This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json) Hash identifier: k6r5gG3R7dVf98aDAkZwwoUQKk/uEWn9HKOA4rlhRwA= Subject key identifier: BF:9E:F2:8B:02:FE:5C:B3:A1:48:6B:F6:33:4B:1D:51:5B:DD:4F:79 Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 0956390D2A338E574EF41B426FEDB9641792341F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 09:32:18 +0000 Manifest this update: Tue 02 Dec 2025 09:27:18 +0000 Manifest next update: Fri 05 Dec 2025 10:13:18 +0000 Files and hashes: 1: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: dkyfxOJwfydp3e55zG9a8eFnlqCb48oe9ybbDkRWT10=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:56:39:0d:2a:33:8e:57:4e:f4:1b:42:6f:ed:b9:64:17:92:34:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Dec 2 09:27:18 2025 GMT Not After : Dec 5 10:13:18 2025 GMT Subject: CN=BF9EF28B02FE5CB3A1486BF6334B1D515BDD4F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:83:25:8a:ba:fe:fc:26:8d:06:8d:29:b2: bf:72:8f:38:55:b1:d3:09:e8:89:87:e3:4e:59:a5: 18:2a:2a:25:dc:e2:fd:86:0e:33:f5:ba:59:6f:53: 02:86:fa:93:7a:2b:a7:52:a9:fb:d5:c4:9b:43:8c: 24:92:c3:48:b0:0f:bf:7d:a8:eb:4d:8c:6c:e8:3c: bd:e6:c1:c9:bd:c5:ac:7f:67:cc:dd:c7:62:1b:c9: cf:b3:27:15:aa:01:52:c4:6d:39:9e:85:80:14:db: f6:07:56:e9:fb:db:ad:c5:55:3a:f7:c4:b8:c7:7a: a2:b9:b3:48:82:ee:fe:b5:84:d7:73:a4:2a:ea:87: 32:73:62:24:75:83:73:7c:e7:b5:82:b5:0d:28:3a: 2f:54:2f:b6:e1:0e:9d:cf:bf:35:b5:57:91:e2:20: 9c:52:b4:6f:c9:e8:14:06:77:47:81:d7:b1:85:7e: e1:a2:24:98:ce:0e:2d:54:a8:88:d1:e4:d0:68:86: fc:a7:5e:93:8b:6b:b8:65:96:39:a5:91:eb:00:56: b9:10:da:f5:10:bf:f4:c1:43:d4:6f:d8:47:16:67: 29:f8:9b:85:33:56:9c:e7:44:d1:ed:a9:90:7c:5b: 1e:1f:76:4b:e8:ed:cb:ad:ff:ab:ad:20:52:5b:8b: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:F2:8B:02:FE:5C:B3:A1:48:6B:F6:33:4B:1D:51:5B:DD:4F:79 X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:52:fa:2a:53:e8:17:52:a2:82:ee:a7:30:86:ba:a4:fa:4d: 04:a2:41:d9:7c:d9:e4:2c:8d:30:90:06:d8:f4:be:44:31:59: 9c:b5:b0:51:3b:bd:6e:fe:f8:05:c5:30:7c:b4:1e:14:55:69: aa:96:a0:f5:06:3c:d0:65:92:2a:bc:d2:25:7d:9e:65:a9:0c: 8e:72:07:92:08:50:3a:85:51:93:8b:83:8e:ad:be:f0:3b:f7: 37:11:fe:8e:14:c8:0b:b3:84:ea:ce:fb:2d:81:79:2c:df:96: 20:d9:81:6f:45:72:53:87:ea:be:7f:80:be:ae:7a:86:2a:c5: 2b:ba:17:74:f0:62:4d:b3:01:51:f6:d2:12:4f:b5:62:3d:62: 19:fa:3a:69:5d:06:d0:a2:c8:06:a8:d2:20:b0:35:79:0b:e6: ef:9d:93:56:21:ec:c2:e1:74:21:41:34:8c:2a:1c:2f:c1:ee: 71:43:21:31:ac:6b:ee:e4:66:43:3d:ee:31:7b:74:ce:f0:7b: fb:c5:4c:3c:8f:a4:a2:d9:ea:ad:26:32:9d:14:7b:e6:a5:18: f7:55:35:6b:91:c8:c4:c6:88:17:8e:8f:0f:f0:63:d7:4f:d2: 7e:32:49:d9:2c:13:af:be:e1:7d:6f:8e:4f:69:c3:7c:e8:1c: f5:b7:9b:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVY5DSozjldO9BtCb+25ZBeSNB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNTEyMDIwOTI3MThaFw0yNTEyMDUxMDEzMThaMDMxMTAvBgNV BAMTKEJGOUVGMjhCMDJGRTVDQjNBMTQ4NkJGNjMzNEIxRDUxNUJERDRGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4h4Mlirr+/CaNBo0psr9yjzhV sdMJ6ImH405ZpRgqKiXc4v2GDjP1ullvUwKG+pN6K6dSqfvVxJtDjCSSw0iwD799 qOtNjGzoPL3mwcm9xax/Z8zdx2Ibyc+zJxWqAVLEbTmehYAU2/YHVun7263FVTr3 xLjHeqK5s0iC7v61hNdzpCrqhzJzYiR1g3N857WCtQ0oOi9UL7bhDp3PvzW1V5Hi IJxStG/J6BQGd0eB17GFfuGiJJjODi1UqIjR5NBohvynXpOLa7hlljmlkesAVrkQ 2vUQv/TBQ9Rv2EcWZyn4m4UzVpznRNHtqZB8Wx4fdkvo7cut/6utIFJbi5pvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv57yiwL+XLOhSGv2M0sdUVvdT3kwHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQw ODA0MDkxMDAxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdS+ipT6BdSooLupzCGuqT6TQSiQdl82eQs jTCQBtj0vkQxWZy1sFE7vW7++AXFMHy0HhRVaaqWoPUGPNBlkiq80iV9nmWpDI5y B5IIUDqFUZOLg46tvvA79zcR/o4UyAuzhOrO+y2BeSzfliDZgW9FclOH6r5/gL6u eoYqxSu6F3TwYk2zAVH20hJPtWI9Yhn6OmldBtCiyAao0iCwNXkL5u+dk1Yh7MLh dCFBNIwqHC/B7nFDITGsa+7kZkM97jF7dM7we/vFTDyPpKLZ6q0mMp0Ue+alGPdV NWuRyMTGiBeOjw/wY9dP0n4ySdksE6++4X1vjk9pw3zoHPW3m8k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:32 2025 by rpki-client