This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: HPCe0M8IY/ZwkQtutxWgm7DRWZxl5t6hO9xZF9BHnls= Subject key identifier: 6C:80:FD:92:89:ED:D7:1C:D2:2D:B0:97:FA:55:4C:E4:14:23:3E:6B Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 0B2B69E4563F2F389E3C662EF81D2F30CE41BE8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 02:30:01 +0000 Manifest this update: Sat 06 Dec 2025 02:25:01 +0000 Manifest next update: Tue 09 Dec 2025 04:48:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) 3: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: M9j2Q9mkxV5BwlLPFUR0it5sYcfFrORXsjZMTC4PuD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2b:69:e4:56:3f:2f:38:9e:3c:66:2e:f8:1d:2f:30:ce:41:be:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Dec 6 02:25:01 2025 GMT Not After : Dec 9 04:48:01 2025 GMT Subject: CN=6C80FD9289EDD71CD22DB097FA554CE414233E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:53:4c:ec:56:06:37:ed:69:eb:93:75:d2: 3b:d9:b5:0d:8e:df:98:8e:1c:f9:06:3d:cb:9c:31: 0d:ce:14:bd:50:92:c3:5a:66:e4:18:a0:54:58:e5: 43:54:b9:cf:47:2d:f1:f6:ea:cc:cc:cc:e4:e9:92: 48:dc:f3:ab:f4:cf:78:b0:99:61:8b:13:1e:ae:6b: d7:9d:56:ae:f2:fd:ce:50:c0:38:21:a6:07:45:6b: 78:35:1d:24:83:65:bb:7a:32:59:04:2c:b8:40:36: 50:f1:b8:eb:00:73:16:89:83:91:12:6a:35:16:1d: 2d:6f:eb:57:6e:aa:be:21:18:ad:a9:2d:80:f6:60: 9d:b8:76:a3:ff:09:d5:e4:36:eb:be:5a:15:30:2a: 7f:2f:51:af:6b:94:b6:2f:3e:a6:c5:8d:c0:4f:22: 1e:ae:55:72:1b:b3:88:11:8d:6a:e9:40:b3:36:30: a2:e4:55:f8:01:9a:e8:66:8b:d8:69:3b:b7:65:40: 84:27:74:bc:ff:79:c3:bc:b4:4c:22:94:9a:ec:2c: d5:a1:09:61:9e:4c:ec:82:53:20:c8:b1:1c:46:59: 4e:12:9e:0d:82:dc:17:77:d6:d9:1f:5a:d2:99:59: a3:df:1e:33:c1:a7:90:be:48:73:0e:5d:73:da:46: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:FD:92:89:ED:D7:1C:D2:2D:B0:97:FA:55:4C:E4:14:23:3E:6B X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:42:93:b9:c6:7f:70:8e:96:4c:30:63:08:16:0f:11:a0:d4: 84:ac:0a:aa:54:22:48:25:de:72:9a:a8:60:97:6d:fc:35:3b: 25:cb:38:13:af:2d:ba:2e:58:0b:42:a7:f9:05:ca:ff:dd:89: 55:22:68:bb:b2:bc:0b:c2:d6:39:28:2b:2b:9b:7a:8a:33:7c: 9f:d9:a4:d2:8a:ac:c4:08:28:d1:c2:e4:c4:be:32:06:89:41: c3:f2:74:fd:96:79:26:c7:8f:e1:7d:93:6b:29:84:69:8d:2a: bc:ee:07:4c:fa:15:43:9f:20:6a:47:28:4b:e4:7c:82:48:e9: fe:bd:89:67:f4:97:b9:97:47:10:96:2f:21:de:af:2c:e6:9d: 48:7f:d0:cc:36:f6:58:0a:5d:1d:66:15:e7:98:f7:1f:57:09: 93:d1:af:4e:a4:97:78:1e:7b:d1:f6:48:1c:83:82:c8:de:ec: 8a:15:11:1b:05:e3:ca:29:14:db:78:64:0a:19:94:f0:ec:7f: b4:89:05:ee:e0:12:40:81:f0:56:75:3a:b9:61:14:dc:41:b0: ef:44:0d:b1:05:78:36:9a:28:bf:03:37:f4:86:a0:a9:dd:5b: 29:ff:db:b1:ea:eb:3f:b7:d2:7f:e2:15:9f:35:42:75:a6:7b: 74:4f:46:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCytp5FY/LziePGYu+B0vMM5Bvo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTEyMDYwMjI1MDFaFw0yNTEyMDkwNDQ4MDFaMDMxMTAvBgNV BAMTKDZDODBGRDkyODlFREQ3MUNEMjJEQjA5N0ZBNTU0Q0U0MTQyMzNFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGElNM7FYGN+1p65N10jvZtQ2O 35iOHPkGPcucMQ3OFL1QksNaZuQYoFRY5UNUuc9HLfH26szMzOTpkkjc86v0z3iw mWGLEx6ua9edVq7y/c5QwDghpgdFa3g1HSSDZbt6MlkELLhANlDxuOsAcxaJg5ES ajUWHS1v61duqr4hGK2pLYD2YJ24dqP/CdXkNuu+WhUwKn8vUa9rlLYvPqbFjcBP Ih6uVXIbs4gRjWrpQLM2MKLkVfgBmuhmi9hpO7dlQIQndLz/ecO8tEwilJrsLNWh CWGeTOyCUyDIsRxGWU4Sng2C3Bd31tkfWtKZWaPfHjPBp5C+SHMOXXPaRvrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbID9kont1xzSLbCX+lVM5BQjPmswHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdCk7nGf3COlkwwYwgWDxGg1ISsCqpUIkgl 3nKaqGCXbfw1OyXLOBOvLbouWAtCp/kFyv/diVUiaLuyvAvC1jkoKyubeoozfJ/Z pNKKrMQIKNHC5MS+MgaJQcPydP2WeSbHj+F9k2sphGmNKrzuB0z6FUOfIGpHKEvk fIJI6f69iWf0l7mXRxCWLyHeryzmnUh/0Mw29lgKXR1mFeeY9x9XCZPRr06kl3ge e9H2SByDgsje7IoVERsF48opFNt4ZAoZlPDsf7SJBe7gEkCB8FZ1OrlhFNxBsO9E DbEFeDaaKL8DN/SGoKndWyn/27Hq6z+30n/iFZ81QnWme3RPRoU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:29 2025 by rpki-client