This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: cnEeWd+UyUAzGzBGw0Pj4+OScd0tnavoEHcOAUomp0Y= Subject key identifier: 91:38:0D:ED:28:CE:E5:94:DA:80:A7:52:AF:F5:C5:29:A0:D7:31:5D Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 276CB47EA1718A7531933DD274E4FFA903C012CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 80 Signing time: Wed 03 Dec 2025 05:11:20 +0000 Manifest this update: Wed 03 Dec 2025 05:06:20 +0000 Manifest next update: Sat 06 Dec 2025 13:57:20 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: TRj2Sroiu52gQZ3A4BrEyRDoqWqFzbERkEaiDN4DBwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6c:b4:7e:a1:71:8a:75:31:93:3d:d2:74:e4:ff:a9:03:c0:12:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Dec 3 05:06:20 2025 GMT Not After : Dec 6 13:57:20 2025 GMT Subject: CN=91380DED28CEE594DA80A752AFF5C529A0D7315D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:56:76:df:05:93:5e:af:25:1f:3d:98:6c: f0:29:d6:2e:82:42:ad:6d:22:63:3e:be:16:13:fb: 5e:ee:90:57:70:3c:3a:31:c1:e9:a8:02:58:65:83: a5:28:19:fc:6d:08:bc:fc:0a:e9:61:8b:74:b5:69: 1a:3b:35:11:b7:70:ac:88:1b:bf:b4:5b:35:7b:14: d2:6d:31:97:ea:dd:6b:dd:60:97:1f:30:49:1e:b3: 25:09:dd:59:2e:af:dc:1b:01:5c:d0:b1:3f:9d:de: 2a:15:9f:ae:cc:32:77:21:e3:b1:f8:d4:6d:f9:4b: c3:48:90:69:38:c0:aa:b7:7e:7e:8b:8b:7b:83:b9: f1:ef:b2:c0:9e:7a:6c:cf:29:f1:82:6b:85:d6:6a: 89:76:c4:59:a6:bf:ca:b2:0b:50:91:2c:88:66:38: ae:dc:21:ad:61:bd:69:c0:6e:23:0c:42:2b:bd:17: d9:87:6a:24:39:aa:0e:c7:2a:ac:70:d8:87:83:5f: 4a:29:d4:d9:f6:44:1d:5a:31:a9:53:ba:52:3c:98: b4:91:eb:e4:9f:e3:fc:ab:ed:49:f2:97:74:90:4a: 0f:a4:09:99:1c:0a:da:f4:9b:b5:c4:d8:49:68:0b: 1d:f0:87:e7:d5:5d:35:22:3a:e4:bd:e3:85:fc:a0: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:38:0D:ED:28:CE:E5:94:DA:80:A7:52:AF:F5:C5:29:A0:D7:31:5D X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:03:90:7e:d9:84:e4:28:6e:68:35:b1:e1:a5:96:a3:ae:85: ef:85:2a:69:11:11:67:26:fa:cb:8e:7c:0e:59:5c:ad:0d:4e: 3f:26:66:df:83:cd:6d:ad:5f:fb:98:09:27:85:c6:f2:c4:4f: d0:71:2b:6e:f7:f6:f6:a7:e8:79:7e:c1:6d:99:64:d8:74:ad: 60:cc:24:37:85:e5:55:b8:fc:e9:0e:4f:2d:40:2d:4a:51:67: ba:79:3d:8d:9a:a8:be:bc:bb:05:62:7e:69:6b:1e:6f:94:f7: 20:20:f5:ed:a5:a0:0f:f7:13:15:47:94:1e:6d:66:ac:cd:23: 2f:f0:d4:08:35:28:22:9a:13:60:c0:b1:b2:d6:59:ba:35:20: 9d:96:b2:4e:e4:c1:2b:93:7e:83:61:68:42:60:36:f6:61:4c: 5f:19:02:06:dc:f4:67:23:ec:bc:49:b1:85:ab:46:63:02:b1: 2a:0c:a3:5c:7d:80:26:5a:21:bb:0c:57:8f:83:f2:68:6d:21: 9f:65:e0:91:6e:6a:a0:ae:d6:19:d8:af:83:e6:d0:2f:94:4e: 5e:72:5c:85:cb:9d:d7:18:7c:60:4d:f5:cf:33:1d:11:8f:f6: a7:28:64:cf:4c:e8:dd:45:dc:f5:79:89:89:a3:4b:d5:69:86: c1:fa:bb:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2y0fqFxinUxkz3SdOT/qQPAEs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTEyMDMwNTA2MjBaFw0yNTEyMDYxMzU3MjBaMDMxMTAvBgNV BAMTKDkxMzgwREVEMjhDRUU1OTREQTgwQTc1MkFGRjVDNTI5QTBENzMxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI51Z23wWTXq8lHz2YbPAp1i6C Qq1tImM+vhYT+17ukFdwPDoxwemoAlhlg6UoGfxtCLz8Culhi3S1aRo7NRG3cKyI G7+0WzV7FNJtMZfq3WvdYJcfMEkesyUJ3Vkur9wbAVzQsT+d3ioVn67MMnch47H4 1G35S8NIkGk4wKq3fn6Li3uDufHvssCeemzPKfGCa4XWaol2xFmmv8qyC1CRLIhm OK7cIa1hvWnAbiMMQiu9F9mHaiQ5qg7HKqxw2IeDX0op1Nn2RB1aMalTulI8mLSR 6+Sf4/yr7Unyl3SQSg+kCZkcCtr0m7XE2EloCx3wh+fVXTUiOuS944X8oD+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTgN7SjO5ZTagKdSr/XFKaDXMV0wHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcDkH7ZhOQobmg1seGllqOuhe+FKmkREWcm +suOfA5ZXK0NTj8mZt+DzW2tX/uYCSeFxvLET9BxK2739van6Hl+wW2ZZNh0rWDM JDeF5VW4/OkOTy1ALUpRZ7p5PY2aqL68uwVifmlrHm+U9yAg9e2loA/3ExVHlB5t ZqzNIy/w1Ag1KCKaE2DAsbLWWbo1IJ2Wsk7kwSuTfoNhaEJgNvZhTF8ZAgbc9Gcj 7LxJsYWrRmMCsSoMo1x9gCZaIbsMV4+D8mhtIZ9l4JFuaqCu1hnYr4Pm0C+UTl5y XIXLndcYfGBN9c8zHRGP9qcoZM9M6N1F3PV5iYmjS9VphsH6u3Q= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:56 2025 by rpki-client