This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: ygo4+YGzbg2VLdSCVj78UbdzUdPYPesDlrme7wV0Hhc= Subject key identifier: 52:E2:C6:8D:27:FE:A2:31:D6:DC:CC:79:AC:06:50:D7:EB:66:25:30 Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 1CE2204D6235BC10F7574862FB120F3EA1FDB6C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 0218 Signing time: Tue 02 Dec 2025 21:30:48 +0000 Manifest this update: Tue 02 Dec 2025 21:25:48 +0000 Manifest next update: Sat 06 Dec 2025 09:10:48 +0000 Files and hashes: 1: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: Y9cPKtS5BArBUjGO4JnqzBOQk1/iPVRrMsaZMQMS37Q=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: AvZCtYXnhv2U+FmAw+wE/XOaPxSITmQuNQusEE4Cu6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:20:4d:62:35:bc:10:f7:57:48:62:fb:12:0f:3e:a1:fd:b6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Dec 2 21:25:48 2025 GMT Not After : Dec 6 09:10:48 2025 GMT Subject: CN=52E2C68D27FEA231D6DCCC79AC0650D7EB662530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:af:94:17:28:f2:cf:cd:d3:07:4b:2a:77: 48:3d:6e:fc:62:fc:74:f5:11:3e:6c:3a:fa:f8:40: d8:dc:5f:bb:4d:ac:6a:1c:d1:a6:2f:20:7b:b5:b6: ec:a3:fd:d4:da:8d:50:d8:45:26:b6:13:15:a3:57: 3e:e9:42:66:02:23:b5:8c:9b:e2:d8:c5:18:f0:ef: b2:aa:72:b8:45:e1:d1:7f:e9:36:74:34:3b:2e:8c: 88:89:84:66:60:49:e4:1a:0a:bb:62:30:7c:a0:75: b1:7f:d9:e3:7b:ed:07:d5:c2:23:23:db:1d:b4:ed: 01:2d:d9:bd:81:40:d0:92:dd:42:18:0e:e0:0e:dd: e4:b6:24:eb:bc:e6:d9:af:6c:c3:53:eb:e9:a7:d4: 35:88:e2:29:20:27:61:78:9a:e0:fa:03:a3:cc:cf: 6b:f9:7b:ea:af:89:f0:1f:00:ea:61:88:6d:b7:7c: 7a:08:02:a1:99:64:e2:98:4a:78:7d:cf:bf:1b:c8: 88:50:46:2f:fc:47:9a:3b:a2:e5:1e:e8:4e:ec:cb: ad:a3:ce:e2:9f:1c:64:b3:e3:1b:4c:54:9b:a7:13: ef:dd:dc:ff:a4:46:4f:44:2a:96:c9:7e:4f:a0:d4: fc:49:87:36:4b:5d:c0:7d:56:07:dc:bb:5a:0f:f0: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E2:C6:8D:27:FE:A2:31:D6:DC:CC:79:AC:06:50:D7:EB:66:25:30 X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e6:62:05:80:5c:48:46:9c:3f:1a:f1:5f:79:d4:77:72:0e: d8:ae:03:b2:46:e4:07:86:19:b9:f9:63:fa:7b:14:ee:d9:fa: 3f:83:2e:dc:76:2a:c2:8f:96:39:2d:60:e1:4e:02:9b:20:a7: 8e:17:e3:90:a9:17:39:bf:6c:0c:e3:21:3b:60:09:4c:ae:ed: 35:f6:3a:e8:65:a0:42:a4:1a:b6:d3:2b:07:c0:93:1e:36:45: 5b:33:c5:2a:17:14:28:32:71:a1:3d:a8:de:01:6a:e9:35:01: 2b:b6:55:55:7a:9d:c1:ce:3e:f9:e7:88:1e:21:a5:48:8b:5a: 85:c0:cb:69:cc:52:cd:fe:dd:c4:5a:7d:1b:18:a1:d6:1f:85: c5:fd:5b:f2:2a:2f:9c:65:be:05:88:6b:72:04:bd:38:17:32: 51:10:fc:21:8c:76:67:c0:04:5c:66:4b:9f:9b:21:5f:7e:46: 5b:26:ed:93:70:4f:64:c7:5c:76:a1:7f:96:1f:59:cd:00:31: 82:c2:98:30:4e:72:bf:2f:23:93:b6:15:be:a4:2e:22:9b:ef: 75:85:9d:f3:c7:3b:da:18:2f:e8:66:39:9e:d3:2f:37:79:d2: 89:de:37:e2:68:c0:3c:f4:97:bd:06:fe:97:8e:38:fe:0a:38: 89:f3:ba:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOIgTWI1vBD3V0hi+xIPPqH9tsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNTEyMDIyMTI1NDhaFw0yNTEyMDYwOTEwNDhaMDMxMTAvBgNV BAMTKDUyRTJDNjhEMjdGRUEyMzFENkRDQ0M3OUFDMDY1MEQ3RUI2NjI1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfa+UFyjyz83TB0sqd0g9bvxi /HT1ET5sOvr4QNjcX7tNrGoc0aYvIHu1tuyj/dTajVDYRSa2ExWjVz7pQmYCI7WM m+LYxRjw77KqcrhF4dF/6TZ0NDsujIiJhGZgSeQaCrtiMHygdbF/2eN77QfVwiMj 2x207QEt2b2BQNCS3UIYDuAO3eS2JOu85tmvbMNT6+mn1DWI4ikgJ2F4muD6A6PM z2v5e+qvifAfAOphiG23fHoIAqGZZOKYSnh9z78byIhQRi/8R5o7ouUe6E7sy62j zuKfHGSz4xtMVJunE+/d3P+kRk9EKpbJfk+g1PxJhzZLXcB9Vgfcu1oP8AstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuLGjSf+ojHW3Mx5rAZQ1+tmJTAwHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXmYgWAXEhGnD8a8V951HdyDtiuA7JG5AeG Gbn5Y/p7FO7Z+j+DLtx2KsKPljktYOFOApsgp44X45CpFzm/bAzjITtgCUyu7TX2 OuhloEKkGrbTKwfAkx42RVszxSoXFCgycaE9qN4Bauk1ASu2VVV6ncHOPvnniB4h pUiLWoXAy2nMUs3+3cRafRsYodYfhcX9W/IqL5xlvgWIa3IEvTgXMlEQ/CGMdmfA BFxmS5+bIV9+Rlsm7ZNwT2THXHahf5YfWc0AMYLCmDBOcr8vI5O2Fb6kLiKb73WF nfPHO9oYL+hmOZ7TLzd50oneN+JowDz0l70G/peOOP4KOInzukM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:33 2025 by rpki-client