This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: ERN9lYg/Lmma1ZwRMGl5Rz0U4djIDmH4p+8KY7vVIu8= Subject key identifier: E8:EE:90:D5:DE:02:36:75:8E:B5:71:C9:3F:8E:BC:40:A7:0C:FA:0B Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 1E13C64919290C7DCC34991E2E6A71C01DE8916B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: ED Signing time: Fri 05 Dec 2025 19:30:41 +0000 Manifest this update: Fri 05 Dec 2025 19:25:41 +0000 Manifest next update: Tue 09 Dec 2025 02:21:41 +0000 Files and hashes: 1: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: YDmoqavYLHL37aPrXcdW3Tqfi53Kkm8arHb+h/JYMug=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:13:c6:49:19:29:0c:7d:cc:34:99:1e:2e:6a:71:c0:1d:e8:91:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Dec 5 19:25:41 2025 GMT Not After : Dec 9 02:21:41 2025 GMT Subject: CN=E8EE90D5DE0236758EB571C93F8EBC40A70CFA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:12:03:a6:63:3f:e8:58:f2:73:04:35:8d: 98:e4:69:8b:44:3b:89:32:e1:e7:93:35:94:dc:a6: 14:70:35:6d:c7:68:4e:74:8f:3e:fd:7b:72:0a:d4: 2b:9a:a7:25:df:bf:74:3b:b1:ad:e2:61:10:ad:1e: 14:0e:ea:09:3a:b6:fc:06:9e:b5:45:65:c3:37:ce: 02:28:13:af:27:62:bd:00:8a:09:e2:52:96:9a:09: 09:ff:37:f7:a9:7f:43:4a:6c:5c:3b:27:26:34:11: 5c:6d:f4:a6:4f:e1:5e:3a:de:35:2f:86:5d:a3:ef: ba:58:61:d7:25:5b:a6:a3:78:d5:54:c9:20:82:b4: 89:de:d7:87:3f:37:94:c2:8b:e1:09:d6:9b:95:19: 64:55:05:ef:e4:67:8d:72:0c:ed:6d:22:8b:66:5e: ae:b5:3c:ee:c0:4d:20:19:95:b1:4f:14:51:08:dd: 8d:1e:af:d0:f2:e2:b5:7f:11:e4:14:bc:7e:ec:ba: 23:61:70:0a:e0:6d:b5:41:7e:c3:14:b2:78:a9:ac: 02:b4:77:30:4c:e2:3f:96:54:b5:9c:d5:bf:ba:09: 08:ff:2b:7f:71:e6:89:c3:2f:66:a9:7f:a7:55:d0: 1f:02:7c:95:0d:cc:de:0b:0d:01:bf:09:08:39:26: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:90:D5:DE:02:36:75:8E:B5:71:C9:3F:8E:BC:40:A7:0C:FA:0B X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:84:10:d7:0c:72:4b:0a:aa:a8:c6:41:39:e6:24:4b:c2:b8: 04:5a:0f:df:fb:b6:ca:15:bc:5d:da:38:66:33:64:17:21:b4: 9f:fb:e8:7c:f3:5e:bd:71:1d:18:f9:7b:36:d1:55:71:0f:db: bc:12:c6:5b:f6:a3:02:39:1a:74:50:08:c0:82:5b:61:75:9b: 62:ea:75:d9:ed:bc:b3:a6:4a:66:de:f0:79:54:d0:57:56:6e: 4d:32:7c:bf:8e:34:70:0a:aa:5b:6e:67:d6:2d:fc:f2:c9:40: a6:ad:4c:20:ae:8e:59:de:08:d5:38:9f:86:ff:94:3d:60:3e: 19:c7:4f:ac:36:78:dd:81:3a:9f:ad:13:65:f9:e3:e9:55:ad: 44:59:58:8a:1e:da:a0:1c:3d:6a:0a:c5:97:0c:f1:61:e1:4b: 2f:6f:36:c6:72:c6:26:7a:29:3e:4d:4a:eb:d6:c9:02:a5:dd: be:20:43:71:32:db:26:3c:91:f4:32:81:d6:c5:8f:b6:78:1f: 28:d2:07:28:3b:fa:56:15:4f:36:80:3b:c3:be:18:83:3a:56: 0f:17:a4:21:42:5e:58:fe:fd:cd:64:54:2c:a8:d0:a8:5a:38: 67:fd:02:7a:2b:a5:71:38:80:4e:f8:ae:e4:8c:3c:2c:27:c1: 45:cf:cc:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhPGSRkpDH3MNJkeLmpxwB3okWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTEyMDUxOTI1NDFaFw0yNTEyMDkwMjIxNDFaMDMxMTAvBgNV BAMTKEU4RUU5MEQ1REUwMjM2NzU4RUI1NzFDOTNGOEVCQzQwQTcwQ0ZBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyxIDpmM/6FjycwQ1jZjkaYtE O4ky4eeTNZTcphRwNW3HaE50jz79e3IK1CuapyXfv3Q7sa3iYRCtHhQO6gk6tvwG nrVFZcM3zgIoE68nYr0AigniUpaaCQn/N/epf0NKbFw7JyY0EVxt9KZP4V463jUv hl2j77pYYdclW6ajeNVUySCCtIne14c/N5TCi+EJ1puVGWRVBe/kZ41yDO1tIotm Xq61PO7ATSAZlbFPFFEI3Y0er9Dy4rV/EeQUvH7suiNhcArgbbVBfsMUsniprAK0 dzBM4j+WVLWc1b+6CQj/K39x5onDL2apf6dV0B8CfJUNzN4LDQG/CQg5JpTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6O6Q1d4CNnWOtXHJP468QKcM+gswHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiEENcMcksKqqjGQTnmJEvCuARaD9/7tsoV vF3aOGYzZBchtJ/76HzzXr1xHRj5ezbRVXEP27wSxlv2owI5GnRQCMCCW2F1m2Lq ddntvLOmSmbe8HlU0FdWbk0yfL+ONHAKqltuZ9Yt/PLJQKatTCCujlneCNU4n4b/ lD1gPhnHT6w2eN2BOp+tE2X54+lVrURZWIoe2qAcPWoKxZcM8WHhSy9vNsZyxiZ6 KT5NSuvWyQKl3b4gQ3Ey2yY8kfQygdbFj7Z4HyjSByg7+lYVTzaAO8O+GIM6Vg8X pCFCXlj+/c1kVCyo0KhaOGf9AnorpXE4gE74ruSMPCwnwUXPzDo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:35 2025 by rpki-client