This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: hgh7+0nMERTjNTdmRh973r8nc1seprshLkzy3rzrsJ0= Subject key identifier: 05:C5:17:7F:68:25:BB:3D:D8:1E:59:D2:C4:EA:5F:BD:75:E2:DB:97 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 3E4A70831D4CF700C626387FE86A88454639E7BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: F2 Signing time: Sat 06 Dec 2025 09:12:21 +0000 Manifest this update: Sat 06 Dec 2025 09:07:21 +0000 Manifest next update: Tue 09 Dec 2025 17:47:21 +0000 Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) 2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: aE1URLAk1D0LoIxj/dZQ32H9Aw6uEQhppa7cVvi598w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4a:70:83:1d:4c:f7:00:c6:26:38:7f:e8:6a:88:45:46:39:e7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Dec 6 09:07:21 2025 GMT Not After : Dec 9 17:47:21 2025 GMT Subject: CN=05C5177F6825BB3DD81E59D2C4EA5FBD75E2DB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:3d:56:a9:ad:fd:ce:3d:09:02:02:3a:e8: 66:c3:f7:d7:3d:85:9a:8d:30:3f:dc:3c:29:29:82: b2:56:e2:00:21:36:35:81:09:50:fd:c1:c8:c4:0e: b7:5a:6c:44:c7:d7:f8:1d:19:d3:f8:56:70:30:d2: 73:e8:3e:61:15:58:3b:09:7c:13:06:ea:7d:2d:a5: a4:fc:65:b8:17:12:a8:77:4c:b9:e1:53:ae:9a:80: 53:3a:cf:a6:cb:77:c8:82:d6:51:d3:f7:53:10:17: 29:bc:70:6c:78:3d:b3:83:41:a4:19:1a:b8:64:e4: 4e:4d:f6:2d:06:79:1f:53:e3:38:07:48:f7:f2:8d: 45:04:23:c7:b3:49:a2:13:bf:d6:8c:9c:fb:1c:b2: b0:55:e1:90:d8:7c:10:71:58:51:68:9e:19:65:a6: b7:60:c2:69:f4:b3:3a:0a:79:1d:45:c4:8e:a0:1b: f9:44:14:04:5d:42:92:db:b5:5c:1c:e8:62:41:49: 51:1a:7a:15:77:92:67:c8:78:29:f3:da:a5:cf:dc: da:aa:15:ae:c5:ff:6f:da:cf:6d:59:76:b0:07:59: 6b:4c:38:be:29:24:56:d7:df:bd:27:8b:8d:43:7a: d8:06:63:5e:24:53:73:90:c0:00:49:d6:ab:59:9d: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:17:7F:68:25:BB:3D:D8:1E:59:D2:C4:EA:5F:BD:75:E2:DB:97 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4d:71:5c:56:7c:72:2b:f7:74:16:7f:75:0b:5b:df:59:a6: e1:e5:c2:7b:69:d9:e6:c4:c8:59:0c:a0:1e:a4:78:ec:81:b9: f2:08:ae:d0:df:83:d9:77:43:e0:61:62:ec:c8:be:7f:82:17: f1:f7:80:49:9f:db:e7:ae:55:25:22:f6:9e:7b:5b:54:78:42: 59:5c:ac:ab:d6:8b:64:6f:07:f8:b1:24:4e:f9:88:97:e4:ee: 7a:ed:80:29:ad:35:ca:a0:68:a0:76:97:fc:57:6a:0e:ef:73: 71:ae:9c:b2:49:71:70:2b:7b:ba:fe:e1:b4:83:e7:bc:70:ad: fe:c3:5d:f6:08:d6:aa:8b:68:ed:63:18:04:37:97:29:3a:2d: 68:9b:02:e6:de:ab:ac:83:76:b3:6e:33:a6:0d:dc:70:7e:9a: ba:7c:ef:c6:49:8c:26:0e:18:3d:6a:7b:9b:93:97:e4:a5:a4: e1:40:a9:d3:3c:cd:15:c7:22:32:40:ea:df:ea:e4:22:03:5f: 1c:05:3b:c6:04:06:11:15:83:4a:46:c7:ac:e9:1a:ff:33:35: 10:cc:b4:01:d6:ec:75:73:f2:6f:bf:23:c2:fe:e9:f5:da:32: 07:86:ab:c2:7d:0a:85:ae:3b:8a:51:14:c3:0a:19:68:b4:6a: a3:99:0e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkpwgx1M9wDGJjh/6GqIRUY557wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTEyMDYwOTA3MjFaFw0yNTEyMDkxNzQ3MjFaMDMxMTAvBgNV BAMTKDA1QzUxNzdGNjgyNUJCM0REODFFNTlEMkM0RUE1RkJENzVFMkRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VT1Wqa39zj0JAgI66GbD99c9 hZqNMD/cPCkpgrJW4gAhNjWBCVD9wcjEDrdabETH1/gdGdP4VnAw0nPoPmEVWDsJ fBMG6n0tpaT8ZbgXEqh3TLnhU66agFM6z6bLd8iC1lHT91MQFym8cGx4PbODQaQZ Grhk5E5N9i0GeR9T4zgHSPfyjUUEI8ezSaITv9aMnPscsrBV4ZDYfBBxWFFonhll prdgwmn0szoKeR1FxI6gG/lEFARdQpLbtVwc6GJBSVEaehV3kmfIeCnz2qXP3Nqq Fa7F/2/az21ZdrAHWWtMOL4pJFbX370ni41DetgGY14kU3OQwABJ1qtZnUTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcUXf2gluz3YHlnSxOpfvXXi25cwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpNcVxWfHIr93QWf3ULW99ZpuHlwntp2ebE yFkMoB6keOyBufIIrtDfg9l3Q+BhYuzIvn+CF/H3gEmf2+euVSUi9p57W1R4Qllc rKvWi2RvB/ixJE75iJfk7nrtgCmtNcqgaKB2l/xXag7vc3GunLJJcXAre7r+4bSD 57xwrf7DXfYI1qqLaO1jGAQ3lyk6LWibAubeq6yDdrNuM6YN3HB+mrp878ZJjCYO GD1qe5uTl+SlpOFAqdM8zRXHIjJA6t/q5CIDXxwFO8YEBhEVg0pGx6zpGv8zNRDM tAHW7HVz8m+/I8L+6fXaMgeGq8J9CoWuO4pRFMMKGWi0aqOZDuM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:58 2025 by rpki-client