This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: D4KmDeEAIUTwbIyk0ffhXYD9oJilma16d78Jh2r4fxQ= Subject key identifier: E9:75:69:75:D5:68:97:00:6A:B8:37:54:60:E1:81:A1:0D:EC:E9:06 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 6A8CD7725EA947F5525E02E4DEA31D043E1077C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: F3 Signing time: Mon 15 Dec 2025 02:42:26 +0000 Manifest this update: Mon 15 Dec 2025 02:37:26 +0000 Manifest next update: Thu 18 Dec 2025 08:35:26 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: icnFXSIjoTlcSdq4+XOWQwxUf2+jkFvxNIm2UyqdzOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 08:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8c:d7:72:5e:a9:47:f5:52:5e:02:e4:de:a3:1d:04:3e:10:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Dec 15 02:37:26 2025 GMT Not After : Dec 18 08:35:26 2025 GMT Subject: CN=E9756975D56897006AB8375460E181A10DECE906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:a5:1d:e2:4c:1b:24:cc:27:e8:e4:74:33: 35:29:3a:32:a6:18:24:3e:af:b9:9c:c9:b5:d1:77: 8d:45:c8:ea:fc:6b:35:fd:6e:6b:bc:3e:20:03:b3: fa:4d:3b:78:06:bb:36:e0:f8:f7:68:ac:cc:2b:3f: b6:09:28:4d:24:16:ef:fc:1c:ed:d3:2c:52:ee:f0: 10:56:f9:89:e9:ef:6b:32:0e:81:71:a7:e9:95:e2: e9:9c:af:e9:02:82:2d:8c:bd:13:89:e8:b7:a6:e5: 8f:52:6e:a3:db:fd:b2:b5:70:3e:92:2c:1e:4f:34: 6d:b2:6a:bd:da:92:bc:9f:66:bc:cf:8f:1a:ec:e0: e8:d1:e2:28:86:7e:fc:67:5b:43:e7:b0:8c:2d:89: 7e:70:83:24:7b:8d:47:62:3f:e1:f3:69:29:e4:cb: 2c:50:6d:20:57:e9:2e:d0:d2:23:17:ef:6d:fc:98: a7:b0:9d:25:a4:bf:81:4d:58:f0:28:29:4b:63:0c: f7:5c:b6:ba:5e:2e:90:dc:b5:57:2c:67:4b:3a:56: 6c:62:a3:97:15:9d:fc:f5:39:ba:13:96:04:29:a8: 64:3f:2b:83:c8:f5:18:44:aa:a1:2d:aa:eb:7b:ba: 0c:c7:60:65:1e:27:75:61:e5:f6:26:e5:14:f3:9b: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:69:75:D5:68:97:00:6A:B8:37:54:60:E1:81:A1:0D:EC:E9:06 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:1e:30:fd:28:7a:bd:64:f7:80:2f:8e:4d:10:56:1a:d6:e8: e5:98:7e:52:46:59:7a:69:93:dd:a2:3c:0a:55:58:c1:68:4e: 61:34:c6:b6:11:be:a5:35:9b:2a:7e:c8:4b:5d:2b:c9:f8:b4: b7:81:90:d2:f7:55:40:c2:69:9f:5c:9e:2f:59:40:f3:d1:75: a3:61:8a:2b:0a:c3:f8:65:8a:6f:90:69:3d:c8:58:94:3f:10: 4d:b4:07:a4:7a:fa:67:f8:f4:f9:5d:01:36:b9:2b:84:7d:c7: 15:c9:44:f3:0b:ee:83:d2:45:b2:08:68:b9:2c:12:29:00:e0: 59:ee:15:0b:f1:a8:c9:55:c3:70:b3:8e:ca:92:a8:6b:5f:06: dc:cd:7c:96:a2:e2:88:6b:46:fc:fa:01:36:9c:b4:ac:bf:ac: ea:88:6d:ab:ed:99:48:80:3a:c7:b6:66:29:58:1e:74:e1:a8: b2:3a:d7:aa:b2:11:e3:60:21:93:ad:86:35:11:1d:a2:34:5d: 9e:f0:1e:0a:a6:47:8e:f1:18:ce:4a:05:67:70:02:cd:31:0f: 36:18:8f:36:75:9d:39:cc:c8:ac:1a:ac:fb:a2:51:d2:46:01: 39:19:3d:28:38:3d:9e:32:36:14:c0:84:dd:cc:9c:0e:bf:6a: 48:11:03:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaozXcl6pR/VSXgLk3qMdBD4Qd8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTEyMTUwMjM3MjZaFw0yNTEyMTgwODM1MjZaMDMxMTAvBgNV BAMTKEU5NzU2OTc1RDU2ODk3MDA2QUI4Mzc1NDYwRTE4MUExMERFQ0U5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IqUd4kwbJMwn6OR0MzUpOjKm GCQ+r7mcybXRd41FyOr8azX9bmu8PiADs/pNO3gGuzbg+PdorMwrP7YJKE0kFu/8 HO3TLFLu8BBW+Ynp72syDoFxp+mV4umcr+kCgi2MvROJ6Lem5Y9SbqPb/bK1cD6S LB5PNG2yar3akryfZrzPjxrs4OjR4iiGfvxnW0PnsIwtiX5wgyR7jUdiP+HzaSnk yyxQbSBX6S7Q0iMX7238mKewnSWkv4FNWPAoKUtjDPdctrpeLpDctVcsZ0s6Vmxi o5cVnfz1OboTlgQpqGQ/K4PI9RhEqqEtqut7ugzHYGUeJ3Vh5fYm5RTzm6sBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XVpddVolwBquDdUYOGBoQ3s6QYwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQeMP0oer1k94Avjk0QVhrW6OWYflJGWXpp k92iPApVWMFoTmE0xrYRvqU1myp+yEtdK8n4tLeBkNL3VUDCaZ9cni9ZQPPRdaNh iisKw/hlim+QaT3IWJQ/EE20B6R6+mf49PldATa5K4R9xxXJRPML7oPSRbIIaLks EikA4FnuFQvxqMlVw3CzjsqSqGtfBtzNfJai4ohrRvz6ATactKy/rOqIbavtmUiA Ose2ZilYHnThqLI616qyEeNgIZOthjURHaI0XZ7wHgqmR47xGM5KBWdwAs0xDzYY jzZ1nTnMyKwarPuiUdJGATkZPSg4PZ4yNhTAhN3MnA6/akgRA44= -----END CERTIFICATE-----Generated at Tue Dec 16 23:24:16 2025 by rpki-client