This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: QQiBdYGARCidkdezXQNjmaR05q04c6qE69YKKqktBr0= Subject key identifier: CA:90:52:41:EE:29:43:D2:E2:BB:6E:D1:FF:0D:69:3F:86:7C:C9:CF Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 3604FCB43B504AD0045AA58F2C39D74BAA51B5B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01E9 Signing time: Fri 05 Dec 2025 04:02:34 +0000 Manifest this update: Fri 05 Dec 2025 03:57:34 +0000 Manifest next update: Mon 08 Dec 2025 13:12:34 +0000 Files and hashes: 1: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 4: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: gIoGZNQVSOvbq7ErMri5UA0XcbOlwdfouazsdIk97qM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:04:fc:b4:3b:50:4a:d0:04:5a:a5:8f:2c:39:d7:4b:aa:51:b5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Dec 5 03:57:34 2025 GMT Not After : Dec 8 13:12:34 2025 GMT Subject: CN=CA905241EE2943D2E2BB6ED1FF0D693F867CC9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:35:6e:77:35:79:e1:78:06:35:23:1a:fb: 36:99:86:22:7a:38:ea:fc:36:cd:13:4a:22:19:0a: aa:13:01:3f:a1:50:48:08:59:53:80:df:d0:25:e9: 55:1a:8b:2e:f2:c4:fb:eb:c8:4c:59:66:86:fc:49: 5a:17:00:69:1d:17:97:c6:de:f9:05:58:da:0b:09: 6f:72:ed:47:63:1e:cb:25:cf:dd:b8:78:8f:ee:19: ed:df:bd:e3:1e:07:8c:f3:d2:66:e5:1a:5b:14:4d: 53:9f:5b:97:16:40:12:3a:79:28:00:e4:ed:8c:e8: c8:6a:13:95:10:82:2c:2c:a3:79:36:6d:08:7c:74: d3:e1:33:dc:48:26:44:c8:1c:f7:aa:3b:c0:88:62: 4b:5c:a0:97:4f:0b:78:b4:d7:ff:85:e4:6f:a8:21: a0:e3:5f:76:a3:ce:22:89:0b:14:cc:54:e2:c1:04: 62:ba:e5:2f:1c:26:bb:cd:74:f2:b4:a5:e8:56:56: 2c:06:cf:13:4f:7b:ac:b3:e1:67:34:3b:1c:85:d8: b3:50:54:c5:ef:5f:a4:51:4d:83:dc:ab:72:87:ed: 18:2d:ed:d5:36:61:47:b7:31:93:d5:cf:e3:8d:58: f5:7f:ff:bb:5f:56:bd:5e:d8:07:5f:ef:96:95:6f: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:52:41:EE:29:43:D2:E2:BB:6E:D1:FF:0D:69:3F:86:7C:C9:CF X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0a:8d:27:69:68:31:40:4b:3c:26:19:ad:03:b8:26:fe:49: ed:52:09:67:90:6e:2d:14:9d:7d:1e:ca:5f:f2:68:cc:c7:ef: 17:bf:02:04:e4:4c:4e:f9:eb:2e:91:15:89:c0:47:80:27:97: f8:44:45:28:58:d8:6f:2c:57:57:f0:ea:02:d3:1a:b7:64:6e: 5f:c0:a4:2a:56:05:fc:c2:84:a2:d6:2a:dd:64:50:a1:33:2b: 09:31:16:13:76:0a:8e:36:88:40:cd:42:96:15:f0:6e:50:bd: c0:19:fd:c9:4a:e6:3a:60:95:a6:5d:8a:45:b1:28:08:e8:d5: f8:62:b3:22:86:20:93:f5:20:48:1d:58:18:a1:45:a2:21:2f: 7e:6a:fe:79:19:a9:09:2d:5a:c3:e8:46:e0:76:b8:94:17:00: 75:24:2a:d7:c7:d7:9e:27:29:35:26:3a:b6:2a:16:67:7c:65: 57:91:47:77:79:1a:12:fa:fb:a6:ef:76:4f:cc:70:67:d8:0f: d4:22:b3:cf:e2:a7:7e:27:26:25:5a:5a:5f:54:66:74:e1:b6: ad:d9:31:28:b5:47:2f:1e:d1:9a:d1:38:81:d3:e2:ed:38:5d: ef:23:86:da:c0:ee:00:93:9b:b9:ac:ff:19:4d:24:60:9f:f2: 57:7a:a4:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgT8tDtQStAEWqWPLDnXS6pRtbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTEyMDUwMzU3MzRaFw0yNTEyMDgxMzEyMzRaMDMxMTAvBgNV BAMTKENBOTA1MjQxRUUyOTQzRDJFMkJCNkVEMUZGMEQ2OTNGODY3Q0M5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvzVudzV54XgGNSMa+zaZhiJ6 OOr8Ns0TSiIZCqoTAT+hUEgIWVOA39Al6VUaiy7yxPvryExZZob8SVoXAGkdF5fG 3vkFWNoLCW9y7UdjHsslz924eI/uGe3fveMeB4zz0mblGlsUTVOfW5cWQBI6eSgA 5O2M6MhqE5UQgiwso3k2bQh8dNPhM9xIJkTIHPeqO8CIYktcoJdPC3i01/+F5G+o IaDjX3ajziKJCxTMVOLBBGK65S8cJrvNdPK0pehWViwGzxNPe6yz4Wc0OxyF2LNQ VMXvX6RRTYPcq3KH7Rgt7dU2YUe3MZPVz+ONWPV//7tfVr1e2Adf75aVb39nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypBSQe4pQ9Liu27R/w1pP4Z8yc8wHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoKjSdpaDFASzwmGa0DuCb+Se1SCWeQbi0U nX0eyl/yaMzH7xe/AgTkTE756y6RFYnAR4Anl/hERShY2G8sV1fw6gLTGrdkbl/A pCpWBfzChKLWKt1kUKEzKwkxFhN2Co42iEDNQpYV8G5QvcAZ/clK5jpglaZdikWx KAjo1fhisyKGIJP1IEgdWBihRaIhL35q/nkZqQktWsPoRuB2uJQXAHUkKtfH154n KTUmOrYqFmd8ZVeRR3d5GhL6+6bvdk/McGfYD9Qis8/ip34nJiVaWl9UZnThtq3Z MSi1Ry8e0ZrROIHT4u04Xe8jhtrA7gCTm7ms/xlNJGCf8ld6pH4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:30 2025 by rpki-client