This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: 3x8hFeAd6+qSQ3tZTszFSkmzWYI8i72AcI2I8Lp9nSg= Subject key identifier: 56:E3:0E:66:9F:6F:F1:D3:EF:77:D3:D3:A4:85:90:D5:8F:5E:6E:FE Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 2C27D77963CC643AB7AC1FA93C48F67437DBA9C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 04D5 Signing time: Wed 17 Dec 2025 13:20:38 +0000 Manifest this update: Wed 17 Dec 2025 13:15:38 +0000 Manifest next update: Sun 21 Dec 2025 00:51:38 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: iAHJXG4K6+3EiEQSytu2MEfHZRYK05stg/Yr8f+Zlv8=) 2: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: vY9hMyVxtCcu8C0gZH3MBUMJUysXVg1fDt+F5NH5lLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:27:d7:79:63:cc:64:3a:b7:ac:1f:a9:3c:48:f6:74:37:db:a9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Dec 17 13:15:38 2025 GMT Not After : Dec 21 00:51:38 2025 GMT Subject: CN=56E30E669F6FF1D3EF77D3D3A48590D58F5E6EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:fa:81:dd:89:a9:c5:a0:26:73:16:2d:49: 46:f2:fe:cf:84:58:44:a2:76:ec:58:98:f7:d8:d4: 22:29:11:04:28:66:ca:fc:ed:dc:5d:5e:01:69:4a: b7:9c:63:1b:9e:ef:fb:39:f5:1b:dd:1a:52:d9:3c: c5:08:84:c3:fe:46:fd:03:de:17:fe:2f:15:d9:13: 0a:a8:3e:9b:b9:28:a9:b5:32:01:11:7c:c9:69:50: 8a:a6:e2:63:28:49:03:2e:8d:e6:4a:e4:ef:0d:8d: 81:c2:b0:bc:19:62:93:56:87:2e:77:61:61:e8:31: c2:3c:e0:0d:dd:0b:3c:dd:8d:bd:3a:b4:d8:9c:06: ce:44:26:48:6a:c5:86:61:e6:c0:78:61:89:d8:81: 9c:e0:40:eb:76:c4:64:a0:16:62:33:88:c7:6e:f2: 01:58:2b:7c:19:96:b4:17:47:be:c8:16:8e:45:30: 05:ea:58:2c:53:3c:c3:df:6c:1b:5c:6e:c3:ff:6b: b6:a8:40:97:0a:a6:9d:40:0e:06:5a:f7:1d:cb:ca: 6c:83:f4:9b:68:f0:9d:d6:ce:77:ba:1f:91:1f:43: 70:03:3a:bc:37:65:92:b9:b5:13:93:ce:d9:20:28: c5:6a:3d:45:97:9e:bb:5f:06:67:31:08:38:1d:7e: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E3:0E:66:9F:6F:F1:D3:EF:77:D3:D3:A4:85:90:D5:8F:5E:6E:FE X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:c1:58:62:e1:8c:5b:85:91:4d:08:bf:44:eb:27:6a:67: 89:59:ba:0f:9d:dc:1e:3b:01:46:0c:45:dd:d6:61:02:4b:49: 7e:0f:31:2e:03:3a:b7:c9:86:87:f9:fa:c3:01:b3:62:ca:d0: a9:2c:d2:a4:92:a0:e2:3f:03:19:8e:8b:c3:a4:2f:31:45:62: 8c:94:4d:5f:f6:6b:30:88:86:75:55:f3:f9:7d:fc:ea:c0:5e: 3b:13:53:a3:de:10:ac:02:95:a3:2d:b0:55:bc:63:b2:7d:e7: a6:9e:0b:f8:dc:b2:51:3a:3f:6c:00:b9:f3:aa:f1:71:5a:75: b1:a5:7c:13:bb:9a:16:ad:df:75:34:58:d5:f3:a4:d4:b8:78: 27:33:88:d8:74:d6:90:35:ec:8b:3a:db:66:b6:e6:46:d4:f6: bb:79:5b:e5:91:2d:c3:ff:c8:08:fd:c1:f9:89:fe:24:70:af: 73:be:b8:2f:3c:81:4f:49:7d:3d:37:4e:b8:ff:ff:2d:11:c6: d5:61:46:f3:51:78:89:d3:61:32:cb:e8:43:ef:5e:54:f6:bd: 1c:06:86:20:3b:6d:41:eb:34:7c:2d:08:dd:80:5d:46:ff:4d: b4:6d:6a:49:15:5f:1f:0a:03:54:ed:fb:7f:35:5b:98:9b:49: 00:a7:a0:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCfXeWPMZDq3rB+pPEj2dDfbqcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNTEyMTcxMzE1MzhaFw0yNTEyMjEwMDUxMzhaMDMxMTAvBgNV BAMTKDU2RTMwRTY2OUY2RkYxRDNFRjc3RDNEM0E0ODU5MEQ1OEY1RTZFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyfqB3YmpxaAmcxYtSUby/s+E WESiduxYmPfY1CIpEQQoZsr87dxdXgFpSrecYxue7/s59RvdGlLZPMUIhMP+Rv0D 3hf+LxXZEwqoPpu5KKm1MgERfMlpUIqm4mMoSQMujeZK5O8NjYHCsLwZYpNWhy53 YWHoMcI84A3dCzzdjb06tNicBs5EJkhqxYZh5sB4YYnYgZzgQOt2xGSgFmIziMdu 8gFYK3wZlrQXR77IFo5FMAXqWCxTPMPfbBtcbsP/a7aoQJcKpp1ADgZa9x3LymyD 9Jto8J3Wzne6H5EfQ3ADOrw3ZZK5tROTztkgKMVqPUWXnrtfBmcxCDgdfom5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuMOZp9v8dPvd9PTpIWQ1Y9ebv4wHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdWwVhi4YxbhZFNCL9E6ydqZ4lZug+d3B47 AUYMRd3WYQJLSX4PMS4DOrfJhof5+sMBs2LK0Kks0qSSoOI/AxmOi8OkLzFFYoyU TV/2azCIhnVV8/l9/OrAXjsTU6PeEKwClaMtsFW8Y7J956aeC/jcslE6P2wAufOq 8XFadbGlfBO7mhat33U0WNXzpNS4eCcziNh01pA17Is622a25kbU9rt5W+WRLcP/ yAj9wfmJ/iRwr3O+uC88gU9JfT03Trj//y0RxtVhRvNReInTYTLL6EPvXlT2vRwG hiA7bUHrNHwtCN2AXUb/TbRtakkVXx8KA1Tt+381W5ibSQCnoNk= -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:44 2025 by rpki-client