This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: Ckank9K99oHT5Z3PJSCMJbCTKUG58apkCfVDPLmpAQM= Subject key identifier: 75:13:D9:55:AC:BD:42:3D:6C:BB:B7:46:D4:C0:74:9B:1B:B1:5A:DF Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 3963CA48BAEA16ACC356CFD09557C2FB0EF90281 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: FA Signing time: Sun 07 Dec 2025 09:40:40 +0000 Manifest this update: Sun 07 Dec 2025 09:35:40 +0000 Manifest next update: Wed 10 Dec 2025 18:29:40 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 3: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: rHYxfsedNO3YsJTj4vN3hS1mgqJA3oiW5JaMfUVndDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:63:ca:48:ba:ea:16:ac:c3:56:cf:d0:95:57:c2:fb:0e:f9:02:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Dec 7 09:35:40 2025 GMT Not After : Dec 10 18:29:40 2025 GMT Subject: CN=7513D955ACBD423D6CBBB746D4C0749B1BB15ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:a3:79:55:9a:cd:37:ed:f4:26:28:28:49: 29:be:e0:9f:70:09:51:1c:b6:f6:9f:f5:8c:16:90: 36:30:b9:af:2d:ad:a9:1d:a3:44:69:0a:f2:af:3e: 56:0c:00:00:d4:53:a9:8b:28:bb:71:77:2d:a2:e0: ea:c9:cf:ea:44:26:86:fe:c9:5a:59:0d:75:26:a4: 4a:37:66:c9:1a:ba:f5:9a:92:06:3c:b7:e9:60:d1: e9:02:56:cc:91:ce:de:ae:85:55:a9:21:e0:b9:74: 9a:a3:4a:00:cd:c0:57:66:39:7a:69:59:92:78:70: 6a:a3:72:0a:ef:cd:00:50:11:d5:47:b9:79:73:1b: e5:44:46:66:3e:e3:50:cd:41:1c:6a:34:d7:72:62: 0b:a4:d8:85:a3:5b:5c:a9:b1:b7:83:de:d5:92:dd: 43:b5:71:1a:c2:25:62:3f:2f:e1:6a:ce:2e:22:e7: 33:1a:c6:67:88:ce:7f:b1:42:b6:2d:a1:22:16:c9: 9e:e8:19:74:88:50:b6:8c:bf:37:39:33:b9:7a:81: 7d:1d:d5:8e:a2:69:c2:72:b6:c6:87:a9:b7:6d:e3: a0:7f:68:b6:f3:6d:fe:ab:df:0e:24:b9:1c:2d:25: 1e:c3:2a:77:e7:eb:4f:54:a5:d5:39:da:0e:3a:44: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:D9:55:AC:BD:42:3D:6C:BB:B7:46:D4:C0:74:9B:1B:B1:5A:DF X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:17:6d:85:9a:57:2f:31:35:7f:c5:4f:ca:e2:4b:6a:aa:14: c4:4e:3d:2a:27:fd:6f:88:57:e4:1b:4e:9f:15:a1:61:c5:ae: 11:5d:c3:ab:dc:63:c4:08:eb:ad:82:81:99:a7:fd:64:6f:c7: cf:5f:93:d0:9c:bd:d8:84:97:26:aa:9f:c0:79:f7:ef:88:da: 59:22:3f:3a:cd:2b:5c:c2:a5:34:dd:5b:8a:7b:26:f2:74:1b: 95:05:01:7d:28:d8:10:89:a4:5f:1c:91:9c:46:f7:76:e4:19: 17:b8:59:22:c4:f2:48:27:19:2c:46:a7:e1:ad:ca:d4:cc:d3: ea:c4:b2:07:68:93:a5:49:bf:74:d1:42:5d:96:b0:5c:c1:b7: 08:1c:c5:e8:3f:07:b1:3d:49:bf:db:71:4e:a8:9f:d1:97:48: d0:e1:3f:d0:11:c3:fb:e0:5c:29:69:0f:ae:b8:6a:5c:e7:4c: d2:c9:f7:cc:f2:3c:25:62:e9:2e:d0:d0:61:cc:d8:44:56:88: 69:56:04:b1:d1:7d:e0:a3:23:a5:a2:1d:f0:68:f4:08:1c:1f: 18:bd:d6:e5:60:65:14:02:41:24:37:1d:ed:9e:aa:50:ec:21: 60:18:96:79:05:0b:f4:82:7e:ca:80:84:19:b8:88:8d:72:5b: d0:67:98:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWPKSLrqFqzDVs/QlVfC+w75AoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTEyMDcwOTM1NDBaFw0yNTEyMTAxODI5NDBaMDMxMTAvBgNV BAMTKDc1MTNEOTU1QUNCRDQyM0Q2Q0JCQjc0NkQ0QzA3NDlCMUJCMTVBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKA6N5VZrNN+30JigoSSm+4J9w CVEctvaf9YwWkDYwua8trakdo0RpCvKvPlYMAADUU6mLKLtxdy2i4OrJz+pEJob+ yVpZDXUmpEo3ZskauvWakgY8t+lg0ekCVsyRzt6uhVWpIeC5dJqjSgDNwFdmOXpp WZJ4cGqjcgrvzQBQEdVHuXlzG+VERmY+41DNQRxqNNdyYguk2IWjW1ypsbeD3tWS 3UO1cRrCJWI/L+Fqzi4i5zMaxmeIzn+xQrYtoSIWyZ7oGXSIULaMvzc5M7l6gX0d 1Y6iacJytsaHqbdt46B/aLbzbf6r3w4kuRwtJR7DKnfn609UpdU52g46RMUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdRPZVay9Qj1su7dG1MB0mxuxWt8wHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcXbYWaVy8xNX/FT8riS2qqFMROPSon/W+I V+QbTp8VoWHFrhFdw6vcY8QI662CgZmn/WRvx89fk9CcvdiElyaqn8B59++I2lki PzrNK1zCpTTdW4p7JvJ0G5UFAX0o2BCJpF8ckZxG93bkGRe4WSLE8kgnGSxGp+Gt ytTM0+rEsgdok6VJv3TRQl2WsFzBtwgcxeg/B7E9Sb/bcU6on9GXSNDhP9ARw/vg XClpD664alznTNLJ98zyPCVi6S7Q0GHM2ERWiGlWBLHRfeCjI6WiHfBo9AgcHxi9 1uVgZRQCQSQ3He2eqlDsIWAYlnkFC/SCfsqAhBm4iI1yW9BnmPE= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:46 2025 by rpki-client