This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: RKPtHDbm00evY4tIiOLo2Q1LtKECg9CFoKbcO5HJWCI= Subject key identifier: 6E:69:2F:DE:7F:B2:34:5B:49:EE:C7:EC:57:DE:D1:44:24:17:94:06 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 0C3CE2C872CA8B74F7E8128D3E0429016F95410E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 14:02:08 +0000 Manifest this update: Sat 06 Dec 2025 13:57:08 +0000 Manifest next update: Wed 10 Dec 2025 01:34:08 +0000 Files and hashes: 1: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: JM7OWqmNjDB50xTJrY5R+sAmUpHFrL5xKLcjej2s71U=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3c:e2:c8:72:ca:8b:74:f7:e8:12:8d:3e:04:29:01:6f:95:41:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Dec 6 13:57:08 2025 GMT Not After : Dec 10 01:34:08 2025 GMT Subject: CN=6E692FDE7FB2345B49EEC7EC57DED14424179406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:06:4f:bb:78:5b:b6:bd:ea:a7:20:26:a9: 97:ba:2a:25:03:1d:60:d8:c9:2f:48:b7:62:c1:da: 95:4b:78:cc:0a:e3:9a:7c:bf:da:67:c9:5b:1b:4e: c7:cb:66:dd:b0:5d:b3:8f:94:a6:e3:4c:30:68:6e: e2:dc:6c:ec:37:6c:78:75:fa:a3:f8:d5:ba:69:f4: 70:e1:bc:2f:fd:ce:52:bb:92:08:b6:de:8b:0b:85: 80:bd:b3:a2:fb:a0:bf:4e:75:78:fa:58:53:f8:b6: d5:1b:be:54:85:3c:e6:10:8e:c9:f1:83:a8:c9:bb: 1d:22:eb:fe:2e:28:4b:45:95:78:a9:b9:1d:35:c5: 02:d0:cf:45:c8:6a:c3:04:6e:9d:a7:c7:4d:e0:24: 41:a5:ea:c3:9c:5c:0f:a8:ac:23:ac:c5:8d:b5:c6: 8a:ad:5c:57:f2:08:5d:06:9b:7e:f2:b1:18:78:38: 83:27:90:21:8a:82:eb:cc:15:28:b1:7c:48:7b:86: 2a:91:d3:28:47:6b:be:d7:f5:d5:4e:a7:80:f9:46: 05:03:57:e2:73:13:4c:bf:34:8e:a1:c9:07:8c:e0: f7:ed:45:7f:97:40:58:f3:76:ed:dc:b1:85:f1:0b: 18:db:1b:3a:ad:07:bc:3e:ea:13:3e:9d:c3:40:1c: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:69:2F:DE:7F:B2:34:5B:49:EE:C7:EC:57:DE:D1:44:24:17:94:06 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:53:a5:13:01:ff:c7:1a:b6:a9:63:ed:9d:1a:98:52:59: b6:8f:ec:00:36:28:7d:3a:e2:b4:bb:90:54:ad:41:18:0f:63: 17:5d:4d:50:e0:60:79:e2:d6:50:a4:4d:aa:1d:e8:3a:76:cc: 8d:f4:f9:83:97:55:6f:c6:29:42:17:2a:2a:40:51:a3:15:f4: ba:27:f5:b3:18:c1:8e:fc:7b:4a:ab:95:80:93:9a:15:0a:e3: ee:b3:aa:16:fc:3c:2d:f3:2a:2d:98:70:da:c0:28:0b:02:71: fc:e0:6d:7c:f0:17:62:d5:a1:9a:16:0b:50:3d:a6:65:95:6f: 7f:09:3d:ff:ed:c7:61:92:bc:8c:6e:b0:6b:e3:36:1e:d1:88: af:57:5a:a5:44:21:80:6d:16:99:9b:f3:8d:7e:fc:6c:c2:30: d9:ff:b0:ab:2b:78:ed:40:32:97:6c:c4:10:d4:12:39:fc:46: ba:95:bc:92:8b:11:b7:30:2c:26:ec:d6:25:6b:fe:27:15:fb: ad:e5:da:78:0d:78:c8:6a:9a:08:4e:58:24:23:b9:85:69:03: f9:97:39:84:26:29:2a:c0:45:e1:d5:a8:a2:ef:e7:ed:38:98: 59:81:f6:79:7c:56:46:c6:02:cd:3a:7d:10:ea:77:11:1b:00: 30:fe:d6:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDziyHLKi3T36BKNPgQpAW+VQQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTEyMDYxMzU3MDhaFw0yNTEyMTAwMTM0MDhaMDMxMTAvBgNV BAMTKDZFNjkyRkRFN0ZCMjM0NUI0OUVFQzdFQzU3REVEMTQ0MjQxNzk0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFgZPu3hbtr3qpyAmqZe6KiUD HWDYyS9It2LB2pVLeMwK45p8v9pnyVsbTsfLZt2wXbOPlKbjTDBobuLcbOw3bHh1 +qP41bpp9HDhvC/9zlK7kgi23osLhYC9s6L7oL9OdXj6WFP4ttUbvlSFPOYQjsnx g6jJux0i6/4uKEtFlXipuR01xQLQz0XIasMEbp2nx03gJEGl6sOcXA+orCOsxY21 xoqtXFfyCF0Gm37ysRh4OIMnkCGKguvMFSixfEh7hiqR0yhHa77X9dVOp4D5RgUD V+JzE0y/NI6hyQeM4PftRX+XQFjzdu3csYXxCxjbGzqtB7w+6hM+ncNAHB4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmkv3n+yNFtJ7sfsV97RRCQXlAYwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJIU6UTAf/HGrapY+2dGphSWbaP7AA2KH06 4rS7kFStQRgPYxddTVDgYHni1lCkTaod6Dp2zI30+YOXVW/GKUIXKipAUaMV9Lon 9bMYwY78e0qrlYCTmhUK4+6zqhb8PC3zKi2YcNrAKAsCcfzgbXzwF2LVoZoWC1A9 pmWVb38JPf/tx2GSvIxusGvjNh7RiK9XWqVEIYBtFpmb841+/GzCMNn/sKsreO1A MpdsxBDUEjn8RrqVvJKLEbcwLCbs1iVr/icV+63l2ngNeMhqmghOWCQjuYVpA/mX OYQmKSrAReHVqKLv5+04mFmB9nl8VkbGAs06fRDqdxEbADD+1vo= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:42 2025 by rpki-client