This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 70DTqA9jLLpcZR3FtJnFKPvbQATX38K+B7jb9gwTiA8= Subject key identifier: 95:B4:5E:04:B0:27:DC:0F:FA:2C:AE:90:C1:A4:16:4D:29:91:18:76 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 5361296FF5020786567EB13D2199DD6C9AA05D14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: A9 Signing time: Sun 14 Dec 2025 07:52:51 +0000 Manifest this update: Sun 14 Dec 2025 07:47:51 +0000 Manifest next update: Wed 17 Dec 2025 09:18:51 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: iH8plcNQFzE60KFgYZ0Cxbf/vNIs2NcL5mOdw9J7TQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 09:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:61:29:6f:f5:02:07:86:56:7e:b1:3d:21:99:dd:6c:9a:a0:5d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Dec 14 07:47:51 2025 GMT Not After : Dec 17 09:18:51 2025 GMT Subject: CN=95B45E04B027DC0FFA2CAE90C1A4164D29911876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:fe:08:70:f7:02:56:04:26:ac:8f:8d:b0: 34:45:c7:d6:1c:75:89:0d:50:26:4d:bc:37:23:3d: f6:d5:91:f6:0d:ec:38:de:a0:75:8a:cf:82:fb:0d: 2e:7b:29:b3:91:1d:dd:31:c1:4c:5e:ea:9c:dd:64: 22:66:1e:7f:81:17:0a:62:3b:8b:0e:24:fa:d0:01: a2:06:15:9d:c5:fb:ab:2f:1b:e9:e7:93:59:d5:1a: 41:6a:b0:79:63:07:b1:f9:57:0c:13:ba:1d:3b:99: e9:60:26:db:2e:00:42:92:13:ac:cd:c2:ed:cc:c3: 41:b2:65:b6:2c:f0:f4:fb:fb:0d:fe:f4:bb:c3:b7: c8:16:b8:9d:9a:b1:ee:1a:62:51:32:ba:09:3f:53: 23:aa:0c:85:a7:0d:82:f4:1f:1d:83:35:ce:7d:94: 1b:39:52:6f:be:3a:db:73:d7:81:61:fd:b9:cd:78: 00:31:08:67:19:60:88:5f:85:d9:36:d5:e0:96:69: be:d8:36:47:bb:dc:16:58:f5:cd:d4:4d:df:f9:56: 4e:5e:3d:19:9b:6b:08:2e:54:11:b7:ab:1f:97:1d: 29:9d:5d:15:d4:27:f6:0d:eb:e7:1d:e3:da:d4:62: e2:11:f1:78:6d:ec:79:5f:5a:7d:ee:d9:f3:1e:e2: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:5E:04:B0:27:DC:0F:FA:2C:AE:90:C1:A4:16:4D:29:91:18:76 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:92:6b:30:b7:69:8c:b3:93:e0:f4:29:d9:57:f1:fc:3b:a1: 53:1b:09:d7:bb:6e:22:f1:05:a8:42:fd:2b:d6:da:c4:a4:35: 33:9c:76:5c:39:42:e3:84:4a:9e:13:b5:fa:e4:ce:4a:c9:55: 65:be:de:0c:b5:79:1a:5f:12:52:b8:68:52:f5:b0:de:47:aa: 35:23:d6:83:32:4d:17:be:e5:ec:eb:ab:74:03:ce:20:07:2f: 0a:c1:d4:79:ef:2a:1e:ae:31:6c:ca:dd:3c:6d:cc:75:8e:1c: be:26:b2:8a:a6:be:ab:0b:a5:f0:c6:5b:36:af:ea:17:40:b7: 2b:60:c1:0c:4f:12:cf:48:ed:1d:79:ca:fe:57:4e:ce:d9:5b: d1:92:e2:44:c9:29:b0:94:31:a8:f4:40:8e:8e:62:00:0b:4f: 0e:54:94:09:cd:9c:14:55:6d:da:16:62:63:60:26:5e:53:fd: 3c:f6:c8:29:2f:2d:86:2d:fa:dc:8a:45:2a:3d:f5:36:fc:0a: 10:0e:54:50:50:a7:84:a8:28:78:0a:49:be:d6:f5:41:2d:8c: 49:87:b3:75:76:9e:cb:f1:b8:0c:c9:ab:40:b6:8e:7d:e4:16: c6:13:07:be:5a:39:a0:11:31:55:e5:1f:d0:94:8e:9a:ef:53: eb:fd:d9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2Epb/UCB4ZWfrE9IZndbJqgXRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTEyMTQwNzQ3NTFaFw0yNTEyMTcwOTE4NTFaMDMxMTAvBgNV BAMTKDk1QjQ1RTA0QjAyN0RDMEZGQTJDQUU5MEMxQTQxNjREMjk5MTE4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqP4IcPcCVgQmrI+NsDRFx9Yc dYkNUCZNvDcjPfbVkfYN7DjeoHWKz4L7DS57KbORHd0xwUxe6pzdZCJmHn+BFwpi O4sOJPrQAaIGFZ3F+6svG+nnk1nVGkFqsHljB7H5VwwTuh07melgJtsuAEKSE6zN wu3Mw0GyZbYs8PT7+w3+9LvDt8gWuJ2ase4aYlEyugk/UyOqDIWnDYL0Hx2DNc59 lBs5Um++Ottz14Fh/bnNeAAxCGcZYIhfhdk21eCWab7YNke73BZY9c3UTd/5Vk5e PRmbawguVBG3qx+XHSmdXRXUJ/YN6+cd49rUYuIR8Xht7HlfWn3u2fMe4hNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlbReBLAn3A/6LK6QwaQWTSmRGHYwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSSazC3aYyzk+D0KdlX8fw7oVMbCde7biLx BahC/SvW2sSkNTOcdlw5QuOESp4TtfrkzkrJVWW+3gy1eRpfElK4aFL1sN5HqjUj 1oMyTRe+5ezrq3QDziAHLwrB1HnvKh6uMWzK3TxtzHWOHL4msoqmvqsLpfDGWzav 6hdAtytgwQxPEs9I7R15yv5XTs7ZW9GS4kTJKbCUMaj0QI6OYgALTw5UlAnNnBRV bdoWYmNgJl5T/Tz2yCkvLYYt+tyKRSo99Tb8ChAOVFBQp4SoKHgKSb7W9UEtjEmH s3V2nsvxuAzJq0C2jn3kFsYTB75aOaARMVXlH9CUjprvU+v92eA= -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:35 2025 by rpki-client