This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: yNAq10XYGSz1ppkYpb4hY4n6cPYAsmJyYD6Vt3mLZA4= Subject key identifier: 9A:CF:54:D2:5C:47:2C:13:FB:19:37:4C:7F:56:EF:2A:3C:4E:0B:1C Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 77F9624FFB8A1E6CE3F161DD7BFA60FD4EAB974D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 0253 Signing time: Sat 06 Dec 2025 18:02:25 +0000 Manifest this update: Sat 06 Dec 2025 17:57:25 +0000 Manifest next update: Tue 09 Dec 2025 19:07:25 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: bvsQyRuguETDaISBUsVRIhEkAFMdi8WDR5AwmtvpoLc=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f9:62:4f:fb:8a:1e:6c:e3:f1:61:dd:7b:fa:60:fd:4e:ab:97:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Dec 6 17:57:25 2025 GMT Not After : Dec 9 19:07:25 2025 GMT Subject: CN=9ACF54D25C472C13FB19374C7F56EF2A3C4E0B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:f0:78:6b:91:ce:d4:a9:74:2d:f6:3c:97: 8b:4d:d0:61:bf:66:ff:13:93:fa:37:c8:a8:a2:6a: a9:48:2b:b6:90:38:b1:87:e9:5b:5d:08:d9:4c:01: 8b:d4:f0:bc:ab:e4:ce:5c:8b:04:e7:22:57:33:77: a2:1c:80:3f:fd:6d:aa:7f:68:87:c3:b9:5a:d3:cd: a4:9d:37:a6:67:79:65:26:3b:d1:d2:f4:26:e7:e7: d3:3e:cc:96:a5:78:6c:66:c2:11:d3:9d:a5:16:28: 78:59:6d:f7:ba:a0:50:3b:9f:4f:2d:35:1a:3c:3e: 86:b2:84:59:01:5f:12:3d:55:29:6b:6f:d3:89:3e: ba:22:14:ed:85:28:34:b7:7c:71:87:ab:0c:37:e8: af:e2:9f:35:a3:cc:d8:9a:4d:6d:27:f6:a5:08:45: e6:8d:53:07:d5:91:ac:e2:0e:72:d2:4f:a7:2a:f2: ff:0e:98:33:d1:4b:5b:13:e9:75:80:32:51:c6:0d: dc:12:7c:c7:93:2e:fb:07:80:c1:80:5a:76:41:d1: a9:69:8e:d1:ff:01:fc:b3:56:8e:7b:a0:e6:94:67: d8:e3:9d:cb:75:2c:d4:74:9c:3d:fc:bd:ce:da:52: 22:68:b6:9d:31:14:f1:7d:0d:3e:c7:90:90:ed:23: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:54:D2:5C:47:2C:13:FB:19:37:4C:7F:56:EF:2A:3C:4E:0B:1C X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:e3:c4:f6:e5:3c:d1:32:1d:0f:4a:db:24:3d:1c:47:18: 23:92:05:90:48:f9:69:da:30:89:2c:d5:79:32:e4:3c:f2:c1: 55:43:f4:d4:66:04:f5:10:d4:62:f8:68:31:c4:d5:76:2f:d7: df:36:ff:ca:99:98:70:f7:d1:a2:dc:86:47:d3:1f:64:77:68: e8:62:4f:45:57:c0:91:23:b4:6b:bd:82:45:52:43:7f:3b:04: 68:7d:20:23:40:72:39:f7:cb:9a:73:00:8f:79:a5:aa:69:f2: 3a:b3:82:2f:19:02:6f:92:70:36:b5:e8:77:ed:57:57:96:66: 8a:a1:cd:9a:f9:7d:82:b8:19:92:ea:ca:cf:30:0b:6b:83:b8: 03:39:74:b2:3a:59:cd:94:75:85:7a:da:1d:38:56:09:2a:db: 61:55:19:7d:63:2c:12:67:8e:68:db:04:8d:db:7b:1e:10:f3: 6c:40:d9:2f:05:f5:03:b7:ec:ea:08:75:58:d7:e0:1d:bc:98: c7:5a:3d:71:51:33:5b:09:9d:99:01:b5:43:2a:2c:bc:bf:91: 52:8c:fd:64:02:5b:28:c3:d1:58:2e:15:f8:61:ac:5d:02:3e: a8:52:68:31:94:2f:6f:87:e3:a1:7f:f1:fe:93:2d:63:22:70: fd:3e:cb:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/liT/uKHmzj8WHde/pg/U6rl00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTEyMDYxNzU3MjVaFw0yNTEyMDkxOTA3MjVaMDMxMTAvBgNV BAMTKDlBQ0Y1NEQyNUM0NzJDMTNGQjE5Mzc0QzdGNTZFRjJBM0M0RTBCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFvB4a5HO1Kl0LfY8l4tN0GG/ Zv8Tk/o3yKiiaqlIK7aQOLGH6VtdCNlMAYvU8Lyr5M5ciwTnIlczd6IcgD/9bap/ aIfDuVrTzaSdN6ZneWUmO9HS9Cbn59M+zJaleGxmwhHTnaUWKHhZbfe6oFA7n08t NRo8PoayhFkBXxI9VSlrb9OJProiFO2FKDS3fHGHqww36K/inzWjzNiaTW0n9qUI ReaNUwfVkaziDnLST6cq8v8OmDPRS1sT6XWAMlHGDdwSfMeTLvsHgMGAWnZB0alp jtH/AfyzVo57oOaUZ9jjnct1LNR0nD38vc7aUiJotp0xFPF9DT7HkJDtI5h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUms9U0lxHLBP7GTdMf1bvKjxOCxwwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn948T25TzRMh0PStskPRxHGCOSBZBI+Wna MIks1Xky5DzywVVD9NRmBPUQ1GL4aDHE1XYv1982/8qZmHD30aLchkfTH2R3aOhi T0VXwJEjtGu9gkVSQ387BGh9ICNAcjn3y5pzAI95papp8jqzgi8ZAm+ScDa16Hft V1eWZoqhzZr5fYK4GZLqys8wC2uDuAM5dLI6Wc2UdYV62h04Vgkq22FVGX1jLBJn jmjbBI3bex4Q82xA2S8F9QO37OoIdVjX4B28mMdaPXFRM1sJnZkBtUMqLLy/kVKM /WQCWyjD0VguFfhhrF0CPqhSaDGUL2+H46F/8f6TLWMicP0+y+c= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:34 2025 by rpki-client