This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: g27Qle8V3sDjeCL2oZbBW8bTZNGLoMHI9oeHFLb+sPQ= Subject key identifier: 1A:BE:07:BE:9B:89:54:85:FD:34:63:2E:B9:B4:A7:2A:0F:8E:B0:4C Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 24A8A4DF7704D8E3E2DD3B5E271B7AE124BAF9A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 08:43:23 +0000 Manifest this update: Thu 18 Dec 2025 08:38:23 +0000 Manifest next update: Sun 21 Dec 2025 15:24:23 +0000 Files and hashes: 1: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: S2TdVhL+EPkdzGQeO5J69shVMzEuNXt5YgsRNU8ce0o=) 2: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a8:a4:df:77:04:d8:e3:e2:dd:3b:5e:27:1b:7a:e1:24:ba:f9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Dec 18 08:38:23 2025 GMT Not After : Dec 21 15:24:23 2025 GMT Subject: CN=1ABE07BE9B895485FD34632EB9B4A72A0F8EB04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:f9:b2:3a:15:ce:6e:41:9c:e9:1c:4a:c3: 13:f1:22:4c:d3:fc:d3:6c:ce:80:01:48:e9:54:41: eb:ac:32:7b:0a:76:76:ec:56:22:9b:9b:22:a0:ff: 28:31:14:e6:1b:5b:a8:6d:62:43:a9:37:7f:6f:44: 71:21:f2:f1:84:d9:8d:d1:f0:f1:fc:71:c5:e4:c5: 48:8e:91:e5:61:fa:a2:49:53:ad:00:57:90:4b:f7: ef:14:65:5e:e3:ac:0f:1f:bf:d7:14:f4:d8:4a:c9: 63:e6:ee:17:a0:65:7d:01:36:fe:23:53:45:8f:31: 41:c2:b3:5b:f8:f7:7d:bd:3e:bd:ce:59:f7:e7:4c: f9:1d:ae:0d:9c:af:db:ce:80:43:9d:26:c0:57:f9: 24:e3:69:ef:05:61:17:f2:cb:f6:d0:b8:d5:25:af: 7a:ca:d1:ca:d4:8c:da:9f:a5:08:1e:35:30:b6:f0: 5e:3b:8d:28:3a:31:4d:28:13:a4:99:fe:55:6e:05: cd:4e:18:cc:33:e0:54:f1:f4:df:80:65:a4:cc:28: 06:7d:26:9f:33:9b:a2:84:bb:95:66:38:12:e1:32: 4d:9e:e7:49:33:30:b7:e8:60:47:bf:f1:95:2a:64: 5c:60:44:30:20:56:03:08:9d:71:a8:14:79:0d:c9: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:07:BE:9B:89:54:85:FD:34:63:2E:B9:B4:A7:2A:0F:8E:B0:4C X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bb:42:f1:dd:c1:47:9a:d4:a1:c1:e2:9d:3d:34:5a:0a:9f: c6:9d:e6:77:3d:35:76:b2:56:85:7c:90:c2:95:77:6c:0b:fe: f3:8f:c8:2e:0e:c7:29:86:84:5c:5a:e4:d5:63:d1:82:a0:cc: b9:0a:db:5e:30:26:0a:2b:48:99:0f:e8:8d:ec:b9:7b:e3:11: 7a:f4:e4:70:be:29:79:ba:49:23:77:34:23:6c:d2:58:54:03: 06:95:d7:d3:87:1a:79:d8:da:41:3d:c6:b7:ac:83:a1:9b:45: 0b:ca:65:46:e0:b6:f3:37:3f:e8:3a:9d:39:73:6b:da:5f:23: 72:69:63:1d:38:38:14:28:8d:7e:20:a1:ab:2c:dc:5d:8e:07: 2d:87:81:13:a5:21:24:fa:a9:23:12:25:db:3e:ef:2c:dc:96: ec:82:20:6c:8e:0f:c4:d3:be:24:33:fc:cb:51:7a:2c:de:ee: 8e:a3:52:0c:7c:18:42:dc:77:1c:68:9b:13:a3:5b:af:b5:09: 01:52:cb:3f:43:1b:b3:f2:6e:b7:e4:61:7b:e5:ae:da:4b:18: 8f:c0:54:d5:4f:0a:ff:95:ae:1d:51:6a:02:30:03:2e:19:2c: 7d:48:83:47:5d:d3:1a:6e:e6:2a:f9:f1:60:ec:39:d6:af:8a: 45:2a:ce:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKik33cE2OPi3TteJxt64SS6+aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTEyMTgwODM4MjNaFw0yNTEyMjExNTI0MjNaMDMxMTAvBgNV BAMTKDFBQkUwN0JFOUI4OTU0ODVGRDM0NjMyRUI5QjRBNzJBMEY4RUIwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4vmyOhXObkGc6RxKwxPxIkzT /NNszoABSOlUQeusMnsKdnbsViKbmyKg/ygxFOYbW6htYkOpN39vRHEh8vGE2Y3R 8PH8ccXkxUiOkeVh+qJJU60AV5BL9+8UZV7jrA8fv9cU9NhKyWPm7hegZX0BNv4j U0WPMUHCs1v49329Pr3OWffnTPkdrg2cr9vOgEOdJsBX+STjae8FYRfyy/bQuNUl r3rK0crUjNqfpQgeNTC28F47jSg6MU0oE6SZ/lVuBc1OGMwz4FTx9N+AZaTMKAZ9 Jp8zm6KEu5VmOBLhMk2e50kzMLfoYEe/8ZUqZFxgRDAgVgMInXGoFHkNyZqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGr4HvpuJVIX9NGMuubSnKg+OsEwwHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF27QvHdwUea1KHB4p09NFoKn8ad5nc9NXay VoV8kMKVd2wL/vOPyC4OxymGhFxa5NVj0YKgzLkK214wJgorSJkP6I3suXvjEXr0 5HC+KXm6SSN3NCNs0lhUAwaV19OHGnnY2kE9xresg6GbRQvKZUbgtvM3P+g6nTlz a9pfI3JpYx04OBQojX4goass3F2OBy2HgROlIST6qSMSJds+7yzcluyCIGyOD8TT viQz/MtReize7o6jUgx8GELcdxxomxOjW6+1CQFSyz9DG7PybrfkYXvlrtpLGI/A VNVPCv+Vrh1RagIwAy4ZLH1Ig0dd0xpu5ir58WDsOdavikUqzks= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:32 2025 by rpki-client