This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: Kgha7xupfoPH/R5PR//dtsv8V4CI+tkDN8oJ5qgulAU= Subject key identifier: BE:AB:8A:10:EF:7E:E1:97:4F:12:D0:31:11:8A:21:8B:35:18:85:D7 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 1CC2E8F80BBBE290D395C9C3C88FC7B7EE418EAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0226 Signing time: Thu 04 Dec 2025 21:31:58 +0000 Manifest this update: Thu 04 Dec 2025 21:26:58 +0000 Manifest next update: Mon 08 Dec 2025 01:36:58 +0000 Files and hashes: 1: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 2: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 3: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 4: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 5: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 6: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 7: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 8: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 9: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 10: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 11: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: RtAHy7AChE96LP7s9HPKtp+JVzsTuU6hR8h9vMJMWvw=) 12: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 13: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 14: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 15: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 16: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 17: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c2:e8:f8:0b:bb:e2:90:d3:95:c9:c3:c8:8f:c7:b7:ee:41:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Dec 4 21:26:58 2025 GMT Not After : Dec 8 01:36:58 2025 GMT Subject: CN=BEAB8A10EF7EE1974F12D031118A218B351885D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:54:74:3e:f5:e6:ff:d0:a0:ff:ab:cd:24: 99:69:1c:c9:f9:5f:70:a6:91:23:35:3d:3e:70:d6: d0:11:d1:61:cf:89:83:a0:6c:47:39:2f:6b:87:79: d4:3f:98:6b:69:ae:2c:22:72:8b:4c:25:cd:2a:77: 3a:ca:c7:05:d0:7b:ed:35:3c:e3:98:37:f6:87:63: 14:64:ec:c8:93:96:01:14:d0:09:74:4f:d8:ba:ce: e3:02:44:72:5b:ad:1f:29:9e:ae:13:32:d7:e4:6b: 92:52:60:85:dc:a1:d4:f1:d7:c9:b9:45:b1:d7:ee: f8:21:c0:61:fc:60:fe:82:b6:b0:14:56:6d:8e:99: 14:21:01:e9:7c:21:bc:62:65:0a:59:83:e6:ac:c4: c4:d3:27:e9:15:67:cb:de:fa:e0:9b:2a:c9:d1:a3: 02:47:99:76:1a:2e:a8:79:aa:eb:96:4d:e6:25:51: 4a:7d:5d:c2:10:ef:51:15:5c:16:6c:b3:b3:ab:07: 67:6a:21:00:c6:c9:21:1b:a3:8b:cf:e2:db:bd:0f: 73:1f:c5:bc:3f:8f:53:b8:d3:3c:18:59:f2:77:ea: b8:06:22:0a:c0:70:19:6a:8c:26:d6:f7:17:3e:91: 94:18:33:2d:12:4f:44:d7:7c:4b:6e:c0:39:26:f7: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:8A:10:EF:7E:E1:97:4F:12:D0:31:11:8A:21:8B:35:18:85:D7 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d5:83:bf:e0:d7:c4:f3:72:8a:46:79:e8:be:4f:27:50:ba: 4f:b0:1a:dc:92:ad:d8:2a:8a:c2:21:d6:43:c9:07:21:21:f0: ac:42:78:4e:56:de:5c:9e:76:b1:60:e3:f2:e5:09:16:26:fa: 32:66:59:7a:97:c1:a6:ef:d2:16:3b:8d:ca:4a:0d:0e:e0:30: 1d:9f:48:0a:23:bb:03:2f:aa:08:86:12:eb:e5:04:68:ce:33: f5:05:5b:cf:23:81:36:1c:8f:22:c4:8d:ef:5e:43:47:16:c7: 63:c1:c0:aa:35:08:9b:57:65:0b:20:7d:ed:91:21:ab:e3:ef: 10:13:cc:b1:7d:2b:c7:21:d0:86:c6:a4:38:53:d8:07:c7:9b: 5e:08:15:64:38:cf:e0:34:98:6b:a0:e3:40:4f:2b:cb:8f:8b: 87:fc:6d:ac:94:8f:e0:44:45:79:22:90:1d:fc:78:00:bd:ff: 4b:8e:40:03:ca:49:67:2b:f6:75:db:98:a2:85:b2:dd:3d:e0: e8:b8:aa:a8:30:b4:ed:ef:63:91:40:e6:d2:f0:25:48:a0:1c: 73:ed:0e:ad:c5:ea:83:a4:f7:75:96:e9:db:0c:29:dc:4e:2e: a6:4e:f9:37:9f:1c:1c:df:31:1c:e0:1b:01:d5:65:98:12:db: c1:5d:c8:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMLo+Au74pDTlcnDyI/Ht+5BjqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTEyMDQyMTI2NThaFw0yNTEyMDgwMTM2NThaMDMxMTAvBgNV BAMTKEJFQUI4QTEwRUY3RUUxOTc0RjEyRDAzMTExOEEyMThCMzUxODg1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9S1R0PvXm/9Cg/6vNJJlpHMn5 X3CmkSM1PT5w1tAR0WHPiYOgbEc5L2uHedQ/mGtpriwicotMJc0qdzrKxwXQe+01 POOYN/aHYxRk7MiTlgEU0Al0T9i6zuMCRHJbrR8pnq4TMtfka5JSYIXcodTx18m5 RbHX7vghwGH8YP6CtrAUVm2OmRQhAel8IbxiZQpZg+asxMTTJ+kVZ8ve+uCbKsnR owJHmXYaLqh5quuWTeYlUUp9XcIQ71EVXBZss7OrB2dqIQDGySEbo4vP4tu9D3Mf xbw/j1O40zwYWfJ36rgGIgrAcBlqjCbW9xc+kZQYMy0ST0TXfEtuwDkm9yN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvquKEO9+4ZdPEtAxEYohizUYhdcwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfVg7/g18TzcopGeei+TydQuk+wGtySrdgq isIh1kPJByEh8KxCeE5W3lyedrFg4/LlCRYm+jJmWXqXwabv0hY7jcpKDQ7gMB2f SAojuwMvqgiGEuvlBGjOM/UFW88jgTYcjyLEje9eQ0cWx2PBwKo1CJtXZQsgfe2R Iavj7xATzLF9K8ch0IbGpDhT2AfHm14IFWQ4z+A0mGug40BPK8uPi4f8bayUj+BE RXkikB38eAC9/0uOQAPKSWcr9nXbmKKFst094Oi4qqgwtO3vY5FA5tLwJUigHHPt Dq3F6oOk93WW6dsMKdxOLqZO+TefHBzfMRzgGwHVZZgS28FdyFA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:44 2025 by rpki-client