This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: 8fs6mmthj9hWTYbx9UWxU2Hy8eQYamU7BUIJY4GtFT8= Subject key identifier: 69:4F:0B:26:A0:6D:8D:20:E5:C9:05:77:1F:04:80:D2:1D:91:3C:0C Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 72B1C15A257E37F6DCF4A4A8282E3A90590C628A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0164 Signing time: Sat 06 Dec 2025 14:21:18 +0000 Manifest this update: Sat 06 Dec 2025 14:16:18 +0000 Manifest next update: Wed 10 Dec 2025 01:26:18 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: 2kraVkHQ+0e8cEJGapSekyZRGFTx8DghJJ/oUiy3xg4=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b1:c1:5a:25:7e:37:f6:dc:f4:a4:a8:28:2e:3a:90:59:0c:62:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Dec 6 14:16:18 2025 GMT Not After : Dec 10 01:26:18 2025 GMT Subject: CN=694F0B26A06D8D20E5C905771F0480D21D913C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:a2:ae:6c:d1:81:b0:fa:65:79:7d:59:5f: b7:ef:38:7b:e0:44:10:f8:fd:50:b2:27:c5:31:99: bd:bf:ee:63:8c:8e:db:88:81:f0:ea:c8:aa:08:6a: 1e:d3:82:5e:6f:b8:30:35:77:a0:97:db:7b:32:f0: a9:a3:aa:05:0e:f1:95:4f:31:cd:c7:55:00:c4:47: 78:22:7a:dc:5c:db:35:44:b0:27:b0:4e:fe:89:1e: 42:e7:48:9b:8e:94:e3:e0:1b:98:8e:2f:0b:d3:3a: eb:a1:41:f3:8b:6d:d4:66:18:42:05:cb:1b:65:57: af:1a:6f:9d:a7:6a:d7:75:ce:8f:4e:f5:6e:cd:39: a3:a1:3e:20:ee:4c:ea:14:4f:5b:92:e0:0d:96:8e: c5:7a:df:b6:c9:fe:90:35:26:da:e7:38:53:c4:bd: 50:80:84:ec:40:25:fc:55:0d:f8:5f:2b:14:9e:74: 04:e5:58:3f:f9:89:05:9b:9a:a5:80:11:d6:b5:cb: 42:64:0f:a2:ac:cc:f5:f1:0e:5a:ff:aa:24:67:b5: 04:78:d9:f5:b3:c5:64:f0:26:58:44:36:15:3f:03: 46:20:8c:6d:d0:f5:76:d1:91:01:eb:18:8a:37:35: 3e:11:40:cb:3a:87:c1:58:07:f3:71:cb:0a:eb:80: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:0B:26:A0:6D:8D:20:E5:C9:05:77:1F:04:80:D2:1D:91:3C:0C X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7d:68:14:3f:64:54:88:02:d4:be:b2:5b:af:a3:5b:5c:8f: 1e:e6:e6:c5:57:f4:53:11:e0:8c:7a:12:51:ef:6d:26:d4:d1: c5:7e:40:1d:c5:42:2a:76:53:dc:a4:39:0e:f8:87:15:21:3b: ee:79:12:dc:c2:cd:f7:60:a1:05:1b:c3:a4:2e:91:d5:1f:b3: 6c:40:fc:20:bf:c4:55:90:0a:d7:9f:4b:ab:c2:e9:be:69:91: 7a:e0:a7:11:63:c0:cf:e9:85:78:48:2b:15:b4:53:45:9d:52: 48:ef:e3:fb:04:35:00:1c:0b:a6:6b:f4:60:a7:f2:b8:84:a9: 9f:77:a0:9a:5e:ec:64:e3:3f:ab:18:28:40:0a:e0:87:26:86: 00:ca:a1:cc:93:5b:16:7d:80:31:72:ac:53:c7:a9:a7:1a:82: 75:07:89:87:e0:16:7a:5b:3d:2a:ee:65:a0:ab:11:88:68:39: 1c:2a:ea:3d:58:4d:7a:b1:d2:e5:98:d7:40:b1:24:ae:66:76: 2b:c7:c4:6f:b9:71:9d:2d:67:36:ba:a5:fd:b2:7e:95:ca:06: 49:c0:62:ec:10:a3:1c:f9:14:d8:60:37:1b:c5:e9:5c:f3:47: 05:ce:f7:2a:f9:e7:2b:c8:42:ba:04:ea:1e:f9:b6:b7:cc:8b: 9a:24:4c:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrHBWiV+N/bc9KSoKC46kFkMYoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTEyMDYxNDE2MThaFw0yNTEyMTAwMTI2MThaMDMxMTAvBgNV BAMTKDY5NEYwQjI2QTA2RDhEMjBFNUM5MDU3NzFGMDQ4MEQyMUQ5MTNDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmaKubNGBsPpleX1ZX7fvOHvg RBD4/VCyJ8Uxmb2/7mOMjtuIgfDqyKoIah7Tgl5vuDA1d6CX23sy8KmjqgUO8ZVP Mc3HVQDER3gietxc2zVEsCewTv6JHkLnSJuOlOPgG5iOLwvTOuuhQfOLbdRmGEIF yxtlV68ab52natd1zo9O9W7NOaOhPiDuTOoUT1uS4A2WjsV637bJ/pA1JtrnOFPE vVCAhOxAJfxVDfhfKxSedATlWD/5iQWbmqWAEda1y0JkD6KszPXxDlr/qiRntQR4 2fWzxWTwJlhENhU/A0YgjG3Q9XbRkQHrGIo3NT4RQMs6h8FYB/NxywrrgNAFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaU8LJqBtjSDlyQV3HwSA0h2RPAwwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN9aBQ/ZFSIAtS+sluvo1tcjx7m5sVX9FMR 4Ix6ElHvbSbU0cV+QB3FQip2U9ykOQ74hxUhO+55EtzCzfdgoQUbw6QukdUfs2xA /CC/xFWQCtefS6vC6b5pkXrgpxFjwM/phXhIKxW0U0WdUkjv4/sENQAcC6Zr9GCn 8riEqZ93oJpe7GTjP6sYKEAK4IcmhgDKocyTWxZ9gDFyrFPHqacagnUHiYfgFnpb PSruZaCrEYhoORwq6j1YTXqx0uWY10CxJK5mdivHxG+5cZ0tZza6pf2yfpXKBknA YuwQoxz5FNhgNxvF6VzzRwXO9yr55yvIQroE6h75trfMi5okTEg= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:30 2025 by rpki-client