This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: Hv6141KBDKGJqpKSUn6C3DsSeSW3rVPe3DVZsjN+ZIc= Subject key identifier: 0A:56:DC:2A:97:F0:0C:E4:25:F2:72:12:AB:39:B5:81:16:2D:D1:FC Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 255390A4312DC79729A4EA31EEDACFE5A884C979 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0150 Signing time: Tue 02 Dec 2025 05:20:52 +0000 Manifest this update: Tue 02 Dec 2025 05:15:52 +0000 Manifest next update: Fri 05 Dec 2025 09:47:52 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: veiu36IG9fL2wofW68j1lvxcPwf5fhMtOju4YE+jsZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:53:90:a4:31:2d:c7:97:29:a4:ea:31:ee:da:cf:e5:a8:84:c9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Dec 2 05:15:52 2025 GMT Not After : Dec 5 09:47:52 2025 GMT Subject: CN=0A56DC2A97F00CE425F27212AB39B581162DD1FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:ff:ff:9b:93:33:20:b1:3b:23:42:94:a2: 84:94:08:92:46:21:fa:c0:39:29:2e:e1:4b:13:f5: b3:f6:7e:d7:b8:b1:6a:fe:be:db:ca:da:23:db:30: 46:f8:63:56:a9:ab:95:9a:d9:e4:29:30:5a:9e:f6: 76:ec:f6:3a:28:71:75:f1:12:53:7c:31:26:7b:5f: 1c:4d:d1:f7:f8:c6:21:3c:03:88:16:13:85:64:2a: 6b:b6:98:ae:55:6f:1b:20:82:16:0c:4f:3b:f3:48: 0d:3c:1d:6a:9e:15:74:23:d1:64:69:70:3b:1f:78: 4b:40:4e:67:16:b3:3d:ba:9d:95:8f:7b:d4:1e:29: 5b:c7:ec:34:a8:e2:cf:c5:61:b0:33:d0:89:77:1f: be:1f:85:06:11:af:ea:a7:1d:92:d8:00:2a:b2:04: a4:9a:47:6c:8b:ee:66:51:09:ad:da:f8:44:27:4f: 8e:6f:a7:72:b9:31:30:87:7c:de:12:e0:07:ef:f4: 05:2f:e4:13:c5:ed:68:fd:7c:48:c6:11:2d:a0:51: 2b:5d:8c:5f:0a:d2:26:29:be:55:fe:ee:96:df:78: ae:4b:e6:76:fd:54:0e:00:85:e5:83:05:c7:bf:77: bb:10:3d:59:94:ea:7e:a5:09:88:b2:30:ca:70:ba: 44:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:56:DC:2A:97:F0:0C:E4:25:F2:72:12:AB:39:B5:81:16:2D:D1:FC X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fe:bf:4a:48:42:f0:ff:32:aa:59:50:ed:97:d5:61:95:07: 8e:a9:23:9d:e5:e2:d8:fc:10:e2:5c:d3:09:56:39:7a:a4:59: 6f:89:12:4d:ae:50:bc:ab:f1:60:f0:72:a5:3d:77:8b:b6:8c: 16:0f:54:ec:8f:12:14:db:bc:40:27:76:a7:84:16:7a:36:1f: 0a:18:99:5b:0e:77:41:9b:9e:e2:fe:c1:1b:ab:df:8f:f0:97: 5d:34:c7:c2:0d:d0:d1:14:5f:44:88:4d:e6:74:df:32:13:b9: 94:fa:2c:97:7e:17:bc:76:e8:c5:50:72:fd:31:52:2d:bd:04: 82:c2:b6:f3:2c:b8:d4:fd:05:20:c2:01:3c:1a:1c:e7:55:78: 22:18:bc:5e:5b:d5:7a:c1:81:70:e8:18:8b:52:81:63:54:d2: e5:e3:8a:8d:9a:5f:f3:53:a4:da:4c:40:28:a5:57:d2:b5:66: 4c:ff:5f:ac:f0:f6:e5:00:66:4a:77:54:b8:c9:e0:6a:7d:9f: ef:e0:85:30:8d:b3:9d:1a:13:30:b4:05:fa:ed:1f:31:f7:35: 08:6e:4c:e3:aa:1b:55:a7:58:26:e3:1e:c5:f5:cf:f0:2c:23: 60:d9:e9:ef:47:7c:c3:cd:f7:41:50:31:a3:29:10:ae:5b:ca: ed:ef:8e:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVOQpDEtx5cppOox7trP5aiEyXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTEyMDIwNTE1NTJaFw0yNTEyMDUwOTQ3NTJaMDMxMTAvBgNV BAMTKDBBNTZEQzJBOTdGMDBDRTQyNUYyNzIxMkFCMzlCNTgxMTYyREQxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbf//m5MzILE7I0KUooSUCJJG IfrAOSku4UsT9bP2fte4sWr+vtvK2iPbMEb4Y1apq5Wa2eQpMFqe9nbs9joocXXx ElN8MSZ7XxxN0ff4xiE8A4gWE4VkKmu2mK5VbxsgghYMTzvzSA08HWqeFXQj0WRp cDsfeEtATmcWsz26nZWPe9QeKVvH7DSo4s/FYbAz0Il3H74fhQYRr+qnHZLYACqy BKSaR2yL7mZRCa3a+EQnT45vp3K5MTCHfN4S4Afv9AUv5BPF7Wj9fEjGES2gUStd jF8K0iYpvlX+7pbfeK5L5nb9VA4AheWDBce/d7sQPVmU6n6lCYiyMMpwukSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClbcKpfwDOQl8nISqzm1gRYt0fwwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj+v0pIQvD/MqpZUO2X1WGVB46pI53l4tj8 EOJc0wlWOXqkWW+JEk2uULyr8WDwcqU9d4u2jBYPVOyPEhTbvEAndqeEFno2HwoY mVsOd0GbnuL+wRur34/wl100x8IN0NEUX0SITeZ03zITuZT6LJd+F7x26MVQcv0x Ui29BILCtvMsuNT9BSDCATwaHOdVeCIYvF5b1XrBgXDoGItSgWNU0uXjio2aX/NT pNpMQCilV9K1Zkz/X6zw9uUAZkp3VLjJ4Gp9n+/ghTCNs50aEzC0BfrtHzH3NQhu TOOqG1WnWCbjHsX1z/AsI2DZ6e9HfMPN90FQMaMpEK5byu3vjsc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:12 2025 by rpki-client