This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: ODmtwcgyMBFOdNeF6tIcN4FKT9cyv5iNM2sphq6lNtw= Subject key identifier: 47:18:AC:56:35:33:9A:EA:AC:C2:94:31:D7:B8:C7:17:B4:F9:AA:59 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 3E2AB78F26CBDEB422B2D6907A67CBC0139C8B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01D8 Signing time: Fri 05 Dec 2025 04:01:36 +0000 Manifest this update: Fri 05 Dec 2025 03:56:36 +0000 Manifest next update: Mon 08 Dec 2025 14:33:36 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: H4+qVWFrXj2KsEbQ8zRhzNdKk14wtMslF1rwfASHNwY=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2a:b7:8f:26:cb:de:b4:22:b2:d6:90:7a:67:cb:c0:13:9c:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Dec 5 03:56:36 2025 GMT Not After : Dec 8 14:33:36 2025 GMT Subject: CN=4718AC5635339AEAACC29431D7B8C717B4F9AA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:31:b6:27:50:8a:d7:67:d1:7c:64:29:18: 9a:52:12:14:29:30:71:e6:79:10:ab:02:56:a7:96: 0d:1e:13:dd:e7:42:01:6d:14:d7:21:4e:4c:b4:dc: 61:db:7e:f7:fb:59:39:39:c2:93:2b:9b:93:86:99: 83:8a:28:dc:e9:3a:20:0c:6b:ea:2a:4f:76:c3:59: a3:15:dc:6b:bc:f6:e4:d6:79:eb:ca:8b:9b:af:15: a7:a9:20:4b:55:43:3f:89:b4:60:7a:57:28:1a:c1: f9:21:f8:96:dd:bd:01:61:b8:1f:03:ce:e4:9b:0a: 7e:83:de:37:5d:2a:63:bb:e0:f7:98:97:f0:71:0e: 3f:57:15:a5:79:2b:96:74:e0:b2:c9:ef:ae:91:16: 45:f4:29:62:49:ba:c4:cb:40:ec:39:f1:b9:47:08: d6:53:68:f5:64:c1:e4:9d:b6:f7:1c:c7:2e:58:7a: d1:79:7d:7a:54:3a:34:0d:99:c8:2e:f8:9c:40:23: 13:41:67:e8:53:2e:e2:bc:a9:51:fd:e1:6e:a8:fa: a1:b6:b9:27:9d:ef:0a:54:e1:36:90:a9:d5:16:2c: fa:98:d5:25:42:b3:6b:05:ef:9b:95:e6:66:45:a9: 02:3b:d3:08:a7:31:66:cb:ed:d2:df:b5:2c:d6:39: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:18:AC:56:35:33:9A:EA:AC:C2:94:31:D7:B8:C7:17:B4:F9:AA:59 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f9:1b:23:1b:07:6f:1d:12:8c:b3:0c:67:54:b2:2b:a8:60: cc:f2:fc:38:ce:4d:9b:c9:c1:30:7b:c9:8d:3e:f3:90:db:f9: 5c:d4:2f:6e:0a:94:af:2e:7e:36:0d:30:db:bd:a8:69:40:ff: 62:7e:53:8d:e3:5e:99:f1:fc:ad:93:d0:c8:be:93:ae:cb:c6: 2e:8a:f2:42:36:04:c1:6b:36:cb:4f:6b:7b:b3:90:c3:c9:ec: e6:d0:36:d6:30:4f:41:f0:0f:9b:ed:c0:4b:76:2c:32:e4:bb: 82:7a:ec:1b:5c:60:c5:36:f8:d0:c9:6c:15:b5:15:8d:7c:5c: 0f:1f:ed:aa:dd:ee:62:64:ec:1b:b5:6e:8a:ca:33:d2:97:db: 4d:fe:01:b1:a0:3b:6a:36:5f:8d:2e:2d:9e:70:d1:6e:6b:d0: ab:f9:77:49:ad:2e:a4:74:cd:f4:9d:f8:a1:97:a4:fe:cb:17: 50:35:3b:8a:6b:67:23:28:36:c2:10:40:ce:5e:8f:09:2e:6b: 21:7c:7d:9c:df:94:83:47:3d:0f:c7:cb:42:17:e8:a4:fa:65: f0:3a:6b:15:f2:3a:d3:fa:19:97:5a:d6:0c:8f:df:2a:9f:82: fb:fc:ca:f4:20:d4:4c:93:55:cf:5a:80:07:53:a3:75:f3:b4: bc:0c:0b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiq3jybL3rQistaQemfLwBOcizkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTEyMDUwMzU2MzZaFw0yNTEyMDgxNDMzMzZaMDMxMTAvBgNV BAMTKDQ3MThBQzU2MzUzMzlBRUFBQ0MyOTQzMUQ3QjhDNzE3QjRGOUFBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwODG2J1CK12fRfGQpGJpSEhQp MHHmeRCrAlanlg0eE93nQgFtFNchTky03GHbfvf7WTk5wpMrm5OGmYOKKNzpOiAM a+oqT3bDWaMV3Gu89uTWeevKi5uvFaepIEtVQz+JtGB6Vygawfkh+JbdvQFhuB8D zuSbCn6D3jddKmO74PeYl/BxDj9XFaV5K5Z04LLJ766RFkX0KWJJusTLQOw58blH CNZTaPVkweSdtvccxy5YetF5fXpUOjQNmcgu+JxAIxNBZ+hTLuK8qVH94W6o+qG2 uSed7wpU4TaQqdUWLPqY1SVCs2sF75uV5mZFqQI70winMWbL7dLftSzWOaC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxisVjUzmuqswpQx17jHF7T5qlkwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE75GyMbB28dEoyzDGdUsiuoYMzy/DjOTZvJ wTB7yY0+85Db+VzUL24KlK8ufjYNMNu9qGlA/2J+U43jXpnx/K2T0Mi+k67Lxi6K 8kI2BMFrNstPa3uzkMPJ7ObQNtYwT0HwD5vtwEt2LDLku4J67BtcYMU2+NDJbBW1 FY18XA8f7ard7mJk7Bu1borKM9KX203+AbGgO2o2X40uLZ5w0W5r0Kv5d0mtLqR0 zfSd+KGXpP7LF1A1O4prZyMoNsIQQM5ejwkuayF8fZzflINHPQ/Hy0IX6KT6ZfA6 axXyOtP6GZda1gyP3yqfgvv8yvQg1EyTVc9agAdTo3XztLwMC20= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:07 2025 by rpki-client