This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: DJ856PmbBRA/fZ+DqVgsWhxR7NVeMpES+hS017UexrY= Subject key identifier: D9:6E:C0:1B:ED:55:9A:E2:B3:C0:0F:32:A7:75:35:67:BB:02:84:03 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 2387E5A59704CB003E90073FD77127FBC7D83885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 018D Signing time: Fri 05 Dec 2025 20:30:39 +0000 Manifest this update: Fri 05 Dec 2025 20:25:39 +0000 Manifest next update: Mon 08 Dec 2025 20:38:39 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: tD8WwxrL3s8L0t7t8yFKfM4WGux+PzMag5XkCkj0lEg=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:87:e5:a5:97:04:cb:00:3e:90:07:3f:d7:71:27:fb:c7:d8:38:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Dec 5 20:25:39 2025 GMT Not After : Dec 8 20:38:39 2025 GMT Subject: CN=D96EC01BED559AE2B3C00F32A7753567BB028403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:a7:28:e7:e5:bb:10:06:d8:12:61:c4:c1: bb:a7:1b:68:99:85:23:13:14:8c:ea:19:d9:4d:eb: 71:9e:51:72:eb:b1:df:d1:63:8f:c2:c8:b0:89:de: eb:2c:e2:a1:d9:aa:62:76:e5:ad:76:86:ca:52:a8: 5d:27:33:57:b2:ce:6d:f6:f9:9b:a3:ab:36:1b:1b: ef:b9:dc:70:52:cd:b7:39:92:4a:58:62:2d:7e:c5: 2f:50:fa:3e:e3:76:d9:a2:1b:32:14:73:65:19:d5: aa:7c:74:d8:0b:32:d8:40:31:bd:b7:64:84:7e:ba: 38:e0:02:f0:c4:25:30:ad:39:7c:7b:60:2d:69:88: 57:81:33:3b:e0:98:9b:0b:43:e1:69:45:37:04:da: 44:5a:77:3c:c6:fb:30:74:9f:ac:19:39:1a:c5:05: 14:bf:17:f3:a4:17:1e:6f:c2:e3:53:d3:77:86:7f: fc:60:83:b1:94:e4:df:2b:3e:5f:2a:c1:b8:80:d9: ed:be:be:51:bd:5e:4a:87:8e:b2:f6:06:13:f9:8a: b4:48:26:5a:6f:b5:09:57:bb:f7:9e:21:06:09:30: 96:57:64:1c:f7:76:3b:7d:f9:77:03:8c:a8:77:da: 19:7d:fb:3e:ab:56:5d:7f:10:d6:5b:fb:48:ac:17: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:C0:1B:ED:55:9A:E2:B3:C0:0F:32:A7:75:35:67:BB:02:84:03 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6e:2c:1b:75:70:12:07:c1:dd:a1:07:55:a2:89:72:64:4b: 39:9c:ca:e0:7e:2e:76:81:91:d6:62:cb:63:6a:f5:e9:b4:65: 5d:b1:87:8f:90:d7:60:a5:91:39:ad:d7:a2:23:39:2e:3b:db: ca:77:8b:fc:8a:24:c1:bb:bf:30:06:40:59:53:06:9a:26:24: 14:4f:e1:25:c1:39:8c:a5:89:ef:2b:0b:64:7f:2f:11:63:8c: 65:5d:10:98:ea:2b:1c:11:b1:08:c3:ce:be:e3:c7:43:ee:c4: 05:25:28:da:9b:11:15:27:d2:1a:67:1c:a2:54:a6:4f:46:de: 9e:61:4a:2c:ff:53:ff:3a:1b:5d:9a:bb:8e:c0:f9:61:4d:72: 4b:fc:f3:13:07:a3:e3:fe:ed:8e:f5:fd:48:c7:15:b7:7f:f1: b8:56:51:62:9f:5a:9c:3d:40:d5:c9:90:7e:91:88:90:5a:d4: 04:90:3c:28:3e:17:97:87:5a:a0:0e:c5:0c:2a:f8:48:7f:0d: 60:4a:f1:6c:2b:de:e5:cc:31:1b:f6:89:0d:0b:85:8f:13:dd: a1:2e:60:ed:d3:b9:9a:1d:4c:77:0d:5f:05:90:8f:62:04:78: 68:c5:5a:65:34:17:ed:4f:02:f5:1f:8b:f3:71:e5:1f:b4:11: 39:1d:96:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4flpZcEywA+kAc/13En+8fYOIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTEyMDUyMDI1MzlaFw0yNTEyMDgyMDM4MzlaMDMxMTAvBgNV BAMTKEQ5NkVDMDFCRUQ1NTlBRTJCM0MwMEYzMkE3NzUzNTY3QkIwMjg0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuqco5+W7EAbYEmHEwbunG2iZ hSMTFIzqGdlN63GeUXLrsd/RY4/CyLCJ3uss4qHZqmJ25a12hspSqF0nM1eyzm32 +ZujqzYbG++53HBSzbc5kkpYYi1+xS9Q+j7jdtmiGzIUc2UZ1ap8dNgLMthAMb23 ZIR+ujjgAvDEJTCtOXx7YC1piFeBMzvgmJsLQ+FpRTcE2kRadzzG+zB0n6wZORrF BRS/F/OkFx5vwuNT03eGf/xgg7GU5N8rPl8qwbiA2e2+vlG9XkqHjrL2BhP5irRI JlpvtQlXu/eeIQYJMJZXZBz3djt9+XcDjKh32hl9+z6rVl1/ENZb+0isF4IhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W7AG+1VmuKzwA8yp3U1Z7sChAMwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNuLBt1cBIHwd2hB1WiiXJkSzmcyuB+LnaB kdZiy2Nq9em0ZV2xh4+Q12ClkTmt16IjOS4728p3i/yKJMG7vzAGQFlTBpomJBRP 4SXBOYylie8rC2R/LxFjjGVdEJjqKxwRsQjDzr7jx0PuxAUlKNqbERUn0hpnHKJU pk9G3p5hSiz/U/86G12au47A+WFNckv88xMHo+P+7Y71/UjHFbd/8bhWUWKfWpw9 QNXJkH6RiJBa1ASQPCg+F5eHWqAOxQwq+Eh/DWBK8Wwr3uXMMRv2iQ0LhY8T3aEu YO3TuZodTHcNXwWQj2IEeGjFWmU0F+1PAvUfi/Nx5R+0ETkdlus= -----END CERTIFICATE-----Generated at Sun Dec 7 07:48:18 2025 by rpki-client