This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: reUo9KRxL0g16Gc0CkRv42KtNop2Qm6Sjn10Hfjl06o= Subject key identifier: FD:75:EE:3C:64:70:2C:B0:A7:71:D7:92:81:75:86:8E:62:25:F6:3D Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 5CC4AD0EAF049BFEECC423E3365E69E4CE6BEDF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: CB Signing time: Sat 06 Dec 2025 02:41:35 +0000 Manifest this update: Sat 06 Dec 2025 02:36:35 +0000 Manifest next update: Tue 09 Dec 2025 05:41:35 +0000 Files and hashes: 1: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) 3: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 4: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: pN+dGvyJSBoXicBEuDQeplz7PJXoKitYRnhUETl8ZXo=) 5: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c4:ad:0e:af:04:9b:fe:ec:c4:23:e3:36:5e:69:e4:ce:6b:ed:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Dec 6 02:36:35 2025 GMT Not After : Dec 9 05:41:35 2025 GMT Subject: CN=FD75EE3C64702CB0A771D7928175868E6225F63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:f8:7f:f1:27:c3:6e:1a:d8:5d:8a:eb:6e: 81:bd:c1:c7:4c:de:a2:75:d2:4f:95:75:95:2b:4b: ad:ac:1c:9a:cf:97:91:d6:96:3b:87:34:9a:4e:14: 46:ed:3f:e1:a3:41:1f:4c:ef:e2:58:0e:39:6b:75: 90:73:9e:cc:f4:59:30:cf:80:38:8e:bb:cb:2b:81: 64:d2:7e:de:c8:61:57:a7:08:a8:77:58:b3:6b:8e: b1:c5:91:19:7f:d3:cd:d1:eb:7a:ad:b4:31:31:17: f2:d0:f5:71:2f:e9:eb:cb:7a:e4:bd:fe:2d:15:50: bf:8d:1c:fe:a7:a6:1e:69:a3:4a:f9:7d:f0:72:bb: cb:ae:06:1a:17:d7:dc:e7:fe:78:2b:97:98:8f:ed: 1a:fd:e3:da:a9:d8:56:05:91:5e:db:82:d6:ef:2d: 91:01:2f:72:24:7d:4e:33:a7:af:c9:d1:df:1c:7c: de:c4:8f:d1:13:b9:67:c6:33:ad:27:1c:e2:68:e4: 4d:69:5f:f9:68:d0:52:ae:2c:90:cc:0a:cb:32:a4: 02:d5:96:65:1b:cb:3d:39:eb:ce:3d:1e:3d:45:6b: 54:39:40:92:83:5b:6c:1c:93:59:8a:e3:05:37:b9: 31:bb:bd:d9:00:3d:43:79:29:76:99:45:c4:3a:ab: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:75:EE:3C:64:70:2C:B0:A7:71:D7:92:81:75:86:8E:62:25:F6:3D X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:29:0f:26:b7:75:50:5b:fa:d6:0a:fe:20:2c:01:ec:57:02: 99:a6:17:96:c1:27:68:c4:f0:45:54:ae:08:f4:8b:bf:9e:24: 07:90:68:3b:95:85:71:c3:92:a8:49:43:52:d4:b0:ed:10:f8: 46:bb:1c:94:dc:87:9f:96:de:5f:d3:f0:7d:7b:76:58:e6:3e: c2:ed:f0:af:1d:4e:c6:f1:1b:40:89:02:8e:e7:67:14:59:1d: fa:cd:ed:bd:52:bc:e1:6e:00:2e:6f:97:c9:94:80:44:23:0b: 84:8a:0e:f8:bf:d4:f7:4b:f8:e9:8b:d2:07:ca:d6:d0:50:94: d3:64:ff:be:21:92:78:8e:af:52:24:26:a1:1b:cc:e0:85:e3: 71:a8:8b:c6:f6:83:76:66:89:c2:2b:5c:51:8d:68:ad:07:51: 97:81:3f:c7:80:d5:ce:01:2f:ce:e7:28:a4:dc:14:bc:02:92: 66:61:52:c2:b8:87:42:e8:83:92:5d:b6:4a:02:55:8e:a7:ea: 0f:63:18:7b:36:15:b1:b1:08:c2:69:0c:dc:ba:e1:10:5d:69: 7a:15:e8:5f:a7:86:aa:c2:47:27:f5:8d:e7:d0:f9:60:16:8d: 3c:c9:21:da:08:2f:01:48:37:9d:20:81:a0:57:7a:d7:11:13: 47:9d:37:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMStDq8Em/7sxCPjNl5p5M5r7fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTEyMDYwMjM2MzVaFw0yNTEyMDkwNTQxMzVaMDMxMTAvBgNV BAMTKEZENzVFRTNDNjQ3MDJDQjBBNzcxRDc5MjgxNzU4NjhFNjIyNUY2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cvh/8SfDbhrYXYrrboG9wcdM 3qJ10k+VdZUrS62sHJrPl5HWljuHNJpOFEbtP+GjQR9M7+JYDjlrdZBznsz0WTDP gDiOu8srgWTSft7IYVenCKh3WLNrjrHFkRl/083R63qttDExF/LQ9XEv6evLeuS9 /i0VUL+NHP6nph5po0r5ffByu8uuBhoX19zn/ngrl5iP7Rr949qp2FYFkV7bgtbv LZEBL3IkfU4zp6/J0d8cfN7Ej9ETuWfGM60nHOJo5E1pX/lo0FKuLJDMCssypALV lmUbyz056849Hj1Fa1Q5QJKDW2wck1mK4wU3uTG7vdkAPUN5KXaZRcQ6q8lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XXuPGRwLLCncdeSgXWGjmIl9j0wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYpDya3dVBb+tYK/iAsAexXApmmF5bBJ2jE 8EVUrgj0i7+eJAeQaDuVhXHDkqhJQ1LUsO0Q+Ea7HJTch5+W3l/T8H17dljmPsLt 8K8dTsbxG0CJAo7nZxRZHfrN7b1SvOFuAC5vl8mUgEQjC4SKDvi/1PdL+OmL0gfK 1tBQlNNk/74hkniOr1IkJqEbzOCF43Goi8b2g3ZmicIrXFGNaK0HUZeBP8eA1c4B L87nKKTcFLwCkmZhUsK4h0Log5JdtkoCVY6n6g9jGHs2FbGxCMJpDNy64RBdaXoV 6F+nhqrCRyf1jefQ+WAWjTzJIdoILwFIN50ggaBXetcRE0edN+I= -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:05 2025 by rpki-client