This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: 37hvwbg1TBsCoNl8fFs8FQVFloM4gwdrVXMyYoFh56o= Subject key identifier: DD:74:75:9B:1C:0C:F1:43:B5:65:7B:00:8D:35:8A:A5:84:A7:A5:4B Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 5FD090919A135E75F4CB809FE9A73E07C1530059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: E0 Signing time: Wed 17 Dec 2025 07:51:16 +0000 Manifest this update: Wed 17 Dec 2025 07:46:16 +0000 Manifest next update: Sat 20 Dec 2025 10:06:16 +0000 Files and hashes: 1: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8=) 2: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: srOVRysY2E12DbSBrS1zIhBKTySGhMsqd7sUoqarzDk=) 3: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: v6LmFd/T+Q18hViAVgo7YGWsfgbS5BdFapubty8W4rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d0:90:91:9a:13:5e:75:f4:cb:80:9f:e9:a7:3e:07:c1:53:00:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Dec 17 07:46:16 2025 GMT Not After : Dec 20 10:06:16 2025 GMT Subject: CN=DD74759B1C0CF143B5657B008D358AA584A7A54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:94:1e:c1:94:d5:27:cd:47:52:04:b3:6a: d6:1e:ba:bc:12:0d:33:fc:4f:3b:ea:f5:35:98:1f: c6:ea:8c:a9:b8:b2:b8:15:a1:26:d7:09:ef:99:cf: 9a:e1:9c:3b:37:30:7a:09:da:ef:2b:2e:2a:07:99: e8:47:20:7b:07:bc:15:42:4e:58:13:14:e2:77:cf: 7f:62:c1:62:82:e5:03:ce:4a:d3:cc:9a:25:3b:35: c3:c1:b3:4c:16:91:2b:8d:99:74:9f:95:a7:b5:e7: 8c:b4:32:1b:66:ef:f7:91:09:28:88:0c:4f:6a:e3: 38:81:a8:75:e4:03:8f:be:bf:69:9b:fe:51:7c:41: 9a:4e:3c:55:a1:29:40:9f:89:3b:1f:ad:49:b9:9f: fe:11:6c:93:6e:10:42:dc:88:86:49:89:d1:ce:ba: c5:c5:4d:4d:5b:e6:b8:e8:0b:32:d6:84:77:e6:8f: 5a:1d:f6:66:ec:6d:49:33:99:6f:7a:f5:98:e5:1c: 99:30:31:a5:4e:8d:d3:10:e9:c3:4d:ff:6a:70:f2: e7:34:d8:c1:f4:50:d3:34:3a:ce:f9:0c:a2:0c:c1: a1:8c:ed:a4:d5:5d:5c:c9:0e:36:a6:74:5e:6c:bb: 38:96:fe:18:80:9d:9f:ad:3b:35:d6:6d:a8:3b:59: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:75:9B:1C:0C:F1:43:B5:65:7B:00:8D:35:8A:A5:84:A7:A5:4B X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:88:8e:5c:65:95:08:82:23:43:b2:37:13:5c:d0:91:04:b2: 59:bf:c7:80:2c:11:3d:f3:cc:7d:39:a7:95:00:f5:8f:12:51: 7d:c6:28:7c:ce:44:21:de:a7:51:46:84:1b:c9:e8:a5:36:de: 47:27:5e:cf:72:4e:f6:e3:ee:7b:a8:63:90:13:92:08:05:8e: be:7f:ca:59:3c:c4:09:f0:22:d4:a3:d0:bb:3c:39:5b:71:25: 3f:a6:e4:84:df:a9:ff:89:70:ec:11:c2:73:bc:8f:df:4a:15: e0:0f:cf:ae:66:96:85:f8:15:7c:92:d4:73:5f:f0:6c:fd:51: 6e:94:96:95:f3:d0:45:38:49:06:da:ac:d6:e2:d4:a9:c3:90: f3:00:75:9f:8a:a2:df:9b:05:4f:d8:d3:d6:90:2c:a1:c3:3e: 2c:37:31:e6:27:df:33:28:de:17:01:17:3d:03:ee:a5:32:66: 35:7c:81:f2:40:83:36:df:31:e8:08:3a:3f:d7:60:90:d7:f8: 23:03:c0:2d:7d:07:4e:a1:00:3c:aa:70:12:78:7f:78:b3:84: 63:1c:f7:ad:8d:17:f5:80:04:18:d6:a3:50:d0:cd:60:73:9f: 52:d1:c7:9d:cd:32:0f:d8:fa:b6:09:55:a2:3b:58:06:50:f7: 19:31:4a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9CQkZoTXnX0y4Cf6ac+B8FTAFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTEyMTcwNzQ2MTZaFw0yNTEyMjAxMDA2MTZaMDMxMTAvBgNV BAMTKERENzQ3NTlCMUMwQ0YxNDNCNTY1N0IwMDhEMzU4QUE1ODRBN0E1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfypQewZTVJ81HUgSzatYeurwS DTP8Tzvq9TWYH8bqjKm4srgVoSbXCe+Zz5rhnDs3MHoJ2u8rLioHmehHIHsHvBVC TlgTFOJ3z39iwWKC5QPOStPMmiU7NcPBs0wWkSuNmXSflae154y0Mhtm7/eRCSiI DE9q4ziBqHXkA4++v2mb/lF8QZpOPFWhKUCfiTsfrUm5n/4RbJNuEELciIZJidHO usXFTU1b5rjoCzLWhHfmj1od9mbsbUkzmW969ZjlHJkwMaVOjdMQ6cNN/2pw8uc0 2MH0UNM0Os75DKIMwaGM7aTVXVzJDjamdF5suziW/hiAnZ+tOzXWbag7WQ/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XR1mxwM8UO1ZXsAjTWKpYSnpUswHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeIjlxllQiCI0OyNxNc0JEEslm/x4AsET3z zH05p5UA9Y8SUX3GKHzORCHep1FGhBvJ6KU23kcnXs9yTvbj7nuoY5ATkggFjr5/ ylk8xAnwItSj0Ls8OVtxJT+m5ITfqf+JcOwRwnO8j99KFeAPz65mloX4FXyS1HNf 8Gz9UW6UlpXz0EU4SQbarNbi1KnDkPMAdZ+Kot+bBU/Y09aQLKHDPiw3MeYn3zMo 3hcBFz0D7qUyZjV8gfJAgzbfMegIOj/XYJDX+CMDwC19B06hADyqcBJ4f3izhGMc 962NF/WABBjWo1DQzWBzn1LRx53NMg/Y+rYJVaI7WAZQ9xkxSqw= -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:58 2025 by rpki-client