This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: pllLU7IPDqbNS05+5SK57GdVFRTCettSHQGGmRYrSpM= Subject key identifier: F2:A1:F8:42:93:B9:B3:31:7C:2F:78:CA:1B:1C:78:93:10:10:8E:67 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 0D1BFE0C95D5E2BBF2A083F420DE1B75AC409A96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: D0 Signing time: Mon 01 Dec 2025 14:51:12 +0000 Manifest this update: Mon 01 Dec 2025 14:46:12 +0000 Manifest next update: Fri 05 Dec 2025 02:45:12 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: nLjomMaqKL/d6RPenHxsGvRLzmPTAR9lNRSOxDuRh7w=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1b:fe:0c:95:d5:e2:bb:f2:a0:83:f4:20:de:1b:75:ac:40:9a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Dec 1 14:46:12 2025 GMT Not After : Dec 5 02:45:12 2025 GMT Subject: CN=F2A1F84293B9B3317C2F78CA1B1C789310108E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:3b:80:d7:9c:3c:6f:b8:b7:d7:e7:a3:d9: 28:40:63:df:13:35:bb:58:98:08:bf:3d:58:ea:01: a0:98:22:d2:c9:c9:3f:32:54:af:f5:ab:74:33:51: 68:43:1d:ac:b9:d4:a3:9f:3c:e8:1d:87:59:3c:4e: dd:18:b4:43:63:14:55:aa:38:20:03:b8:5a:98:1c: dc:ea:80:5b:86:b3:42:d2:64:61:33:b3:6a:7b:c5: c2:53:ea:d2:5c:d6:7f:39:8b:66:83:50:ea:31:0d: 43:fe:0f:7d:e6:70:b5:80:64:62:a4:09:cb:f2:4b: 43:c3:72:b8:3f:9d:a9:7e:ef:a9:e0:d7:e7:f7:23: 45:93:a5:d2:53:1d:86:57:3a:6c:89:a9:0b:9c:ff: a2:99:87:80:3d:3e:f4:b2:21:5a:73:fe:7f:21:e9: aa:28:67:e1:df:07:b0:ed:59:dc:42:d2:a4:ac:35: b2:ef:9e:06:82:14:5d:06:f1:b5:8f:f8:cc:65:ad: 10:86:30:51:c5:1a:f1:30:7d:f6:ed:ec:3a:f8:6d: 9b:01:94:b7:3e:6f:75:86:fc:7f:78:92:4f:1d:09: 12:ff:fc:e0:d3:b1:59:74:7a:64:63:61:e8:a0:a3: 2b:98:f8:4d:0c:8f:54:36:bc:b3:6d:09:c1:23:cd: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:F8:42:93:B9:B3:31:7C:2F:78:CA:1B:1C:78:93:10:10:8E:67 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e4:be:46:b8:7a:5c:97:40:87:5b:c3:b7:17:9e:df:72:c0: 7c:ef:f9:73:e6:3c:4e:0b:02:7d:d5:56:01:38:56:19:be:35: 16:06:49:b1:7a:45:da:ec:f5:f8:fa:c6:16:9d:89:5d:56:09: 63:f8:49:e7:c8:57:05:6b:b5:5b:21:b1:22:5f:ba:4b:78:e5: 10:1f:c6:42:6d:7f:83:1e:9f:da:e5:47:0b:e8:53:9d:be:df: 57:06:b6:e6:5f:08:28:2f:0d:6f:4a:f0:c2:f5:8e:3a:03:ee: 70:fc:ea:ea:8a:03:7f:4b:34:8e:2d:7e:2f:8a:b0:9a:1e:5a: 94:1a:11:67:50:ab:eb:f7:a5:38:c4:b7:aa:05:af:cc:03:52: 71:ba:6a:69:db:2f:77:c8:6d:eb:66:02:42:6e:3e:02:49:71: a6:8c:c7:37:46:b5:16:ab:b0:fb:f3:b2:cb:5c:df:d4:87:c7: ee:0c:91:eb:68:a7:98:c6:3f:a7:14:b1:d1:32:44:05:81:02: d7:7c:40:5a:22:c2:70:51:ab:ce:db:42:47:5f:a3:59:1f:22: 94:1e:12:54:05:eb:4b:be:67:f4:43:60:9e:0e:d3:02:d8:58: a6:43:a4:29:0e:5e:8b:d9:69:d3:33:5c:b9:d0:d8:78:0e:0e: 28:9f:7a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRv+DJXV4rvyoIP0IN4bdaxAmpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTEyMDExNDQ2MTJaFw0yNTEyMDUwMjQ1MTJaMDMxMTAvBgNV BAMTKEYyQTFGODQyOTNCOUIzMzE3QzJGNzhDQTFCMUM3ODkzMTAxMDhFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyzuA15w8b7i31+ej2ShAY98T NbtYmAi/PVjqAaCYItLJyT8yVK/1q3QzUWhDHay51KOfPOgdh1k8Tt0YtENjFFWq OCADuFqYHNzqgFuGs0LSZGEzs2p7xcJT6tJc1n85i2aDUOoxDUP+D33mcLWAZGKk CcvyS0PDcrg/nal+76ng1+f3I0WTpdJTHYZXOmyJqQuc/6KZh4A9PvSyIVpz/n8h 6aooZ+HfB7DtWdxC0qSsNbLvngaCFF0G8bWP+MxlrRCGMFHFGvEwffbt7Dr4bZsB lLc+b3WG/H94kk8dCRL//ODTsVl0emRjYeigoyuY+E0Mj1Q2vLNtCcEjzZbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qH4QpO5szF8L3jKGxx4kxAQjmcwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/kvka4elyXQIdbw7cXnt9ywHzv+XPmPE4L An3VVgE4Vhm+NRYGSbF6Rdrs9fj6xhadiV1WCWP4SefIVwVrtVshsSJfukt45RAf xkJtf4Men9rlRwvoU52+31cGtuZfCCgvDW9K8ML1jjoD7nD86uqKA39LNI4tfi+K sJoeWpQaEWdQq+v3pTjEt6oFr8wDUnG6amnbL3fIbetmAkJuPgJJcaaMxzdGtRar sPvzsstc39SHx+4Mketop5jGP6cUsdEyRAWBAtd8QFoiwnBRq87bQkdfo1kfIpQe ElQF60u+Z/RDYJ4O0wLYWKZDpCkOXovZadMzXLnQ2HgODiifekw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:34 2025 by rpki-client