This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: EULPw1/hTcrD4ieVoQmvAO20QkWaqjq6M01N81EiSXA= Subject key identifier: 2E:B8:9D:C2:E3:1B:63:F4:3E:A4:99:EE:0A:D5:DB:0A:82:11:35:D7 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 10BD0998C4950406DDC3AE72362302B8726E203F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 012B Signing time: Mon 01 Dec 2025 23:50:39 +0000 Manifest this update: Mon 01 Dec 2025 23:45:39 +0000 Manifest next update: Fri 05 Dec 2025 08:37:39 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: 3hJoJDj1mQtZR7GRBr20oPw4p2CNADU5jrhuhDU8XI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bd:09:98:c4:95:04:06:dd:c3:ae:72:36:23:02:b8:72:6e:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Dec 1 23:45:39 2025 GMT Not After : Dec 5 08:37:39 2025 GMT Subject: CN=2EB89DC2E31B63F43EA499EE0AD5DB0A821135D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bb:cc:b5:d6:5e:16:bb:56:30:5a:0d:64:06: e2:ed:e5:1b:dc:2e:63:cc:7e:d5:67:5d:fa:3b:89: a6:11:2f:ec:b1:df:29:b3:d5:48:d1:56:5c:b6:0d: 51:b0:5e:8b:ff:86:f7:94:f2:a9:dd:5a:85:ea:1d: 22:be:84:fe:36:88:3c:59:bf:f4:14:84:46:9e:ac: 5a:28:af:0a:c2:b4:7b:10:64:40:6a:1a:6c:27:42: 64:b3:77:80:a8:7a:d4:05:54:08:4f:2c:7b:00:1c: ba:eb:1b:9a:a6:40:65:c3:7a:bf:fc:91:a5:ec:a1: a5:28:f5:7f:81:3d:a1:9a:8f:9b:dc:fa:22:ca:fc: 71:ee:73:0d:4d:6a:2d:e6:bd:ba:54:d2:88:17:f5: c5:4a:c0:ee:7a:28:46:85:c5:18:30:5b:a8:cd:5f: 06:13:8e:01:55:8c:71:4e:92:39:4d:14:6a:77:cb: 76:55:ad:e8:4e:5d:03:3a:ac:b7:2b:8d:63:e8:ec: f6:2e:2b:47:28:bb:55:c6:af:88:3c:a7:73:61:d2: f6:82:36:73:56:d5:97:29:97:64:9f:b6:7b:37:93: e8:45:f7:7c:02:6a:c4:6e:e1:75:1b:5c:18:b4:5c: 7a:de:bb:d9:f3:fd:99:36:eb:ed:f8:61:83:2d:44: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:9D:C2:E3:1B:63:F4:3E:A4:99:EE:0A:D5:DB:0A:82:11:35:D7 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:94:a4:9b:0e:eb:21:f2:b0:85:aa:f4:88:83:61:eb:93:0f: 8b:b0:cd:b8:06:55:06:a3:a6:30:87:c3:22:ab:c5:a8:1f:05: ef:e4:20:48:fc:2e:0e:e8:4c:87:da:b2:df:01:28:7c:d1:39: 9f:b6:34:6f:d0:d7:bc:d1:f3:74:59:c4:08:e7:d7:e5:4f:0a: 99:1e:0a:bb:ba:6c:8c:08:40:77:a0:2b:04:72:63:b7:22:0d: ba:fd:fd:00:47:1d:54:18:92:07:f8:31:bd:14:5d:46:3c:18: 83:cb:18:5e:7b:69:3f:4c:05:31:2e:ed:03:7e:30:64:02:a0: 4d:9e:84:e2:08:85:80:fe:98:0c:18:cc:56:33:a5:70:86:f1: 16:cb:d0:aa:f7:f7:ea:be:1d:bd:a4:03:0a:67:04:28:dc:55: 42:46:32:dd:46:9b:eb:0a:d1:b4:89:df:12:94:ad:f4:44:21: 30:95:e3:f9:49:d1:e2:b3:cd:8a:dd:f0:ba:05:2b:21:24:db: 4e:d5:fb:38:85:51:d9:6a:af:34:ac:9e:37:13:cb:1c:a4:33: 75:aa:49:1e:19:9d:6d:99:a3:50:13:e0:5a:f9:9c:c9:9a:58: a5:df:a5:60:83:4d:6d:03:18:e6:61:ba:e8:12:62:ce:cb:ed: 6d:10:c5:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEL0JmMSVBAbdw65yNiMCuHJuID8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTEyMDEyMzQ1MzlaFw0yNTEyMDUwODM3MzlaMDMxMTAvBgNV BAMTKDJFQjg5REMyRTMxQjYzRjQzRUE0OTlFRTBBRDVEQjBBODIxMTM1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsu8y11l4Wu1YwWg1kBuLt5Rvc LmPMftVnXfo7iaYRL+yx3ymz1UjRVly2DVGwXov/hveU8qndWoXqHSK+hP42iDxZ v/QUhEaerFoorwrCtHsQZEBqGmwnQmSzd4CoetQFVAhPLHsAHLrrG5qmQGXDer/8 kaXsoaUo9X+BPaGaj5vc+iLK/HHucw1Nai3mvbpU0ogX9cVKwO56KEaFxRgwW6jN XwYTjgFVjHFOkjlNFGp3y3ZVrehOXQM6rLcrjWPo7PYuK0cou1XGr4g8p3Nh0vaC NnNW1Zcpl2Sftns3k+hF93wCasRu4XUbXBi0XHreu9nz/Zk26+34YYMtRKP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULridwuMbY/Q+pJnuCtXbCoIRNdcwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECUpJsO6yHysIWq9IiDYeuTD4uwzbgGVQaj pjCHwyKrxagfBe/kIEj8Lg7oTIfast8BKHzROZ+2NG/Q17zR83RZxAjn1+VPCpke Cru6bIwIQHegKwRyY7ciDbr9/QBHHVQYkgf4Mb0UXUY8GIPLGF57aT9MBTEu7QN+ MGQCoE2ehOIIhYD+mAwYzFYzpXCG8RbL0Kr39+q+Hb2kAwpnBCjcVUJGMt1Gm+sK 0bSJ3xKUrfREITCV4/lJ0eKzzYrd8LoFKyEk207V+ziFUdlqrzSsnjcTyxykM3Wq SR4ZnW2Zo1AT4Fr5nMmaWKXfpWCDTW0DGOZhuugSYs7L7W0Qxd8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:35 2025 by rpki-client