This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json) Hash identifier: wtcJ50Z3L94Lt9k4dClmLdQXyE2aR9qD+cMVYRsDbjg= Subject key identifier: 3F:93:3B:05:DE:41:82:51:50:DA:9B:A4:C8:31:CA:5A:3E:42:01:2F Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19 Certificate serial: 1DDEC58AD8D1C05B219D9051FA4BAD425C5509CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft Manifest number: CF Signing time: Thu 18 Dec 2025 17:50:49 +0000 Manifest this update: Thu 18 Dec 2025 17:45:49 +0000 Manifest next update: Mon 22 Dec 2025 02:26:49 +0000 Files and hashes: 1: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: qLneC+5V3rmWdeh5448cSfzKv1gFXNxyWR8hPb1W+Tw=) 2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 2gWgTQ4Z+tGyRrEoZsoKq4rQS9QUc5mKoFU6ARsUw8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:de:c5:8a:d8:d1:c0:5b:21:9d:90:51:fa:4b:ad:42:5c:55:09:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19 Validity Not Before: Dec 18 17:45:49 2025 GMT Not After : Dec 22 02:26:49 2025 GMT Subject: CN=3F933B05DE41825150DA9BA4C831CA5A3E42012F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:b2:06:f1:85:f7:6d:dd:90:79:e6:5e:06: 77:4f:37:c3:86:ab:a0:1b:57:b5:ef:47:39:34:60: 24:5b:14:46:d9:33:17:54:ae:78:84:0e:c1:80:63: 5d:79:07:40:2e:dd:99:ec:33:04:a8:f9:1f:69:a9: 4a:03:bc:19:18:90:cd:6d:cf:32:49:d2:55:89:e8: 2d:12:ec:53:8e:56:b7:ba:fc:aa:10:ef:7d:a7:ad: a5:20:d3:73:15:a5:23:93:ae:82:87:cf:aa:d8:7d: ab:d7:cb:cb:b5:ee:3f:aa:66:fd:6c:9e:9b:f6:61: 0d:48:58:78:f8:fb:b7:ce:69:59:9b:b4:1c:4f:0d: 36:6e:f5:48:fd:38:f3:dd:7f:00:1c:3f:28:c4:0c: 64:e2:58:d2:40:93:d6:81:1a:5e:63:7e:2a:54:5a: 15:c9:16:db:5d:1e:1a:97:2e:96:a6:c2:da:ef:b6: 16:18:02:cc:67:7a:5a:b9:38:45:0d:21:cb:a8:7c: 65:41:53:9a:d9:a0:0f:24:fb:4b:04:48:1f:a3:52: 9a:c2:76:60:ab:ec:25:3a:15:9b:45:90:ee:1f:ac: f1:99:fe:d0:29:77:71:67:ad:03:ce:46:94:0e:7c: ff:5b:63:40:ea:55:41:62:37:a1:97:30:ed:11:0d: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:93:3B:05:DE:41:82:51:50:DA:9B:A4:C8:31:CA:5A:3E:42:01:2F X509v3 Authority Key Identifier: keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:6c:28:fa:73:fd:19:e5:20:9c:73:b7:0f:19:a1:9f:de: 11:cb:10:7d:2b:fc:9c:a2:23:97:ce:0c:6f:8a:bb:02:7e:2f: 33:c5:78:cf:9e:6a:fa:c8:19:a9:af:32:90:d7:f0:7a:be:5e: 88:e9:49:de:54:1e:ea:37:21:72:90:ed:04:8f:f1:b5:85:dd: c5:39:22:97:2e:2a:0c:8e:d3:3a:9f:c2:13:3d:5d:27:1d:18: 70:43:61:c4:72:b9:38:b6:fc:83:a6:de:06:cf:c1:4d:9b:70: 5e:a0:4a:2f:66:18:00:e0:87:84:df:7f:58:50:12:c4:f1:bf: d2:00:bd:ce:6b:c5:dc:07:7b:02:2a:48:fa:6b:8d:7a:7d:cc: 8a:9e:f7:cd:a1:23:aa:fc:01:fb:b5:cd:ef:10:fe:15:39:28: 12:b1:37:1b:55:7d:38:5c:af:ac:31:79:6c:72:e5:05:24:ab: 92:7b:3a:51:5f:c3:30:7d:cb:84:ee:5a:91:5c:c7:89:4e:f6: 8f:c9:c9:c3:36:02:f0:9e:06:55:80:cb:63:39:98:c5:98:9c: 78:54:be:d2:95:19:da:ed:d4:be:fb:f5:28:93:ec:a8:f1:c8: cd:44:b9:cc:b5:97:af:0a:50:5e:84:da:5e:7d:52:a1:c5:9e: 8c:89:14:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHd7FitjRwFshnZBR+kutQlxVCc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYyNEUw RUM0MUMxOTAeFw0yNTEyMTgxNzQ1NDlaFw0yNTEyMjIwMjI2NDlaMDMxMTAvBgNV BAMTKDNGOTMzQjA1REU0MTgyNTE1MERBOUJBNEM4MzFDQTVBM0U0MjAxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VLIG8YX3bd2QeeZeBndPN8OG q6AbV7XvRzk0YCRbFEbZMxdUrniEDsGAY115B0Au3ZnsMwSo+R9pqUoDvBkYkM1t zzJJ0lWJ6C0S7FOOVre6/KoQ732nraUg03MVpSOTroKHz6rYfavXy8u17j+qZv1s npv2YQ1IWHj4+7fOaVmbtBxPDTZu9Uj9OPPdfwAcPyjEDGTiWNJAk9aBGl5jfipU WhXJFttdHhqXLpamwtrvthYYAsxnelq5OEUNIcuofGVBU5rZoA8k+0sESB+jUprC dmCr7CU6FZtFkO4frPGZ/tApd3FnrQPORpQOfP9bY0DqVUFiN6GXMO0RDXgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5M7Bd5BglFQ2pukyDHKWj5CAS8wHwYDVR0j BBgwFoAUgTdHL+TH1IUBNSYB2E1iTg7EHBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWMwOWM5ZS1mZThhLTQ5ODktYjViYi1hZTQxOTMzOGY4NzMvMC84MTM3NDcyRkU0 QzdENDg1MDEzNTI2MDFEODRENjI0RTBFQzQxQzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYyNEUwRUM0 MUMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvODEzNzQ3MkZFNEM3RDQ4NTAxMzUyNjAxRDg0RDYy NEUwRUM0MUMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmTbCj6c/0Z5SCcc7cPGaGf3hHLEH0r/Jyi I5fODG+KuwJ+LzPFeM+eavrIGamvMpDX8Hq+XojpSd5UHuo3IXKQ7QSP8bWF3cU5 IpcuKgyO0zqfwhM9XScdGHBDYcRyuTi2/IOm3gbPwU2bcF6gSi9mGADgh4Tff1hQ EsTxv9IAvc5rxdwHewIqSPprjXp9zIqe982hI6r8Afu1ze8Q/hU5KBKxNxtVfThc r6wxeWxy5QUkq5J7OlFfwzB9y4TuWpFcx4lO9o/JycM2AvCeBlWAy2M5mMWYnHhU vtKVGdrt1L779SiT7KjxyM1Eucy1l68KUF6E2l59UqHFnoyJFNI= -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:47 2025 by rpki-client