This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: 1Wzr2KhMe4CQWLfkQknnkbpfRZbPBs5BRNRw2m0nnFo= Subject key identifier: 48:DC:FF:88:95:E4:EF:7A:8A:33:41:1A:36:30:9A:99:F3:AA:03:59 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 57DE1DA9A3ABE8B2A01D00597ECE971311F33ADF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04EF Signing time: Fri 05 Dec 2025 18:21:57 +0000 Manifest this update: Fri 05 Dec 2025 18:16:57 +0000 Manifest next update: Mon 08 Dec 2025 19:24:57 +0000 Files and hashes: 1: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 2: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 4: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 5: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: JvjNKFmXOvdWbp/1ifNs6djO0f+P2kj5E1WyFE8N9As=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:de:1d:a9:a3:ab:e8:b2:a0:1d:00:59:7e:ce:97:13:11:f3:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Dec 5 18:16:57 2025 GMT Not After : Dec 8 19:24:57 2025 GMT Subject: CN=48DCFF8895E4EF7A8A33411A36309A99F3AA0359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:62:3c:43:bb:16:1a:45:d9:4a:4f:d5:d5: 3c:30:10:d7:00:54:98:3e:77:8f:42:6e:6b:6e:86: 45:4d:8a:59:bc:40:50:94:31:0f:ae:4a:79:f3:ed: b7:06:ad:1d:5a:3d:5f:d9:5a:69:16:9a:47:d3:37: e6:19:e0:d5:24:bf:c8:62:34:a5:bc:e4:cd:9f:49: 58:7b:5a:fd:0a:8b:de:e3:52:3e:7a:3c:f9:75:9c: d0:8e:c2:33:95:a4:69:17:4e:cb:43:f0:06:be:6d: a3:a6:ed:71:28:cd:f6:c7:af:65:a4:1b:ab:5e:ea: 73:ef:da:ef:e9:72:05:3d:c9:df:e0:40:f1:39:06: 49:9a:6c:2a:b9:e3:c3:12:20:fa:36:df:62:cd:89: 9f:1c:f9:db:cb:bc:49:ad:63:98:b0:87:93:13:c1: 1e:6c:2f:92:f0:50:c8:94:d0:7e:4d:22:b3:75:34: 12:1a:82:58:03:ce:b8:32:77:4f:3f:57:18:51:61: fc:df:e0:87:27:40:9e:dd:db:b9:ad:d6:d7:7a:dc: e3:f4:e9:73:cc:ee:8e:79:e4:da:08:c5:f7:1f:1f: ad:ae:27:c2:8d:3c:14:6a:a5:94:29:af:15:d3:81: d3:f9:e9:82:00:e0:65:3e:4b:1f:94:e0:0e:f0:2d: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DC:FF:88:95:E4:EF:7A:8A:33:41:1A:36:30:9A:99:F3:AA:03:59 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a5:87:f7:1c:da:8a:89:2d:cb:7c:0b:ad:aa:f2:40:8a:c0: 10:39:d0:ec:0d:79:a1:4b:0e:e4:1a:2a:f7:c5:46:b6:56:31: 78:c0:b5:72:10:4a:ef:4e:9c:2c:03:6b:d1:5a:79:bf:b4:65: e5:d3:db:23:7d:ed:ad:09:c2:59:a3:b5:d9:16:e8:97:9a:b6: 30:61:d4:e8:6d:6d:ad:f2:ae:90:83:14:c0:57:33:07:7c:f4: 6e:ac:7b:22:8c:0a:10:34:5d:42:93:95:48:f0:d6:31:82:24: c0:24:a0:12:69:06:92:46:74:9d:dc:af:c9:ad:f2:92:c6:d4: 79:75:f1:43:54:52:28:27:59:c9:c5:05:3d:34:6d:04:4d:d2: 24:66:4c:ac:be:81:ab:9e:4e:ef:81:47:54:6a:a6:e3:bc:de: 8c:bd:9e:ac:1a:37:94:39:db:fc:50:df:8b:7b:ba:2c:fc:42: 0a:65:8c:a5:7c:a9:35:09:ce:cc:f4:e7:bc:27:53:04:15:83: 6e:4d:46:4d:7a:a7:07:6d:10:78:42:6a:39:e8:58:72:ec:65: d7:4b:39:11:22:91:f6:9b:40:bb:23:0f:46:b4:08:3a:98:0b: cc:6b:27:5e:25:b7:c4:52:ee:1b:2c:c9:d0:91:cb:d0:96:19: 4c:0d:9e:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV94dqaOr6LKgHQBZfs6XExHzOt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEyMDUxODE2NTdaFw0yNTEyMDgxOTI0NTdaMDMxMTAvBgNV BAMTKDQ4RENGRjg4OTVFNEVGN0E4QTMzNDExQTM2MzA5QTk5RjNBQTAzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s2I8Q7sWGkXZSk/V1TwwENcA VJg+d49CbmtuhkVNilm8QFCUMQ+uSnnz7bcGrR1aPV/ZWmkWmkfTN+YZ4NUkv8hi NKW85M2fSVh7Wv0Ki97jUj56PPl1nNCOwjOVpGkXTstD8Aa+baOm7XEozfbHr2Wk G6te6nPv2u/pcgU9yd/gQPE5BkmabCq548MSIPo232LNiZ8c+dvLvEmtY5iwh5MT wR5sL5LwUMiU0H5NIrN1NBIaglgDzrgyd08/VxhRYfzf4IcnQJ7d27mt1td63OP0 6XPM7o555NoIxfcfH62uJ8KNPBRqpZQprxXTgdP56YIA4GU+Sx+U4A7wLfZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSNz/iJXk73qKM0EaNjCamfOqA1kwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6lh/cc2oqJLct8C62q8kCKwBA50OwNeaFL DuQaKvfFRrZWMXjAtXIQSu9OnCwDa9Faeb+0ZeXT2yN97a0JwlmjtdkW6JeatjBh 1Ohtba3yrpCDFMBXMwd89G6seyKMChA0XUKTlUjw1jGCJMAkoBJpBpJGdJ3cr8mt 8pLG1Hl18UNUUignWcnFBT00bQRN0iRmTKy+gaueTu+BR1RqpuO83oy9nqwaN5Q5 2/xQ34t7uiz8QgpljKV8qTUJzsz057wnUwQVg25NRk16pwdtEHhCajnoWHLsZddL OREikfabQLsjD0a0CDqYC8xrJ14lt8RS7hssydCRy9CWGUwNnvY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:45 2025 by rpki-client