This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft File: 279F9ED4B08F2103C13392D95636C445577A6339.mft (raw, json) Hash identifier: sdBh151XiGVoDCLAbsRirBus0LnB2ZA38ghBnUTA4vU= Subject key identifier: C9:63:A1:7A:3A:35:EB:6B:D4:91:84:3C:1C:CF:9D:A8:FF:BF:2F:5D Authority key identifier: 27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39 Certificate issuer: /CN=279F9ED4B08F2103C13392D95636C445577A6339 Certificate serial: A11638EAFD4845D7FF33612EE768E584927F49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft Manifest number: 012A Signing time: Tue 02 Dec 2025 04:21:36 +0000 Manifest this update: Tue 02 Dec 2025 04:16:36 +0000 Manifest next update: Fri 05 Dec 2025 04:44:36 +0000 Files and hashes: 1: 279F9ED4B08F2103C13392D95636C445577A6339.crl (hash: 9R5wiyqVQC1EVRGBTfpdROeXLNOHeFl3CZHx5Yc1sog=) 2: 3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa (hash: XOWtO2pwbbk94VoX/nt0F9I39CXFH3hsrN66bhkHCdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a1:16:38:ea:fd:48:45:d7:ff:33:61:2e:e7:68:e5:84:92:7f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279F9ED4B08F2103C13392D95636C445577A6339 Validity Not Before: Dec 2 04:16:36 2025 GMT Not After : Dec 5 04:44:36 2025 GMT Subject: CN=C963A17A3A35EB6BD491843C1CCF9DA8FFBF2F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3c:52:ef:c9:95:92:64:b7:46:7b:93:6e:58: 2e:4f:07:c3:0c:cf:8d:72:bb:2a:8c:22:d4:1d:f0: 2e:41:ea:1d:9b:93:f6:9a:d2:5e:ba:ef:de:6c:71: 1f:0d:5c:9f:cf:85:92:8a:61:b0:79:95:49:4e:ea: fb:f5:b9:9d:ae:3e:60:d8:e3:5a:fa:63:02:62:b8: 3f:b7:4b:c0:a0:82:a9:5f:37:93:55:b4:6b:cf:a7: 3d:bd:2e:a8:f9:e6:93:53:b0:99:9a:25:6c:49:3a: 70:5d:b1:5d:92:d7:56:d6:ca:39:00:32:d5:17:28: 63:37:f5:65:90:96:a1:fc:a1:29:12:9b:7a:14:a6: 82:b8:60:0b:55:05:2f:51:df:38:21:09:2a:26:81: a7:59:5c:04:79:6c:8f:1f:13:f2:80:4a:98:10:67: fc:21:50:a6:69:2c:ae:e7:5b:93:18:fb:9d:0e:2a: 8d:8f:d1:5a:86:e4:5c:d7:d5:f1:8e:29:6f:e6:cd: b1:42:d6:68:d2:ed:fa:a2:41:48:09:1d:c9:62:33: 79:fc:bf:51:bd:b4:88:b7:8c:72:a6:90:96:4e:0f: 62:8a:03:8e:b0:51:2b:70:b6:2a:ba:60:47:fb:a7: a8:93:d1:15:8f:60:dd:ab:25:37:e5:f2:6f:a8:ad: bf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:A1:7A:3A:35:EB:6B:D4:91:84:3C:1C:CF:9D:A8:FF:BF:2F:5D X509v3 Authority Key Identifier: keyid:27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:0a:9b:ce:2b:47:ee:da:fd:b8:f1:39:75:95:a2:9f:4d: cb:eb:80:b3:76:76:80:8c:0a:d4:a0:04:b5:b5:b2:28:1e:06: 94:ae:3f:93:37:df:40:43:e8:4c:7e:f6:0d:93:dd:b0:f4:04: a9:98:55:d3:3f:cb:23:87:7d:13:f2:2e:33:fd:26:c7:bb:78: a1:6d:21:6c:56:10:86:77:ef:ef:21:6b:9a:46:f6:75:c2:25: c7:18:d0:45:c8:d8:fc:41:e3:da:61:1d:b4:01:bd:85:29:35: 1a:7f:6b:66:13:d1:a5:7b:8b:f2:65:d0:ad:95:44:b2:6f:2d: 45:a1:56:64:1f:46:b5:62:69:bd:a8:a9:f3:40:58:5e:8d:5e: be:f1:94:b6:0d:e8:1f:d0:70:02:ae:50:39:2f:a5:93:d1:8b: ec:bf:9c:e6:6f:7c:79:b7:5a:92:70:ad:74:1e:07:fc:c1:e7: a0:3c:dc:d1:20:51:65:8c:2f:64:42:3a:d6:b8:22:62:22:94: 63:b3:37:0c:9a:e2:33:22:1d:b3:df:2c:b8:28:7a:44:a6:2b: 16:1e:84:63:4c:7c:92:c7:de:8e:17:64:e9:0f:48:b9:b8:f2: f4:9f:15:d9:7f:93:5b:f7:a0:ab:96:83:e9:29:01:3f:d0:53: 6f:56:df:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKEWOOr9SEXX/zNhLudo5YSSf0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5RjlFRDRCMDhGMjEwM0MxMzM5MkQ5NTYzNkM0NDU1 NzdBNjMzOTAeFw0yNTEyMDIwNDE2MzZaFw0yNTEyMDUwNDQ0MzZaMDMxMTAvBgNV BAMTKEM5NjNBMTdBM0EzNUVCNkJENDkxODQzQzFDQ0Y5REE4RkZCRjJGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxPFLvyZWSZLdGe5NuWC5PB8MM z41yuyqMItQd8C5B6h2bk/aa0l66795scR8NXJ/PhZKKYbB5lUlO6vv1uZ2uPmDY 41r6YwJiuD+3S8CggqlfN5NVtGvPpz29Lqj55pNTsJmaJWxJOnBdsV2S11bWyjkA MtUXKGM39WWQlqH8oSkSm3oUpoK4YAtVBS9R3zghCSomgadZXAR5bI8fE/KASpgQ Z/whUKZpLK7nW5MY+50OKo2P0VqG5FzX1fGOKW/mzbFC1mjS7fqiQUgJHcliM3n8 v1G9tIi3jHKmkJZOD2KKA46wUStwtiq6YEf7p6iT0RWPYN2rJTfl8m+orb+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWOhejo162vUkYQ8HM+dqP+/L10wHwYDVR0j BBgwFoAUJ5+e1LCPIQPBM5LZVjbERVd6YzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMS8yNzlGOUVENEIw OEYyMTAzQzEzMzkyRDk1NjM2QzQ0NTU3N0E2MzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5RjlFRDRCMDhGMjEwM0MxMzM5MkQ5NTYzNkM0NDU1NzdB NjMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzEvMjc5RjlFRDRCMDhGMjEwM0MxMzM5MkQ5NTYzNkM0 NDU1NzdBNjMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjlCpvOK0fu2v248Tl1laKfTcvrgLN2doCM CtSgBLW1sigeBpSuP5M330BD6Ex+9g2T3bD0BKmYVdM/yyOHfRPyLjP9Jse7eKFt IWxWEIZ37+8ha5pG9nXCJccY0EXI2PxB49phHbQBvYUpNRp/a2YT0aV7i/Jl0K2V RLJvLUWhVmQfRrViab2oqfNAWF6NXr7xlLYN6B/QcAKuUDkvpZPRi+y/nOZvfHm3 WpJwrXQeB/zB56A83NEgUWWML2RCOta4ImIilGOzNwya4jMiHbPfLLgoekSmKxYe hGNMfJLH3o4XZOkPSLm48vSfFdl/k1v3oKuWg+kpAT/QU29W32s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:23 2025 by rpki-client