This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: byYLmM1AnSdxTk656A03tzcFwLpydLx4IMdDiCdkKWc= Subject key identifier: E2:5C:3B:05:60:4A:3E:21:CA:82:78:F1:DB:1C:B3:BC:6A:C6:5E:20 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 79049BC80261D7C082438C028579DCD67834F19F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: A4 Signing time: Fri 05 Dec 2025 05:41:37 +0000 Manifest this update: Fri 05 Dec 2025 05:36:37 +0000 Manifest next update: Mon 08 Dec 2025 09:33:37 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: NI2pBEPgInz+2kTd87OViBJlTE5MxHsqfz5msQXLNQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:04:9b:c8:02:61:d7:c0:82:43:8c:02:85:79:dc:d6:78:34:f1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Dec 5 05:36:37 2025 GMT Not After : Dec 8 09:33:37 2025 GMT Subject: CN=E25C3B05604A3E21CA8278F1DB1CB3BC6AC65E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:cb:fb:43:dd:54:bb:e3:95:08:d7:bd:96: 45:d6:1a:9e:1f:54:27:48:7f:cb:7e:2f:ea:ba:56: 53:d4:9f:d1:39:3a:d8:85:f3:c6:5a:24:e0:19:2a: e7:ff:6a:73:d9:48:50:d8:f1:4a:03:ba:4e:35:05: 25:e5:37:77:8b:6c:09:e7:f6:e5:01:55:8d:b2:60: 2f:c8:50:ed:e7:19:b6:b4:29:5e:a8:76:6c:dd:45: ad:06:e9:29:87:86:62:e8:44:93:4a:23:5a:e9:f6: 0f:8d:45:e3:72:0b:2b:3d:3a:50:de:be:49:1a:9c: 67:93:a7:64:30:66:43:b7:47:ef:68:42:8f:01:bb: d6:b0:06:a0:8e:05:4c:5b:28:97:c5:d7:80:ad:e1: 49:af:0d:aa:0e:49:6c:8d:e3:5c:4a:53:c0:81:d1: f1:ec:97:44:b1:f0:eb:6e:d9:62:4e:8d:0f:c3:89: dd:2c:ea:db:30:7f:a4:5f:12:96:40:1a:40:02:09: 4f:1f:25:30:f9:a1:0b:8e:3c:16:a0:56:ae:88:ec: 36:f8:6f:bd:e3:83:db:13:e4:91:9c:d8:eb:ba:0e: a1:04:1c:bb:51:94:ea:9e:26:92:b8:09:74:3f:1c: 0a:db:6b:84:14:9a:3f:c0:07:ce:3b:46:52:c5:36: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:3B:05:60:4A:3E:21:CA:82:78:F1:DB:1C:B3:BC:6A:C6:5E:20 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:03:ca:52:f7:eb:c6:20:84:91:9b:d8:5c:64:41:bc:81:68: db:2a:e1:ea:d8:a0:b4:53:be:ff:b9:22:db:dc:bf:06:85:64: 00:36:2a:7c:b8:5c:73:8e:10:22:77:a2:99:02:5a:99:c0:9f: 7e:75:c5:fc:da:9c:27:3f:bc:8a:a1:21:fb:c9:ce:8e:df:fd: 1a:9c:47:f8:56:90:75:7d:2b:eb:6a:d6:2a:fa:ec:b4:12:42: 23:92:26:ea:70:5c:60:26:93:ad:85:67:e2:ec:60:e9:28:73: e3:83:cb:bf:a8:e1:99:3f:f4:f6:c1:5f:c7:fd:bf:cf:1f:d0: 1e:0d:ae:a1:c7:95:79:f2:54:b6:3a:f3:7a:13:9e:86:8e:f5: 13:52:d1:b0:68:31:5a:49:ab:2b:23:ac:0d:be:1e:7a:4b:d1: 88:97:75:46:33:b0:f4:aa:bb:92:71:b0:db:5b:1b:5d:5b:ae: 5a:a0:9f:05:05:5e:01:22:e1:d6:4c:5a:f2:0f:6e:97:3d:3b: 2b:c9:f3:39:75:90:0d:41:cd:3b:0c:9d:af:c3:f9:38:2f:4e: 0c:9c:88:38:7f:cd:83:bd:c1:30:aa:e2:cb:53:8c:5e:81:f6: f1:f9:71:4c:c0:f9:7b:ce:73:ec:2a:c0:b1:6b:63:27:7a:44: c0:26:5f:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQSbyAJh18CCQ4wChXnc1ng08Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTEyMDUwNTM2MzdaFw0yNTEyMDgwOTMzMzdaMDMxMTAvBgNV BAMTKEUyNUMzQjA1NjA0QTNFMjFDQTgyNzhGMURCMUNCM0JDNkFDNjVFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZ8v7Q91Uu+OVCNe9lkXWGp4f VCdIf8t+L+q6VlPUn9E5OtiF88ZaJOAZKuf/anPZSFDY8UoDuk41BSXlN3eLbAnn 9uUBVY2yYC/IUO3nGba0KV6odmzdRa0G6SmHhmLoRJNKI1rp9g+NReNyCys9OlDe vkkanGeTp2QwZkO3R+9oQo8Bu9awBqCOBUxbKJfF14Ct4UmvDaoOSWyN41xKU8CB 0fHsl0Sx8Otu2WJOjQ/Did0s6tswf6RfEpZAGkACCU8fJTD5oQuOPBagVq6I7Db4 b73jg9sT5JGc2Ou6DqEEHLtRlOqeJpK4CXQ/HArba4QUmj/AB847RlLFNsQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lw7BWBKPiHKgnjx2xyzvGrGXiAwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkDylL368YghJGb2FxkQbyBaNsq4erYoLRT vv+5ItvcvwaFZAA2Kny4XHOOECJ3opkCWpnAn351xfzanCc/vIqhIfvJzo7f/Rqc R/hWkHV9K+tq1ir67LQSQiOSJupwXGAmk62FZ+LsYOkoc+ODy7+o4Zk/9PbBX8f9 v88f0B4NrqHHlXnyVLY683oTnoaO9RNS0bBoMVpJqysjrA2+HnpL0YiXdUYzsPSq u5JxsNtbG11brlqgnwUFXgEi4dZMWvIPbpc9OyvJ8zl1kA1BzTsMna/D+TgvTgyc iDh/zYO9wTCq4stTjF6B9vH5cUzA+XvOc+wqwLFrYyd6RMAmXzU= -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:29 2025 by rpki-client