This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: Cw3nbOVZ+GfjAKHk17ub8ZJ2iiMaJzH/IxxjEfW8bXc= Subject key identifier: FB:0C:BF:7D:FB:26:0A:61:FC:EB:A5:CE:76:B8:26:54:70:36:B0:44 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 21DD976D7A9755F73F2329FF7115521AC2686BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: A9 Signing time: Fri 05 Dec 2025 14:21:26 +0000 Manifest this update: Fri 05 Dec 2025 14:16:26 +0000 Manifest next update: Mon 08 Dec 2025 15:20:26 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=) 2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: qopqLfHegQ4qwhEKwoiYnPSJ8tZ+jYhWt4kyFCuXbEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:97:6d:7a:97:55:f7:3f:23:29:ff:71:15:52:1a:c2:68:6b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Dec 5 14:16:26 2025 GMT Not After : Dec 8 15:20:26 2025 GMT Subject: CN=FB0CBF7DFB260A61FCEBA5CE76B826547036B044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:67:81:01:37:07:5e:88:7e:c9:64:0d:84: bf:64:65:8c:6c:38:29:26:70:d2:bd:38:51:a9:04: e7:0a:cb:36:3f:1b:ac:5d:48:fb:5e:62:cc:fd:5f: e1:63:df:46:4b:f5:bf:36:37:41:54:0b:b7:6d:6b: ba:4c:eb:bf:52:96:d9:e4:ce:99:f9:c6:88:b7:b7: 0f:5c:f6:ec:0c:d6:f0:56:85:e6:98:8d:09:00:cc: 40:9e:88:a2:dc:44:52:42:63:1f:15:8d:1d:2a:27: cc:a6:3b:96:53:c0:2f:83:97:e0:59:4f:0d:5e:f5: df:7b:d7:88:7c:d7:72:4f:66:10:47:f5:c9:64:e0: 66:b8:7b:28:f9:fb:54:25:65:8e:83:de:01:92:36: fe:b5:91:b9:36:ae:b9:2a:fb:14:8e:9a:22:ee:4a: 22:40:a5:57:3f:be:88:65:06:3b:29:48:b6:77:d3: 29:23:e4:47:f1:b7:0d:e4:52:67:83:a6:01:8d:2a: ee:8f:8e:70:56:15:fc:ea:a2:ef:82:ce:35:5e:25: f5:0f:4d:35:fd:26:aa:0d:78:7a:62:e0:dc:8b:64: ed:5c:8c:c1:e7:9f:b7:44:9e:38:ef:20:7c:42:77: 9f:4c:80:3c:1b:4a:5a:08:6b:d8:ec:09:90:fd:8c: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0C:BF:7D:FB:26:0A:61:FC:EB:A5:CE:76:B8:26:54:70:36:B0:44 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5e:ba:1b:73:05:58:13:85:ab:da:99:3b:02:d0:2b:70:37: e5:5b:d6:6c:81:19:e7:5c:79:b0:38:b1:71:20:a4:6e:8c:06: 1f:88:6c:c0:bb:38:e6:f7:2c:8f:67:e0:d3:3c:15:d7:3e:40: 40:89:f5:57:3e:9d:b6:4d:0d:f3:bc:b1:02:eb:1d:43:2d:03: 0e:9b:44:19:e0:eb:23:e6:b6:ab:b2:70:6e:ad:d5:33:75:d5: 81:bc:5b:48:89:ed:ab:e8:b3:63:57:a3:48:66:78:25:e1:50: e1:07:ef:5b:97:d8:61:b0:dc:ca:4a:1e:ed:bd:e2:22:fc:14: 9f:e5:4b:bd:c2:e7:dc:39:ba:58:84:42:f3:c1:0c:3b:59:98: 4b:75:35:47:3d:a4:69:94:b6:f8:80:b0:09:bc:b8:d0:80:55: c6:1b:c1:9d:e9:64:12:db:a8:41:05:37:26:c9:2d:a3:cf:79: f0:2c:f2:97:8d:b4:f7:ea:db:b2:42:51:71:53:1e:a4:a6:16: d8:e4:c3:10:c5:c1:45:fc:4f:f9:31:aa:e5:af:b8:dc:4d:37: d2:bb:e3:c8:f4:7b:21:8f:7b:a7:c3:cb:00:e7:91:0d:8b:4e: 04:b9:d1:cd:cf:dd:16:db:27:fe:dd:fc:c1:f4:f9:fb:8d:bd: 19:7f:1f:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId2XbXqXVfc/Iyn/cRVSGsJoa70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTEyMDUxNDE2MjZaFw0yNTEyMDgxNTIwMjZaMDMxMTAvBgNV BAMTKEZCMENCRjdERkIyNjBBNjFGQ0VCQTVDRTc2QjgyNjU0NzAzNkIwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFU2eBATcHXoh+yWQNhL9kZYxs OCkmcNK9OFGpBOcKyzY/G6xdSPteYsz9X+Fj30ZL9b82N0FUC7dta7pM679Sltnk zpn5xoi3tw9c9uwM1vBWheaYjQkAzECeiKLcRFJCYx8VjR0qJ8ymO5ZTwC+Dl+BZ Tw1e9d9714h813JPZhBH9clk4Ga4eyj5+1QlZY6D3gGSNv61kbk2rrkq+xSOmiLu SiJApVc/vohlBjspSLZ30ykj5Efxtw3kUmeDpgGNKu6PjnBWFfzqou+CzjVeJfUP TTX9JqoNeHpi4NyLZO1cjMHnn7dEnjjvIHxCd59MgDwbSloIa9jsCZD9jHGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+wy/ffsmCmH866XOdrgmVHA2sEQwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdeuhtzBVgThavamTsC0CtwN+Vb1myBGedc ebA4sXEgpG6MBh+IbMC7OOb3LI9n4NM8Fdc+QECJ9Vc+nbZNDfO8sQLrHUMtAw6b RBng6yPmtquycG6t1TN11YG8W0iJ7avos2NXo0hmeCXhUOEH71uX2GGw3MpKHu29 4iL8FJ/lS73C59w5uliEQvPBDDtZmEt1NUc9pGmUtviAsAm8uNCAVcYbwZ3pZBLb qEEFNybJLaPPefAs8peNtPfq27JCUXFTHqSmFtjkwxDFwUX8T/kxquWvuNxNN9K7 48j0eyGPe6fDywDnkQ2LTgS50c3P3RbbJ/7d/MH0+fuNvRl/Hyw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:39 2025 by rpki-client