This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: j4pOW8uJ7Vd+2isuNT8JiMmdJJFs6nA/gYc+1K9eFwA= Subject key identifier: 70:4C:20:8D:B9:54:E6:FB:1E:B0:95:D2:7B:39:7D:B5:7C:48:79:CF Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 15DA3F3D80587155B255E6DD706EE179F0F63AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 021F Signing time: Tue 23 Dec 2025 19:03:36 +0000 Manifest this update: Tue 23 Dec 2025 18:58:36 +0000 Manifest next update: Sat 27 Dec 2025 03:33:36 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: xFSrFB7eMYfahLBriObw032VVt+cXlCsb/KfgCvZYNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:da:3f:3d:80:58:71:55:b2:55:e6:dd:70:6e:e1:79:f0:f6:3a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Dec 23 18:58:36 2025 GMT Not After : Dec 27 03:33:36 2025 GMT Subject: CN=704C208DB954E6FB1EB095D27B397DB57C4879CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:11:7a:6b:f8:b3:3f:29:6d:fe:a9:83:f6: 62:6a:c9:7a:d6:20:98:ad:97:a6:d8:a7:d3:dd:79: 9f:76:c2:18:82:6d:fd:5c:80:a2:7a:49:c8:d3:72: 77:e3:51:42:42:8f:e7:07:07:23:a8:1c:65:dc:1b: d8:a2:dc:39:31:4a:5f:83:e6:05:c0:fb:6e:44:11: ed:c3:32:d5:84:9b:6b:2e:e4:b9:72:e5:81:ce:d2: 20:9c:42:5e:76:d3:9c:91:71:fa:85:0a:17:a7:6d: 1a:10:12:5d:66:82:d7:1e:4d:88:6a:47:da:ef:cc: 22:fc:65:81:55:f9:a9:ed:f8:f9:2c:45:f9:fb:33: c9:65:6d:a4:96:f2:42:c3:30:17:ca:e4:3a:43:f0: c7:e4:64:b0:dc:95:8b:6e:46:e3:44:52:91:7b:a6: a9:c0:fe:32:55:fa:23:b2:1e:68:dc:01:a2:3f:8e: 96:cb:06:cc:45:c8:8a:eb:54:d6:1d:da:af:8a:c6: d5:fa:ac:26:16:2f:a0:62:23:db:f8:a0:55:ab:59: ea:64:58:44:47:85:5a:60:50:fb:5d:06:c5:01:f5: 78:da:5b:00:8e:7f:1b:0f:fd:8b:ad:0e:dc:a0:b6: c3:0c:a1:35:95:9c:eb:8e:6d:fa:01:61:ee:eb:ad: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:20:8D:B9:54:E6:FB:1E:B0:95:D2:7B:39:7D:B5:7C:48:79:CF X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:96:16:97:6e:d4:4b:77:49:c7:9d:79:a1:9f:ad:58:59:d5: d2:ff:ca:54:01:d5:56:33:3e:88:7f:ee:c1:c3:98:75:dc:f2: 17:76:a1:db:b6:6d:9a:66:67:03:2a:48:8f:56:fd:97:f1:0d: 30:1e:3e:e0:48:81:7f:7e:df:b6:4b:84:2b:57:18:ae:0b:af: 06:20:51:30:86:fb:e9:c6:a2:21:0d:4b:26:da:a7:80:a8:a5: 4b:7f:a3:43:2e:43:97:b0:92:54:9c:1d:4e:c0:c6:7c:86:ed: a6:21:91:93:36:a5:65:ff:cf:98:29:af:b6:94:2e:f2:8a:40: cf:67:00:e8:bd:15:b8:31:d9:e4:8e:6d:72:68:60:02:7d:6b: 76:de:9a:f6:75:90:f7:f6:19:74:61:e3:d3:a2:46:6c:36:cc: 4f:9c:ef:68:ef:ca:d4:dd:81:38:c5:13:98:90:41:be:e7:fd: 36:47:0b:22:d7:de:b3:9e:9c:a4:cc:bf:b8:35:f8:5e:b7:8f: 8e:1f:b5:be:bd:cb:17:98:ba:99:9f:83:c8:3e:89:65:64:18: 20:71:4e:ab:31:18:48:51:3f:2d:2d:e3:7f:20:b6:34:5e:fd: ad:e8:e7:11:fb:b6:c6:78:1d:45:31:17:64:34:33:5b:a5:a2: 7e:c5:1c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdo/PYBYcVWyVebdcG7hefD2OtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTEyMjMxODU4MzZaFw0yNTEyMjcwMzMzMzZaMDMxMTAvBgNV BAMTKDcwNEMyMDhEQjk1NEU2RkIxRUIwOTVEMjdCMzk3REI1N0M0ODc5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPBF6a/izPylt/qmD9mJqyXrW IJitl6bYp9PdeZ92whiCbf1cgKJ6ScjTcnfjUUJCj+cHByOoHGXcG9ii3DkxSl+D 5gXA+25EEe3DMtWEm2su5Lly5YHO0iCcQl5205yRcfqFChenbRoQEl1mgtceTYhq R9rvzCL8ZYFV+ant+PksRfn7M8llbaSW8kLDMBfK5DpD8MfkZLDclYtuRuNEUpF7 pqnA/jJV+iOyHmjcAaI/jpbLBsxFyIrrVNYd2q+KxtX6rCYWL6BiI9v4oFWrWepk WERHhVpgUPtdBsUB9XjaWwCOfxsP/YutDtygtsMMoTWVnOuObfoBYe7rrXlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEwgjblU5vsesJXSezl9tXxIec8wHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKWFpdu1Et3ScedeaGfrVhZ1dL/ylQB1VYz Poh/7sHDmHXc8hd2odu2bZpmZwMqSI9W/ZfxDTAePuBIgX9+37ZLhCtXGK4LrwYg UTCG++nGoiENSybap4CopUt/o0MuQ5ewklScHU7AxnyG7aYhkZM2pWX/z5gpr7aU LvKKQM9nAOi9Fbgx2eSObXJoYAJ9a3bemvZ1kPf2GXRh49OiRmw2zE+c72jvytTd gTjFE5iQQb7n/TZHCyLX3rOenKTMv7g1+F63j44ftb69yxeYupmfg8g+iWVkGCBx TqsxGEhRPy0t438gtjRe/a3o5xH7tsZ4HUUxF2Q0M1ulon7FHLE= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:37 2025 by rpki-client