This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: +HriCYeO/fEe9IAMu/d84E5eUV4hjkFetDus8Y4L8AA= Subject key identifier: 9B:FD:E8:15:57:7F:D4:76:8B:8B:4F:BB:BA:88:BF:F1:A2:88:AE:F9 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 6959A946E54320E66FDA74FE7AC20E89E53AF5EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: BD Signing time: Fri 05 Dec 2025 18:00:58 +0000 Manifest this update: Fri 05 Dec 2025 17:55:58 +0000 Manifest next update: Mon 08 Dec 2025 18:01:58 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: +UNzoR/6QxJ+IMZ6UzHZrOXW9vWvM9N1+v7bBCiYF+A=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:59:a9:46:e5:43:20:e6:6f:da:74:fe:7a:c2:0e:89:e5:3a:f5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Dec 5 17:55:58 2025 GMT Not After : Dec 8 18:01:58 2025 GMT Subject: CN=9BFDE815577FD4768B8B4FBBBA88BFF1A288AEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:92:93:66:b0:2c:c0:5b:2f:36:31:b5:2c:0e: 2d:88:ee:22:fe:47:4d:f3:d6:c3:d1:db:4b:fb:89: c8:22:a1:89:d6:ca:2e:0c:43:9f:2c:0d:31:ec:e7: c6:18:cf:34:4e:96:0e:e6:f9:da:6c:66:66:42:98: d2:4d:6c:21:78:1c:e1:2d:30:88:bd:3e:92:c0:ee: 91:4f:8b:76:85:0d:c5:26:12:73:4d:b4:ef:1d:a6: 2c:6b:34:88:b4:e3:40:04:2a:9a:4b:d1:0a:97:dd: 82:82:86:6a:27:2e:41:bf:3a:f3:f1:17:ac:a0:d1: 12:75:0e:46:b0:33:e6:93:3c:3a:3c:ae:43:1a:c2: a5:61:65:45:8d:40:bd:dc:84:7c:1a:2d:c4:81:4f: 32:57:c1:69:8c:17:25:66:3a:9b:2b:9a:07:2f:a1: 19:cd:3c:23:dd:08:90:3a:fb:e4:77:9f:94:50:35: 6a:64:ff:13:f6:ce:0d:1c:a4:0d:dc:99:57:02:67: ae:7b:49:be:f0:8e:6f:fb:01:ed:c2:ea:1a:6b:a2: 17:67:01:b3:ad:64:63:55:c8:29:1b:41:3f:9f:b2: 7c:6b:12:7d:e2:a5:14:ca:d7:64:1d:82:2d:d6:5a: 03:5f:2a:5f:f5:bc:a2:09:cf:bc:95:64:4c:d7:05: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:E8:15:57:7F:D4:76:8B:8B:4F:BB:BA:88:BF:F1:A2:88:AE:F9 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ea:d1:df:11:68:5e:19:4c:9f:61:f8:67:b6:82:dc:0e:ba: e3:6a:7d:7e:e0:e0:ad:e5:77:ec:16:33:49:fc:80:b2:eb:af: 73:50:a4:19:a2:89:e0:29:99:a7:97:bb:a9:8e:75:bf:34:0b: 90:80:89:5a:90:46:cd:ac:34:95:4d:e7:8a:f3:2a:6c:49:dc: 9b:f8:14:53:2d:42:35:64:70:f2:68:ad:e6:29:08:21:2f:39: 2f:b2:2e:a7:a0:6f:76:0f:88:8f:29:51:5f:d5:76:e9:51:33: 51:dd:94:79:73:5c:d7:40:7a:96:7c:ad:97:d6:05:4d:f1:1d: c0:c4:5a:54:7c:b0:f3:86:c6:76:7f:54:e2:54:37:df:2b:0a: 82:39:92:e4:f2:74:f7:fb:0f:bf:59:09:46:d3:0a:58:d8:8d: 56:2f:eb:55:68:1c:6b:e2:fe:de:7c:4b:b0:e6:b0:25:3e:98: 51:96:b6:4a:cc:01:aa:a1:16:4f:c7:a7:7c:50:91:2f:cf:30: dd:f7:4d:14:83:18:15:db:de:a8:4f:e8:ee:5e:ab:53:ce:33: b2:dd:e6:dd:5c:9d:d7:c8:f1:50:b7:46:d2:39:56:2c:29:9a: 17:d8:56:5c:22:3a:37:8c:3e:6d:7c:ca:f7:e3:1b:ac:d4:c4: 09:19:0b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVmpRuVDIOZv2nT+esIOieU69eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTEyMDUxNzU1NThaFw0yNTEyMDgxODAxNThaMDMxMTAvBgNV BAMTKDlCRkRFODE1NTc3RkQ0NzY4QjhCNEZCQkJBODhCRkYxQTI4OEFFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkpNmsCzAWy82MbUsDi2I7iL+ R03z1sPR20v7icgioYnWyi4MQ58sDTHs58YYzzROlg7m+dpsZmZCmNJNbCF4HOEt MIi9PpLA7pFPi3aFDcUmEnNNtO8dpixrNIi040AEKppL0QqX3YKChmonLkG/OvPx F6yg0RJ1DkawM+aTPDo8rkMawqVhZUWNQL3chHwaLcSBTzJXwWmMFyVmOpsrmgcv oRnNPCPdCJA6++R3n5RQNWpk/xP2zg0cpA3cmVcCZ657Sb7wjm/7Ae3C6hprohdn AbOtZGNVyCkbQT+fsnxrEn3ipRTK12Qdgi3WWgNfKl/1vKIJz7yVZEzXBU/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/3oFVd/1HaLi0+7uoi/8aKIrvkwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzq0d8RaF4ZTJ9h+Ge2gtwOuuNqfX7g4K3l d+wWM0n8gLLrr3NQpBmiieApmaeXu6mOdb80C5CAiVqQRs2sNJVN54rzKmxJ3Jv4 FFMtQjVkcPJoreYpCCEvOS+yLqegb3YPiI8pUV/VdulRM1HdlHlzXNdAepZ8rZfW BU3xHcDEWlR8sPOGxnZ/VOJUN98rCoI5kuTydPf7D79ZCUbTCljYjVYv61VoHGvi /t58S7DmsCU+mFGWtkrMAaqhFk/Hp3xQkS/PMN33TRSDGBXb3qhP6O5eq1POM7Ld 5t1cndfI8VC3RtI5ViwpmhfYVlwiOjeMPm18yvfjG6zUxAkZC+8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:22 2025 by rpki-client