This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: J2J0UD1Lz8C2G444fIMcFP/yb1Ae/EWHU7kmo4cX2Zg= Subject key identifier: 22:96:9A:33:A1:79:92:F5:7B:79:DE:C9:FB:74:C7:86:47:3E:81:61 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 07CF3F8ED5F33D5491FF158E402F7114219E3CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 039A Signing time: Fri 05 Dec 2025 09:11:40 +0000 Manifest this update: Fri 05 Dec 2025 09:06:40 +0000 Manifest next update: Mon 08 Dec 2025 18:41:40 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: /TbUNqNasEX2yU9OqjBAL6TN5YKN9UmMXToY2QXgWCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cf:3f:8e:d5:f3:3d:54:91:ff:15:8e:40:2f:71:14:21:9e:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Dec 5 09:06:40 2025 GMT Not After : Dec 8 18:41:40 2025 GMT Subject: CN=22969A33A17992F57B79DEC9FB74C786473E8161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:dd:dd:bc:bf:48:60:0e:4c:38:83:da:3c: 86:6a:5d:d0:e3:20:59:76:59:bd:3c:29:c5:51:3a: 75:ee:46:d5:75:58:b7:05:57:7e:41:fa:9e:45:64: 9e:85:25:50:15:9c:6a:60:cc:7f:74:6f:ac:0f:c0: 96:38:4f:f7:49:7b:c5:76:3e:fd:69:f5:96:72:1b: 3b:ae:7b:9b:a3:7d:98:1c:46:50:01:3c:15:ac:53: a4:8e:d0:58:aa:af:fb:29:a4:fd:b3:8d:9a:e3:11: 8f:f5:aa:b1:57:5d:a4:a4:4f:f6:5f:fb:38:69:09: 7a:5a:04:e5:39:ff:43:3b:f4:b2:a8:01:89:34:e4: 29:bd:c0:49:62:5c:e9:46:d2:72:54:2d:59:57:1f: d0:f8:6f:f1:b9:61:7b:2a:ab:86:08:5d:a9:c9:50: 98:35:70:6b:f1:8e:15:1c:50:2c:76:23:3a:1b:a2: 9c:9f:16:1b:05:e1:33:e3:39:67:c3:e2:e9:33:07: ee:9d:32:9c:5f:51:cb:a0:a7:46:4f:c0:d6:d1:1f: 56:8f:1f:23:4b:3b:fa:ff:b7:c3:7c:f4:c8:4b:b2: c1:54:60:10:02:6c:da:ab:fa:7a:ec:dc:70:27:60: 90:d2:bb:a4:7d:da:5f:f5:8b:ce:f6:49:e1:45:22: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:9A:33:A1:79:92:F5:7B:79:DE:C9:FB:74:C7:86:47:3E:81:61 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:76:a6:32:8c:52:7c:d7:18:35:98:3c:08:61:68:cb:cc:17: e6:7f:f5:f3:49:78:a9:7e:7e:ba:37:e4:7f:7a:ab:99:6c:5d: 7f:4e:96:03:c1:48:1e:05:20:8e:6a:12:1d:be:86:5e:29:28: aa:a0:8d:6f:c8:dd:85:8a:39:4f:b3:e6:95:07:e5:10:3c:39: c8:84:9e:e7:b9:47:a3:fc:2d:22:c8:dc:2c:f6:73:0c:ef:90: 79:56:67:ca:51:e9:bc:92:38:1d:cf:2b:55:a4:b7:0c:ef:35: cc:a8:1b:6f:ef:a2:0d:34:80:90:4d:60:bf:9d:6f:ba:e0:f1: 08:d2:7e:04:90:2d:33:df:19:22:db:52:be:02:5c:d8:0f:e4: af:ed:12:a3:77:f9:ed:9b:4b:1d:7e:df:15:7f:7d:1f:f7:69: f6:46:ae:bd:71:4a:c8:ca:7a:57:e0:7f:63:64:eb:db:7f:2d: 67:46:2b:83:28:5c:d7:68:35:e7:bc:a5:e2:9c:c7:e3:8d:82: ff:d0:75:b8:b5:01:b5:2d:0f:c3:bb:77:cb:00:0d:5e:9a:2b: 2e:c2:47:0a:2a:ad:90:d9:a8:9f:5a:2a:ae:0b:b7:d3:e5:b5: 2f:fb:b2:43:2d:e1:3e:f6:16:e7:a3:ab:53:43:5e:c7:47:71: 90:28:f9:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB88/jtXzPVSR/xWOQC9xFCGePMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTEyMDUwOTA2NDBaFw0yNTEyMDgxODQxNDBaMDMxMTAvBgNV BAMTKDIyOTY5QTMzQTE3OTkyRjU3Qjc5REVDOUZCNzRDNzg2NDczRTgxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTt3dvL9IYA5MOIPaPIZqXdDj IFl2Wb08KcVROnXuRtV1WLcFV35B+p5FZJ6FJVAVnGpgzH90b6wPwJY4T/dJe8V2 Pv1p9ZZyGzuue5ujfZgcRlABPBWsU6SO0Fiqr/sppP2zjZrjEY/1qrFXXaSkT/Zf +zhpCXpaBOU5/0M79LKoAYk05Cm9wEliXOlG0nJULVlXH9D4b/G5YXsqq4YIXanJ UJg1cGvxjhUcUCx2IzobopyfFhsF4TPjOWfD4ukzB+6dMpxfUcugp0ZPwNbRH1aP HyNLO/r/t8N89MhLssFUYBACbNqr+nrs3HAnYJDSu6R92l/1i872SeFFIsynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIpaaM6F5kvV7ed7J+3THhkc+gWEwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL92pjKMUnzXGDWYPAhhaMvMF+Z/9fNJeKl+ fro35H96q5lsXX9OlgPBSB4FII5qEh2+hl4pKKqgjW/I3YWKOU+z5pUH5RA8OciE nue5R6P8LSLI3Cz2cwzvkHlWZ8pR6bySOB3PK1WktwzvNcyoG2/vog00gJBNYL+d b7rg8QjSfgSQLTPfGSLbUr4CXNgP5K/tEqN3+e2bSx1+3xV/fR/3afZGrr1xSsjK elfgf2Nk69t/LWdGK4MoXNdoNee8peKcx+ONgv/Qdbi1AbUtD8O7d8sADV6aKy7C RwoqrZDZqJ9aKq4Lt9PltS/7skMt4T72Fuejq1NDXsdHcZAo+QA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:13 2025 by rpki-client