This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: uNgPNOOJJoOklDV0ogphPkQEGLer+F7xaFkWd5JXiK8= Subject key identifier: 88:3B:23:DD:8C:A7:D8:62:21:FA:D3:01:6A:CF:9D:90:15:A8:89:B7 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 67D96B13366A87CBD35A921DFB65793E5A1A5B7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 98 Signing time: Mon 01 Dec 2025 04:50:03 +0000 Manifest this update: Mon 01 Dec 2025 04:45:03 +0000 Manifest next update: Thu 04 Dec 2025 16:01:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: hAPkaJVIx/figUPQZ0Ob+WGQDxiBr7hNL8g6sH9URnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:6b:13:36:6a:87:cb:d3:5a:92:1d:fb:65:79:3e:5a:1a:5b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Dec 1 04:45:03 2025 GMT Not After : Dec 4 16:01:03 2025 GMT Subject: CN=883B23DD8CA7D86221FAD3016ACF9D9015A889B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:7e:32:5a:ff:8f:20:fd:9d:5f:f3:06:c9: 8a:de:e7:d2:a6:be:43:1a:81:9b:ab:1b:14:a0:a3: 1b:e5:82:94:7f:e2:24:a1:36:d6:fa:71:14:60:6c: 05:2c:64:e7:4a:a0:07:fb:16:6f:83:55:fe:ec:02: 24:a3:70:f2:76:8d:a6:fd:ca:ec:81:5c:27:51:1e: b2:66:5c:e5:9a:a4:fb:c9:cb:3a:6d:f3:aa:8e:88: 91:f1:b1:41:5c:44:d5:8a:1c:25:7a:c4:bf:61:07: 78:b6:dc:07:33:de:86:1d:cb:5d:11:8b:95:70:b3: 44:26:29:b8:68:ab:dc:d8:19:54:28:ca:2e:f5:ca: 5b:40:0d:14:c7:f3:67:ac:7e:06:d6:c4:f0:78:49: 99:a9:4c:af:99:d9:65:3e:65:15:3d:56:21:5c:9d: 94:f0:43:23:74:52:75:db:83:8f:77:7d:ae:15:8e: d8:fd:7f:04:62:bb:07:c1:a3:0c:5c:28:c5:c8:c8: 49:14:f7:45:f4:81:1a:e1:22:a7:d2:a0:10:b3:aa: 6a:d3:2e:2f:f6:62:dd:73:d4:dd:02:30:21:9c:6b: 33:3f:17:86:24:bd:10:06:2e:dd:76:b5:da:bd:49: 45:36:7e:dc:48:39:e3:0b:cd:7d:3b:a4:35:70:4a: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3B:23:DD:8C:A7:D8:62:21:FA:D3:01:6A:CF:9D:90:15:A8:89:B7 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:6c:e5:58:19:e1:62:f3:d2:6d:2e:2b:89:83:c4:20:fe: 54:8f:49:82:81:b4:a7:9d:52:47:08:56:76:04:ca:10:f0:a0: 8d:ad:a5:a1:54:6a:cc:4d:f3:e9:0c:97:ee:04:6f:f0:32:9b: f4:dc:48:ed:50:44:c1:a6:0d:36:fd:a5:77:52:b0:60:63:8b: 69:26:c7:8a:de:ff:54:0d:f5:13:a4:c7:34:52:d4:2b:a1:1e: 93:bc:aa:6b:45:c7:93:dd:43:40:2e:c8:9e:6d:bd:d2:b7:2e: 96:31:85:7b:df:1f:52:86:46:92:ab:53:46:de:99:81:12:3e: cc:93:37:9e:bf:76:dd:a7:9b:d9:de:e5:d2:11:5b:51:0b:a3: a4:40:33:17:5d:37:03:b6:b8:97:fb:b2:e3:f9:21:96:bd:14: d2:72:fe:f3:ef:77:2a:20:b4:33:c6:a1:74:38:0a:2a:44:d6: 79:c1:5c:90:eb:f2:bd:56:85:91:06:db:ea:7e:3f:c3:99:16: fe:b2:4a:2e:48:ed:64:88:2b:95:2b:a1:61:a7:b2:cc:3f:cc: e3:c7:7c:f1:bf:e2:fa:54:26:db:fc:29:53:ad:21:63:29:0d: a2:5b:9b:f5:24:a9:c1:10:d6:e9:d8:5b:f6:ca:4e:12:2f:e9: 2a:c4:e0:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9lrEzZqh8vTWpId+2V5PloaW30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTEyMDEwNDQ1MDNaFw0yNTEyMDQxNjAxMDNaMDMxMTAvBgNV BAMTKDg4M0IyM0REOENBN0Q4NjIyMUZBRDMwMTZBQ0Y5RDkwMTVBODg5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDE34yWv+PIP2dX/MGyYre59Km vkMagZurGxSgoxvlgpR/4iShNtb6cRRgbAUsZOdKoAf7Fm+DVf7sAiSjcPJ2jab9 yuyBXCdRHrJmXOWapPvJyzpt86qOiJHxsUFcRNWKHCV6xL9hB3i23Acz3oYdy10R i5Vws0QmKbhoq9zYGVQoyi71yltADRTH82esfgbWxPB4SZmpTK+Z2WU+ZRU9ViFc nZTwQyN0UnXbg493fa4Vjtj9fwRiuwfBowxcKMXIyEkU90X0gRrhIqfSoBCzqmrT Li/2Yt1z1N0CMCGcazM/F4YkvRAGLt12tdq9SUU2ftxIOeMLzX07pDVwSuYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDsj3Yyn2GIh+tMBas+dkBWoibcwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNtbOVYGeFi89JtLiuJg8Qg/lSPSYKBtKed UkcIVnYEyhDwoI2tpaFUasxN8+kMl+4Eb/Aym/TcSO1QRMGmDTb9pXdSsGBji2km x4re/1QN9ROkxzRS1CuhHpO8qmtFx5PdQ0AuyJ5tvdK3LpYxhXvfH1KGRpKrU0be mYESPsyTN56/dt2nm9ne5dIRW1ELo6RAMxddNwO2uJf7suP5IZa9FNJy/vPvdyog tDPGoXQ4CipE1nnBXJDr8r1WhZEG2+p+P8OZFv6ySi5I7WSIK5UroWGnssw/zOPH fPG/4vpUJtv8KVOtIWMpDaJbm/UkqcEQ1unYW/bKThIv6SrE4I0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:39 2025 by rpki-client