This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: t0o+jaS+NemGc6y4ktBOadfN6VPWrLK6SF5aemB0Hw0= Subject key identifier: 78:71:89:F3:80:20:EE:32:6E:B5:88:2D:A7:B7:FB:16:F2:FD:1A:99 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 230696ADD041BC8E5CE0725C53A19D479A67E97B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 041D Signing time: Fri 05 Dec 2025 04:21:30 +0000 Manifest this update: Fri 05 Dec 2025 04:16:30 +0000 Manifest next update: Mon 08 Dec 2025 08:28:30 +0000 Files and hashes: 1: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 3: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: y+iSsEPcnpcsW0yz+XithYpU7eCniuCJRVc8jm/+2+M=) 4: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:06:96:ad:d0:41:bc:8e:5c:e0:72:5c:53:a1:9d:47:9a:67:e9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Dec 5 04:16:30 2025 GMT Not After : Dec 8 08:28:30 2025 GMT Subject: CN=787189F38020EE326EB5882DA7B7FB16F2FD1A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:5c:a1:21:23:80:d3:54:c4:32:4b:70:de: f2:65:82:f5:6f:78:4c:a0:ea:e8:32:53:61:6a:6b: 62:9e:c4:d0:83:cb:8a:59:50:83:09:9c:a5:c8:52: 01:5e:7e:1f:71:de:77:ee:7f:36:43:b1:7d:f4:b4: e4:80:8e:c2:68:f8:b9:f9:62:a4:d7:aa:65:f1:03: ff:ae:1d:7e:46:7b:51:ab:1d:49:ae:be:05:ae:2d: c1:fd:9f:6b:bc:6e:a6:df:81:7a:43:a6:ca:0a:c5: 5b:7d:2a:c1:a5:c4:17:4e:51:75:02:38:16:07:4a: ea:9f:c4:83:0e:74:7f:2c:f7:01:6c:94:68:bd:0a: 1c:49:0d:ea:a5:03:f5:77:de:bd:a5:df:76:36:3d: 7f:de:e1:7a:48:35:08:5d:37:65:89:60:e3:eb:dc: b0:2c:22:17:94:76:eb:51:68:c3:d5:56:37:2c:09: 60:f4:05:82:d1:0f:87:0a:06:85:46:e3:1c:48:1b: e0:d9:51:a0:72:fe:9e:d4:03:ba:7c:cf:87:09:11: 45:ea:fc:16:a2:dd:e3:22:17:9c:ce:d6:f8:5c:41: a3:82:0b:ad:51:01:52:d0:6e:10:16:9f:6a:51:88: 01:91:e8:a1:18:8a:52:bc:b8:73:24:3a:7e:da:e1: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:89:F3:80:20:EE:32:6E:B5:88:2D:A7:B7:FB:16:F2:FD:1A:99 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c1:c7:ab:16:0c:e5:92:05:7e:2d:17:ec:25:20:10:d0:59: e7:c3:93:a2:ed:04:6f:1e:4b:5c:a1:87:dc:fd:24:41:99:c3: cb:96:8c:01:a3:37:2f:d8:34:03:83:21:89:95:4f:9f:d1:fb: 0e:f5:2e:aa:cd:6d:07:a1:bb:31:29:1b:44:9c:f6:25:32:68: 20:fe:63:7d:bb:d8:9d:f2:c2:2a:74:94:3f:86:53:ea:6f:2c: a4:61:2a:c6:ee:1c:50:b5:95:9d:43:a9:8d:17:65:98:ab:d1: 8e:52:28:1f:ea:79:13:44:25:a7:b6:8a:64:d8:b9:fb:3b:f3: ee:92:3a:9f:b2:6b:90:c7:a7:91:03:b8:d3:8e:b8:4d:71:7c: ac:16:a3:06:07:dc:c4:cc:0c:e8:b6:d4:00:c0:59:08:2a:2f: 75:bd:89:d3:a7:ea:f9:7d:c9:2f:6d:c2:dd:48:7b:c0:1a:be: 24:62:ce:55:cd:08:18:7e:43:47:ac:cd:14:e5:20:67:2b:1a: 43:d3:e5:4d:e5:de:b3:69:e0:98:29:e5:31:23:2f:14:90:64: 65:b8:fc:6d:d7:53:a1:c3:86:64:d6:61:4a:7f:90:9a:0b:be: d5:a1:19:63:3b:3d:04:16:58:83:f5:bd:95:17:df:43:94:c3: c5:d8:64:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwaWrdBBvI5c4HJcU6GdR5pn6XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTEyMDUwNDE2MzBaFw0yNTEyMDgwODI4MzBaMDMxMTAvBgNV BAMTKDc4NzE4OUYzODAyMEVFMzI2RUI1ODgyREE3QjdGQjE2RjJGRDFBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49FyhISOA01TEMktw3vJlgvVv eEyg6ugyU2Fqa2KexNCDy4pZUIMJnKXIUgFefh9x3nfufzZDsX30tOSAjsJo+Ln5 YqTXqmXxA/+uHX5Ge1GrHUmuvgWuLcH9n2u8bqbfgXpDpsoKxVt9KsGlxBdOUXUC OBYHSuqfxIMOdH8s9wFslGi9ChxJDeqlA/V33r2l33Y2PX/e4XpINQhdN2WJYOPr 3LAsIheUdutRaMPVVjcsCWD0BYLRD4cKBoVG4xxIG+DZUaBy/p7UA7p8z4cJEUXq /Bai3eMiF5zO1vhcQaOCC61RAVLQbhAWn2pRiAGR6KEYilK8uHMkOn7a4W3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHGJ84Ag7jJutYgtp7f7FvL9GpkwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHBx6sWDOWSBX4tF+wlIBDQWefDk6LtBG8e S1yhh9z9JEGZw8uWjAGjNy/YNAODIYmVT5/R+w71LqrNbQehuzEpG0Sc9iUyaCD+ Y3272J3ywip0lD+GU+pvLKRhKsbuHFC1lZ1DqY0XZZir0Y5SKB/qeRNEJae2imTY ufs78+6SOp+ya5DHp5EDuNOOuE1xfKwWowYH3MTMDOi21ADAWQgqL3W9idOn6vl9 yS9twt1Ie8AaviRizlXNCBh+Q0eszRTlIGcrGkPT5U3l3rNp4Jgp5TEjLxSQZGW4 /G3XU6HDhmTWYUp/kJoLvtWhGWM7PQQWWIP1vZUX30OUw8XYZLY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:58 2025 by rpki-client