This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: HI8PBV816B7M6qev0DOnzv/qsrwP/ASiK7wEUYF/izo= Subject key identifier: EF:77:B4:B3:9A:9B:C1:82:9D:77:60:57:EA:34:08:78:E7:A8:58:A8 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 42250D7650686DC7F2E4A9A2F5AEB24386281AAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 0202 Signing time: Fri 05 Dec 2025 10:41:53 +0000 Manifest this update: Fri 05 Dec 2025 10:36:53 +0000 Manifest next update: Mon 08 Dec 2025 20:36:53 +0000 Files and hashes: 1: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: 1kGxstKzJPPP5eHC5ahix4UK7yUwevWrx6jKDhMoxBg=) 2: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) 3: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) 4: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:25:0d:76:50:68:6d:c7:f2:e4:a9:a2:f5:ae:b2:43:86:28:1a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Dec 5 10:36:53 2025 GMT Not After : Dec 8 20:36:53 2025 GMT Subject: CN=EF77B4B39A9BC1829D776057EA340878E7A858A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:f3:12:32:5f:4e:ad:ac:7a:cb:fa:6c:5e: 5b:ef:7d:a3:d6:20:86:e6:fd:e3:18:ba:75:49:12: a7:b9:dd:ef:07:ca:79:a4:03:fd:f0:fb:1b:3a:39: f6:85:b5:96:75:22:33:de:bf:e6:e7:a8:00:0c:5b: 92:0e:07:5f:0c:eb:6c:c3:a4:f4:2d:97:1d:88:f3: 02:fa:c6:0d:04:7e:f2:18:8c:bc:96:52:8d:56:b0: ec:58:f4:ee:d5:5e:d1:c8:2c:2a:50:c9:df:ef:c4: e6:77:17:4f:58:0d:07:ee:26:46:25:6d:46:b9:e2: 1c:9b:0a:99:eb:98:59:15:5d:bb:72:e0:d0:8f:e3: 96:6e:f7:28:bd:10:8e:8f:80:28:e9:be:db:39:75: 1a:ae:ff:98:bb:57:2f:cf:5c:de:d8:4b:48:d8:8a: 1e:b1:9e:38:ac:35:f8:f6:8d:57:40:ef:7e:0f:c7: 56:72:96:e7:2a:72:62:6f:ed:02:52:ef:6d:9b:a9: f5:6a:4e:8e:37:9a:0d:0e:3d:5f:56:99:46:db:d4: 97:24:8d:29:b4:68:df:db:b7:f5:b9:fb:cf:97:bc: 83:d9:55:44:76:90:b6:80:71:39:2e:c6:38:95:43: 67:a8:2b:7d:38:7e:9e:17:33:a1:64:6f:d1:58:3c: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:77:B4:B3:9A:9B:C1:82:9D:77:60:57:EA:34:08:78:E7:A8:58:A8 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:05:ac:b8:7f:cd:9b:b7:bf:b4:18:f5:5e:cb:ed:ed:fa:4a: 95:f3:a2:23:1e:93:92:38:f0:9b:4f:4c:1c:96:36:f6:5c:2a: 24:cf:aa:f8:85:13:71:15:f6:84:c1:cf:88:36:8b:a9:9f:b4: 49:16:1d:b2:29:a8:de:80:58:8f:8d:c1:a1:29:dd:02:cb:5f: 49:62:bc:fd:a5:3a:aa:63:b6:98:5c:0a:37:61:78:04:96:e0: 86:36:dc:d2:c3:8d:c1:7b:c6:e6:c0:77:db:62:dd:72:5f:0a: 70:40:66:84:7f:58:93:cf:67:4d:04:86:8d:18:57:10:38:f0: f2:39:eb:d7:83:48:d0:4f:d2:3f:a6:3c:25:0a:2b:d0:df:e6: 35:99:2c:8b:81:a9:bf:ec:fc:4f:25:4d:60:dc:34:b4:81:67: 64:c5:07:3b:a0:ac:2f:d5:d8:ea:d4:9e:3d:1e:92:98:d0:22: 2e:72:e0:00:a3:78:48:c5:2b:c5:77:01:f2:ef:e8:9d:33:05: 0b:ab:3e:f3:e4:84:e9:bf:a0:d8:5a:a5:0b:da:43:65:aa:12: a1:25:17:16:1e:ac:0c:3f:6a:b2:36:05:bc:07:c2:5d:42:21: 86:77:a6:81:79:5c:0a:02:df:9c:50:a3:8a:0b:b0:e7:6a:1e: 1c:da:17:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiUNdlBobcfy5Kmi9a6yQ4YoGq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTEyMDUxMDM2NTNaFw0yNTEyMDgyMDM2NTNaMDMxMTAvBgNV BAMTKEVGNzdCNEIzOUE5QkMxODI5RDc3NjA1N0VBMzQwODc4RTdBODU4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1fMSMl9Orax6y/psXlvvfaPW IIbm/eMYunVJEqe53e8HynmkA/3w+xs6OfaFtZZ1IjPev+bnqAAMW5IOB18M62zD pPQtlx2I8wL6xg0EfvIYjLyWUo1WsOxY9O7VXtHILCpQyd/vxOZ3F09YDQfuJkYl bUa54hybCpnrmFkVXbty4NCP45Zu9yi9EI6PgCjpvts5dRqu/5i7Vy/PXN7YS0jY ih6xnjisNfj2jVdA734Px1ZylucqcmJv7QJS722bqfVqTo43mg0OPV9WmUbb1Jck jSm0aN/bt/W5+8+XvIPZVUR2kLaAcTkuxjiVQ2eoK304fp4XM6Fkb9FYPMbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73e0s5qbwYKdd2BX6jQIeOeoWKgwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4FrLh/zZu3v7QY9V7L7e36SpXzoiMek5I4 8JtPTByWNvZcKiTPqviFE3EV9oTBz4g2i6mftEkWHbIpqN6AWI+NwaEp3QLLX0li vP2lOqpjtphcCjdheASW4IY23NLDjcF7xubAd9ti3XJfCnBAZoR/WJPPZ00Eho0Y VxA48PI569eDSNBP0j+mPCUKK9Df5jWZLIuBqb/s/E8lTWDcNLSBZ2TFBzugrC/V 2OrUnj0ekpjQIi5y4ACjeEjFK8V3AfLv6J0zBQurPvPkhOm/oNhapQvaQ2WqEqEl FxYerAw/arI2BbwHwl1CIYZ3poF5XAoC35xQo4oLsOdqHhzaF+0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:07 2025 by rpki-client