This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: A3qRMCbh8gZ9xTvYv94tQ+FfX9slNntWPYxGABtsmR8= Subject key identifier: 3F:AA:7B:9D:D6:E3:57:BA:3F:15:E4:CF:F6:10:AA:77:43:42:EB:79 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 7137D89A4A225FABD3B3617883F980190A83B61E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 09:57:02 +0000 Manifest next update: Tue 09 Dec 2025 20:02:02 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: UJjr/ye/+P/JiO8GWARgMCi98o9FEhqCDFVH0NdYEUA=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:37:d8:9a:4a:22:5f:ab:d3:b3:61:78:83:f9:80:19:0a:83:b6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Dec 6 09:57:02 2025 GMT Not After : Dec 9 20:02:02 2025 GMT Subject: CN=3FAA7B9DD6E357BA3F15E4CFF610AA774342EB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:78:5d:7c:7d:20:db:fb:4e:f4:11:a8:80: 5d:5c:64:7f:8a:75:47:b3:a2:7e:3c:d4:29:20:ed: 0b:2e:d7:1b:45:d9:d4:0b:f4:a5:39:a8:8b:69:5f: 38:0c:38:9d:d0:a8:ee:25:d3:dc:53:83:86:f6:42: 58:b9:0f:42:8a:f5:1f:eb:32:31:e6:00:eb:75:75: 83:a6:a3:88:48:0c:68:c1:93:19:d9:ed:0c:2c:dd: c7:39:ab:a1:c3:72:c8:11:d9:c6:5d:8b:4a:28:04: a1:4f:4a:03:e8:48:22:a9:a5:96:06:eb:ac:49:cf: 38:1e:32:1e:c0:a5:b2:7e:22:30:37:e2:b4:33:4c: 96:22:4b:d3:ae:9d:a7:07:07:28:97:51:5b:f5:ca: ef:fe:6d:c8:ae:30:a4:70:d4:a8:45:cc:e4:8f:35: 00:ef:76:39:02:9f:07:19:a4:39:76:f4:e0:67:e2: f2:14:87:e0:bc:61:49:e0:bf:84:9e:05:d2:47:e8: e6:7c:1c:7b:40:8f:a1:06:08:b6:d8:02:0c:d1:ad: b1:92:5c:cc:74:0b:fa:97:cd:94:c8:e0:fe:da:09: 32:b8:72:f9:97:ab:d7:80:50:e6:8d:fc:c3:bd:30: 8d:ff:33:3d:44:17:3b:b5:c1:fd:dc:13:24:b6:06: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:7B:9D:D6:E3:57:BA:3F:15:E4:CF:F6:10:AA:77:43:42:EB:79 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d6:47:31:13:e0:21:ab:f0:cd:21:8f:4f:47:82:b4:4e:a2: 97:84:99:16:c0:aa:ef:2f:0b:76:9a:84:6c:ab:5d:fc:e8:ec: 00:61:0a:02:5e:62:17:e8:17:82:71:b4:0d:b7:b1:82:b5:5f: 08:7b:96:57:8d:c5:17:12:b5:c6:95:c2:bc:e1:48:a7:a4:9f: a3:71:15:53:82:b0:1c:c9:09:a2:12:bc:f4:88:f3:bd:a0:e5: da:3f:9e:e6:ba:d8:b2:b1:57:6f:c6:e6:48:ba:28:95:d8:9f: 02:8e:6d:31:db:cb:52:2d:34:1a:fe:61:e0:62:bc:90:86:9e: 08:3f:2e:8c:9a:61:aa:6f:fc:29:0b:82:47:2d:c4:a6:d4:7b: 65:86:53:2c:17:88:b7:98:08:50:f6:ac:e6:df:00:77:af:86: a8:50:1c:79:e7:a4:3b:78:78:b3:b2:8a:33:c6:be:6a:6e:bf: ea:4b:8f:fc:9b:13:6a:dd:3b:41:74:05:b7:cc:60:97:6b:0c: 3d:26:76:c1:0b:9b:24:8d:2f:ca:90:7c:40:7f:fe:6c:1c:de: 62:fc:83:92:59:37:4a:3e:d3:82:07:5c:06:bb:8a:e3:a5:2a: 71:81:b9:60:64:bd:00:c8:3c:a4:c3:77:1e:f8:57:ab:92:3d: 69:3c:5b:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTfYmkoiX6vTs2F4g/mAGQqDth4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTEyMDYwOTU3MDJaFw0yNTEyMDkyMDAyMDJaMDMxMTAvBgNV BAMTKDNGQUE3QjlERDZFMzU3QkEzRjE1RTRDRkY2MTBBQTc3NDM0MkVCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrHhdfH0g2/tO9BGogF1cZH+K dUezon481Ckg7Qsu1xtF2dQL9KU5qItpXzgMOJ3QqO4l09xTg4b2Qli5D0KK9R/r MjHmAOt1dYOmo4hIDGjBkxnZ7Qws3cc5q6HDcsgR2cZdi0ooBKFPSgPoSCKppZYG 66xJzzgeMh7ApbJ+IjA34rQzTJYiS9OunacHByiXUVv1yu/+bciuMKRw1KhFzOSP NQDvdjkCnwcZpDl29OBn4vIUh+C8YUngv4SeBdJH6OZ8HHtAj6EGCLbYAgzRrbGS XMx0C/qXzZTI4P7aCTK4cvmXq9eAUOaN/MO9MI3/Mz1EFzu1wf3cEyS2Bs85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6p7ndbjV7o/FeTP9hCqd0NC63kwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjWRzET4CGr8M0hj09HgrROopeEmRbAqu8v C3aahGyrXfzo7ABhCgJeYhfoF4JxtA23sYK1Xwh7lleNxRcStcaVwrzhSKekn6Nx FVOCsBzJCaISvPSI872g5do/nua62LKxV2/G5ki6KJXYnwKObTHby1ItNBr+YeBi vJCGngg/LoyaYapv/CkLgkctxKbUe2WGUywXiLeYCFD2rObfAHevhqhQHHnnpDt4 eLOyijPGvmpuv+pLj/ybE2rdO0F0BbfMYJdrDD0mdsELmySNL8qQfEB//mwc3mL8 g5JZN0o+04IHXAa7iuOlKnGBuWBkvQDIPKTDdx74V6uSPWk8WxI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:25 2025 by rpki-client