This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: oRITn/Gn10a6vyfINE5gY7QojxjlTcTcbV+1ZqgHiLA= Subject key identifier: 06:F5:44:5A:97:DD:F0:22:7A:80:48:6A:B3:19:37:D5:3F:D3:C5:D6 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 0D7F753B15F36D5F4DDCF1ED037F8AEADF40BFA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 013D Signing time: Sat 06 Dec 2025 01:11:20 +0000 Manifest this update: Sat 06 Dec 2025 01:06:20 +0000 Manifest next update: Tue 09 Dec 2025 05:37:20 +0000 Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) 3: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: 9MCpL6igG6vtHPs1aWKvn6+mZsk4m+/vb85yTsUSQeM=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:75:3b:15:f3:6d:5f:4d:dc:f1:ed:03:7f:8a:ea:df:40:bf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Dec 6 01:06:20 2025 GMT Not After : Dec 9 05:37:20 2025 GMT Subject: CN=06F5445A97DDF0227A80486AB31937D53FD3C5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:0f:a8:26:63:df:8a:d5:82:83:f4:50:5d: e8:5d:aa:a1:1e:21:ab:28:06:57:96:45:d0:f8:4c: 06:0c:0d:4c:a5:8a:f3:0b:31:a3:37:72:77:96:20: ab:9a:b4:08:c8:d2:0a:27:42:1a:76:3c:1a:b2:cb: bb:cf:15:3a:f1:9d:83:57:0e:bb:e4:6b:e6:d8:25: 0a:b4:bf:89:8c:0b:f0:91:fc:28:8f:3c:12:cf:82: 9e:39:41:e7:bc:cc:27:b0:22:9c:90:c0:6d:b0:88: f8:dd:ce:7b:6c:0c:15:7d:16:cf:fc:f1:d1:22:04: e2:03:9e:c1:e8:a5:ff:bd:41:12:f5:fd:1f:53:f1: 0b:59:83:d2:fa:7b:94:82:18:7c:a5:3f:69:5e:06: c6:6e:ae:c7:01:ab:da:00:fe:47:af:8f:33:77:77: e6:a5:45:3b:1c:c4:a3:d7:87:1f:f6:d3:ac:0e:12: d3:17:a9:a7:de:d6:00:09:f4:83:55:ce:25:68:2d: 05:36:a7:6b:f2:ce:5b:7f:4d:4c:ac:df:55:d2:ee: d7:63:70:75:4e:9b:45:aa:92:5c:44:71:b1:ad:d2: c6:35:0b:22:c5:f2:5e:37:17:e3:44:99:16:f3:aa: 5e:d6:a8:94:8c:6d:73:b5:1a:cd:fe:25:c7:e0:a3: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:44:5A:97:DD:F0:22:7A:80:48:6A:B3:19:37:D5:3F:D3:C5:D6 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:16:91:f3:31:b4:2a:23:42:ce:ce:d2:d2:f2:9f:d1:e6:e9: bb:3a:f6:bb:8a:1e:bd:25:7f:17:36:17:17:ec:80:8f:44:ff: 44:25:56:81:b8:4b:83:25:6a:6b:62:0b:c0:09:31:17:13:57: a1:75:65:a6:cd:00:63:c4:2c:ab:60:44:80:eb:b0:4f:37:78: 7b:56:13:20:31:9d:ba:d0:05:ba:05:74:17:b6:ea:60:a2:e4: 50:b5:33:e7:a0:36:c7:ac:52:e1:bc:55:db:a5:85:ec:de:23: 34:49:70:e3:a0:35:fe:a8:ef:88:3a:f4:8b:f3:cc:31:4c:16: ab:0c:bd:65:5b:e5:ea:b3:31:f5:54:11:50:58:7c:0e:ea:00: ea:34:c4:17:eb:1e:e7:89:f0:7d:fd:4e:da:53:cd:7e:a7:99: fb:14:eb:19:79:4e:a7:0a:87:79:c0:f7:c2:2f:18:2a:e3:a4: 8e:64:35:12:49:6d:7e:a5:e8:08:31:cd:7f:fd:c6:c3:93:e6: 93:f5:fa:c2:5a:8f:e3:de:dd:09:c9:d1:de:b0:9e:ed:5b:9c: ce:84:c9:24:5f:6e:e7:4e:93:c1:3f:c2:08:bd:26:18:ae:95: e4:b3:0a:41:0f:04:23:e7:85:c9:13:cd:09:df:6c:20:66:19: 2f:66:1b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX91OxXzbV9N3PHtA3+K6t9Av6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTEyMDYwMTA2MjBaFw0yNTEyMDkwNTM3MjBaMDMxMTAvBgNV BAMTKDA2RjU0NDVBOTdEREYwMjI3QTgwNDg2QUIzMTkzN0Q1M0ZEM0M1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1Q+oJmPfitWCg/RQXehdqqEe IasoBleWRdD4TAYMDUylivMLMaM3cneWIKuatAjI0gonQhp2PBqyy7vPFTrxnYNX Drvka+bYJQq0v4mMC/CR/CiPPBLPgp45Qee8zCewIpyQwG2wiPjdzntsDBV9Fs/8 8dEiBOIDnsHopf+9QRL1/R9T8QtZg9L6e5SCGHylP2leBsZurscBq9oA/kevjzN3 d+alRTscxKPXhx/206wOEtMXqafe1gAJ9INVziVoLQU2p2vyzlt/TUys31XS7tdj cHVOm0WqklxEcbGt0sY1CyLF8l43F+NEmRbzql7WqJSMbXO1Gs3+JcfgoyExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvVEWpfd8CJ6gEhqsxk31T/TxdYwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYWkfMxtCojQs7O0tLyn9Hm6bs69ruKHr0l fxc2FxfsgI9E/0QlVoG4S4MlamtiC8AJMRcTV6F1ZabNAGPELKtgRIDrsE83eHtW EyAxnbrQBboFdBe26mCi5FC1M+egNsesUuG8VdulhezeIzRJcOOgNf6o74g69Ivz zDFMFqsMvWVb5eqzMfVUEVBYfA7qAOo0xBfrHueJ8H39TtpTzX6nmfsU6xl5TqcK h3nA98IvGCrjpI5kNRJJbX6l6AgxzX/9xsOT5pP1+sJaj+Pe3QnJ0d6wnu1bnM6E ySRfbudOk8E/wgi9JhiuleSzCkEPBCPnhckTzQnfbCBmGS9mG+8= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:10 2025 by rpki-client