This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: qvdjzAH4uStyhGKkhXlnCPLtXQFG0Q2pVo/hsr9r2P4= Subject key identifier: C7:D8:63:A2:89:E6:81:7D:78:6D:FA:31:12:98:69:C5:4F:2A:D3:DF Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 432B85FDF457342B248AA09322FBD49A4C580532 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: ED Signing time: Mon 01 Dec 2025 14:02:25 +0000 Manifest this update: Mon 01 Dec 2025 13:57:25 +0000 Manifest next update: Thu 04 Dec 2025 21:21:25 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: 5rFUzQywfqwVWHbnpVqGvxrW2c+FNqTwrK8/DvrThEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2b:85:fd:f4:57:34:2b:24:8a:a0:93:22:fb:d4:9a:4c:58:05:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Dec 1 13:57:25 2025 GMT Not After : Dec 4 21:21:25 2025 GMT Subject: CN=C7D863A289E6817D786DFA31129869C54F2AD3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ad:f3:5f:8c:a7:c6:fe:13:89:49:06:07:58: 6f:87:f3:5c:f5:f5:d4:99:68:2b:66:ee:7f:25:9b: 5b:5b:e9:31:00:f7:a5:7d:df:33:2d:85:bd:e3:6b: 18:7e:ab:d8:47:63:6e:8e:54:5a:28:8d:b7:d8:cb: 29:3f:1f:95:ef:45:2f:2b:b4:d3:7e:80:3c:84:c7: 15:11:3b:b5:ce:0b:0b:35:3c:7d:a6:82:61:70:5b: 61:96:53:cb:2d:95:5d:ea:56:0a:81:0b:9a:8f:a6: 24:d4:2c:9b:87:5b:f3:c4:48:f4:39:91:88:26:62: 89:7a:ce:93:ac:43:62:fb:ce:67:63:73:cb:86:ca: 13:9e:bb:05:e4:fb:7a:f9:d9:5a:66:86:0c:6f:4e: b6:8d:27:59:8a:dc:a7:4b:ae:15:a0:ae:71:9f:82: 18:b8:61:a2:96:94:fc:00:67:01:5f:07:4f:9e:48: 32:d3:d5:45:3d:c4:90:07:19:8d:9e:36:f1:62:b2: 97:e6:9b:f2:58:3f:65:e8:d6:35:2c:38:53:6a:9f: 0d:d4:d6:5a:21:e8:11:82:74:48:35:84:19:a5:5b: 23:91:6e:cc:e2:c0:a4:94:4f:de:30:14:bf:7c:58: 7d:91:f1:26:e1:f2:8c:10:a1:d7:5c:32:a4:8a:3c: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D8:63:A2:89:E6:81:7D:78:6D:FA:31:12:98:69:C5:4F:2A:D3:DF X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:25:00:46:e1:12:ee:21:f2:0c:78:43:4a:ba:c8:c8:54:19: a9:71:15:c1:90:35:c9:9d:99:bb:14:5e:c7:e7:a6:15:2e:58: fc:11:b9:23:32:c2:63:0c:37:7f:b8:af:73:2d:6d:4c:74:0d: 16:9b:c6:5a:e9:e5:c2:80:6a:a1:01:eb:b6:17:dc:cf:a3:9c: 3d:88:d1:01:a5:41:69:88:84:ae:ab:f0:db:81:54:ec:34:fa: 23:b2:42:b5:f7:f2:e7:bf:69:31:d6:cb:be:40:5b:40:7d:01: 13:44:d8:75:b4:bb:83:7b:99:c2:dd:16:32:40:59:a2:53:92: c9:71:42:fb:db:b9:55:cd:91:e4:62:04:ec:1e:a9:08:09:36: 93:9d:c1:5b:77:28:a7:cd:b5:5e:01:bd:8f:0f:98:30:bc:33: fd:7a:32:da:d6:e6:23:a6:88:ab:7c:f1:0d:b3:f5:10:a0:cf: ff:79:fd:b8:f1:7f:57:26:d6:5d:4f:58:45:b0:2a:4d:b9:79: 21:be:45:48:8c:a7:42:4d:6b:46:a8:99:3c:8a:96:f3:e5:55: d4:31:58:3b:0b:ca:ff:fb:af:1a:12:2d:08:d5:b7:5b:0c:b4: 61:c6:51:e4:5e:e1:a8:e0:90:f2:12:5d:de:b6:5a:6f:2c:da: b0:5b:8d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyuF/fRXNCskiqCTIvvUmkxYBTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTEyMDExMzU3MjVaFw0yNTEyMDQyMTIxMjVaMDMxMTAvBgNV BAMTKEM3RDg2M0EyODlFNjgxN0Q3ODZERkEzMTEyOTg2OUM1NEYyQUQzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrfNfjKfG/hOJSQYHWG+H81z1 9dSZaCtm7n8lm1tb6TEA96V93zMthb3jaxh+q9hHY26OVFoojbfYyyk/H5XvRS8r tNN+gDyExxURO7XOCws1PH2mgmFwW2GWU8stlV3qVgqBC5qPpiTULJuHW/PESPQ5 kYgmYol6zpOsQ2L7zmdjc8uGyhOeuwXk+3r52VpmhgxvTraNJ1mK3KdLrhWgrnGf ghi4YaKWlPwAZwFfB0+eSDLT1UU9xJAHGY2eNvFispfmm/JYP2Xo1jUsOFNqnw3U 1loh6BGCdEg1hBmlWyORbsziwKSUT94wFL98WH2R8Sbh8owQoddcMqSKPF2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9hjoonmgX14bfoxEphpxU8q098wHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKolAEbhEu4h8gx4Q0q6yMhUGalxFcGQNcmd mbsUXsfnphUuWPwRuSMywmMMN3+4r3MtbUx0DRabxlrp5cKAaqEB67YX3M+jnD2I 0QGlQWmIhK6r8NuBVOw0+iOyQrX38ue/aTHWy75AW0B9ARNE2HW0u4N7mcLdFjJA WaJTkslxQvvbuVXNkeRiBOweqQgJNpOdwVt3KKfNtV4BvY8PmDC8M/16MtrW5iOm iKt88Q2z9RCgz/95/bjxf1cm1l1PWEWwKk25eSG+RUiMp0JNa0aomTyKlvPlVdQx WDsLyv/7rxoSLQjVt1sMtGHGUeRe4ajgkPISXd62Wm8s2rBbjQE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:49 2025 by rpki-client