This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: UkAxkVc18BDLBn/ZOLpai7Tt0L22GZxYq+DFBD5RLkE= Subject key identifier: 53:FB:EB:6D:73:AA:C3:AC:81:89:32:CF:00:48:61:D5:9D:11:BB:26 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 2E6ED9F2222F1634C946281D9ADF428D57629C31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 023C Signing time: Sat 06 Dec 2025 06:12:32 +0000 Manifest this update: Sat 06 Dec 2025 06:07:32 +0000 Manifest next update: Tue 09 Dec 2025 18:10:32 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: 91fVtCC4AgaK4l2ZwLoX+I08uviYaVyJG9zR3Y9+wPU=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) 3: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: vLcdSpSniKI2V9cpJAOTd6IEjQsT+eYhlAd4fxtQsWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6e:d9:f2:22:2f:16:34:c9:46:28:1d:9a:df:42:8d:57:62:9c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Dec 6 06:07:32 2025 GMT Not After : Dec 9 18:10:32 2025 GMT Subject: CN=53FBEB6D73AAC3AC818932CF004861D59D11BB26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:c4:33:3d:2e:d8:da:fc:01:a3:fe:86:73: b0:15:fd:35:25:6c:57:11:62:92:9e:97:d7:4d:47: cc:08:8e:38:64:3e:f4:6b:6d:0a:73:03:25:d9:d6: 91:b9:76:07:80:b5:95:c4:36:7b:cf:32:3f:73:98: b4:91:61:5c:00:68:d3:ee:8e:38:13:ae:38:ea:e1: 84:cc:e3:52:fa:10:87:c3:fb:84:d9:39:15:78:ab: 1f:86:3a:44:4f:41:3f:c5:7a:a8:bc:3e:20:f4:ac: 14:cd:5c:bb:d9:2f:cd:26:57:1a:29:12:c3:69:33: 04:19:2c:ff:5c:1e:ea:55:3b:c5:c8:38:7f:f1:ef: 93:ea:1a:d2:2b:27:d5:60:ea:6e:40:88:2f:1f:6e: 90:e1:6c:29:98:dc:72:bd:03:b0:e6:1a:49:fc:fe: 9d:68:b0:21:8a:03:1f:af:c2:4e:d3:6a:7a:27:14: 64:12:a5:2e:06:9a:eb:05:6e:52:7f:91:bd:64:ca: 8f:d3:56:9f:62:55:47:33:23:89:2f:4e:83:45:8c: 12:ab:4c:b6:40:9f:1a:07:a5:78:2b:66:69:6a:b3: 4e:c1:5b:77:09:78:e2:14:a9:3e:3f:70:86:53:3f: 79:2e:d2:5e:46:ea:bb:ce:68:0f:01:91:b2:c8:b5: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FB:EB:6D:73:AA:C3:AC:81:89:32:CF:00:48:61:D5:9D:11:BB:26 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1b:a9:36:67:6f:0d:3a:45:8c:8a:7d:b2:a5:8d:00:14:d7: 17:15:04:d6:e6:02:1e:64:07:6f:55:12:e5:16:c1:ae:10:99: 47:e0:24:b1:37:8e:52:58:9a:f5:5f:30:2b:78:ed:b9:d2:71: 86:ab:db:62:be:0a:51:bd:a4:18:9a:34:cf:00:b9:b2:0b:bf: 5d:bd:b7:b3:f2:18:7d:39:a2:f8:94:9f:22:b9:1d:09:54:10: ed:ca:29:ae:81:e7:1a:16:76:e2:71:47:48:22:ea:32:22:42: e6:f4:e7:86:ca:62:0a:46:c2:a3:4b:f4:8f:d3:92:50:b8:33: 33:d6:a1:e1:eb:c8:30:70:67:47:3b:c9:03:53:68:a8:82:0d: f9:50:51:29:78:cf:14:7f:2c:0c:06:4a:3d:bf:03:03:f7:86: 71:1d:9b:1f:3e:2b:d0:54:80:4d:13:54:37:e2:42:d6:70:1b: ca:bc:4a:a6:37:37:54:e4:81:2b:a9:c9:7e:a1:60:7c:d0:1c: 7b:71:42:60:f0:c3:0d:55:96:99:e4:e3:40:aa:0e:cb:8d:15: 7f:c1:6c:4f:55:cc:01:f9:65:69:c0:d3:bb:6f:69:e6:8d:52: 73:b8:2c:01:99:12:29:8f:3a:c6:17:59:62:5f:8f:79:f9:e4: 98:61:e2:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm7Z8iIvFjTJRigdmt9CjVdinDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTEyMDYwNjA3MzJaFw0yNTEyMDkxODEwMzJaMDMxMTAvBgNV BAMTKDUzRkJFQjZENzNBQUMzQUM4MTg5MzJDRjAwNDg2MUQ1OUQxMUJCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoMQzPS7Y2vwBo/6Gc7AV/TUl bFcRYpKel9dNR8wIjjhkPvRrbQpzAyXZ1pG5dgeAtZXENnvPMj9zmLSRYVwAaNPu jjgTrjjq4YTM41L6EIfD+4TZORV4qx+GOkRPQT/Feqi8PiD0rBTNXLvZL80mVxop EsNpMwQZLP9cHupVO8XIOH/x75PqGtIrJ9Vg6m5AiC8fbpDhbCmY3HK9A7DmGkn8 /p1osCGKAx+vwk7TanonFGQSpS4GmusFblJ/kb1kyo/TVp9iVUczI4kvToNFjBKr TLZAnxoHpXgrZmlqs07BW3cJeOIUqT4/cIZTP3ku0l5G6rvOaA8BkbLItZSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU/vrbXOqw6yBiTLPAEhh1Z0RuyYwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMbqTZnbw06RYyKfbKljQAU1xcVBNbmAh5k B29VEuUWwa4QmUfgJLE3jlJYmvVfMCt47bnScYar22K+ClG9pBiaNM8AubILv129 t7PyGH05oviUnyK5HQlUEO3KKa6B5xoWduJxR0gi6jIiQub054bKYgpGwqNL9I/T klC4MzPWoeHryDBwZ0c7yQNTaKiCDflQUSl4zxR/LAwGSj2/AwP3hnEdmx8+K9BU gE0TVDfiQtZwG8q8SqY3N1TkgSupyX6hYHzQHHtxQmDwww1Vlpnk40CqDsuNFX/B bE9VzAH5ZWnA07tvaeaNUnO4LAGZEimPOsYXWWJfj3n55Jhh4iY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:57 2025 by rpki-client