This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: ANh4msTsUMO0h9INvfLPqW2/Y/CKEdnx7wD4EaY3Jjw= Subject key identifier: C2:D0:B2:5E:6F:CE:3E:83:56:1F:22:AE:73:9C:B4:8A:89:51:4E:26 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 24349BEB1E8718D1F9A383A3E9630ED170B20D9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: BB Signing time: Fri 05 Dec 2025 06:30:06 +0000 Manifest this update: Fri 05 Dec 2025 06:25:06 +0000 Manifest next update: Mon 08 Dec 2025 10:09:06 +0000 Files and hashes: 1: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: A0cBoHKmpgJjuSQbbrYvACJ4cLFXtKL3An3ulKOK294=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 4: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:34:9b:eb:1e:87:18:d1:f9:a3:83:a3:e9:63:0e:d1:70:b2:0d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Dec 5 06:25:06 2025 GMT Not After : Dec 8 10:09:06 2025 GMT Subject: CN=C2D0B25E6FCE3E83561F22AE739CB48A89514E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:f6:77:fc:6c:56:2e:7e:55:bd:5f:f9:74: 47:12:a3:57:c3:6a:72:e8:43:2b:bc:e0:00:c5:6a: c9:31:22:00:e7:67:ae:ec:dd:d8:ba:26:c4:40:2a: 4c:9d:2b:41:c3:08:03:d1:ac:80:c0:dd:67:fe:d6: 32:b9:0c:51:2f:9f:08:ee:be:cb:98:50:b2:45:91: 31:6e:11:42:63:1a:91:ef:d1:a0:85:a2:f5:c1:0b: 87:73:2b:f0:d5:24:22:e1:4e:ce:9a:81:7f:f6:5d: b4:cd:c4:53:0c:61:4d:13:47:65:0a:e0:22:b1:d5: ac:3b:4e:5c:e9:f3:61:1f:17:0f:a9:1e:39:d9:e6: 09:e2:09:26:31:69:92:a4:c4:37:e7:8e:4d:4b:71: 55:65:72:6a:01:8f:ba:7d:cb:04:18:7a:0c:3e:8f: 0e:f6:57:05:1d:03:c1:a2:9e:5c:b2:64:a9:49:c8: 03:d3:31:f9:8d:77:d5:52:32:dd:28:dd:35:ef:7f: 71:97:53:fc:fe:7d:ea:e3:43:ab:1e:7c:f4:18:c3: d7:23:e0:11:b4:ce:4d:92:9f:1a:31:88:fb:a8:71: 58:99:89:87:6c:67:77:49:89:28:ee:7b:74:af:c9: e7:92:4f:8a:61:ca:a2:b1:fd:f1:8c:40:c6:e7:10: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D0:B2:5E:6F:CE:3E:83:56:1F:22:AE:73:9C:B4:8A:89:51:4E:26 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a3:86:7e:ff:d5:fc:c3:a0:01:44:55:e0:e2:11:b4:69:47: 21:7e:73:72:48:49:69:0f:68:94:12:0a:97:7a:01:66:81:d0: 67:5d:3f:6d:4b:df:52:3c:1e:55:aa:7b:30:54:75:d0:27:5f: 48:9e:6d:2e:49:ab:1f:8f:8f:7e:40:cf:28:c4:09:d7:d3:c1: 7e:08:3e:c5:e1:fe:05:fa:3c:be:90:49:2a:43:7d:d4:cc:2a: d3:a9:d3:02:33:f2:75:21:03:b3:36:22:a5:21:33:00:f7:25: bb:b3:2a:d6:b1:d7:62:a8:42:8a:71:73:db:33:49:18:c3:19: d1:2b:84:3d:ed:dd:2d:fc:bb:2a:59:4c:ef:60:b1:a5:1d:ea: 72:e5:6a:e1:11:d9:e0:37:60:09:f5:aa:51:e8:a7:8b:7b:b3: 31:fa:18:de:46:4e:f3:66:76:c1:c1:75:e2:13:2b:d1:97:75: 8c:00:99:46:9d:b4:2c:ce:0f:23:0b:cc:af:a8:d8:17:42:41: 26:70:18:ac:3e:1c:c5:48:29:b7:b5:89:06:cf:91:6f:74:de: fc:ff:5e:c2:cc:57:5f:09:bc:00:2b:46:af:a0:6b:ef:6c:1d: fa:d5:75:51:50:8a:44:2c:b8:49:9a:2a:bf:71:e5:d2:d2:cb: 41:06:0c:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDSb6x6HGNH5o4Oj6WMO0XCyDZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTEyMDUwNjI1MDZaFw0yNTEyMDgxMDA5MDZaMDMxMTAvBgNV BAMTKEMyRDBCMjVFNkZDRTNFODM1NjFGMjJBRTczOUNCNDhBODk1MTRFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLPZ3/GxWLn5VvV/5dEcSo1fD anLoQyu84ADFaskxIgDnZ67s3di6JsRAKkydK0HDCAPRrIDA3Wf+1jK5DFEvnwju vsuYULJFkTFuEUJjGpHv0aCFovXBC4dzK/DVJCLhTs6agX/2XbTNxFMMYU0TR2UK 4CKx1aw7Tlzp82EfFw+pHjnZ5gniCSYxaZKkxDfnjk1LcVVlcmoBj7p9ywQYegw+ jw72VwUdA8GinlyyZKlJyAPTMfmNd9VSMt0o3TXvf3GXU/z+ferjQ6sefPQYw9cj 4BG0zk2SnxoxiPuocViZiYdsZ3dJiSjue3SvyeeST4phyqKx/fGMQMbnEPVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwtCyXm/OPoNWHyKuc5y0iolRTiYwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGjhn7/1fzDoAFEVeDiEbRpRyF+c3JISWkP aJQSCpd6AWaB0GddP21L31I8HlWqezBUddAnX0iebS5Jqx+Pj35AzyjECdfTwX4I PsXh/gX6PL6QSSpDfdTMKtOp0wIz8nUhA7M2IqUhMwD3JbuzKtax12KoQopxc9sz SRjDGdErhD3t3S38uypZTO9gsaUd6nLlauER2eA3YAn1qlHop4t7szH6GN5GTvNm dsHBdeITK9GXdYwAmUadtCzODyMLzK+o2BdCQSZwGKw+HMVIKbe1iQbPkW903vz/ XsLMV18JvAArRq+ga+9sHfrVdVFQikQsuEmaKr9x5dLSy0EGDJc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:56 2025 by rpki-client