This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: OcG9FcwsTH+oAoozq8TxlT66ew9Xcjb5m1IO5gLyf38= Subject key identifier: 88:7B:8C:78:1A:2C:D9:65:8F:16:B9:83:58:E0:23:E0:BC:4D:8E:65 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 4701265505B652BBBCD39A8EA5830DC6B74FBFF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 028C Signing time: Sat 20 Dec 2025 00:12:58 +0000 Manifest this update: Sat 20 Dec 2025 00:07:58 +0000 Manifest next update: Tue 23 Dec 2025 07:20:58 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) 3: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: 9VfHN3d/dcdNEaiw0Wxr6s7um+CUyMi8VCw9O6YdIwU=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 07:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:01:26:55:05:b6:52:bb:bc:d3:9a:8e:a5:83:0d:c6:b7:4f:bf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Dec 20 00:07:58 2025 GMT Not After : Dec 23 07:20:58 2025 GMT Subject: CN=887B8C781A2CD9658F16B98358E023E0BC4D8E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:af:72:42:f5:c5:74:9e:19:cc:f3:9a:8f: 0d:07:23:a0:f8:e5:7d:ee:98:b2:9a:aa:66:91:dd: 22:c8:7d:b7:77:07:a7:39:49:2e:ef:42:10:41:00: ef:fb:36:18:c2:29:62:84:ff:97:29:43:3b:32:21: f4:a6:65:bf:ff:23:0a:96:2f:7b:55:02:bd:1c:c1: b5:02:47:66:c9:3a:14:c4:5f:af:6a:c1:a9:47:5c: 1f:ad:7f:29:62:32:b7:6a:11:f6:3f:99:d4:03:fb: a7:63:0e:8b:71:81:29:8f:f2:d1:cc:5b:59:97:61: c6:aa:3b:a6:93:02:d4:2a:9e:33:b9:92:a8:58:65: 0b:34:99:10:75:9d:5b:67:b7:df:16:b2:6a:45:76: 33:ee:8e:3b:71:3e:1a:e6:7c:45:3a:e3:da:6a:ea: a7:c2:3c:0d:69:91:7d:41:d2:05:0c:d1:11:ea:c5: 62:9d:e9:b4:23:8d:94:27:a5:c9:ed:15:16:d4:86: 2a:e2:90:cc:0a:68:17:a1:52:bd:9f:88:3e:44:02: d5:f8:14:8f:3b:ad:fa:53:88:77:d0:e0:d3:80:03: c1:2b:a8:76:15:72:20:00:85:52:e9:92:33:3b:c2: 5d:18:92:d4:5f:cb:5b:9c:45:9c:3f:0e:79:26:2b: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7B:8C:78:1A:2C:D9:65:8F:16:B9:83:58:E0:23:E0:BC:4D:8E:65 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:1a:8a:6f:f3:e6:b5:04:db:f4:0b:88:b1:ef:35:4d:3e: 46:58:2e:0a:c6:c8:8d:fd:0c:b3:49:f1:6d:43:27:e7:90:68: 2e:55:23:8f:bb:50:dd:70:57:9a:e0:a8:8b:06:e4:5d:4d:64: ab:29:5e:ec:dd:c3:d6:ff:b7:6f:70:91:04:76:6f:a5:fa:d6: 35:52:bf:2c:85:c6:fd:01:1a:61:84:4c:b0:32:41:1f:13:3e: 8a:6c:a2:fc:1f:05:3d:b6:dd:11:c9:d2:6b:d7:67:53:8d:d4: fc:d9:ef:72:ee:03:a3:51:60:cb:63:5a:4c:04:bf:2c:35:86: 36:10:83:88:28:65:b0:ab:c4:62:15:51:f2:65:ab:86:f5:30: ba:36:65:0f:06:d2:c4:e6:b0:98:c5:fa:3f:a2:5e:82:93:7c: 53:8c:cb:40:f5:82:14:2d:41:14:7a:92:68:db:1f:9e:97:42: d7:c7:5d:91:8a:ce:7d:37:c5:79:34:68:d3:39:ce:f3:dc:0b: 93:32:2f:ff:54:7e:3d:17:b8:62:f0:28:b4:98:b2:ba:8e:6b: 56:0c:93:8e:7b:d3:72:ef:81:0d:79:11:20:32:07:6a:2e:5c: 59:fa:af:42:0d:7b:e8:e2:bb:8d:8d:fc:7d:f1:ba:97:25:3e: 99:a9:b7:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwEmVQW2Uru805qOpYMNxrdPv/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTEyMjAwMDA3NThaFw0yNTEyMjMwNzIwNThaMDMxMTAvBgNV BAMTKDg4N0I4Qzc4MUEyQ0Q5NjU4RjE2Qjk4MzU4RTAyM0UwQkM0RDhFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbq9yQvXFdJ4ZzPOajw0HI6D4 5X3umLKaqmaR3SLIfbd3B6c5SS7vQhBBAO/7NhjCKWKE/5cpQzsyIfSmZb//IwqW L3tVAr0cwbUCR2bJOhTEX69qwalHXB+tfyliMrdqEfY/mdQD+6djDotxgSmP8tHM W1mXYcaqO6aTAtQqnjO5kqhYZQs0mRB1nVtnt98WsmpFdjPujjtxPhrmfEU649pq 6qfCPA1pkX1B0gUM0RHqxWKd6bQjjZQnpcntFRbUhirikMwKaBehUr2fiD5EAtX4 FI87rfpTiHfQ4NOAA8ErqHYVciAAhVLpkjM7wl0YktRfy1ucRZw/DnkmK6/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHuMeBos2WWPFrmDWOAj4LxNjmUwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo9Gopv8+a1BNv0C4ix7zVNPkZYLgrGyI39 DLNJ8W1DJ+eQaC5VI4+7UN1wV5rgqIsG5F1NZKspXuzdw9b/t29wkQR2b6X61jVS vyyFxv0BGmGETLAyQR8TPopsovwfBT223RHJ0mvXZ1ON1PzZ73LuA6NRYMtjWkwE vyw1hjYQg4goZbCrxGIVUfJlq4b1MLo2ZQ8G0sTmsJjF+j+iXoKTfFOMy0D1ghQt QRR6kmjbH56XQtfHXZGKzn03xXk0aNM5zvPcC5MyL/9Ufj0XuGLwKLSYsrqOa1YM k45703LvgQ15ESAyB2ouXFn6r0INe+jiu42N/H3xupclPpmpt3A= -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:04 2025 by rpki-client