This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: sIx7rg+fA8mmfkWxnk0yRfD+b/fKjugbNST73wh5NDM= Subject key identifier: 48:E7:3A:DC:39:90:56:42:7C:4E:99:F8:BB:06:76:28:DE:F0:8D:BE Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 5EEB12C7C630611FEADC1E50AA64359A2FF51139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 0306 Signing time: Fri 05 Dec 2025 03:51:14 +0000 Manifest this update: Fri 05 Dec 2025 03:46:14 +0000 Manifest next update: Mon 08 Dec 2025 11:38:14 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: XyZo47crROYYQjp1tQJ7avP5uK8i/V76AgmGRsVBLQE=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:eb:12:c7:c6:30:61:1f:ea:dc:1e:50:aa:64:35:9a:2f:f5:11:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Dec 5 03:46:14 2025 GMT Not After : Dec 8 11:38:14 2025 GMT Subject: CN=48E73ADC399056427C4E99F8BB067628DEF08DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dd:f0:07:f1:e1:c4:9c:3e:26:12:65:c5:2c: 25:a3:31:f4:1d:c4:6f:c7:a8:32:a1:f5:f1:5a:46: 3d:c7:89:df:e5:3f:d9:89:56:a9:e3:f6:9a:8f:3c: cb:6f:4a:d9:55:e2:4b:04:c1:7d:37:11:31:3b:55: 5f:66:d6:9e:75:1b:9e:65:4b:17:14:9c:3c:bb:a1: 14:dc:3f:ac:a9:e5:4c:2b:b2:74:1e:dd:9f:60:05: 89:96:dc:5a:6b:57:f5:71:d7:bd:0d:b1:ec:5e:3c: c4:3a:0b:6a:00:86:b6:0e:03:27:5a:d2:3d:4d:34: 0b:07:45:b2:31:d9:cc:87:9b:42:9d:58:f0:a8:a1: 63:e6:64:99:01:cf:3c:3e:e8:6d:73:40:71:0c:f2: 82:6e:04:ae:aa:46:ee:a6:75:79:b6:a4:4c:30:84: b1:12:4a:33:84:d1:91:a6:f0:ab:e5:59:c3:bc:8c: 23:23:19:de:b2:61:7d:7e:8c:bf:50:65:a3:ff:4d: 0e:ff:28:96:ad:2a:43:6e:da:07:ca:e4:00:3d:41: 00:be:2b:a2:4d:fa:26:01:cd:bd:96:87:9c:fd:4e: 8e:2d:96:f0:c9:64:0d:5b:23:6b:9b:92:fc:6c:fb: 68:0f:a1:f3:88:55:c5:29:8d:03:c5:f0:74:20:c3: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:3A:DC:39:90:56:42:7C:4E:99:F8:BB:06:76:28:DE:F0:8D:BE X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:46:68:6d:b1:20:a0:a0:ce:96:79:95:50:cc:20:9c:ab:28: 13:c6:83:6f:85:c0:05:40:0b:ab:ab:d6:9f:3c:7e:55:19:d7: a7:a8:81:e9:ae:e3:ce:41:8d:9e:cd:34:68:72:c8:8b:a7:c6: d8:4e:d8:8b:28:4b:04:23:20:7f:5f:17:0b:8a:bd:13:7d:d5: 87:9c:43:6f:2c:3b:0d:28:3d:ac:3f:20:83:e7:94:39:9e:93: d4:ad:5c:c1:77:40:97:23:e7:31:2c:73:16:33:8c:f4:ec:83: 4a:08:a0:2b:8b:a6:18:4c:9e:e8:b1:04:0b:77:a4:db:c9:c0: 8d:bf:82:07:68:e8:d6:77:41:89:78:a9:d7:38:11:fa:9e:2e: 8b:ef:8b:32:0e:51:8b:6b:68:34:f5:a4:0f:ea:8b:4a:18:67: 35:18:0d:ef:6f:82:f7:6c:76:ae:12:4d:9d:83:a4:cb:f8:3f: be:71:07:3d:5c:2f:7a:17:bd:20:44:ab:59:a9:bf:df:d4:f6: 45:da:75:a4:da:71:26:a1:87:c1:63:e9:9c:a9:15:41:bf:fa: be:50:65:10:c0:99:9a:5e:c5:46:2e:19:b7:75:a9:f0:8b:64: de:23:4a:c9:e0:0b:16:ef:27:b3:07:8e:31:5d:b0:c1:31:67: 39:ca:15:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXusSx8YwYR/q3B5QqmQ1mi/1ETkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTEyMDUwMzQ2MTRaFw0yNTEyMDgxMTM4MTRaMDMxMTAvBgNV BAMTKDQ4RTczQURDMzk5MDU2NDI3QzRFOTlGOEJCMDY3NjI4REVGMDhEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3fAH8eHEnD4mEmXFLCWjMfQd xG/HqDKh9fFaRj3Hid/lP9mJVqnj9pqPPMtvStlV4ksEwX03ETE7VV9m1p51G55l SxcUnDy7oRTcP6yp5UwrsnQe3Z9gBYmW3FprV/Vx170NsexePMQ6C2oAhrYOAyda 0j1NNAsHRbIx2cyHm0KdWPCooWPmZJkBzzw+6G1zQHEM8oJuBK6qRu6mdXm2pEww hLESSjOE0ZGm8KvlWcO8jCMjGd6yYX1+jL9QZaP/TQ7/KJatKkNu2gfK5AA9QQC+ K6JN+iYBzb2Wh5z9To4tlvDJZA1bI2ubkvxs+2gPofOIVcUpjQPF8HQgw2yxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOc63DmQVkJ8Tpn4uwZ2KN7wjb4wHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1GaG2xIKCgzpZ5lVDMIJyrKBPGg2+FwAVA C6ur1p88flUZ16eogemu485BjZ7NNGhyyIunxthO2IsoSwQjIH9fFwuKvRN91Yec Q28sOw0oPaw/IIPnlDmek9StXMF3QJcj5zEscxYzjPTsg0oIoCuLphhMnuixBAt3 pNvJwI2/ggdo6NZ3QYl4qdc4EfqeLovvizIOUYtraDT1pA/qi0oYZzUYDe9vgvds dq4STZ2DpMv4P75xBz1cL3oXvSBEq1mpv9/U9kXadaTacSahh8Fj6ZypFUG/+r5Q ZRDAmZpexUYuGbd1qfCLZN4jSsngCxbvJ7MHjjFdsMExZznKFS0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:39 2025 by rpki-client