This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft File: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json) Hash identifier: 3LwBnKS8KoJAe9XTW/t1VnWyar6Y6EyCpDgwnE7fA1w= Subject key identifier: 70:B9:D8:BE:F7:77:0E:3A:3E:2B:E5:A0:69:C2:BF:C3:BD:85:20:08 Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 Certificate issuer: /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Certificate serial: 194C6D005AB9BFE83007C44CB63A4A9FFC48CD38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 03:32:01 +0000 Manifest this update: Fri 05 Dec 2025 03:27:01 +0000 Manifest next update: Mon 08 Dec 2025 12:07:01 +0000 Files and hashes: 1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: YmhGdPo+IB2S1v5Fq9C2zyvGdjBatBtDb5LG+iQj9uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4c:6d:00:5a:b9:bf:e8:30:07:c4:4c:b6:3a:4a:9f:fc:48:cd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Validity Not Before: Dec 5 03:27:01 2025 GMT Not After : Dec 8 12:07:01 2025 GMT Subject: CN=70B9D8BEF7770E3A3E2BE5A069C2BFC3BD852008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:2c:29:35:0e:1c:3a:4b:8c:f2:84:0c:56: a7:70:c3:4e:6f:19:cb:3d:4f:2a:5b:d0:2b:ae:b7: e8:ba:85:38:cc:d0:29:13:d1:4f:7c:90:83:8d:b9: 6b:bf:58:18:5a:d2:a4:b3:da:48:60:28:e5:1d:d7: 05:21:a9:7c:65:a4:54:36:ec:9f:29:86:7f:c6:f5: 64:89:8c:fc:b0:29:87:b0:82:c7:14:11:ec:ce:60: 27:9b:0a:06:41:76:82:cf:01:34:0e:fd:5b:d2:59: 8e:4a:3d:ba:3f:55:61:06:42:77:7a:73:d4:85:be: 8a:fc:bc:73:70:42:ea:1a:05:74:99:00:7e:94:d4: 42:15:f6:ea:12:51:e1:15:53:0b:ea:d4:da:2f:f6: 53:aa:5d:eb:61:e9:93:74:39:3f:69:2e:92:b7:f2: 71:a6:cd:57:1e:f9:b0:93:e0:39:e1:b2:d9:d0:1d: 8c:d5:a3:a0:75:39:09:99:43:8d:46:07:50:70:11: dd:9a:90:54:a3:db:8a:6a:bd:8c:c9:ba:9b:19:f0: 53:c9:40:a9:f4:15:ed:ab:49:38:d6:cb:9d:5e:ea: a3:1a:11:03:bb:13:9a:f1:2d:af:0e:82:61:12:84: 07:34:9a:02:18:c3:28:e6:07:58:53:f2:57:92:43: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B9:D8:BE:F7:77:0E:3A:3E:2B:E5:A0:69:C2:BF:C3:BD:85:20:08 X509v3 Authority Key Identifier: keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:74:ea:57:af:9f:0b:76:f9:b9:35:c4:ca:1b:9a:35:37:f7: 11:97:13:b1:36:42:2f:9e:9c:dc:50:86:df:1c:5a:27:cc:bb: bb:31:9a:91:4a:65:c6:01:fa:8a:84:a4:42:64:82:32:20:19: 68:f8:03:15:5c:ce:ce:d7:2a:b1:9b:5b:5e:81:f3:97:7a:ca: dd:05:00:83:88:2a:e7:49:25:73:57:8e:0e:5c:78:69:ec:ba: 83:18:76:e4:f8:c6:4f:3a:7b:8f:da:54:d5:0b:7b:17:e9:88: 4b:e7:4a:b6:9e:8a:d2:6f:a8:3f:53:fc:6c:08:60:86:2d:0d: 70:3f:2d:3e:3d:f4:4d:12:41:10:d1:f9:5e:d3:0a:88:ee:92: b6:1b:aa:7b:1a:4a:09:b3:a3:45:94:d8:c7:99:75:ce:4c:7c: 9d:b3:1a:77:0f:a4:fb:ae:d8:97:31:8d:57:f6:54:7d:68:fa: f7:52:d3:d1:15:a6:28:bb:06:61:9f:fa:8c:ce:d0:7f:a6:f9: 57:d2:a8:79:f5:de:08:be:5f:62:88:61:0a:41:2e:41:57:96: 25:15:0f:56:0f:b4:c3:ec:e1:b0:46:f3:25:e6:7f:55:57:33: fd:ee:b0:04:95:ce:33:9e:b2:71:3b:32:cd:77:fb:47:e6:1a: 5c:96:3f:5f -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUGUxtAFq5v+gwB8RMtjpKn/xIzTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC QjZBMjRBNzAeFw0yNTEyMDUwMzI3MDFaFw0yNTEyMDgxMjA3MDFaMDMxMTAvBgNV BAMTKDcwQjlEOEJFRjc3NzBFM0EzRTJCRTVBMDY5QzJCRkMzQkQ4NTIwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEiwpNQ4cOkuM8oQMVqdww05v Gcs9Typb0Cuut+i6hTjM0CkT0U98kIONuWu/WBha0qSz2khgKOUd1wUhqXxlpFQ2 7J8phn/G9WSJjPywKYewgscUEezOYCebCgZBdoLPATQO/VvSWY5KPbo/VWEGQnd6 c9SFvor8vHNwQuoaBXSZAH6U1EIV9uoSUeEVUwvq1Nov9lOqXeth6ZN0OT9pLpK3 8nGmzVce+bCT4DnhstnQHYzVo6B1OQmZQ41GB1BwEd2akFSj24pqvYzJupsZ8FPJ QKn0Fe2rSTjWy51e6qMaEQO7E5rxLa8OgmEShAc0mgIYwyjmB1hT8leSQ6GBAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQUcLnYvvd3Djo+K+WgacK/w72FIAgwHwYDVR0j BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B AQsFAAOCAQEA7HTqV6+fC3b5uTXEyhuaNTf3EZcTsTZCL56c3FCG3xxaJ8y7uzGa kUplxgH6ioSkQmSCMiAZaPgDFVzOztcqsZtbXoHzl3rK3QUAg4gq50klc1eODlx4 aey6gxh25PjGTzp7j9pU1Qt7F+mIS+dKtp6K0m+oP1P8bAhghi0NcD8tPj30TRJB ENH5XtMKiO6SthuqexpKCbOjRZTYx5l1zkx8nbMadw+k+67YlzGNV/ZUfWj691LT 0RWmKLsGYZ/6jM7Qf6b5V9KoefXeCL5fYohhCkEuQVeWJRUPVg+0w+zhsEbzJeZ/ VVcz/e6wBJXOM56ycTsyzXf7R+YaXJY/Xw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:31 2025 by rpki-client