This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: EQGjk0ndAAtIx/Z5+QYT27joIZMDViaBZ1I/ifwLLV0= Subject key identifier: EE:34:4E:7A:C3:F3:B0:B2:45:52:10:EC:0B:E0:1B:CD:27:0B:DB:D4 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 336A0B5993B66B4F407D679DD1393EEE63B1DFD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: F2 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 06:56:30 +0000 Manifest next update: Tue 09 Dec 2025 14:45:30 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: nvjnFKpRQZtQCKe5AhgxBrgAh8lDxxxjdhl6zC2yB+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6a:0b:59:93:b6:6b:4f:40:7d:67:9d:d1:39:3e:ee:63:b1:df:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Dec 6 06:56:30 2025 GMT Not After : Dec 9 14:45:30 2025 GMT Subject: CN=EE344E7AC3F3B0B2455210EC0BE01BCD270BDBD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a0:1b:89:c1:d3:69:4e:ef:ac:66:92:2e:f2: 88:38:9d:24:5e:bb:55:01:81:f5:db:e2:5d:5b:ad: 1f:84:7e:f9:57:28:eb:ce:e3:d8:f1:b7:04:29:fb: 70:e1:14:2e:56:dc:b7:5e:ae:38:4c:ca:c1:f2:a9: f0:12:17:3c:80:3b:cb:6c:d4:83:90:1c:d2:72:ff: 32:bb:e8:21:7b:24:21:16:02:af:5b:75:56:c3:05: 20:eb:65:c1:11:cb:48:18:6d:d7:7e:98:df:2f:d0: 6a:7e:dd:5a:3c:d4:b8:38:06:19:67:87:18:fa:e0: 5a:c8:f7:c5:ae:c8:b2:4d:ff:e5:c7:26:d6:1d:0d: 67:71:8b:7c:8a:e9:bd:83:b8:42:0e:e4:17:41:5f: a2:80:e8:48:72:86:b0:26:9e:e3:54:b6:7b:e4:a8: ed:ad:65:6e:15:50:0e:3a:c3:f0:dc:ce:93:89:19: 4e:36:f4:ac:a7:da:b8:74:73:68:0c:35:3f:2b:4f: d7:4e:53:a5:f0:d0:c0:5a:ca:1c:3f:93:2d:50:7f: 98:82:74:26:3d:74:88:f5:0b:1d:1a:c9:10:7b:4a: e5:12:6c:b8:63:9d:ea:6b:6b:10:f7:b1:2f:7e:58: 96:f5:f0:46:02:92:bd:bc:93:13:7f:bf:76:da:a4: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:4E:7A:C3:F3:B0:B2:45:52:10:EC:0B:E0:1B:CD:27:0B:DB:D4 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c2:2c:0e:ac:73:3c:bc:73:b5:70:e6:8b:4c:d4:d1:2c:28: ab:6d:5e:0f:54:2f:03:cf:ca:71:c2:ee:d9:46:f9:93:12:5b: a5:63:fa:5b:c6:a5:e0:b1:08:a6:43:09:08:e3:91:23:6c:a0: 9b:99:4c:c7:f8:09:29:19:b7:d0:87:49:12:b7:87:a6:66:97: a2:fd:d2:e2:01:ab:4f:84:76:d5:34:f8:0b:0d:07:7d:fc:13: 3c:17:1c:16:1b:8f:91:33:0f:99:cf:f6:30:2a:b4:29:ed:a1: 03:32:15:9f:db:56:45:5c:26:38:8d:ef:3a:68:22:80:09:2a: 14:5c:a6:ec:2f:5c:fe:83:77:6d:5e:18:3c:41:14:1f:41:25: 6e:ed:ea:01:2c:82:33:33:74:e4:c8:a4:4e:89:b1:09:b5:ed: 30:98:ea:d9:91:86:41:9d:02:dd:6c:b2:5c:5a:7c:c5:0a:5a: 91:75:42:1b:6f:61:48:59:fc:b3:4f:44:a7:c8:43:fb:84:93: 7e:5e:23:1e:80:f5:6e:d7:ed:2e:d8:02:7e:bd:43:11:26:6f: a7:07:19:c7:78:2c:8b:0f:26:b5:fe:03:95:8c:00:61:df:95: 15:50:60:54:2f:b5:a5:c9:7f:ba:e0:82:a2:d9:9f:f1:b6:fb: d6:3a:09:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2oLWZO2a09AfWed0Tk+7mOx39AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTEyMDYwNjU2MzBaFw0yNTEyMDkxNDQ1MzBaMDMxMTAvBgNV BAMTKEVFMzQ0RTdBQzNGM0IwQjI0NTUyMTBFQzBCRTAxQkNEMjcwQkRCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtoBuJwdNpTu+sZpIu8og4nSRe u1UBgfXb4l1brR+EfvlXKOvO49jxtwQp+3DhFC5W3LderjhMysHyqfASFzyAO8ts 1IOQHNJy/zK76CF7JCEWAq9bdVbDBSDrZcERy0gYbdd+mN8v0Gp+3Vo81Lg4Bhln hxj64FrI98WuyLJN/+XHJtYdDWdxi3yK6b2DuEIO5BdBX6KA6EhyhrAmnuNUtnvk qO2tZW4VUA46w/DczpOJGU429Kyn2rh0c2gMNT8rT9dOU6Xw0MBayhw/ky1Qf5iC dCY9dIj1Cx0ayRB7SuUSbLhjnepraxD3sS9+WJb18EYCkr28kxN/v3bapH+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7jROesPzsLJFUhDsC+AbzScL29QwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfCLA6sczy8c7Vw5otM1NEsKKttXg9ULwPP ynHC7tlG+ZMSW6Vj+lvGpeCxCKZDCQjjkSNsoJuZTMf4CSkZt9CHSRK3h6Zml6L9 0uIBq0+EdtU0+AsNB338EzwXHBYbj5EzD5nP9jAqtCntoQMyFZ/bVkVcJjiN7zpo IoAJKhRcpuwvXP6Dd21eGDxBFB9BJW7t6gEsgjMzdOTIpE6JsQm17TCY6tmRhkGd At1sslxafMUKWpF1QhtvYUhZ/LNPRKfIQ/uEk35eIx6A9W7X7S7YAn69QxEmb6cH Gcd4LIsPJrX+A5WMAGHflRVQYFQvtaXJf7rggqLZn/G2+9Y6CXo= -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:25 2025 by rpki-client