This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: LvF62i/1ZGQrydeA3Zyt/Q6CkqCPevYPrxyN3FQZrhw= Subject key identifier: 04:4C:20:4D:C4:1B:E0:F5:AC:75:89:01:0A:DA:DC:A1:1D:D2:5A:FA Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 128B3F8B73465AF4C311FBE2CA61735476B891E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 021F Signing time: Thu 18 Dec 2025 07:30:49 +0000 Manifest this update: Thu 18 Dec 2025 07:25:49 +0000 Manifest next update: Sun 21 Dec 2025 10:53:49 +0000 Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) 2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: HrPehA5kfbp09ZXcbeW9hxPfJxYUE5dur1O1qC9UYCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8b:3f:8b:73:46:5a:f4:c3:11:fb:e2:ca:61:73:54:76:b8:91:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Dec 18 07:25:49 2025 GMT Not After : Dec 21 10:53:49 2025 GMT Subject: CN=044C204DC41BE0F5AC7589010ADADCA11DD25AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:30:55:17:0c:79:a2:26:81:38:4b:4c:50: c7:51:a8:3b:51:cc:c1:77:19:7d:a6:dc:39:f8:97: f5:f2:a8:78:85:e6:5f:2d:6e:43:5c:b8:73:da:18: 1d:cd:ab:36:db:e2:de:23:c3:e4:29:09:75:c3:0b: 72:c6:0b:a9:c3:00:54:39:08:5c:f2:ca:e2:5b:10: 15:af:7d:69:b7:bd:9f:e8:4e:6c:e6:92:89:31:ec: 6d:36:88:e5:3e:5b:37:b2:6e:1a:7a:83:66:fc:f4: 1c:8b:e3:9a:b9:f4:26:4a:f0:93:37:08:a6:ad:c6: 4a:75:fe:21:ed:04:42:6d:63:0c:2e:5a:16:aa:67: 9b:e3:e2:0c:13:de:f7:3c:66:8a:b2:b1:9b:79:21: d6:64:d8:58:fd:5a:64:7f:b0:e8:b2:90:06:5c:df: 41:57:28:4e:20:f0:ed:be:4f:bb:c2:a5:59:15:2c: 21:fd:f1:92:7f:7c:f0:fa:dc:68:23:51:f8:4a:32: c2:9d:bf:a9:cd:4c:1c:10:49:e6:66:eb:b2:f2:71: 82:b4:99:4c:3f:74:14:6d:ac:22:25:1d:8b:1a:bf: 06:64:33:0c:6e:a9:26:2e:64:86:a8:e5:fe:fd:76: a4:f4:3a:00:e7:38:51:b0:33:1a:8f:10:54:22:a3: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:20:4D:C4:1B:E0:F5:AC:75:89:01:0A:DA:DC:A1:1D:D2:5A:FA X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bf:0b:11:f0:42:64:01:00:14:65:0f:62:c3:0e:50:16:9b: 00:f5:ce:a5:06:8b:93:6f:d4:1e:5d:62:c5:ca:72:c5:d5:df: ee:e9:62:52:d3:f6:81:04:cb:3c:5b:46:d8:40:16:e2:bc:5b: d5:53:22:43:d2:67:ce:79:f9:31:cb:df:4e:c9:23:50:c5:bf: 84:86:72:72:ed:a0:bf:3d:a2:f8:96:3e:51:bf:ae:dc:d1:36: 14:ee:dc:37:d5:54:db:1f:21:1c:87:d1:f5:c1:14:16:e3:b3: 86:7f:4a:e0:d8:84:39:d2:e2:e7:29:64:80:e6:58:f6:f5:1e: ec:fe:9a:fa:a1:39:0e:e6:c5:0a:83:38:df:8e:55:bc:2d:8d: c6:6b:3c:e0:14:75:31:37:b2:95:72:79:47:32:e8:6d:9c:62: 2c:37:57:32:09:54:9b:d2:b2:9e:ff:20:fa:02:67:b3:77:77: 98:5c:0f:63:be:c7:47:cc:71:04:83:91:8c:ec:4c:cc:5a:a6: 2d:75:91:e6:78:71:5b:1e:11:52:fa:07:3a:22:81:eb:a5:94: 30:be:26:b8:93:94:0c:54:5a:29:ae:a4:59:21:cf:4c:71:a3: 3e:b9:08:a6:74:71:30:f3:1c:e7:97:71:be:f8:05:32:a7:ce: 4f:2a:94:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEos/i3NGWvTDEfviymFzVHa4kekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTEyMTgwNzI1NDlaFw0yNTEyMjExMDUzNDlaMDMxMTAvBgNV BAMTKDA0NEMyMDREQzQxQkUwRjVBQzc1ODkwMTBBREFEQ0ExMUREMjVBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14zBVFwx5oiaBOEtMUMdRqDtR zMF3GX2m3Dn4l/XyqHiF5l8tbkNcuHPaGB3Nqzbb4t4jw+QpCXXDC3LGC6nDAFQ5 CFzyyuJbEBWvfWm3vZ/oTmzmkokx7G02iOU+Wzeybhp6g2b89ByL45q59CZK8JM3 CKatxkp1/iHtBEJtYwwuWhaqZ5vj4gwT3vc8ZoqysZt5IdZk2Fj9WmR/sOiykAZc 30FXKE4g8O2+T7vCpVkVLCH98ZJ/fPD63GgjUfhKMsKdv6nNTBwQSeZm67LycYK0 mUw/dBRtrCIlHYsavwZkMwxuqSYuZIao5f79dqT0OgDnOFGwMxqPEFQio6HZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBEwgTcQb4PWsdYkBCtrcoR3SWvowHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJe/CxHwQmQBABRlD2LDDlAWmwD1zqUGi5Nv 1B5dYsXKcsXV3+7pYlLT9oEEyzxbRthAFuK8W9VTIkPSZ855+THL307JI1DFv4SG cnLtoL89oviWPlG/rtzRNhTu3DfVVNsfIRyH0fXBFBbjs4Z/SuDYhDnS4ucpZIDm WPb1Huz+mvqhOQ7mxQqDON+OVbwtjcZrPOAUdTE3spVyeUcy6G2cYiw3VzIJVJvS sp7/IPoCZ7N3d5hcD2O+x0fMcQSDkYzsTMxapi11keZ4cVseEVL6BzoigeullDC+ JriTlAxUWimupFkhz0xxoz65CKZ0cTDzHOeXcb74BTKnzk8qlEk= -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:24 2025 by rpki-client