This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: my47h8/Kv8sv5w9zOiFiq0pFtN1jvH2b+xjpf1hmw60= Subject key identifier: E6:18:2E:04:D5:B6:69:19:DA:DB:10:D9:F1:82:BE:A6:11:2A:DF:7E Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 46697613D118BADBD07FFE6FB3CEDE9447AD5A98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: B0 Signing time: Sat 20 Dec 2025 12:52:03 +0000 Manifest this update: Sat 20 Dec 2025 12:47:03 +0000 Manifest next update: Tue 23 Dec 2025 22:51:03 +0000 Files and hashes: 1: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: fNBkD/KeVDqK4lsP0D7CeFWYPQqbreQ34VEqwX1iQQk=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 22:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:69:76:13:d1:18:ba:db:d0:7f:fe:6f:b3:ce:de:94:47:ad:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Dec 20 12:47:03 2025 GMT Not After : Dec 23 22:51:03 2025 GMT Subject: CN=E6182E04D5B66919DADB10D9F182BEA6112ADF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:60:16:22:99:45:5d:a6:ac:10:d6:39:9a: 36:40:bd:8d:3e:a8:68:3e:a9:28:3e:d5:9d:32:4b: 4c:77:a6:8b:23:84:b8:2a:7c:02:68:bd:40:d5:3d: af:46:44:d0:d3:c7:8c:e9:4a:d8:46:06:be:16:67: 3e:0b:ad:4d:83:e9:cc:da:bc:a8:1d:74:0e:f5:76: 2f:0a:0d:a3:a1:87:05:1b:9c:c2:34:eb:c7:44:68: e8:2d:e1:34:be:68:1f:05:64:40:1b:0b:0c:b9:3f: ab:5b:4b:78:42:54:01:ec:43:b2:80:47:4b:46:8c: b9:fd:e8:20:49:3a:e7:fa:48:98:af:fe:b1:a5:8e: d4:b6:6d:67:c7:29:f2:23:57:36:02:a1:9d:83:dd: 02:b2:56:c2:22:54:e1:65:75:1b:b2:f1:ad:1b:d6: 06:71:a0:b0:82:1e:8c:e2:4d:dc:e4:52:0f:f7:bd: 13:1d:f1:2f:34:fc:05:19:4d:2f:f5:98:1e:ba:51: 79:14:4b:ca:b4:e1:25:36:e8:5a:23:f0:d5:a0:a6: a7:f6:48:6f:c0:38:ce:c1:ce:c9:13:7e:0b:98:90: ef:c8:0d:9e:ee:bd:3c:55:ea:29:0c:f9:99:98:d4: f1:54:5f:c1:cc:b8:f2:75:df:71:35:17:5a:db:85: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:18:2E:04:D5:B6:69:19:DA:DB:10:D9:F1:82:BE:A6:11:2A:DF:7E X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:42:c7:d7:21:cc:68:45:db:6a:81:6c:44:a7:8c:1e:0a: ee:29:10:b3:7c:c1:6e:05:06:b5:af:83:c8:86:13:1e:aa:88: c7:cf:25:01:bd:cd:8d:53:9d:a7:bf:21:1c:ea:e0:2a:a7:31: cf:0a:5d:d1:d7:5e:a6:90:2f:75:60:dd:5f:1d:da:1e:f0:4d: be:19:a3:34:7c:81:b9:f9:1b:58:85:1e:86:a5:87:04:d8:a9: 6f:3d:62:2b:63:4c:70:09:36:b0:f0:71:17:30:99:b3:1f:85: 9f:b0:a3:b3:12:d4:f5:0a:74:43:44:fb:8a:99:1f:40:a3:fe: c2:c0:de:44:79:a8:c1:83:b9:94:21:45:f5:f8:f6:cf:ee:49: 09:a0:30:39:47:00:7c:25:dd:1f:4a:5b:d7:e1:be:01:e7:54: 88:4a:d6:0f:2e:61:19:bf:5d:55:30:8b:ec:88:ca:59:cc:8d: c6:97:41:73:8b:72:c2:df:6f:26:c6:d5:36:87:88:32:79:71: 16:17:d2:16:b5:51:aa:35:f8:03:da:d1:8d:ca:22:37:56:3a: 92:60:d5:44:1a:0d:0f:e5:95:f3:25:46:f7:32:b1:05:ff:3e: df:90:84:65:ef:37:83:28:f9:5c:5f:3b:1c:24:17:ad:8b:53: ca:e3:58:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURml2E9EYutvQf/5vs87elEetWpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTEyMjAxMjQ3MDNaFw0yNTEyMjMyMjUxMDNaMDMxMTAvBgNV BAMTKEU2MTgyRTA0RDVCNjY5MTlEQURCMTBEOUYxODJCRUE2MTEyQURGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14mAWIplFXaasENY5mjZAvY0+ qGg+qSg+1Z0yS0x3posjhLgqfAJovUDVPa9GRNDTx4zpSthGBr4WZz4LrU2D6cza vKgddA71di8KDaOhhwUbnMI068dEaOgt4TS+aB8FZEAbCwy5P6tbS3hCVAHsQ7KA R0tGjLn96CBJOuf6SJiv/rGljtS2bWfHKfIjVzYCoZ2D3QKyVsIiVOFldRuy8a0b 1gZxoLCCHoziTdzkUg/3vRMd8S80/AUZTS/1mB66UXkUS8q04SU26Foj8NWgpqf2 SG/AOM7BzskTfguYkO/IDZ7uvTxV6ikM+ZmY1PFUX8HMuPJ133E1F1rbhVpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hguBNW2aRna2xDZ8YK+phEq334wHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy8QsfXIcxoRdtqgWxEp4weCu4pELN8wW4F BrWvg8iGEx6qiMfPJQG9zY1Tnae/IRzq4CqnMc8KXdHXXqaQL3Vg3V8d2h7wTb4Z ozR8gbn5G1iFHoalhwTYqW89YitjTHAJNrDwcRcwmbMfhZ+wo7MS1PUKdENE+4qZ H0Cj/sLA3kR5qMGDuZQhRfX49s/uSQmgMDlHAHwl3R9KW9fhvgHnVIhK1g8uYRm/ XVUwi+yIylnMjcaXQXOLcsLfbybG1TaHiDJ5cRYX0ha1Uao1+APa0Y3KIjdWOpJg 1UQaDQ/llfMlRvcysQX/Pt+QhGXvN4Mo+VxfOxwkF62LU8rjWL4= -----END CERTIFICATE-----Generated at Mon Dec 22 10:41:03 2025 by rpki-client