This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: Z91m+AdZFxPcYwUFAjqe7Dmzj1QkOzdmPtsh/cdQ9Sk= Subject key identifier: B9:7D:CE:8B:C3:50:F1:4C:30:6F:AA:40:EC:5D:FA:0D:33:07:DB:27 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 204BE908EB31EF1B269F641F5C62AB0447813474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 031D Signing time: Thu 18 Dec 2025 10:41:16 +0000 Manifest this update: Thu 18 Dec 2025 10:36:16 +0000 Manifest next update: Sun 21 Dec 2025 13:28:16 +0000 Files and hashes: 1: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: r/r4XlmeA9aA/6wroI6cNFuv8DwkHFuNmE208zn/pYg=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4b:e9:08:eb:31:ef:1b:26:9f:64:1f:5c:62:ab:04:47:81:34:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Dec 18 10:36:16 2025 GMT Not After : Dec 21 13:28:16 2025 GMT Subject: CN=B97DCE8BC350F14C306FAA40EC5DFA0D3307DB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fe:c7:24:eb:20:52:67:b7:11:b6:d6:32:ca: 64:70:5c:86:15:37:f2:46:e9:a5:29:60:65:74:ce: e6:ab:40:24:33:3f:60:d1:fa:79:66:fd:dc:28:d9: 1c:36:b7:b1:75:37:53:6b:c3:d1:89:7a:50:4c:47: f4:21:2c:9a:5a:f1:25:e9:61:df:82:fb:48:fa:58: a8:69:cd:05:4c:c9:83:1b:e5:68:34:54:1a:c3:2b: 19:ea:d2:7a:16:18:9e:72:af:33:c5:5f:59:f5:cb: 05:e7:80:cd:2d:c8:7a:5c:32:9c:f5:da:f4:b9:b3: 75:14:12:bc:b0:10:c7:6e:e8:ec:fc:a1:93:2b:c5: 02:e8:78:b8:7e:80:77:93:62:28:5f:4f:53:75:11: b4:02:03:9a:3e:f1:39:08:1a:db:98:9c:d1:cb:22: b9:29:78:a3:77:1a:be:9f:bf:6b:d9:10:81:0b:8b: fb:a4:46:80:b6:33:da:37:de:c6:1b:ca:02:af:aa: 07:d6:0e:c1:8c:28:e9:83:38:61:8b:01:4d:95:b5: e6:33:7f:6a:7e:3c:b7:bc:f8:12:55:17:29:8f:bd: 82:84:71:90:e6:15:1e:5a:d7:30:6a:4e:8d:65:b7: 81:25:d9:80:ee:f4:21:11:63:6c:47:f4:70:57:f2: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:CE:8B:C3:50:F1:4C:30:6F:AA:40:EC:5D:FA:0D:33:07:DB:27 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:02:de:20:6f:4b:ac:10:0f:28:75:2e:db:b0:e7:22:b3: ce:b0:09:b2:b6:1d:69:c6:8e:54:77:1e:50:b3:71:70:1e:55: ed:0c:f6:97:71:2b:bb:a4:af:12:6d:ad:e3:a3:3f:a1:a8:3d: a9:84:ff:e6:14:79:49:58:0a:6d:d7:07:6e:1a:f1:2b:6d:2e: 93:3d:0b:57:00:4f:de:48:ee:0d:1e:c7:bf:c8:8c:52:57:32: af:48:ba:f1:8a:bd:c3:cd:f8:41:48:62:51:0c:2b:02:7e:76: 33:69:35:a9:ae:c2:ec:4d:f3:a0:3f:c6:6a:42:a3:37:31:24: bf:e7:45:bf:97:58:84:e0:c5:aa:d6:64:b3:3d:ad:fd:f1:91: 46:35:30:76:00:24:5a:a6:ef:2b:19:06:66:66:b2:1d:51:10: 0a:3c:2e:51:2c:56:a1:53:b7:67:b7:06:5b:98:d0:e1:1d:c0: 16:77:db:1d:51:d1:73:9d:1d:0a:4f:47:85:7e:81:7b:3a:f0: af:f5:45:be:b7:43:7b:be:18:ab:d3:a9:52:22:19:c3:5d:96: c2:be:3c:0f:a5:17:bb:46:05:27:b9:5b:e2:56:48:f6:5b:32: 90:2a:1a:02:4b:ad:d9:5c:ae:ec:96:c6:29:92:ce:eb:ac:75: 90:53:aa:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEvpCOsx7xsmn2QfXGKrBEeBNHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTEyMTgxMDM2MTZaFw0yNTEyMjExMzI4MTZaMDMxMTAvBgNV BAMTKEI5N0RDRThCQzM1MEYxNEMzMDZGQUE0MEVDNURGQTBEMzMwN0RCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw/sck6yBSZ7cRttYyymRwXIYV N/JG6aUpYGV0zuarQCQzP2DR+nlm/dwo2Rw2t7F1N1Nrw9GJelBMR/QhLJpa8SXp Yd+C+0j6WKhpzQVMyYMb5Wg0VBrDKxnq0noWGJ5yrzPFX1n1ywXngM0tyHpcMpz1 2vS5s3UUErywEMdu6Oz8oZMrxQLoeLh+gHeTYihfT1N1EbQCA5o+8TkIGtuYnNHL IrkpeKN3Gr6fv2vZEIELi/ukRoC2M9o33sYbygKvqgfWDsGMKOmDOGGLAU2VteYz f2p+PLe8+BJVFymPvYKEcZDmFR5a1zBqTo1lt4El2YDu9CERY2xH9HBX8oeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuX3Oi8NQ8Uwwb6pA7F36DTMH2ycwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYgAt4gb0usEA8odS7bsOcis86wCbK2HWnG jlR3HlCzcXAeVe0M9pdxK7ukrxJtreOjP6GoPamE/+YUeUlYCm3XB24a8SttLpM9 C1cAT95I7g0ex7/IjFJXMq9IuvGKvcPN+EFIYlEMKwJ+djNpNamuwuxN86A/xmpC ozcxJL/nRb+XWITgxarWZLM9rf3xkUY1MHYAJFqm7ysZBmZmsh1REAo8LlEsVqFT t2e3BluY0OEdwBZ32x1R0XOdHQpPR4V+gXs68K/1Rb63Q3u+GKvTqVIiGcNdlsK+ PA+lF7tGBSe5W+JWSPZbMpAqGgJLrdlcruyWximSzuusdZBTqkY= -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:07 2025 by rpki-client