This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: FU7xQ6tk0ayyKIYAK9yM9/+3EQXgq/8NGQdd19rjKZc= Subject key identifier: 8E:99:4C:12:E1:4E:19:E3:F4:80:39:96:8E:FF:09:6A:46:D6:60:DA Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 3302FE44E3BE86764CA33352CC6E9E90358F654E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 014D Signing time: Sat 06 Dec 2025 19:10:45 +0000 Manifest this update: Sat 06 Dec 2025 19:05:45 +0000 Manifest next update: Wed 10 Dec 2025 00:50:45 +0000 Files and hashes: 1: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=) 2: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=) 3: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=) 4: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=) 5: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: cf7GgjiKKqobIQ3Av/AmpyGM2pfIvvgq1IkWNHjFRos=) 6: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=) 7: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: qqWSkoteDsFPSy94pyeYjAzSUP9Ynr2j2aE8DeLFfsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:fe:44:e3:be:86:76:4c:a3:33:52:cc:6e:9e:90:35:8f:65:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Dec 6 19:05:45 2025 GMT Not After : Dec 10 00:50:45 2025 GMT Subject: CN=8E994C12E14E19E3F48039968EFF096A46D660DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:3c:ca:4a:c9:50:8c:fe:1a:57:ea:b5:48: ca:b5:16:a1:8e:6a:58:d1:04:e3:c4:a1:66:88:f7: 68:94:66:3e:b6:6b:b4:12:fe:d2:3a:f8:f8:c9:cb: 2f:8d:cf:97:7d:7d:6e:de:40:c3:a4:be:3a:64:8e: 48:de:db:51:c3:ff:34:39:5c:99:37:fb:5e:f6:92: 0b:6b:63:c6:5e:dd:1d:3f:93:83:96:bf:45:a5:83: 2e:56:92:6f:99:b4:db:9b:63:20:c8:ac:1b:5d:45: 0f:5a:85:eb:13:e4:b7:c5:e5:e3:38:28:e2:b4:c2: 16:58:55:41:7d:6e:ec:96:ff:90:91:e2:86:da:d4: 05:da:7a:24:4e:e4:76:9d:e0:a4:3d:e6:c9:63:7b: 4c:cb:d8:5c:28:2d:5d:6c:32:33:b3:5b:3a:19:98: 0a:f2:76:17:3d:ba:2a:87:84:15:01:4f:a5:37:b9: 77:eb:0b:9b:da:66:6d:2d:ab:51:d6:f7:ac:bc:18: 35:8d:05:ca:5e:c0:51:ee:29:45:f0:d7:fb:b6:a7: 98:71:40:57:16:1f:45:e7:c7:c1:09:59:5e:21:f4: 96:bf:39:29:ac:ae:62:3f:45:d2:79:e7:15:07:9b: 48:80:f5:aa:23:5f:3d:ef:39:52:ad:7f:64:3f:1e: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:4C:12:E1:4E:19:E3:F4:80:39:96:8E:FF:09:6A:46:D6:60:DA X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:49:af:08:7e:d7:83:ea:de:fd:16:0e:a8:b9:00:a4:b8:ee: 95:e8:53:25:42:e5:7c:bd:e3:1c:ec:db:4a:14:08:3e:6a:78: 40:a5:02:39:e5:e8:3d:ec:8b:1a:b4:c7:6c:d7:ed:e5:24:8c: 3b:8d:30:cd:c5:15:2a:44:ba:39:c1:70:5b:3f:cb:51:ed:2c: 16:af:05:03:6b:0e:6f:29:e1:32:c5:10:1b:31:eb:54:8b:03: 11:47:0e:f9:06:a4:b6:b3:a2:14:d1:40:d9:98:e8:2a:18:1d: 6b:47:8a:6e:cf:e3:64:10:6e:5a:cd:64:37:6e:5b:6d:d3:39: 8e:f8:e8:be:9a:50:ed:a7:96:eb:d7:a3:1b:04:9d:28:74:ee: db:01:2a:cf:4f:df:00:b8:d3:fb:83:9e:da:11:bd:c5:5f:d2: 77:0c:83:87:6e:8c:49:18:dd:f0:c2:cb:fe:c0:99:12:2c:e3: 06:16:ad:e4:c7:56:22:ad:dd:dc:02:65:b1:48:bb:b8:fd:fa: 38:3f:a2:cb:16:3a:73:f8:17:f1:b4:19:0b:78:5a:86:97:0f: ac:87:ea:28:44:0b:f2:fa:4d:f6:0c:a5:e0:d5:2a:b5:31:ff: ff:a8:29:d9:15:22:b4:13:58:d5:4a:4d:e3:81:01:4e:e9:3b: 3e:3a:57:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwL+ROO+hnZMozNSzG6ekDWPZU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTEyMDYxOTA1NDVaFw0yNTEyMTAwMDUwNDVaMDMxMTAvBgNV BAMTKDhFOTk0QzEyRTE0RTE5RTNGNDgwMzk5NjhFRkYwOTZBNDZENjYwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFzzKSslQjP4aV+q1SMq1FqGO aljRBOPEoWaI92iUZj62a7QS/tI6+PjJyy+Nz5d9fW7eQMOkvjpkjkje21HD/zQ5 XJk3+172kgtrY8Ze3R0/k4OWv0Wlgy5Wkm+ZtNubYyDIrBtdRQ9ahesT5LfF5eM4 KOK0whZYVUF9buyW/5CR4oba1AXaeiRO5Had4KQ95slje0zL2FwoLV1sMjOzWzoZ mArydhc9uiqHhBUBT6U3uXfrC5vaZm0tq1HW96y8GDWNBcpewFHuKUXw1/u2p5hx QFcWH0Xnx8EJWV4h9Ja/OSmsrmI/RdJ55xUHm0iA9aojXz3vOVKtf2Q/HhXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjplMEuFOGeP0gDmWjv8JakbWYNowHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhJrwh+14Pq3v0WDqi5AKS47pXoUyVC5Xy9 4xzs20oUCD5qeEClAjnl6D3sixq0x2zX7eUkjDuNMM3FFSpEujnBcFs/y1HtLBav BQNrDm8p4TLFEBsx61SLAxFHDvkGpLazohTRQNmY6CoYHWtHim7P42QQblrNZDdu W23TOY746L6aUO2nluvXoxsEnSh07tsBKs9P3wC40/uDntoRvcVf0ncMg4dujEkY 3fDCy/7AmRIs4wYWreTHViKt3dwCZbFIu7j9+jg/ossWOnP4F/G0GQt4WoaXD6yH 6ihEC/L6TfYMpeDVKrUx//+oKdkVIrQTWNVKTeOBAU7pOz46V4Y= -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:41 2025 by rpki-client