This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: yCioHUrj9ShdE+4PjUiCJ1brik3r9ueOJdqpyl2xy80= Subject key identifier: 64:C5:D0:B0:E9:C8:3A:36:A9:67:67:EE:14:07:AD:2A:3B:3C:CD:A1 Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 2373F78B84AADB25482BFDC6B7A5D768374D05FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 052D Signing time: Thu 04 Dec 2025 22:31:43 +0000 Manifest this update: Thu 04 Dec 2025 22:26:43 +0000 Manifest next update: Mon 08 Dec 2025 07:30:43 +0000 Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 3: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: BeYCURm/8sUzxZ2yNQvudW1X86BeCuyJu7Ls0zhZzNY=) 4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:73:f7:8b:84:aa:db:25:48:2b:fd:c6:b7:a5:d7:68:37:4d:05:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Dec 4 22:26:43 2025 GMT Not After : Dec 8 07:30:43 2025 GMT Subject: CN=64C5D0B0E9C83A36A96767EE1407AD2A3B3CCDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:ed:2b:5f:b2:2e:19:e1:8e:68:81:14:28: 6b:68:7e:e2:24:5e:6e:25:8a:9f:b4:fa:79:3a:33: a7:07:d5:21:71:c5:d1:90:27:f7:8b:45:bf:f7:01: f6:93:4f:21:b0:ab:52:08:ae:68:3d:0b:59:a7:40: 21:da:f7:2a:05:50:bd:d6:5d:ef:d7:ba:64:ab:16: 67:c3:15:3b:51:b8:fb:55:7a:61:cc:07:8f:ae:6a: ba:bd:7d:60:a5:60:49:ed:42:54:fd:e2:eb:48:65: 41:22:91:9d:22:7f:f3:23:74:04:59:c7:98:1b:4e: be:56:fc:25:8d:2f:da:13:a7:db:fa:2b:dd:73:25: e5:28:35:a1:a9:f1:e5:d7:2b:82:c6:9a:45:15:f4: 6b:05:ba:05:26:b1:f7:b2:28:c9:bc:e3:c1:3a:dc: 03:f2:71:fc:46:9c:63:c8:57:c6:47:e5:cd:0f:b5: b3:26:3e:7a:60:73:01:37:c4:b8:5b:de:2f:51:1f: 35:f2:c1:0b:f5:08:dd:1e:cf:ff:b1:b1:a7:08:3f: 4c:c6:7a:72:da:55:5c:c6:9c:da:ac:5e:bc:3e:9e: b2:ba:4c:b6:e0:03:e9:92:5c:ad:e2:62:10:f2:22: d5:14:21:b4:b9:3d:10:02:0c:10:a0:92:91:9f:65: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C5:D0:B0:E9:C8:3A:36:A9:67:67:EE:14:07:AD:2A:3B:3C:CD:A1 X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:56:91:12:cc:26:c7:a4:fa:a6:df:a6:7c:af:f7:ab:d9: aa:ef:dc:57:5f:70:1a:3f:97:bd:94:e5:01:0c:f7:69:1b:cb: 50:85:92:0e:d6:8b:9a:64:75:1c:d3:b0:10:25:a3:f6:28:4e: 6f:58:ec:e2:d7:21:1a:37:5a:46:45:ea:5d:33:7a:19:e3:6f: e5:94:73:19:46:15:1b:47:ca:53:ab:ea:8d:23:76:da:fb:68: bd:d8:a0:3e:c0:1a:33:b8:48:9a:76:94:67:d5:8e:ad:fb:2e: 22:57:c6:b8:42:04:7e:65:a8:c5:25:4c:7b:d0:c5:53:1b:2d: 84:46:05:10:02:be:9d:19:d3:c2:2d:61:df:ef:04:bb:e2:92: eb:95:9f:ab:48:d8:2c:e9:e9:82:bd:fa:67:cf:7b:e2:9e:f1: f0:a0:2f:07:01:8f:1e:14:32:9e:d5:77:91:5a:ce:21:7b:db: 1c:43:71:f7:51:ee:0a:74:01:be:87:ab:1d:4e:cd:c2:64:a2: 6e:b4:19:26:ba:fd:3f:2b:27:72:99:e9:a1:cb:d6:d2:e9:84: a8:ee:7f:08:f9:84:5c:d5:51:f6:3d:4c:26:3b:0b:d3:ce:d7: 8e:bb:34:88:92:11:dd:a9:36:78:31:7f:d0:b6:fc:cc:1d:b8: de:17:0d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3P3i4Sq2yVIK/3Gt6XXaDdNBfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTEyMDQyMjI2NDNaFw0yNTEyMDgwNzMwNDNaMDMxMTAvBgNV BAMTKDY0QzVEMEIwRTlDODNBMzZBOTY3NjdFRTE0MDdBRDJBM0IzQ0NEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaO0rX7IuGeGOaIEUKGtofuIk Xm4lip+0+nk6M6cH1SFxxdGQJ/eLRb/3AfaTTyGwq1IIrmg9C1mnQCHa9yoFUL3W Xe/XumSrFmfDFTtRuPtVemHMB4+uarq9fWClYEntQlT94utIZUEikZ0if/MjdARZ x5gbTr5W/CWNL9oTp9v6K91zJeUoNaGp8eXXK4LGmkUV9GsFugUmsfeyKMm848E6 3APycfxGnGPIV8ZH5c0PtbMmPnpgcwE3xLhb3i9RHzXywQv1CN0ez/+xsacIP0zG enLaVVzGnNqsXrw+nrK6TLbgA+mSXK3iYhDyItUUIbS5PRACDBCgkpGfZYNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMXQsOnIOjapZ2fuFAetKjs8zaEwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGVVpESzCbHpPqm36Z8r/er2arv3FdfcBo/ l72U5QEM92kby1CFkg7Wi5pkdRzTsBAlo/YoTm9Y7OLXIRo3WkZF6l0zehnjb+WU cxlGFRtHylOr6o0jdtr7aL3YoD7AGjO4SJp2lGfVjq37LiJXxrhCBH5lqMUlTHvQ xVMbLYRGBRACvp0Z08ItYd/vBLvikuuVn6tI2Czp6YK9+mfPe+Ke8fCgLwcBjx4U Mp7Vd5FaziF72xxDcfdR7gp0Ab6Hqx1OzcJkom60GSa6/T8rJ3KZ6aHL1tLphKju fwj5hFzVUfY9TCY7C9PO1467NIiSEd2pNngxf9C2/MwduN4XDQg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:15 2025 by rpki-client