This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: c3J+vKQ3WeM8vcu+E4lAVkKRv2ucZyEmACga8bQjXfk= Subject key identifier: 66:A6:08:89:9F:85:94:CF:DF:E3:7F:D9:2A:55:21:40:B2:4B:E1:34 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 446CF4E1273F4C43FB1A5944EB1626026B56DE5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 0224 Signing time: Sat 06 Dec 2025 20:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:57:29 +0000 Manifest next update: Wed 10 Dec 2025 00:54:29 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) 2: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: Y4z0YsZd/yTnj/rmlO6N2UuLMMI6qB5cnVQWR9p/M/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6c:f4:e1:27:3f:4c:43:fb:1a:59:44:eb:16:26:02:6b:56:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Dec 6 19:57:29 2025 GMT Not After : Dec 10 00:54:29 2025 GMT Subject: CN=66A608899F8594CFDFE37FD92A552140B24BE134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:5e:26:8d:a7:d2:97:57:b3:cf:1d:4a:01: 25:cf:fe:63:4c:3b:8a:ef:4e:4f:44:83:5f:7d:e8: 6f:21:60:bd:b1:63:39:33:d2:ec:b0:c9:58:34:35: de:59:fe:79:7d:db:49:8f:c6:57:f5:dc:7a:ea:17: c3:a5:25:32:b1:0e:51:2f:60:77:22:4b:b3:9f:7b: a3:b3:fb:bc:47:c9:57:b7:35:41:c8:dc:e9:0c:b8: 38:88:a3:d1:ff:b1:3e:5f:bd:5f:d7:e6:de:f1:65: 2c:f2:42:92:3a:fc:85:31:f0:f8:08:95:d8:91:14: 80:53:0d:d2:51:bc:ef:0f:cf:b4:ef:c5:aa:83:c7: d4:44:5d:a2:b7:1c:70:98:4c:e8:a8:31:3a:0f:80: cd:26:53:9c:fc:4b:3b:bb:5d:74:d0:ec:02:fe:1a: 1f:00:40:8a:43:e8:f8:0a:8c:76:2a:bc:47:46:5a: 1f:72:1e:68:43:61:41:3b:ae:06:d3:af:86:ab:31: be:96:24:49:d3:cd:83:34:6f:cd:15:b2:48:41:bf: d8:db:f2:0d:69:f9:6b:3b:77:68:61:cd:ba:84:ca: 91:56:d5:00:2e:68:9d:af:85:3e:66:12:9e:99:eb: 0a:bf:47:4f:80:91:da:9e:dd:26:1a:8b:04:ba:8c: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:08:89:9F:85:94:CF:DF:E3:7F:D9:2A:55:21:40:B2:4B:E1:34 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:80:ad:68:58:4b:0a:e5:d9:33:c1:07:07:76:d9:89:af: 75:67:cd:d1:c2:ad:a1:3e:13:ab:39:ac:8a:e0:f4:60:1d:dc: e4:ba:43:a6:ea:a1:8a:6d:a0:73:dc:29:2e:f9:63:dc:39:2d: cb:c5:17:85:ad:70:2a:32:7d:07:a2:c8:02:2a:dd:da:87:45: 7b:f9:69:93:a2:b1:9b:1d:c9:6b:ee:d8:dc:ad:03:87:82:44: 48:29:a6:e0:e1:5a:22:60:27:74:7c:e0:c3:07:fc:ed:9b:83: a9:6b:4e:1e:42:be:8b:5b:7a:e8:47:16:f7:20:9a:6d:91:2a: 4d:6b:26:c7:c4:8d:ba:f3:aa:14:d0:32:ad:7f:24:df:84:1b: 2f:6f:a6:2a:22:19:22:1d:bc:13:de:ff:37:10:d1:72:a1:06: a6:9b:da:6c:0d:ad:75:7a:3e:1d:e3:ce:3f:ec:fa:2e:3e:67: c5:a3:25:9f:27:52:2d:36:86:d6:00:1d:44:c9:18:8d:ef:2f: 98:96:14:02:cc:df:78:8f:99:40:48:70:1b:9c:bf:d0:ac:7f: 32:a2:e5:fe:4d:70:4f:ab:c4:3b:ac:14:bf:61:b9:1c:0e:04: 68:e8:05:c6:d9:9b:a6:42:21:ca:db:3d:5d:0d:b0:ab:9f:b8: 21:58:c9:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGz04Sc/TEP7GllE6xYmAmtW3l4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNTEyMDYxOTU3MjlaFw0yNTEyMTAwMDU0MjlaMDMxMTAvBgNV BAMTKDY2QTYwODg5OUY4NTk0Q0ZERkUzN0ZEOTJBNTUyMTQwQjI0QkUxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgV4mjafSl1ezzx1KASXP/mNM O4rvTk9Eg1996G8hYL2xYzkz0uywyVg0Nd5Z/nl920mPxlf13HrqF8OlJTKxDlEv YHciS7Ofe6Oz+7xHyVe3NUHI3OkMuDiIo9H/sT5fvV/X5t7xZSzyQpI6/IUx8PgI ldiRFIBTDdJRvO8Pz7TvxaqDx9REXaK3HHCYTOioMToPgM0mU5z8Szu7XXTQ7AL+ Gh8AQIpD6PgKjHYqvEdGWh9yHmhDYUE7rgbTr4arMb6WJEnTzYM0b80VskhBv9jb 8g1p+Ws7d2hhzbqEypFW1QAuaJ2vhT5mEp6Z6wq/R0+Akdqe3SYaiwS6jPzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqYIiZ+FlM/f43/ZKlUhQLJL4TQwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbDgK1oWEsK5dkzwQcHdtmJr3VnzdHCraE+ E6s5rIrg9GAd3OS6Q6bqoYptoHPcKS75Y9w5LcvFF4WtcCoyfQeiyAIq3dqHRXv5 aZOisZsdyWvu2NytA4eCREgppuDhWiJgJ3R84MMH/O2bg6lrTh5CvotbeuhHFvcg mm2RKk1rJsfEjbrzqhTQMq1/JN+EGy9vpioiGSIdvBPe/zcQ0XKhBqab2mwNrXV6 Ph3jzj/s+i4+Z8WjJZ8nUi02htYAHUTJGI3vL5iWFALM33iPmUBIcBucv9CsfzKi 5f5NcE+rxDusFL9huRwOBGjoBcbZm6ZCIcrbPV0NsKufuCFYyXY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:55 2025 by rpki-client