This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: sg9a9L2KcPUWUmAqhj9fLhwg50O8bobYlrYsNxWG+UA= Subject key identifier: 39:21:A3:CC:F6:88:47:53:23:37:37:BE:5D:A2:CC:66:79:CA:CA:B6 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 13E7FCA5CD9356C0CBD642E1BCCD7EB180C962E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: C9 Signing time: Wed 03 Dec 2025 01:20:00 +0000 Manifest this update: Wed 03 Dec 2025 01:15:00 +0000 Manifest next update: Sat 06 Dec 2025 05:52:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: kWUsYh6QDcQPXk6SthUAZeBxTQdam0dcmjRhVB7B9s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e7:fc:a5:cd:93:56:c0:cb:d6:42:e1:bc:cd:7e:b1:80:c9:62:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Dec 3 01:15:00 2025 GMT Not After : Dec 6 05:52:00 2025 GMT Subject: CN=3921A3CCF6884753233737BE5DA2CC6679CACAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:fe:d7:be:fb:80:9d:b6:c7:63:10:48:ea: d6:85:24:14:98:b7:9b:b1:7b:46:b9:2c:fd:f9:4c: e0:63:8a:43:50:5f:44:89:f1:15:c5:f3:54:12:42: 94:34:81:40:e8:58:82:d7:ff:82:b9:f6:35:e7:5a: f2:2c:42:c0:d9:12:ec:c9:26:bd:57:6a:2a:31:da: ea:12:8e:2d:06:f6:87:a5:11:42:39:43:8f:55:f7: fa:37:b1:52:b2:6d:e9:1b:4a:1f:45:2a:1f:aa:e2: 93:f4:8c:e8:b3:fe:7a:9b:9b:42:69:11:1b:36:08: 30:75:f4:cf:46:4d:f6:78:01:64:49:a7:56:34:31: 06:86:9e:62:9a:ce:4b:38:e1:78:37:97:e4:a6:06: 9d:d3:f0:eb:05:20:b9:53:f8:3c:2b:a5:98:e9:7e: c3:22:d2:4d:d2:b3:77:2a:31:28:73:cb:17:96:43: f0:89:5f:24:8a:f9:0b:24:7b:d4:04:f9:6b:c4:da: 22:7d:cc:b0:29:27:05:2e:00:71:ec:b1:69:b7:f2: 40:66:6b:cd:57:f1:65:1a:3a:18:f6:a7:91:43:d7: 76:9c:e0:24:d0:31:07:1e:2c:31:6c:ff:2e:0f:d2: 6a:f3:87:77:8e:d1:95:43:b9:54:4e:ea:05:00:99: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:A3:CC:F6:88:47:53:23:37:37:BE:5D:A2:CC:66:79:CA:CA:B6 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:ee:a6:24:d6:36:bb:ca:8b:19:20:c6:57:53:0c:35:08: f8:b0:bc:53:33:3a:27:55:d0:9f:e7:29:02:82:38:17:93:c9: 43:1c:47:ca:03:74:1d:44:41:47:71:96:c5:5a:58:3d:a1:36: df:e8:f0:5b:d0:36:f0:75:66:93:d9:66:57:5a:e8:b9:b2:cb: c4:cf:bb:8c:f1:1d:48:ab:e6:fc:61:da:a8:f5:47:f7:7e:39: b9:70:2f:40:75:50:08:a9:40:7b:1e:e5:58:a4:e9:03:d1:bc: e3:ad:ae:ef:95:a5:78:89:7b:14:e4:3d:69:73:db:07:9f:73: b3:b5:53:7e:b9:c9:f1:9e:3a:a4:c4:02:93:cc:a4:f3:45:ae: dd:92:92:70:4d:50:1f:e1:6a:ac:a1:5a:c3:ff:fc:a9:03:08: 06:bb:88:61:9f:e1:98:49:cb:2b:73:90:a4:7f:e8:48:ab:5a: ae:28:74:c7:ce:f9:05:d9:9d:89:72:4f:2d:00:b0:e7:11:ab: 61:bc:0b:9a:a0:58:89:f8:a1:64:81:0c:52:74:9b:06:d2:c6: 97:b1:64:5b:ef:8e:13:fc:b8:5c:a4:86:3f:a0:48:f2:66:a5: bf:14:c7:4a:40:14:31:0e:57:84:cc:a1:7c:01:4b:2f:0f:9b: 43:bf:6f:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+f8pc2TVsDL1kLhvM1+sYDJYuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTEyMDMwMTE1MDBaFw0yNTEyMDYwNTUyMDBaMDMxMTAvBgNV BAMTKDM5MjFBM0NDRjY4ODQ3NTMyMzM3MzdCRTVEQTJDQzY2NzlDQUNBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitf7XvvuAnbbHYxBI6taFJBSY t5uxe0a5LP35TOBjikNQX0SJ8RXF81QSQpQ0gUDoWILX/4K59jXnWvIsQsDZEuzJ Jr1Xaiox2uoSji0G9oelEUI5Q49V9/o3sVKybekbSh9FKh+q4pP0jOiz/nqbm0Jp ERs2CDB19M9GTfZ4AWRJp1Y0MQaGnmKazks44Xg3l+SmBp3T8OsFILlT+DwrpZjp fsMi0k3Ss3cqMShzyxeWQ/CJXySK+Qske9QE+WvE2iJ9zLApJwUuAHHssWm38kBm a81X8WUaOhj2p5FD13ac4CTQMQceLDFs/y4P0mrzh3eO0ZVDuVRO6gUAmYRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSGjzPaIR1MjNze+XaLMZnnKyrYwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWH7qYk1ja7yosZIMZXUww1CPiwvFMzOidV 0J/nKQKCOBeTyUMcR8oDdB1EQUdxlsVaWD2hNt/o8FvQNvB1ZpPZZlda6Lmyy8TP u4zxHUir5vxh2qj1R/d+OblwL0B1UAipQHse5Vik6QPRvOOtru+VpXiJexTkPWlz 2wefc7O1U365yfGeOqTEApPMpPNFrt2SknBNUB/haqyhWsP//KkDCAa7iGGf4ZhJ yytzkKR/6EirWq4odMfO+QXZnYlyTy0AsOcRq2G8C5qgWIn4oWSBDFJ0mwbSxpex ZFvvjhP8uFykhj+gSPJmpb8Ux0pAFDEOV4TMoXwBSy8Pm0O/byc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:45 2025 by rpki-client