This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: uDZ7D0Up3OWZfmV287euu7xHmU393HgiFze0vFB6EB4= Subject key identifier: 08:9C:7B:8E:E3:72:4E:19:90:67:99:17:E2:92:F3:12:37:F0:81:60 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 0B75BB033254A6274B1A28B74E85CA55DFA584D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 9A Signing time: Sat 06 Dec 2025 04:00:03 +0000 Manifest this update: Sat 06 Dec 2025 03:55:03 +0000 Manifest next update: Tue 09 Dec 2025 07:28:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: Xwqh7z5sdIRmsmwDFHkXmd72d0wIP5AdTjotOPzQ4h4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:75:bb:03:32:54:a6:27:4b:1a:28:b7:4e:85:ca:55:df:a5:84:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Dec 6 03:55:03 2025 GMT Not After : Dec 9 07:28:03 2025 GMT Subject: CN=089C7B8EE3724E1990679917E292F31237F08160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:a6:b5:c1:c3:c2:00:82:55:35:6d:a1:28: 11:cc:a2:09:22:b5:24:ee:4a:49:a9:65:fb:a5:93: 67:5b:a2:c5:f3:36:72:53:16:b9:2d:06:20:9c:7c: a8:a9:20:eb:84:d5:4a:34:b9:06:cf:0c:00:58:d4: 95:76:e8:ca:f0:f9:13:1a:e8:dc:99:38:d5:aa:43: 95:27:10:b1:18:c5:f0:9f:e3:23:d9:9a:d5:50:9b: 5a:cd:3d:a8:ff:da:1c:82:19:e3:01:6b:6f:be:86: 62:41:56:35:a2:df:be:47:67:2f:6e:23:f7:e9:a4: 11:a2:f2:6f:64:f7:4e:57:59:0e:8f:6b:4d:f8:f2: 4f:cb:13:3d:bf:dd:88:69:7a:5a:44:e8:ba:88:a3: 9f:0e:13:be:aa:de:ae:2f:49:26:c1:8f:06:37:c2: e3:c5:11:fc:15:58:10:95:d0:27:47:9a:c5:78:30: b5:f9:92:7e:7f:be:ab:d4:de:fc:a8:c0:11:44:5e: fe:52:27:cf:90:b4:a2:bd:6d:f2:b8:72:2e:33:c1: c2:e9:a3:cb:39:4a:96:3c:45:87:f7:ee:77:0b:2e: 08:7b:5b:f5:b6:7f:3b:e8:b2:8f:01:32:6d:23:5b: 52:0f:9b:a0:c2:d1:3e:8f:2e:42:49:19:6b:1c:51: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:7B:8E:E3:72:4E:19:90:67:99:17:E2:92:F3:12:37:F0:81:60 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c3:26:9a:0b:66:85:ca:2e:ee:8d:59:17:dd:7c:2b:ab:76: a3:9b:b1:02:07:b4:88:65:1a:d7:0a:76:bc:42:be:00:44:53: 3e:7e:b9:dd:54:92:eb:a0:58:79:31:22:b3:20:c0:2a:7e:c3: 40:85:c3:41:78:89:2d:e1:f0:a4:23:4f:76:a9:4f:73:97:ff: 37:41:5a:4a:6c:59:3d:29:7d:01:0e:b7:fe:dd:d5:cc:f0:ed: 3a:0e:4d:08:7e:b4:18:a7:71:ea:dd:81:f7:c0:ff:36:e3:a4: 89:ff:0d:37:76:1c:3d:0d:88:ac:28:00:c4:d9:ff:5a:95:e2: 13:61:62:ec:69:3e:0a:5e:a0:58:c1:d3:cf:d9:67:45:f3:a7: 80:60:1e:be:c0:02:81:5a:7a:0b:2c:50:e5:74:44:48:c6:5d: 10:29:37:57:9c:a5:a5:92:69:e3:69:9d:a1:b7:cb:2b:b3:38: 1d:20:bc:68:45:04:44:d2:8b:07:1d:d6:a9:d0:c3:09:73:f5: c6:ef:98:37:70:0d:22:d3:ce:c8:b0:7f:10:9d:87:b1:e0:22: c5:1f:a8:d1:d3:dc:d5:e7:9a:72:ae:3a:b4:34:e5:f4:ea:5b: 4e:fa:44:ff:55:88:45:b8:61:f9:8d:32:b6:07:c6:96:6e:da: cb:57:2b:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3W7AzJUpidLGii3ToXKVd+lhNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTEyMDYwMzU1MDNaFw0yNTEyMDkwNzI4MDNaMDMxMTAvBgNV BAMTKDA4OUM3QjhFRTM3MjRFMTk5MDY3OTkxN0UyOTJGMzEyMzdGMDgxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPu6a1wcPCAIJVNW2hKBHMogki tSTuSkmpZfulk2dbosXzNnJTFrktBiCcfKipIOuE1Uo0uQbPDABY1JV26Mrw+RMa 6NyZONWqQ5UnELEYxfCf4yPZmtVQm1rNPaj/2hyCGeMBa2++hmJBVjWi375HZy9u I/fppBGi8m9k905XWQ6Pa0348k/LEz2/3YhpelpE6LqIo58OE76q3q4vSSbBjwY3 wuPFEfwVWBCV0CdHmsV4MLX5kn5/vqvU3vyowBFEXv5SJ8+QtKK9bfK4ci4zwcLp o8s5SpY8RYf37ncLLgh7W/W2fzvoso8BMm0jW1IPm6DC0T6PLkJJGWscUXjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJx7juNyThmQZ5kX4pLzEjfwgWAwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLDJpoLZoXKLu6NWRfdfCurdqObsQIHtIhl GtcKdrxCvgBEUz5+ud1UkuugWHkxIrMgwCp+w0CFw0F4iS3h8KQjT3apT3OX/zdB WkpsWT0pfQEOt/7d1czw7ToOTQh+tBincerdgffA/zbjpIn/DTd2HD0NiKwoAMTZ /1qV4hNhYuxpPgpeoFjB08/ZZ0Xzp4BgHr7AAoFaegssUOV0REjGXRApN1ecpaWS aeNpnaG3yyuzOB0gvGhFBETSiwcd1qnQwwlz9cbvmDdwDSLTzsiwfxCdh7HgIsUf qNHT3NXnmnKuOrQ05fTqW076RP9ViEW4YfmNMrYHxpZu2stXK44= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:47 2025 by rpki-client