This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: hls2SzcYrUjgddztOQbf70auVmBmUxGNBCPLgXUMdys= Subject key identifier: EB:81:C8:55:D3:E2:51:5A:2D:23:FE:56:8A:3A:E9:BB:58:D3:3F:0B Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 7E092573259195B9617292F2A19189EA0AF8651B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: 013B Signing time: Sat 06 Dec 2025 16:51:07 +0000 Manifest this update: Sat 06 Dec 2025 16:46:07 +0000 Manifest next update: Wed 10 Dec 2025 04:39:07 +0000 Files and hashes: 1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: 5wzTa61Cjzg+Fclgfa/nmOSmnapFdVTrGu8c3C6f1S0=) 2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:09:25:73:25:91:95:b9:61:72:92:f2:a1:91:89:ea:0a:f8:65:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Dec 6 16:46:07 2025 GMT Not After : Dec 10 04:39:07 2025 GMT Subject: CN=EB81C855D3E2515A2D23FE568A3AE9BB58D33F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:0e:d2:e1:52:c5:8c:8d:73:c9:f1:17:66: cc:07:91:ab:49:85:b6:8b:09:0a:38:8d:0b:af:71: 0f:e5:e8:62:1a:45:15:34:ba:2e:48:ac:bb:9f:a6: 44:63:36:d2:c0:24:00:1e:f9:52:7b:89:8b:9d:76: 8a:6b:d7:ed:e3:4b:8c:fc:c7:da:4c:b8:d2:cf:ea: 92:d3:40:8a:b7:a5:28:e0:78:a6:b2:87:37:80:c8: 0e:3a:b6:fc:5c:0f:d9:f3:df:4c:d8:b7:d8:5e:ee: c3:31:e0:71:63:45:64:f4:95:b3:88:26:d5:1b:02: 05:fc:df:8e:1d:3a:a8:61:aa:e4:ce:07:45:41:8e: 22:0b:f2:fd:7f:af:e1:80:b3:32:fc:6f:a8:95:59: af:c8:fa:93:21:5d:c4:01:db:77:e5:9f:7d:71:32: b9:03:89:99:8b:20:d6:21:46:d1:53:1f:9e:3d:25: 7e:03:50:58:94:c1:df:4d:2b:7f:60:f8:84:97:a3: 87:12:29:9d:47:4d:34:92:3b:ae:ae:2b:91:69:71: e7:1d:a6:bf:50:d6:f7:24:22:b0:7e:90:c3:98:1c: 2f:de:2f:6e:5b:67:63:6a:66:87:33:2d:8c:ba:f3: 2f:42:9e:81:58:49:9d:c6:e1:3b:a1:93:40:43:03: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:C8:55:D3:E2:51:5A:2D:23:FE:56:8A:3A:E9:BB:58:D3:3F:0B X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:98:5d:e9:ad:0e:cc:5b:c6:d9:9f:6c:0d:29:d6:8d:d6: 38:e9:ef:53:d8:12:68:c0:6a:50:fc:ec:1e:45:35:b3:0c:fb: 62:cb:30:a0:7e:c9:b0:f8:ab:da:fb:66:fc:3d:74:57:d5:7a: c7:06:bc:5a:bd:ac:fe:67:c9:ea:e5:fa:d4:44:ea:fa:7a:7a: 55:e6:7b:36:cd:de:b6:6a:e6:70:d3:1c:bd:36:7b:59:15:0d: 93:c5:5f:74:ae:98:ba:1b:1a:32:71:76:73:02:91:c7:36:68: 39:d2:ab:99:a9:22:6e:c6:00:f8:19:09:e5:64:00:62:63:00: d3:27:da:89:73:c6:b4:8d:25:70:f3:00:c8:51:48:c0:35:e2: d5:5c:d6:bc:71:89:7e:fa:91:f6:6c:c9:54:b8:4c:46:1a:fc: 9e:c8:f0:12:2a:99:ee:27:d2:64:99:ab:3d:ae:2e:f4:23:c7: 19:f0:27:5b:b4:7a:aa:af:a0:23:1d:ca:7a:67:a2:d0:da:20: 45:c2:b8:3b:33:ff:fb:4e:3f:66:20:0f:42:08:a8:1b:6b:9a: b0:08:70:16:d5:70:81:b6:b4:e7:90:fc:b5:9a:b8:bb:04:e8: c8:d9:df:3c:e7:79:1a:be:99:37:0a:d5:fe:3b:b7:30:53:1f: 49:ae:c7:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgklcyWRlblhcpLyoZGJ6gr4ZRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNTEyMDYxNjQ2MDdaFw0yNTEyMTAwNDM5MDdaMDMxMTAvBgNV BAMTKEVCODFDODU1RDNFMjUxNUEyRDIzRkU1NjhBM0FFOUJCNThEMzNGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjA7S4VLFjI1zyfEXZswHkatJ hbaLCQo4jQuvcQ/l6GIaRRU0ui5IrLufpkRjNtLAJAAe+VJ7iYuddopr1+3jS4z8 x9pMuNLP6pLTQIq3pSjgeKayhzeAyA46tvxcD9nz30zYt9he7sMx4HFjRWT0lbOI JtUbAgX8344dOqhhquTOB0VBjiIL8v1/r+GAszL8b6iVWa/I+pMhXcQB23fln31x MrkDiZmLINYhRtFTH549JX4DUFiUwd9NK39g+ISXo4cSKZ1HTTSSO66uK5Fpcecd pr9Q1vckIrB+kMOYHC/eL25bZ2NqZoczLYy68y9CnoFYSZ3G4Tuhk0BDA25PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64HIVdPiUVotI/5Wijrpu1jTPwswHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnYmF3prQ7MW8bZn2wNKdaN1jjp71PYEmjA alD87B5FNbMM+2LLMKB+ybD4q9r7Zvw9dFfVescGvFq9rP5nyerl+tRE6vp6elXm ezbN3rZq5nDTHL02e1kVDZPFX3SumLobGjJxdnMCkcc2aDnSq5mpIm7GAPgZCeVk AGJjANMn2olzxrSNJXDzAMhRSMA14tVc1rxxiX76kfZsyVS4TEYa/J7I8BIqme4n 0mSZqz2uLvQjxxnwJ1u0eqqvoCMdynpnotDaIEXCuDsz//tOP2YgD0IIqBtrmrAI cBbVcIG2tOeQ/LWauLsE6MjZ3zzneRq+mTcK1f47tzBTH0mux8g= -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:53 2025 by rpki-client