This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: ojXSoY1SZPrg3L60zQmIkwB6Nn6o9X0eqFlcP21Bx2A= Subject key identifier: A9:DF:20:1A:DC:B6:1B:41:87:ED:32:67:13:F7:A7:98:70:15:6D:D3 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 45644D52065AC585C3268AA3E4CAB8D8C288225D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 029C Signing time: Fri 05 Dec 2025 11:20:03 +0000 Manifest this update: Fri 05 Dec 2025 11:15:03 +0000 Manifest next update: Mon 08 Dec 2025 21:02:03 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: tQLpo/4Y59b9nPsD4BpRXUsILILrhAsEH54ZZAwy9Rs=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:64:4d:52:06:5a:c5:85:c3:26:8a:a3:e4:ca:b8:d8:c2:88:22:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Dec 5 11:15:03 2025 GMT Not After : Dec 8 21:02:03 2025 GMT Subject: CN=A9DF201ADCB61B4187ED326713F7A79870156DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:d6:73:32:01:29:0b:fb:db:7e:1e:13:3c: b7:48:8f:a3:7b:00:09:8b:22:ad:e2:f9:0f:7e:37: e4:32:67:15:b6:64:66:0b:21:14:b5:9b:7c:9b:17: c3:8e:c4:3a:2e:58:ab:cb:41:64:33:61:73:06:64: 6e:ea:8b:38:80:bb:04:a4:6b:35:2c:5d:39:80:d8: bf:3e:68:56:4c:e0:68:7f:1c:ec:2a:07:57:a8:b0: 54:00:63:26:dd:f1:7d:37:31:64:88:a6:31:ba:cd: c1:36:23:13:ac:21:c1:a5:fe:bc:57:b1:a8:25:38: 6f:0b:10:c3:d0:d5:b9:ca:7f:f3:5f:33:fb:3d:cf: b7:33:4c:7c:b9:ff:90:f1:33:13:55:d8:5d:60:36: 00:16:bf:ce:f4:0b:81:98:79:4f:31:59:ec:67:40: 44:16:8b:cd:0e:f8:7a:5f:6b:4c:aa:24:10:97:b4: bb:5e:a8:2b:7f:62:39:01:ac:1b:db:b5:95:93:1a: f1:fe:fe:a5:9b:6c:7b:d6:b7:cd:34:d5:d5:61:a1: b8:08:42:4c:65:a9:fb:d6:19:22:93:04:72:60:3d: 8c:85:d6:c4:63:d7:32:58:b1:e3:0d:5f:39:7a:1d: 92:dc:1a:6b:fb:62:79:b4:66:db:a7:a9:d0:82:84: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:20:1A:DC:B6:1B:41:87:ED:32:67:13:F7:A7:98:70:15:6D:D3 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:77:90:5c:6f:88:b0:e6:bd:2e:8a:3d:51:fc:ed:78:c1:16: 1c:54:35:91:37:f2:d4:ff:a8:4a:74:f8:f6:34:78:65:bd:9b: 9e:a2:9d:8f:88:bd:39:e0:d7:9f:3d:73:8e:0b:e5:2d:4d:5d: 8e:42:f3:60:c3:b0:09:f2:65:60:38:40:01:c1:15:eb:0d:c4: 1e:0c:c8:57:3a:bf:14:f0:a8:1b:bc:d0:2b:97:cd:c1:e2:ed: e1:ef:f3:87:40:d9:ac:47:44:5f:50:52:9b:b2:a3:ab:92:69: 10:37:56:25:59:d4:ae:28:56:76:f9:fb:00:44:9b:1e:d3:e1: d8:65:e3:75:a6:92:3c:6f:26:26:20:a1:46:4a:62:e7:54:c9: 59:f3:0f:28:0d:ce:66:8d:f8:fe:d1:4a:4b:e5:33:77:32:59: 5a:6b:3a:d3:26:5f:0d:53:ad:a8:c3:66:5b:71:8e:75:15:e4: b7:f4:64:65:bc:65:ec:82:3b:28:bc:58:d3:dd:b2:7e:b9:e3: cc:cf:2d:16:4b:f6:b5:77:b0:f0:d5:1b:d0:8f:a0:c3:a5:f2: 43:19:d6:8a:7c:52:8e:c0:b6:18:91:65:a0:d2:3e:8e:c4:36: 3e:ef:93:13:ca:83:10:48:4a:85:7d:fc:22:06:d0:a7:be:37: ff:5d:86:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWRNUgZaxYXDJoqj5Mq42MKIIl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTEyMDUxMTE1MDNaFw0yNTEyMDgyMTAyMDNaMDMxMTAvBgNV BAMTKEE5REYyMDFBRENCNjFCNDE4N0VEMzI2NzEzRjdBNzk4NzAxNTZERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCweNZzMgEpC/vbfh4TPLdIj6N7 AAmLIq3i+Q9+N+QyZxW2ZGYLIRS1m3ybF8OOxDouWKvLQWQzYXMGZG7qiziAuwSk azUsXTmA2L8+aFZM4Gh/HOwqB1eosFQAYybd8X03MWSIpjG6zcE2IxOsIcGl/rxX saglOG8LEMPQ1bnKf/NfM/s9z7czTHy5/5DxMxNV2F1gNgAWv870C4GYeU8xWexn QEQWi80O+Hpfa0yqJBCXtLteqCt/YjkBrBvbtZWTGvH+/qWbbHvWt8001dVhobgI QkxlqfvWGSKTBHJgPYyF1sRj1zJYseMNXzl6HZLcGmv7Ynm0ZtunqdCChBS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqd8gGty2G0GH7TJnE/enmHAVbdMwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB3kFxviLDmvS6KPVH87XjBFhxUNZE38tT/ qEp0+PY0eGW9m56inY+IvTng1589c44L5S1NXY5C82DDsAnyZWA4QAHBFesNxB4M yFc6vxTwqBu80CuXzcHi7eHv84dA2axHRF9QUpuyo6uSaRA3ViVZ1K4oVnb5+wBE mx7T4dhl43WmkjxvJiYgoUZKYudUyVnzDygNzmaN+P7RSkvlM3cyWVprOtMmXw1T rajDZltxjnUV5Lf0ZGW8ZeyCOyi8WNPdsn6548zPLRZL9rV3sPDVG9CPoMOl8kMZ 1op8Uo7AthiRZaDSPo7ENj7vkxPKgxBISoV9/CIG0Ke+N/9dhqw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:52 2025 by rpki-client