This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: ZNUzwWMpH6OjTjv0sjh5itN7N2RgqBkRrmktRYTAifI= Subject key identifier: 85:BC:A1:B1:FD:76:B9:10:33:81:7B:D2:7E:2B:B7:75:03:FB:55:F7 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 48AE1DC5AC2916F3CF7A80E84D650263F2B77D3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: DF Signing time: Mon 01 Dec 2025 21:52:08 +0000 Manifest this update: Mon 01 Dec 2025 21:47:08 +0000 Manifest next update: Fri 05 Dec 2025 09:02:08 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: vblsaz8VqhPhkL/GH4sbmT0sX1I0rl/uTMuUtUcRxLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ae:1d:c5:ac:29:16:f3:cf:7a:80:e8:4d:65:02:63:f2:b7:7d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Dec 1 21:47:08 2025 GMT Not After : Dec 5 09:02:08 2025 GMT Subject: CN=85BCA1B1FD76B91033817BD27E2BB77503FB55F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:0a:09:a2:00:91:df:76:35:c2:b0:38:5f: b2:12:d7:f1:7e:5d:2f:29:b9:2e:5a:94:9e:35:35: a5:54:0b:bd:4a:36:fe:d3:e3:2c:7c:9a:95:92:d6: c1:ad:a4:1e:58:48:fa:43:07:4e:84:8c:98:da:f2: 61:d0:1e:6e:18:06:73:88:c2:2c:16:8f:ba:82:b0: f1:e4:71:a6:cc:7e:53:c1:cf:ae:9e:38:d5:97:58: b1:48:b5:32:55:d5:f8:0c:91:70:9b:31:f4:b0:07: 02:a3:86:81:b7:fe:07:26:4e:a7:e4:64:d3:81:da: f8:3c:c1:31:d4:45:8b:9f:09:1e:2e:63:f3:38:8c: 1e:61:17:9c:99:3f:0e:07:72:24:3a:b5:34:f1:0e: 50:9f:16:84:b6:b4:17:5c:98:39:52:ad:30:16:a3: c7:3a:ac:4f:78:38:5f:21:82:e4:06:a5:4a:31:ca: dd:16:5b:bc:bc:c1:78:5a:88:d6:16:5a:2c:31:24: b9:f8:9a:58:e4:47:32:52:93:0d:32:16:0b:71:8a: 0e:8f:35:44:1c:6d:30:57:27:4f:98:eb:0f:b1:b0: 38:94:21:96:2c:72:90:59:63:62:11:fb:d0:8f:59: 51:33:6a:d7:8f:d0:ab:7c:b8:16:af:ac:ce:11:92: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:A1:B1:FD:76:B9:10:33:81:7B:D2:7E:2B:B7:75:03:FB:55:F7 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:06:78:37:3e:73:c5:9a:a3:39:94:7b:4d:f6:40:67:3c:f4: 03:32:38:a5:48:b5:57:3b:cc:3d:7f:47:84:33:ef:26:47:32: 29:ca:df:36:01:95:e7:3c:17:9c:57:e2:50:cb:da:ac:8b:2f: f7:f7:e3:8b:2e:c2:1f:4c:d2:25:58:c2:99:a8:3c:5f:bc:1d: d7:b0:d0:13:01:d3:15:66:79:38:51:c8:23:0a:4e:d5:13:e2: e3:f9:9e:49:33:ab:6f:62:08:18:3d:72:8c:a3:40:39:62:2a: b5:bd:c2:5d:31:2b:0f:93:36:3c:8b:74:71:8d:04:a5:b2:2a: 78:cd:a6:69:cd:2b:23:b7:28:30:bf:e6:fa:5e:12:48:a7:87: c9:06:1d:ad:e8:37:1b:36:f0:97:db:59:d5:be:0e:fa:c7:ee: 7a:39:94:56:1c:4f:fd:bd:24:21:2c:5b:83:c3:8a:33:4f:eb: 80:c6:97:c4:19:dd:ff:3b:1a:95:65:2a:2f:fe:cd:22:bd:06: 35:d2:f0:ad:c5:d3:83:45:41:d8:ba:f9:8e:23:7d:13:e1:4d: d9:30:91:b2:02:05:c8:c6:bd:75:96:bd:bf:ab:29:23:ac:80: 5f:a1:0b:78:48:1e:dc:aa:46:6f:c2:c8:cf:d9:78:7b:d4:97: 84:ae:2c:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSK4dxawpFvPPeoDoTWUCY/K3fTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTEyMDEyMTQ3MDhaFw0yNTEyMDUwOTAyMDhaMDMxMTAvBgNV BAMTKDg1QkNBMUIxRkQ3NkI5MTAzMzgxN0JEMjdFMkJCNzc1MDNGQjU1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2QoJogCR33Y1wrA4X7IS1/F+ XS8puS5alJ41NaVUC71KNv7T4yx8mpWS1sGtpB5YSPpDB06EjJja8mHQHm4YBnOI wiwWj7qCsPHkcabMflPBz66eONWXWLFItTJV1fgMkXCbMfSwBwKjhoG3/gcmTqfk ZNOB2vg8wTHURYufCR4uY/M4jB5hF5yZPw4HciQ6tTTxDlCfFoS2tBdcmDlSrTAW o8c6rE94OF8hguQGpUoxyt0WW7y8wXhaiNYWWiwxJLn4mljkRzJSkw0yFgtxig6P NUQcbTBXJ0+Y6w+xsDiUIZYscpBZY2IR+9CPWVEzateP0Kt8uBavrM4Rknx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbyhsf12uRAzgXvSfiu3dQP7VfcwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQGeDc+c8WaozmUe032QGc89AMyOKVItVc7 zD1/R4Qz7yZHMinK3zYBlec8F5xX4lDL2qyLL/f344suwh9M0iVYwpmoPF+8Hdew 0BMB0xVmeThRyCMKTtUT4uP5nkkzq29iCBg9coyjQDliKrW9wl0xKw+TNjyLdHGN BKWyKnjNpmnNKyO3KDC/5vpeEkinh8kGHa3oNxs28JfbWdW+DvrH7no5lFYcT/29 JCEsW4PDijNP64DGl8QZ3f87GpVlKi/+zSK9BjXS8K3F04NFQdi6+Y4jfRPhTdkw kbICBcjGvXWWvb+rKSOsgF+hC3hIHtyqRm/CyM/ZeHvUl4SuLMk= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:10 2025 by rpki-client