This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: HzXDuLtghb9iSl3lxrJHkCLWSknsx1RmHH0fyBD5hgU= Subject key identifier: 32:D7:A7:95:44:E2:95:EE:F9:4D:1E:0F:DF:47:54:52:66:B2:E3:0F Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 4C2172E3F7E7C13B1F8B307E243BB9C56506E585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 0532 Signing time: Tue 16 Dec 2025 16:41:42 +0000 Manifest this update: Tue 16 Dec 2025 16:36:42 +0000 Manifest next update: Fri 19 Dec 2025 19:42:42 +0000 Files and hashes: 1: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 2: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: WeRAv1jGCFOX4/dzMG2N0nI/N9hUEaaq552IV67hOHU=) 3: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 4: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 19:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:21:72:e3:f7:e7:c1:3b:1f:8b:30:7e:24:3b:b9:c5:65:06:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Dec 16 16:36:42 2025 GMT Not After : Dec 19 19:42:42 2025 GMT Subject: CN=32D7A79544E295EEF94D1E0FDF47545266B2E30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:a2:c7:13:1b:5e:46:b0:80:7f:1d:be:e9: 50:e6:80:a9:fa:fd:d9:62:91:06:ff:92:1c:c0:47: b0:0b:38:bb:f2:83:0e:de:15:f1:1b:3b:ec:b3:15: c6:89:cc:af:b5:dc:60:69:18:1e:ab:43:84:30:4c: 76:e6:fd:4f:7d:44:1e:bc:9f:ef:15:d7:55:00:69: 22:49:8f:31:f2:eb:de:30:66:a2:a2:40:1a:47:ea: 6b:40:bc:74:8d:b9:1f:24:32:43:68:43:57:98:b1: 06:bb:98:b8:57:66:7e:10:55:f3:f3:21:1c:28:e9: 82:62:25:f9:4e:27:da:a4:74:a4:56:e2:11:e4:1c: b2:ef:3f:0c:3d:1d:ea:8f:48:8c:94:b7:a9:bf:dd: 24:14:f4:20:89:c8:1d:99:be:56:b2:f5:02:e3:7c: cb:b0:8b:79:0b:cd:be:57:08:f4:de:09:98:89:8d: 4a:49:97:25:26:83:4e:51:e5:84:a4:e1:e3:a3:e8: 9c:22:18:d6:c0:00:39:20:4a:2e:d9:59:60:01:37: 8a:2a:84:cb:94:79:57:43:63:76:22:c0:92:8f:40: bf:1b:e3:84:cf:f3:a7:a6:66:fa:94:c4:89:8b:d7: 84:79:6c:c1:9d:e4:cd:be:05:08:65:e5:81:81:89: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:A7:95:44:E2:95:EE:F9:4D:1E:0F:DF:47:54:52:66:B2:E3:0F X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:10:0f:0b:38:f4:92:0f:5b:a0:a4:29:b3:19:19:17:50:b3: ef:ce:dc:dd:8a:15:e2:ea:c7:35:de:7c:b3:2e:69:c1:68:0f: ca:7b:ac:78:c6:f3:e7:30:61:f8:0b:80:db:58:c6:bf:91:4f: 6a:82:8f:6f:8f:ea:fa:4d:79:8f:e3:03:dc:ea:4f:00:03:36: 24:37:d1:8c:be:8f:e9:d0:62:7a:a7:4e:5c:bd:79:52:b5:ab: 26:eb:85:b9:59:92:60:5d:57:6a:2e:9b:f0:5d:6b:3c:f7:cf: 4a:bc:76:cd:e3:b1:c0:37:01:50:6b:2e:c9:67:72:dd:42:f4: d4:77:a9:53:ad:d8:99:bd:50:64:2d:73:22:a0:ff:b5:d3:63: 80:34:9e:4f:30:e6:d6:7a:6e:96:92:17:b7:38:55:52:4a:ab: 8e:4c:4e:b9:f9:1f:68:dc:ab:5b:f4:32:c3:50:da:04:50:38: 5c:44:9b:d1:b4:06:8e:2d:95:74:85:30:66:54:8a:67:d0:7a: 08:80:35:87:f6:1e:73:44:8c:0a:b8:37:76:15:c8:41:c6:69: 72:98:7c:f7:34:e6:b9:43:eb:09:1c:e2:56:33:e3:41:7e:c1: 89:dd:36:b5:17:a5:1a:73:6c:23:ca:bb:6e:c8:77:cc:8f:ef: 39:94:ba:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCFy4/fnwTsfizB+JDu5xWUG5YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTEyMTYxNjM2NDJaFw0yNTEyMTkxOTQyNDJaMDMxMTAvBgNV BAMTKDMyRDdBNzk1NDRFMjk1RUVGOTREMUUwRkRGNDc1NDUyNjZCMkUzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIaLHExteRrCAfx2+6VDmgKn6 /dlikQb/khzAR7ALOLvygw7eFfEbO+yzFcaJzK+13GBpGB6rQ4QwTHbm/U99RB68 n+8V11UAaSJJjzHy694wZqKiQBpH6mtAvHSNuR8kMkNoQ1eYsQa7mLhXZn4QVfPz IRwo6YJiJflOJ9qkdKRW4hHkHLLvPww9HeqPSIyUt6m/3SQU9CCJyB2Zvlay9QLj fMuwi3kLzb5XCPTeCZiJjUpJlyUmg05R5YSk4eOj6JwiGNbAADkgSi7ZWWABN4oq hMuUeVdDY3YiwJKPQL8b44TP86emZvqUxImL14R5bMGd5M2+BQhl5YGBie3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMtenlUTile75TR4P30dUUmay4w8wHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8QDws49JIPW6CkKbMZGRdQs+/O3N2KFeLq xzXefLMuacFoD8p7rHjG8+cwYfgLgNtYxr+RT2qCj2+P6vpNeY/jA9zqTwADNiQ3 0Yy+j+nQYnqnTly9eVK1qybrhblZkmBdV2oum/Bdazz3z0q8ds3jscA3AVBrLsln ct1C9NR3qVOt2Jm9UGQtcyKg/7XTY4A0nk8w5tZ6bpaSF7c4VVJKq45MTrn5H2jc q1v0MsNQ2gRQOFxEm9G0Bo4tlXSFMGZUimfQegiANYf2HnNEjAq4N3YVyEHGaXKY fPc05rlD6wkc4lYz40F+wYndNrUXpRpzbCPKu27Id8yP7zmUuqk= -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:51 2025 by rpki-client