This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json)
Hash identifier: SqB8ScJoSiyf9NJ006vle/drymwvEV3AvO226VMfc7M=
Subject key identifier: F1:35:AF:8F:52:77:C5:59:93:29:C2:D1:79:DE:41:76:44:67:EE:47
Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Certificate serial: 7E855EB223920240AC1004F8275338CA85A57400
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
Manifest number: E9
Signing time: Fri 05 Dec 2025 06:00:05 +0000
Manifest this update: Fri 05 Dec 2025 05:55:05 +0000
Manifest next update: Mon 08 Dec 2025 06:09:05 +0000
Files and hashes: 1: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=)
2: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: GiM5m28lIPh5UkJmWY+f4aye+ikeTNxNNqBYAHRFo60=)
3: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=)
4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 06:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:85:5e:b2:23:92:02:40:ac:10:04:f8:27:53:38:ca:85:a5:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Validity
Not Before: Dec 5 05:55:05 2025 GMT
Not After : Dec 8 06:09:05 2025 GMT
Subject: CN=F135AF8F5277C5599329C2D179DE41764467EE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:8b:05:23:99:72:70:24:db:df:dc:04:b0:
0b:9b:ba:e7:70:3c:08:87:03:5a:0d:df:07:61:33:
0f:43:aa:59:07:14:d6:4f:ee:d4:8c:65:a6:e1:58:
c7:10:a7:10:7b:b8:6b:a4:98:c8:49:08:7c:78:bc:
27:7d:e3:9f:93:c8:01:f6:15:27:c4:1d:68:43:c4:
6f:6d:ea:83:59:4f:3d:60:a6:aa:03:ac:1e:71:fc:
ff:e0:77:7e:1e:39:69:be:aa:02:bc:79:a2:41:3a:
bc:12:44:3d:7e:81:a7:12:59:c4:b1:3c:98:ca:e4:
46:9a:6d:8b:90:3e:9d:00:2f:f2:82:14:e0:96:c8:
ff:f6:a3:32:50:07:5b:1d:81:a3:8c:54:04:ce:63:
c0:c8:af:b1:3e:e9:68:65:c2:ca:b6:30:8f:86:ba:
20:f7:ad:24:2b:59:41:fc:3e:0b:aa:20:c1:dd:67:
27:40:4e:b3:d9:8e:a1:e1:92:eb:51:c5:d4:0d:b0:
f6:67:48:69:08:fb:0a:44:44:dd:c0:0c:62:62:d9:
53:cf:c5:ab:a1:df:de:f4:1d:a8:12:d4:44:02:78:
66:10:da:0b:5c:87:26:d8:d5:8f:f4:91:fe:a8:9b:
fe:67:14:41:73:1d:b1:e9:0f:cb:50:9e:e0:fd:45:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:AF:8F:52:77:C5:59:93:29:C2:D1:79:DE:41:76:44:67:EE:47
X509v3 Authority Key Identifier:
keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:f1:ca:84:cb:3c:b0:52:d8:24:a1:97:e5:fa:57:62:67:
ee:76:87:ed:28:ef:cb:28:cd:98:89:73:2e:40:a6:f6:6d:6b:
62:a5:0d:39:b0:9d:78:3e:e3:b1:c4:20:7b:ef:a8:85:df:92:
50:03:19:eb:31:4c:3a:df:5d:13:d2:54:94:e0:f5:81:38:b8:
5f:d2:c8:d8:e9:0c:0c:81:51:f6:74:1f:2b:9c:6b:b2:53:66:
f0:2e:7f:f7:ee:f7:c8:f9:74:ac:0f:03:d3:ac:47:52:50:79:
d1:61:34:8c:fd:7a:f0:5a:1e:30:95:f3:bf:4c:ce:8c:5b:ef:
c4:fc:63:65:bb:26:e2:8d:0d:f3:43:36:77:c4:74:57:17:f4:
cf:f6:5c:e4:b2:80:7b:2f:e2:b2:47:df:24:cf:22:4a:13:50:
1d:fd:77:d9:d8:26:0a:93:fe:3b:d3:c0:9d:7b:1a:f0:c1:1d:
43:30:62:c4:3c:4e:c8:40:b6:c2:8d:6c:e1:1b:94:79:99:d7:
55:5c:7b:45:d4:2e:af:10:bb:c8:b0:72:30:3e:58:ea:1e:d0:
83:81:86:19:cb:f0:4a:0b:bc:56:fa:0f:0f:66:38:fb:82:2e:
2f:f5:de:2d:98:9c:2e:a8:04:bc:23:58:79:87:df:dd:2b:6c:
d7:27:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:04:43 2025 by rpki-client