This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: PiLVeuRSYZSC5uRJPseLGTkKMr66qmmFHMS8Hsj+sxo= Subject key identifier: A1:F2:2D:D6:FE:A6:E6:77:7F:64:F7:F6:CF:5C:3D:7F:20:8E:56:F8 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 301D23657DC96915C694854D628B3DCEA8E48AAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0156 Signing time: Sat 06 Dec 2025 02:31:23 +0000 Manifest this update: Sat 06 Dec 2025 02:26:23 +0000 Manifest next update: Tue 09 Dec 2025 09:50:23 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) 2: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: p7xzoTBmXOc8SvpiqiivoDRQtgzuXKs9hdjN/j8MLmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1d:23:65:7d:c9:69:15:c6:94:85:4d:62:8b:3d:ce:a8:e4:8a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Dec 6 02:26:23 2025 GMT Not After : Dec 9 09:50:23 2025 GMT Subject: CN=A1F22DD6FEA6E6777F64F7F6CF5C3D7F208E56F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:db:df:52:23:61:06:7e:13:f5:3d:03:2a: 12:05:b8:ce:38:3d:c6:15:7a:78:06:24:cf:be:17: f7:63:50:b1:a7:6f:80:65:a8:d4:ee:ee:e7:e1:d9: d0:ad:f8:69:6e:5b:1f:36:04:8f:9a:05:e1:88:1d: f7:09:7e:d2:3a:76:50:1a:6e:2b:04:c5:ec:e5:00: d5:67:58:f8:34:a0:57:27:fc:46:d8:fd:70:85:39: f4:25:90:df:41:b0:9d:51:6b:de:d9:84:03:f1:ed: 37:4b:22:22:b9:0d:0e:86:c3:21:90:20:b0:5e:9d: 77:c7:e3:40:34:7e:d7:fe:aa:58:30:0e:72:33:c9: dc:80:81:9d:3e:ee:f3:33:b4:eb:4d:7c:6d:6f:10: 70:1c:6a:8d:51:2e:ac:56:a9:b3:d2:3f:40:36:05: 48:d7:12:80:02:3d:e6:f3:6e:08:c3:9a:b3:59:78: 2f:c2:b8:e9:32:e4:25:d7:0e:63:2d:d9:dd:36:1d: f5:e6:1c:61:42:49:90:4a:31:29:5f:0b:99:ec:f4: 3e:31:d6:ac:56:71:02:14:4f:0f:ad:e0:94:ff:eb: df:1b:60:27:f7:78:51:6d:ad:3e:91:99:f9:e8:2c: 2a:7b:64:e7:63:72:85:1f:6e:95:fe:81:a0:7a:e5: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:2D:D6:FE:A6:E6:77:7F:64:F7:F6:CF:5C:3D:7F:20:8E:56:F8 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:02:75:29:70:24:d6:fa:00:8c:1d:93:28:db:45:5f:65:de: 49:08:73:fe:a8:80:29:26:79:4b:81:5f:fb:b8:90:af:d1:83: 7e:f0:45:19:95:e9:32:96:f6:31:b9:1a:e0:1a:1f:b6:8e:b3: a4:d3:0f:00:e0:46:b9:86:d9:cc:8b:85:bc:aa:4e:69:5a:d6: 7b:55:25:ca:d9:4b:4a:6f:a3:6f:d2:de:c9:7e:e8:51:fd:89: 3c:65:6d:ff:a1:0f:f6:10:0d:ae:2d:16:fc:56:8b:40:01:e1: 6f:19:df:e3:d2:4b:13:e1:0c:ae:f7:69:9f:94:a8:5a:53:6d: 3d:f3:6f:41:c2:33:49:8c:ae:e8:3e:62:4a:fe:59:37:34:7a: ea:ab:f1:38:47:ee:8d:fc:a6:74:a7:ec:60:6f:f9:dc:ad:e5: c0:78:fd:a2:53:93:7a:4b:e9:6f:d1:95:7d:e4:39:d1:3e:0b: 40:b5:6b:ad:65:70:32:81:95:3a:dd:30:c4:db:94:65:50:ba: 51:29:5c:5e:e0:cb:03:6b:d3:a9:61:0c:d7:9b:4c:1a:11:4b: 6d:33:0e:b8:8a:bf:60:16:61:50:40:43:4d:63:7b:9c:ff:1a: 09:a3:cb:04:2f:7d:84:77:32:ae:9f:55:99:16:d1:35:be:ac: 53:81:1b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB0jZX3JaRXGlIVNYos9zqjkiqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTEyMDYwMjI2MjNaFw0yNTEyMDkwOTUwMjNaMDMxMTAvBgNV BAMTKEExRjIyREQ2RkVBNkU2Nzc3RjY0RjdGNkNGNUMzRDdGMjA4RTU2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU99vfUiNhBn4T9T0DKhIFuM44 PcYVengGJM++F/djULGnb4BlqNTu7ufh2dCt+GluWx82BI+aBeGIHfcJftI6dlAa bisExezlANVnWPg0oFcn/EbY/XCFOfQlkN9BsJ1Ra97ZhAPx7TdLIiK5DQ6GwyGQ ILBenXfH40A0ftf+qlgwDnIzydyAgZ0+7vMztOtNfG1vEHAcao1RLqxWqbPSP0A2 BUjXEoACPebzbgjDmrNZeC/CuOky5CXXDmMt2d02HfXmHGFCSZBKMSlfC5ns9D4x 1qxWcQIUTw+t4JT/698bYCf3eFFtrT6RmfnoLCp7ZOdjcoUfbpX+gaB65VUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofIt1v6m5nd/ZPf2z1w9fyCOVvgwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUCdSlwJNb6AIwdkyjbRV9l3kkIc/6ogCkm eUuBX/u4kK/Rg37wRRmV6TKW9jG5GuAaH7aOs6TTDwDgRrmG2cyLhbyqTmla1ntV JcrZS0pvo2/S3sl+6FH9iTxlbf+hD/YQDa4tFvxWi0AB4W8Z3+PSSxPhDK73aZ+U qFpTbT3zb0HCM0mMrug+Ykr+WTc0euqr8ThH7o38pnSn7GBv+dyt5cB4/aJTk3pL 6W/RlX3kOdE+C0C1a61lcDKBlTrdMMTblGVQulEpXF7gywNr06lhDNebTBoRS20z DriKv2AWYVBAQ01je5z/GgmjywQvfYR3Mq6fVZkW0TW+rFOBG34= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:46 2025 by rpki-client