This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: JORjsaCu76wJQE6iY6ENtjndPPuMT3V8MA2tjA6aB3g= Subject key identifier: 71:78:B4:C5:B0:FF:3E:57:D5:82:D2:E3:7D:05:F1:07:9A:1D:7B:97 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 100BD27E79A9474010A78630409514529B32FD99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 052C Signing time: Sat 06 Dec 2025 10:32:17 +0000 Manifest this update: Sat 06 Dec 2025 10:27:17 +0000 Manifest next update: Tue 09 Dec 2025 18:08:17 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: tOtUy/AmfZboSw1aLNfm9XpdLKQ+VbG3riSmgOZ/tm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:d2:7e:79:a9:47:40:10:a7:86:30:40:95:14:52:9b:32:fd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Dec 6 10:27:17 2025 GMT Not After : Dec 9 18:08:17 2025 GMT Subject: CN=7178B4C5B0FF3E57D582D2E37D05F1079A1D7B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:d3:96:68:9c:92:ba:59:e8:08:7a:93:68: fe:da:2c:48:9e:4a:95:4f:73:30:26:19:a2:b5:b1: 45:3b:d1:c4:57:ad:eb:c3:c9:11:99:54:43:01:e3: 33:9f:15:9f:4d:a9:1d:fe:14:72:8b:cc:bf:de:10: 47:e5:8a:f8:19:20:7d:9a:92:1d:db:2e:92:fb:d3: 44:f3:02:06:d9:8d:0d:ab:6a:7e:98:c9:56:19:f2: 63:c9:9a:d2:5d:88:62:36:75:bc:c9:88:af:e1:91: d2:c3:81:b0:67:0c:4a:f3:f1:dc:fc:9b:9a:dd:ea: a6:7d:45:77:de:1b:21:2e:65:48:0a:78:ec:b4:23: 02:1f:8a:3b:99:25:ff:c9:ad:51:9e:dc:e8:c1:c5: 23:f5:26:08:0f:01:31:cc:cb:73:b2:64:f3:61:4a: 2c:9f:4e:30:6a:d5:3a:99:5d:1e:53:26:82:39:c1: 65:0e:a4:33:82:9f:86:a6:9e:aa:41:8c:95:fb:fd: ad:04:9a:f2:b0:15:32:ff:e9:5d:02:d8:c9:64:37: 94:36:a0:fd:fa:b8:f6:b7:ed:6a:b5:04:f7:2b:aa: 6e:2a:71:5b:6f:37:39:10:0d:ab:be:c5:78:ad:c4: 6d:d7:4b:5b:20:e7:96:a9:83:c3:39:6d:41:a6:28: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:B4:C5:B0:FF:3E:57:D5:82:D2:E3:7D:05:F1:07:9A:1D:7B:97 X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:43:5d:b1:12:f3:cf:8c:18:e4:1f:c5:74:a9:66:72:be: af:4c:8f:ec:8a:9d:0b:61:4b:ae:7b:69:15:7d:34:3a:a7:c6: 48:7f:4f:5c:83:22:c9:40:57:3c:dc:7f:91:97:ee:8c:af:53: ed:df:19:ac:57:b2:53:17:95:88:c7:ed:1f:75:8c:22:f3:db: f4:ee:0d:b7:83:1c:b9:9b:b4:b8:81:fc:3b:bb:85:93:5c:bd: 69:ed:7d:7f:7a:08:f6:00:de:2d:6d:fd:5f:dd:52:5a:c6:73: ab:66:b1:4c:a6:46:07:df:5a:6e:3d:71:ad:d0:d5:c5:23:fc: b7:a2:fb:e3:ea:bd:f4:e2:f5:4f:cc:13:1d:95:65:d4:fd:1d: 6a:0b:b1:62:4a:e7:69:1b:f6:40:78:c3:1b:0b:50:2c:6b:77: 1e:9c:85:54:94:55:90:36:04:04:df:3e:ed:b1:26:bd:01:29: 81:ad:33:fc:c5:37:18:f4:93:47:e7:28:f9:38:db:98:7d:98: 12:75:2a:eb:ef:08:06:da:5e:3e:17:33:5b:fa:07:6f:fe:9c: 72:a2:16:f7:f6:70:2d:32:bb:1b:51:f2:e5:03:c1:c7:cf:e4: a3:65:71:53:8b:d8:75:79:84:06:dd:26:f6:11:61:c9:19:5a: 21:cb:8a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAvSfnmpR0AQp4YwQJUUUpsy/ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTEyMDYxMDI3MTdaFw0yNTEyMDkxODA4MTdaMDMxMTAvBgNV BAMTKDcxNzhCNEM1QjBGRjNFNTdENTgyRDJFMzdEMDVGMTA3OUExRDdCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPdOWaJySulnoCHqTaP7aLEie SpVPczAmGaK1sUU70cRXrevDyRGZVEMB4zOfFZ9NqR3+FHKLzL/eEEflivgZIH2a kh3bLpL700TzAgbZjQ2ran6YyVYZ8mPJmtJdiGI2dbzJiK/hkdLDgbBnDErz8dz8 m5rd6qZ9RXfeGyEuZUgKeOy0IwIfijuZJf/JrVGe3OjBxSP1JggPATHMy3OyZPNh SiyfTjBq1TqZXR5TJoI5wWUOpDOCn4amnqpBjJX7/a0EmvKwFTL/6V0C2MlkN5Q2 oP36uPa37Wq1BPcrqm4qcVtvNzkQDau+xXitxG3XS1sg55apg8M5bUGmKI37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcXi0xbD/PlfVgtLjfQXxB5ode5cwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1PQ12xEvPPjBjkH8V0qWZyvq9Mj+yKnQth S657aRV9NDqnxkh/T1yDIslAVzzcf5GX7oyvU+3fGaxXslMXlYjH7R91jCLz2/Tu DbeDHLmbtLiB/Du7hZNcvWntfX96CPYA3i1t/V/dUlrGc6tmsUymRgffWm49ca3Q 1cUj/Lei++PqvfTi9U/MEx2VZdT9HWoLsWJK52kb9kB4wxsLUCxrdx6chVSUVZA2 BATfPu2xJr0BKYGtM/zFNxj0k0fnKPk425h9mBJ1KuvvCAbaXj4XM1v6B2/+nHKi Fvf2cC0yuxtR8uUDwcfP5KNlcVOL2HV5hAbdJvYRYckZWiHLigU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:06 2025 by rpki-client