:f9:c0:9c:24:0b:4d:6e:02:8c:54:28:31:79: b2:97:58:7b:6b:2f:0c:2f:ce:8f:72:f0:88:9e:cd: 51:22:db:01:c1:b3:fe:f9:b5:87:3b:e0:88:5d:ea: 53:1a:31:0b:a7:0b:47:6f:0e:7f:53:b2:ed:1c:74: ba:d7:00:2b:f6:f7:4e:08:0c:bf:25:87:ac:d1:3b: a0:09:7c:7a:22:41:bf:a0:9e:bb:4c:5e:ea:36:1a: 14:18:d2:98:a6:ce:3c:28:87:59:5c:39:97:f8:a7: 03:d9:a2:93:c9:92:0b:55:3d:ac:3e:fb:de:b3:6d: cb:dd:5d:a3:99:32:ad:be:32:aa:18:1e:32:1e:71: 80:c8:ce:eb:cd:df:ae:be:9e:23:ea:06:a4:79:64: 81:22:91:52:74:28:5a:90:7c:7a:ed:e0:c7:0d:52: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:C4:1F:0D:10:66:BC:DD:0E:33:EF:09:14:62:64:ED:B1:7E:09 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:fa:13:e5:25:d2:9f:fe:a0:13:f2:71:fa:8f:cf:16:21: 69:35:f9:53:f4:3b:12:de:23:f1:24:51:08:5c:db:11:89:71: 5c:23:ae:6a:05:1a:29:83:4f:b6:6d:ef:b3:a1:24:a6:ab:9d: cf:ef:30:c1:d5:7d:a6:dc:36:7e:05:b9:27:29:0f:4e:2d:0b: 89:bb:76:7b:d6:ef:9d:c5:32:47:88:92:8a:02:f3:26:19:6a: af:1c:27:7d:aa:17:22:34:42:4d:a7:7a:51:0f:53:41:ac:67: b8:ae:8c:cb:f7:63:dc:cb:4b:ea:d1:58:fd:22:5c:30:79:de: 78:c0:67:01:d6:a7:41:4a:fc:73:e4:04:fc:92:f5:c2:3d:21: 94:7c:cb:b8:37:90:71:7c:2d:ca:18:72:e6:79:ff:f4:17:36: a5:07:7d:f0:50:f8:03:74:d6:53:f6:b1:0e:93:00:a5:66:3d: 0a:8f:05:de:f0:3a:8c:3c:ea:eb:29:d7:53:e2:67:b1:cd:ad: bd:f3:90:62:a5:d1:e3:03:dc:39:b7:32:f9:52:eb:81:39:dd: 77:7c:4c:2f:e6:fb:d0:9e:dd:bb:bc:b5:93:a4:fb:0b:43:d5: fc:da:0f:21:67:bc:cb:0d:13:0b:20:c3:e1:55:7d:30:ea:76: da:c1:b9:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN2L/eK9WY8c0vwaZPGHaHXmjL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTEyMTcyMzQ3MDNaFw0yNTEyMjEwNjEwMDNaMDMxMTAvBgNV BAMTKERBMjFDNDFGMEQxMDY2QkNERDBFMzNFRjA5MTQ2MjY0RURCMTdFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD656woJNZEQqXM5Va4ku9Bl/d4 pSbvoy6CHHUNOOBrkFEE4ThyBJIHwhrXosi8DCVH4LGUCs6LnpHGNBuv649XMDu8 D2d0UK4S+3gls50Qfud90gAQqcZhe3Nh+cCcJAtNbgKMVCgxebKXWHtrLwwvzo9y 8IiezVEi2wHBs/75tYc74Ihd6lMaMQunC0dvDn9Tsu0cdLrXACv2904IDL8lh6zR O6AJfHoiQb+gnrtMXuo2GhQY0pimzjwoh1lcOZf4pwPZopPJkgtVPaw++96zbcvd XaOZMq2+MqoYHjIecYDIzuvN366+niPqBqR5ZIEikVJ0KFqQfHrt4McNUuPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iHEHw0QZrzdDjPvCRRiZO2xfgkwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR0+hPlJdKf/qAT8nH6j88WIWk1+VP0OxLe I/EkUQhc2xGJcVwjrmoFGimDT7Zt77OhJKarnc/vMMHVfabcNn4FuScpD04tC4m7 dnvW753FMkeIkooC8yYZaq8cJ32qFyI0Qk2nelEPU0GsZ7iujMv3Y9zLS+rRWP0i XDB53njAZwHWp0FK/HPkBPyS9cI9IZR8y7g3kHF8LcoYcuZ5//QXNqUHffBQ+AN0 1lP2sQ6TAKVmPQqPBd7wOow86usp11PiZ7HNrb3zkGKl0eMD3Dm3MvlS64E53Xd8 TC/m+9Ce3bu8tZOk+wtD1fzaDyFnvMsNEwsgw+FVfTDqdtrBue8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:43 2025 by rpki-client