This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: +0Sf8uf13au6Xcu0zCyyXURbwtdPjAKXMhYSABVtAR8= Subject key identifier: 55:8B:41:84:6A:EF:54:B4:28:C5:2A:CE:8F:69:73:6C:4F:7A:6A:08 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 2E6D838E04BE8EAB77D981F6C5A8CF801C7773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 05A0 Signing time: Fri 05 Dec 2025 02:21:41 +0000 Manifest this update: Fri 05 Dec 2025 02:16:41 +0000 Manifest next update: Mon 08 Dec 2025 14:15:41 +0000 Files and hashes: 1: AS137379.roa (hash: VEPT61sWKkYXZpxcUOKTis11BUw6bVrE/1woUBzpr9Q=) 2: AS137342.roa (hash: CMk60fE5UdVZv/MxL6/n0+3Rya8vaHN7xLAuSG2v4iA=) 3: AS56242.roa (hash: tSzKKpcbE6bo3w9bV3TVhMwcF8jKEriX5Wm0rnvAgIg=) 4: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: vKwPJNcKsTSHpcN3vNKKxDtxb3YcIKSI5mbeRuQ15aQ=) 5: AS38511.roa (hash: CIv/i7xPYbJ0vBSE+S0q40zqNWuAE/NaWTjEBBuHqEE=) 6: AS59281.roa (hash: oAErYV3FTpou1ipawmWDN+VJRkdUkW0+slDAEnDHpRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6d:83:8e:04:be:8e:ab:77:d9:81:f6:c5:a8:cf:80:1c:77:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Dec 5 02:16:41 2025 GMT Not After : Dec 8 14:15:41 2025 GMT Subject: CN=558B41846AEF54B428C52ACE8F69736C4F7A6A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:a4:30:a1:7b:2b:46:e1:53:dc:ea:ad:d3: 5a:da:0d:8f:09:a9:25:a4:42:da:e4:d1:18:3e:b9: 51:c8:07:7d:8f:c0:da:ef:ee:44:5b:b5:0e:07:2e: 18:80:87:af:a2:d8:df:78:ca:8c:70:87:83:cf:4c: a4:50:cb:5f:6d:6c:76:dd:f1:6a:a5:89:68:21:03: 59:d7:e1:12:00:98:15:1f:f3:a3:58:a1:42:9d:71: 93:d3:6c:81:3a:07:7e:fb:76:86:21:69:9c:95:52: 6a:5b:0e:21:f9:87:7b:f6:46:f9:80:61:44:b8:87: 05:66:7b:f9:c8:fd:9f:68:ec:a3:1f:bb:ce:e8:0f: c6:0b:a0:4c:74:d3:a0:4b:f0:88:f4:e5:6a:34:67: 29:ba:01:39:7a:4f:46:ca:bd:dc:d6:d6:07:cb:65: b2:46:2c:9a:5b:fb:40:da:55:ee:a8:2f:e7:55:e5: 53:91:50:ac:94:07:02:b7:6f:04:07:e0:e6:65:73: 20:70:70:f6:9c:ce:b9:9f:b2:73:4a:59:d6:ec:4a: f7:5f:fe:4b:46:a2:de:63:f4:0a:cb:23:32:87:39: 52:fd:77:a5:64:69:fa:ab:09:bf:de:a0:e6:41:39: 3c:04:a0:66:0f:86:de:58:bf:55:46:01:cc:66:78: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8B:41:84:6A:EF:54:B4:28:C5:2A:CE:8F:69:73:6C:4F:7A:6A:08 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ba:88:de:fd:b4:59:5e:f6:9e:c5:f5:64:8f:5e:3c:b3:de: 17:a4:f6:3a:e3:93:34:59:8a:4e:80:54:39:1e:be:fd:08:bd: 77:65:f2:8f:f1:5d:b0:26:32:32:d6:9f:65:f8:5c:53:01:6a: ea:f3:0b:0b:4b:5b:f4:a4:82:9f:ba:b5:0b:19:ab:fa:53:a8: 27:76:5c:d0:c8:90:98:1d:36:32:6a:b3:17:60:08:79:de:df: 2c:87:a8:5e:a6:11:64:3f:a3:02:f9:de:ff:81:b3:35:f0:69: 31:40:b1:ea:dd:a5:d0:5c:58:38:96:1d:bd:75:02:59:f4:bf: 0c:63:f5:b9:ad:cf:75:d0:72:c2:66:5a:4a:e4:2e:d9:13:4d: 7f:32:d6:51:4b:79:09:bc:97:cd:f9:5d:02:44:74:d0:30:62: ee:b2:f8:22:ee:77:9f:31:d2:86:20:4f:15:df:32:6a:4b:d6: d9:12:a9:90:dc:b8:65:82:97:8b:83:2a:2c:f0:50:e4:7b:ce: ea:50:78:a1:bd:d8:b5:cd:aa:79:86:98:53:5d:8c:0d:77:13: d0:01:4b:bc:8d:a1:49:45:29:42:9d:ed:e9:cc:67:bb:d4:a4: 64:23:a0:6d:c2:a8:3a:fb:03:08:60:d0:2b:57:76:9a:52:f0: e4:76:ef:cc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLm2DjgS+jqt32YH2xajPgBx3czANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MTY5QjlCNjUyNkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3 QUJDMTdGMB4XDTI1MTIwNTAyMTY0MVoXDTI1MTIwODE0MTU0MVowMzExMC8GA1UE AxMoNTU4QjQxODQ2QUVGNTRCNDI4QzUyQUNFOEY2OTczNkM0RjdBNkEwODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbKpDCheytG4VPc6q3TWtoNjwmp JaRC2uTRGD65UcgHfY/A2u/uRFu1DgcuGICHr6LY33jKjHCHg89MpFDLX21sdt3x aqWJaCEDWdfhEgCYFR/zo1ihQp1xk9NsgToHfvt2hiFpnJVSalsOIfmHe/ZG+YBh RLiHBWZ7+cj9n2jsox+7zugPxgugTHTToEvwiPTlajRnKboBOXpPRsq93NbWB8tl skYsmlv7QNpV7qgv51XlU5FQrJQHArdvBAfg5mVzIHBw9pzOuZ+yc0pZ1uxK91/+ S0ai3mP0CssjMoc5Uv13pWRp+qsJv96g5kE5PASgZg+G3li/VUYBzGZ4GakCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRVi0GEau9UtCjFKs6PaXNsT3pqCDAfBgNVHSME GDAWgBSRabm2UmzRSYTd46QuJN2P56vBfzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4 ZjI5MTVkLTE4YzktNGUwMy1iYmZiLTIwNzRjNTk4MDg5OC8wLzkxNjlCOUI2NTI2 Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85MTY5QjlCNjUyNkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJD MTdGLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJm Yi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUyNkNEMTQ5ODREREUzQTQyRTI0REQ4 RkU3QUJDMTdGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAy7qI3v20WV72nsX1ZI9ePLPeF6T2OuOTNFmK ToBUOR6+/Qi9d2Xyj/FdsCYyMtafZfhcUwFq6vMLC0tb9KSCn7q1Cxmr+lOoJ3Zc 0MiQmB02MmqzF2AIed7fLIeoXqYRZD+jAvne/4GzNfBpMUCx6t2l0FxYOJYdvXUC WfS/DGP1ua3PddBywmZaSuQu2RNNfzLWUUt5CbyXzfldAkR00DBi7rL4Iu53nzHS hiBPFd8yakvW2RKpkNy4ZYKXi4MqLPBQ5HvO6lB4ob3Ytc2qeYaYU12MDXcT0AFL vI2hSUUpQp3t6cxnu9SkZCOgbcKoOvsDCGDQK1d2mlLw5HbvzA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:25 2025 by rpki-client