This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: pkWT1hoMwECa5kSovOetxAJOCGtmzkWSTuDHJphscbI= Subject key identifier: 9B:C8:E3:B4:34:7D:27:D9:47:7B:3A:B8:1F:D8:AF:47:E2:04:32:BC Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 5A517BA2B657788F2BCF2169C75815290759D050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0190 Signing time: Sat 06 Dec 2025 16:00:54 +0000 Manifest this update: Sat 06 Dec 2025 15:55:54 +0000 Manifest next update: Wed 10 Dec 2025 03:44:54 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 2: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) 3: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: ZPFoZ0yz3r1hopJqwO2ZNzeka++V+LT6AWIEFL23CD0=) 4: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:51:7b:a2:b6:57:78:8f:2b:cf:21:69:c7:58:15:29:07:59:d0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Dec 6 15:55:54 2025 GMT Not After : Dec 10 03:44:54 2025 GMT Subject: CN=9BC8E3B4347D27D9477B3AB81FD8AF47E20432BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:1b:0f:44:d9:9c:c4:21:50:0b:b7:c2:59: 74:c8:e9:8d:ab:2c:63:7d:93:9d:12:5b:92:89:9a: 78:d1:db:f4:c4:a0:71:14:54:84:63:c2:78:7d:f7: 03:96:6d:63:6f:60:b4:83:20:f3:1b:fe:68:6a:e3: 20:9f:6f:88:07:ba:bd:e8:f5:cb:a2:c9:33:d3:3a: 3e:19:9b:0a:4f:91:3b:13:f8:e8:ca:ac:b4:05:84: 13:e0:59:2f:83:5e:9f:55:62:4e:52:54:9e:a7:b7: 64:28:4a:81:64:1a:46:8e:13:8e:68:3e:a3:07:03: 1d:e7:28:f4:d6:a1:dd:b8:e9:e8:35:c5:a8:76:80: ae:f8:10:38:a6:73:ff:8f:aa:4e:96:0d:3a:1b:6c: b8:0a:9d:40:10:c9:b1:8f:80:d0:70:f2:ce:6d:06: 7d:1a:20:f2:8f:3d:27:26:db:d8:14:0c:aa:3e:db: 1a:28:19:9e:be:2d:76:7f:09:1c:33:6c:bf:48:88: 36:59:8a:26:75:dc:ea:f2:2c:e7:b4:3c:bb:9b:58: 0a:1f:85:13:54:7b:43:af:c6:b4:6c:56:b1:4b:ed: 60:e0:a8:5a:95:d3:33:5f:69:ed:30:b8:d3:dc:13: 88:96:0d:2c:12:1a:da:a5:72:4d:ba:65:09:a6:8d: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:E3:B4:34:7D:27:D9:47:7B:3A:B8:1F:D8:AF:47:E2:04:32:BC X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b6:81:3b:30:e2:f3:07:7e:a6:b7:bc:fe:ad:36:4f:40:d9: 67:4e:e7:ec:4d:2f:b9:bd:f3:7e:9d:33:b2:d7:f1:e0:8a:7a: 01:38:86:40:4e:74:c7:39:1f:ef:43:df:bb:5b:69:df:fe:3d: 89:fd:aa:45:a5:a9:88:29:16:73:b5:b3:44:4c:49:ab:10:d4: 84:90:ae:9b:de:2f:1c:22:c2:e6:8b:b7:26:af:43:74:8e:73: 58:3e:03:2f:00:48:6d:bb:1d:87:4a:31:3e:39:0f:57:3b:90: 74:c9:a1:52:a5:c6:f5:97:b0:49:11:f5:0f:d8:fc:2f:fe:5f: cf:18:ca:3f:b0:7a:76:96:a7:d3:74:ac:5d:ae:6d:64:f8:70: 77:8e:df:65:56:16:22:9e:43:f1:76:5b:60:63:ec:94:32:b8: 5f:66:9f:4f:72:a7:a3:59:75:19:ef:2b:50:10:a5:62:be:4f: f2:ed:55:b8:11:c3:8c:83:c8:fc:71:64:57:bf:07:73:a4:78: 9f:e2:7f:b2:a3:62:5e:9e:f3:17:a7:d7:fe:e0:1a:b5:79:67: 9e:18:70:d8:5e:72:fb:84:76:4e:22:13:76:df:9c:b6:50:63: fc:8f:f1:ed:b9:8d:1b:ea:64:93:f5:32:59:0b:b1:c9:b2:cd: dc:09:2e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlF7orZXeI8rzyFpx1gVKQdZ0FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTEyMDYxNTU1NTRaFw0yNTEyMTAwMzQ0NTRaMDMxMTAvBgNV BAMTKDlCQzhFM0I0MzQ3RDI3RDk0NzdCM0FCODFGRDhBRjQ3RTIwNDMyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfBsPRNmcxCFQC7fCWXTI6Y2r LGN9k50SW5KJmnjR2/TEoHEUVIRjwnh99wOWbWNvYLSDIPMb/mhq4yCfb4gHur3o 9cuiyTPTOj4ZmwpPkTsT+OjKrLQFhBPgWS+DXp9VYk5SVJ6nt2QoSoFkGkaOE45o PqMHAx3nKPTWod246eg1xah2gK74EDimc/+Pqk6WDTobbLgKnUAQybGPgNBw8s5t Bn0aIPKPPScm29gUDKo+2xooGZ6+LXZ/CRwzbL9IiDZZiiZ13OryLOe0PLubWAof hRNUe0OvxrRsVrFL7WDgqFqV0zNfae0wuNPcE4iWDSwSGtqlck26ZQmmje5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8jjtDR9J9lHezq4H9ivR+IEMrwwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe2gTsw4vMHfqa3vP6tNk9A2WdO5+xNL7m9 836dM7LX8eCKegE4hkBOdMc5H+9D37tbad/+PYn9qkWlqYgpFnO1s0RMSasQ1ISQ rpveLxwiwuaLtyavQ3SOc1g+Ay8ASG27HYdKMT45D1c7kHTJoVKlxvWXsEkR9Q/Y /C/+X88Yyj+wenaWp9N0rF2ubWT4cHeO32VWFiKeQ/F2W2Bj7JQyuF9mn09yp6NZ dRnvK1AQpWK+T/LtVbgRw4yDyPxxZFe/B3OkeJ/if7KjYl6e8xen1/7gGrV5Z54Y cNhecvuEdk4iE3bfnLZQY/yP8e25jRvqZJP1MlkLscmyzdwJLpU= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:43 2025 by rpki-client