This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: rlaI2VRrXedNWb4BmaSm65YpBbYEbpsG2V+YlYp8nfQ= Subject key identifier: 4A:C4:8E:70:24:60:1D:D2:63:2C:9E:B3:ED:53:95:6D:16:27:C1:87 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 19D94C51BD5B51D4E943C18B003F2052259C8F85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 0241 Signing time: Fri 05 Dec 2025 18:50:02 +0000 Manifest this update: Fri 05 Dec 2025 18:45:02 +0000 Manifest next update: Mon 08 Dec 2025 21:29:02 +0000 Files and hashes: 1: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 2: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: FcD0NNcMRO+wY18+GEcIrgQiomuh/yglWzA6opAZH8U=) 3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 5: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 6: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d9:4c:51:bd:5b:51:d4:e9:43:c1:8b:00:3f:20:52:25:9c:8f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Dec 5 18:45:02 2025 GMT Not After : Dec 8 21:29:02 2025 GMT Subject: CN=4AC48E7024601DD2632C9EB3ED53956D1627C187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:7a:0c:d3:0b:d6:ed:ba:2f:8c:54:2d:a5: 4d:33:4b:d4:34:c6:69:69:9b:9e:20:8e:1e:b2:77: 1a:a2:6c:6e:87:d2:38:54:1c:d8:74:5a:27:9e:f7: 1c:75:c0:1e:f6:72:0b:a7:7a:9e:67:41:81:3f:82: 20:cb:a4:67:85:18:35:ac:f2:1f:15:88:3e:a9:89: 3d:4f:a9:3a:52:64:b2:93:64:03:8e:9f:23:41:4a: 3e:38:37:c1:34:3a:02:b4:02:47:fa:d4:33:aa:8e: 3e:05:d1:21:1c:eb:98:7c:e9:16:f6:12:1e:9a:ee: 72:0e:89:d4:9d:3a:36:c2:e1:47:80:78:98:6f:aa: 16:46:0a:52:1d:65:f3:c0:22:bf:8d:c0:a5:78:b1: 1c:ca:77:f8:e8:d7:fe:7d:d7:f6:3d:62:63:d9:1b: a6:24:e4:4b:87:4c:35:c2:eb:75:41:de:56:13:87: c3:c2:ed:40:ec:f8:46:ff:2f:b0:14:80:49:b2:c8: 58:93:7e:93:ed:26:e5:78:21:99:2b:f6:46:e4:87: 68:32:92:f7:22:8e:b3:24:b4:4d:66:79:0a:59:32: 46:f8:2b:b0:f6:17:41:84:4e:eb:c4:7e:ee:95:a4: e4:46:25:37:f4:6d:cf:10:1c:41:42:f0:f3:c6:1b: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C4:8E:70:24:60:1D:D2:63:2C:9E:B3:ED:53:95:6D:16:27:C1:87 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:d6:a8:15:fb:49:ef:e1:40:32:13:5a:54:2a:3c:96:42: 75:7a:fa:38:16:5e:55:08:54:eb:13:e0:e1:01:97:93:f8:0c: c1:e0:01:be:b6:dc:fc:30:ec:2f:c3:67:39:85:a3:5b:9b:62: 06:4f:79:65:f8:88:4a:05:c2:25:15:97:26:2d:f2:9d:b7:de: 41:cf:38:3e:38:b9:17:59:e3:9b:05:97:4f:04:c0:f4:fc:ed: 8e:a3:c1:5b:a3:64:2d:f4:eb:8e:6f:13:2f:6e:96:99:49:e7: 50:22:f0:f3:53:0e:8c:6f:7e:63:0f:9b:50:44:2a:e8:1a:00: a9:83:0c:bd:d0:56:ec:5b:cb:f9:06:36:4e:36:bb:c4:a7:af: 60:ed:a5:0c:10:d3:59:a3:e7:f0:4f:df:69:01:53:fc:db:52: 62:8e:f2:7b:cd:19:88:a2:12:79:0c:5b:d3:14:1f:7f:d5:fd: 99:46:3c:da:50:58:57:bc:61:08:31:d4:4d:d7:74:b6:40:37: 7c:0b:a0:c4:78:e5:78:bf:e1:7f:54:99:b5:c6:c4:30:64:71: bd:ae:46:94:15:9c:20:c7:39:74:5c:3e:af:83:79:c1:ac:af: e2:65:9b:92:94:76:68:e1:5e:85:53:96:7d:29:b2:56:97:b4: 1f:23:15:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdlMUb1bUdTpQ8GLAD8gUiWcj4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTEyMDUxODQ1MDJaFw0yNTEyMDgyMTI5MDJaMDMxMTAvBgNV BAMTKDRBQzQ4RTcwMjQ2MDFERDI2MzJDOUVCM0VENTM5NTZEMTYyN0MxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/XoM0wvW7bovjFQtpU0zS9Q0 xmlpm54gjh6ydxqibG6H0jhUHNh0Wiee9xx1wB72cgunep5nQYE/giDLpGeFGDWs 8h8ViD6piT1PqTpSZLKTZAOOnyNBSj44N8E0OgK0Akf61DOqjj4F0SEc65h86Rb2 Eh6a7nIOidSdOjbC4UeAeJhvqhZGClIdZfPAIr+NwKV4sRzKd/jo1/591/Y9YmPZ G6Yk5EuHTDXC63VB3lYTh8PC7UDs+Eb/L7AUgEmyyFiTfpPtJuV4IZkr9kbkh2gy kvcijrMktE1meQpZMkb4K7D2F0GETuvEfu6VpORGJTf0bc8QHEFC8PPGG/iRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsSOcCRgHdJjLJ6z7VOVbRYnwYcwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrI1qgV+0nv4UAyE1pUKjyWQnV6+jgWXlUI VOsT4OEBl5P4DMHgAb623Pww7C/DZzmFo1ubYgZPeWX4iEoFwiUVlyYt8p233kHP OD44uRdZ45sFl08EwPT87Y6jwVujZC30645vEy9ulplJ51Ai8PNTDoxvfmMPm1BE KugaAKmDDL3QVuxby/kGNk42u8Snr2DtpQwQ01mj5/BP32kBU/zbUmKO8nvNGYii EnkMW9MUH3/V/ZlGPNpQWFe8YQgx1E3XdLZAN3wLoMR45Xi/4X9UmbXGxDBkcb2u RpQVnCDHOXRcPq+DecGsr+Jlm5KUdmjhXoVTln0pslaXtB8jFc0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:24 2025 by rpki-client