This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: l/u1GIcjjolJv3vn5mYfwvQBTX3LWzD3ToJtZNQmi4Q= Subject key identifier: 32:A0:BA:4A:C3:E4:50:FC:C6:A5:55:01:7A:7C:13:84:6F:87:7A:20 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 0EE41A5B50E56AC156331958D378105AEB8CF66E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: FF Signing time: Wed 03 Dec 2025 14:11:35 +0000 Manifest this update: Wed 03 Dec 2025 14:06:35 +0000 Manifest next update: Sat 06 Dec 2025 17:48:35 +0000 Files and hashes: 1: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 2: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: 0t/lG6HTIpncVP7wP/7R63br0bOqM7xnodRXWubsNcs=) 3: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 17:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:1a:5b:50:e5:6a:c1:56:33:19:58:d3:78:10:5a:eb:8c:f6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Dec 3 14:06:35 2025 GMT Not After : Dec 6 17:48:35 2025 GMT Subject: CN=32A0BA4AC3E450FCC6A555017A7C13846F877A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:30:e3:1d:19:dd:81:24:c9:83:02:2b:ff: 08:04:0f:f9:f5:dd:94:e3:f6:60:cd:8b:47:bb:db: 8a:71:02:70:d7:12:35:25:0e:24:41:f6:4e:07:5c: 3f:90:2b:7f:69:05:86:76:af:0d:f8:59:04:cb:6a: 52:f7:32:86:17:d4:c4:ba:fe:d7:02:70:99:52:67: f4:97:ea:e2:11:17:10:5a:64:d0:8f:98:b8:c6:f1: bf:26:24:4a:81:64:c8:6d:a1:3f:e4:fd:44:44:95: 5e:52:4f:e9:81:1a:39:7a:d1:92:cc:63:af:84:d4: e4:6e:29:bc:32:d9:24:6a:a5:03:53:16:06:c3:39: c0:b9:6b:6c:6d:e7:bd:81:5e:f1:2c:2f:70:c3:b8: c8:23:ba:c7:73:3b:6d:da:8a:74:ac:7e:d4:26:08: a2:33:a1:72:75:89:0e:56:c3:59:bd:da:81:7b:2d: 63:4a:5c:e2:d0:c0:08:e2:76:2c:6b:61:56:a2:21: 13:d7:fb:74:26:81:97:24:da:2a:3f:39:3f:50:f5: de:98:59:ff:1c:5e:4b:ad:40:08:2c:f9:de:41:d9: e7:22:b7:0d:c1:5e:f7:3d:aa:14:be:08:30:52:21: 63:b8:cf:b0:ba:59:e5:d0:03:1e:d7:8e:18:90:88: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A0:BA:4A:C3:E4:50:FC:C6:A5:55:01:7A:7C:13:84:6F:87:7A:20 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:8d:85:38:10:25:c8:0f:78:ce:91:f5:2d:c7:c8:04:ee: 9e:b4:2f:86:6a:a6:70:d4:06:37:81:08:8b:0d:d1:39:17:40: 05:11:12:78:f4:d4:31:38:4c:59:9c:77:94:bc:8a:b0:9a:ff: c2:1f:26:3e:dc:8a:63:62:25:85:cb:9b:c1:b8:b1:af:44:5c: 02:b4:61:62:b5:2d:73:8f:7c:ec:94:78:4e:02:bd:86:41:c2: 3d:ae:83:5c:38:67:05:20:f3:59:63:cb:f8:7c:de:04:5a:61: 1f:b1:1b:04:5d:26:c5:ba:9c:04:62:a2:d2:84:d6:d3:07:de: a9:6d:59:cd:7b:8e:ad:52:35:e1:1c:40:4b:1a:22:e1:ad:07: c2:ec:12:d3:01:de:24:3c:e4:de:c6:84:91:fc:eb:c0:d6:7a: bf:78:ba:2d:7f:1e:6d:8c:cc:6f:7e:f8:7a:b9:12:c2:f9:70: 16:67:3d:65:41:7f:55:c7:86:29:dc:45:39:97:d7:36:f4:3e: 65:0e:de:cd:4f:2f:99:a8:83:52:5b:ab:da:0d:80:f2:5d:61: 74:28:3d:1e:11:71:7a:ba:05:99:df:2d:b7:26:54:dd:f4:a2: 1a:7b:ef:f9:94:10:25:78:30:da:03:9c:40:51:a7:9d:1d:83: b3:9d:b0:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuQaW1DlasFWMxlY03gQWuuM9m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTEyMDMxNDA2MzVaFw0yNTEyMDYxNzQ4MzVaMDMxMTAvBgNV BAMTKDMyQTBCQTRBQzNFNDUwRkNDNkE1NTUwMTdBN0MxMzg0NkY4NzdBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2DDjHRndgSTJgwIr/wgED/n1 3ZTj9mDNi0e724pxAnDXEjUlDiRB9k4HXD+QK39pBYZ2rw34WQTLalL3MoYX1MS6 /tcCcJlSZ/SX6uIRFxBaZNCPmLjG8b8mJEqBZMhtoT/k/URElV5ST+mBGjl60ZLM Y6+E1ORuKbwy2SRqpQNTFgbDOcC5a2xt572BXvEsL3DDuMgjusdzO23ainSsftQm CKIzoXJ1iQ5Ww1m92oF7LWNKXOLQwAjidixrYVaiIRPX+3QmgZck2io/OT9Q9d6Y Wf8cXkutQAgs+d5B2ecitw3BXvc9qhS+CDBSIWO4z7C6WeXQAx7XjhiQiL1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqC6SsPkUPzGpVUBenwThG+HeiAwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRkjYU4ECXID3jOkfUtx8gE7p60L4ZqpnDU BjeBCIsN0TkXQAUREnj01DE4TFmcd5S8irCa/8IfJj7cimNiJYXLm8G4sa9EXAK0 YWK1LXOPfOyUeE4CvYZBwj2ug1w4ZwUg81ljy/h83gRaYR+xGwRdJsW6nARiotKE 1tMH3qltWc17jq1SNeEcQEsaIuGtB8LsEtMB3iQ85N7GhJH868DWer94ui1/Hm2M zG9++Hq5EsL5cBZnPWVBf1XHhincRTmX1zb0PmUO3s1PL5mog1Jbq9oNgPJdYXQo PR4RcXq6BZnfLbcmVN30ohp77/mUECV4MNoDnEBRp50dg7OdsAU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:03 2025 by rpki-client