This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: 2WRpsKXtc31hvQWL7OlKInKrE1mhBCebLAN6rZ9TP4Y= Subject key identifier: F9:BE:D4:2C:6A:A1:30:51:FF:3F:9F:BE:12:BF:A1:E4:C2:A9:70:F3 Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 5FF09EC2FDA3857A341CCD52F5592F61509BF1D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 0485 Signing time: Fri 05 Dec 2025 20:11:09 +0000 Manifest this update: Fri 05 Dec 2025 20:06:09 +0000 Manifest next update: Tue 09 Dec 2025 00:09:09 +0000 Files and hashes: 1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: o38Gkf6qhDjN+VF+f+bkVMW/T/gi6ddbUlxJ+54vxfg=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f0:9e:c2:fd:a3:85:7a:34:1c:cd:52:f5:59:2f:61:50:9b:f1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Dec 5 20:06:09 2025 GMT Not After : Dec 9 00:09:09 2025 GMT Subject: CN=F9BED42C6AA13051FF3F9FBE12BFA1E4C2A970F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5a:9f:11:48:56:b7:4f:b7:35:d8:56:c8:43: e4:62:39:74:ed:bf:01:54:b6:3a:a0:fd:6e:e4:7d: 09:6a:fe:b5:5c:03:6c:ae:e2:d6:a3:81:bb:b5:e7: dc:d6:25:ab:a9:d5:69:da:e4:39:dc:24:fc:84:fa: 40:ac:56:bf:93:4a:60:1e:3c:6f:38:38:83:f9:57: 1d:35:72:78:2c:c3:f0:2f:81:d9:19:25:80:5f:a4: 8a:da:c6:f8:c1:70:00:be:67:fb:45:99:ce:04:0e: 73:a3:9a:6f:33:eb:73:f5:7c:40:f9:c3:1a:20:e3: 49:e5:c5:0a:f7:73:78:6b:c8:7c:0f:ea:57:b6:53: e8:5c:75:74:4a:41:34:d4:96:d5:1e:63:f9:46:93: 37:4a:3a:1e:17:34:09:4a:6a:56:eb:86:82:0b:48: 76:b2:fe:8e:f8:c4:9d:e6:2c:49:4b:8d:5b:41:57: f4:9f:e7:5b:c4:38:c3:24:7c:62:e2:e0:81:05:40: c3:f4:22:da:4b:b4:b3:ab:43:df:ee:5f:b3:07:61: 56:10:05:cb:1e:8f:3a:5d:74:f4:ea:da:37:da:08: 70:c5:a8:20:65:0e:7d:a0:3f:e7:aa:72:14:11:35: 60:5a:5d:ba:8e:83:56:d8:c3:c9:38:69:86:3b:a6: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BE:D4:2C:6A:A1:30:51:FF:3F:9F:BE:12:BF:A1:E4:C2:A9:70:F3 X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e5:da:0e:63:a4:7a:6e:fd:57:52:f7:22:a0:26:02:d3:33: 3d:26:19:ef:29:86:5e:97:d8:17:65:00:82:f9:52:be:27:da: e1:ac:5a:90:84:af:ec:4e:d0:4a:12:0a:9e:eb:0c:d5:c9:00: 11:3b:57:d9:8d:42:b2:70:f0:cc:2e:47:6a:e7:1e:f7:69:57: 64:ce:39:c5:ba:4a:ef:7f:53:b6:68:3b:2e:3e:52:3a:eb:d0: 21:bc:75:17:d7:53:1c:24:60:7a:74:b2:44:0f:da:e8:0d:04: a4:60:d4:5b:b1:f2:83:0b:d2:8e:46:85:75:72:ff:e4:83:14: 32:d4:40:08:b4:eb:64:ed:ed:21:f2:5f:f6:23:09:40:65:4c: ce:db:ab:e9:18:20:a3:eb:21:d3:7c:4a:bf:8c:82:cf:9a:1e: 34:11:2d:79:66:53:b1:a3:a0:c3:7c:90:2e:93:0f:10:e0:5e: be:22:fd:84:71:37:ab:2c:f2:bb:3c:5c:cb:b9:da:f0:47:7f: 40:d2:b3:ad:de:ec:21:24:dd:76:c2:83:ee:4d:23:a5:11:cb: 9b:83:b0:2b:1d:84:69:a9:80:ea:ff:d5:dc:e4:12:47:07:79: c8:93:d6:ba:c1:1e:0c:1d:38:d4:31:32:a4:25:28:d8:e0:11: 3d:05:10:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/Cewv2jhXo0HM1S9VkvYVCb8dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTEyMDUyMDA2MDlaFw0yNTEyMDkwMDA5MDlaMDMxMTAvBgNV BAMTKEY5QkVENDJDNkFBMTMwNTFGRjNGOUZCRTEyQkZBMUU0QzJBOTcwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyWp8RSFa3T7c12FbIQ+RiOXTt vwFUtjqg/W7kfQlq/rVcA2yu4tajgbu159zWJaup1Wna5DncJPyE+kCsVr+TSmAe PG84OIP5Vx01cngsw/AvgdkZJYBfpIraxvjBcAC+Z/tFmc4EDnOjmm8z63P1fED5 wxog40nlxQr3c3hryHwP6le2U+hcdXRKQTTUltUeY/lGkzdKOh4XNAlKalbrhoIL SHay/o74xJ3mLElLjVtBV/Sf51vEOMMkfGLi4IEFQMP0ItpLtLOrQ9/uX7MHYVYQ BcsejzpddPTq2jfaCHDFqCBlDn2gP+eqchQRNWBaXbqOg1bYw8k4aYY7psaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+b7ULGqhMFH/P5++Er+h5MKpcPMwHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfl2g5jpHpu/VdS9yKgJgLTMz0mGe8phl6X 2BdlAIL5Ur4n2uGsWpCEr+xO0EoSCp7rDNXJABE7V9mNQrJw8MwuR2rnHvdpV2TO OcW6Su9/U7ZoOy4+Ujrr0CG8dRfXUxwkYHp0skQP2ugNBKRg1Fux8oML0o5GhXVy /+SDFDLUQAi062Tt7SHyX/YjCUBlTM7bq+kYIKPrIdN8Sr+Mgs+aHjQRLXlmU7Gj oMN8kC6TDxDgXr4i/YRxN6ss8rs8XMu52vBHf0DSs63e7CEk3XbCg+5NI6URy5uD sCsdhGmpgOr/1dzkEkcHeciT1rrBHgwdONQxMqQlKNjgET0FEL4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:06 2025 by rpki-client