This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: 9yUZjVDX1NjesLazVKo7/nSUm/phdvhKaqSisxKKeWU= Subject key identifier: 31:41:90:C3:78:76:7D:EA:97:71:6B:D9:FF:04:A7:06:1C:E3:36:16 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 2D3E8EB9805A8DF7B33D196E31817FA71D27E74C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 00:21:12 +0000 Manifest this update: Fri 05 Dec 2025 00:16:12 +0000 Manifest next update: Mon 08 Dec 2025 11:41:12 +0000 Files and hashes: 1: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: UfzOFeRdeh9VG7pJxMemzqKeNO3GB9xXr6XKI1+yfFU=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 3: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3e:8e:b9:80:5a:8d:f7:b3:3d:19:6e:31:81:7f:a7:1d:27:e7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Dec 5 00:16:12 2025 GMT Not After : Dec 8 11:41:12 2025 GMT Subject: CN=314190C378767DEA97716BD9FF04A7061CE33616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:4c:4a:f2:1b:4b:47:55:c0:dc:dc:d2:b5: 02:95:91:ea:a3:ca:da:c8:cb:46:79:fd:55:1a:52: 88:d0:72:9f:e3:e6:3e:8d:0d:0f:51:2d:62:03:c1: 76:be:ed:f7:29:76:eb:5d:b4:4c:df:05:f5:c5:3b: ac:b5:9a:d9:d5:9a:dd:cf:ee:6b:c0:5b:84:e6:ea: 2a:ad:85:f8:c0:72:e6:49:a1:ea:a8:14:0b:f8:72: c8:e5:2d:97:7b:92:b9:ac:2c:e3:8e:f2:b0:fe:bb: 08:5a:d0:f9:20:ad:ab:a6:8d:74:b6:76:45:43:cf: 3c:5e:d9:e0:1e:88:16:c8:92:e4:bc:f4:6a:ad:c7: 9c:7b:6f:fa:44:c8:e1:71:f7:90:e7:4d:37:dd:68: aa:e6:1c:e5:41:54:92:c0:33:79:b4:f6:b2:8f:d9: 60:18:45:3c:ae:33:92:8a:38:a4:4c:cc:d2:1f:d1: 6b:a2:e8:8e:6c:90:aa:68:67:6d:a5:26:1f:3b:93: 18:f6:2f:96:a5:ab:8b:6d:34:7f:fd:32:cd:df:3e: c2:a9:08:c2:bc:5a:83:30:65:b3:0e:9d:46:16:a8: 49:f2:ec:3a:91:1c:e7:38:22:6d:d7:00:89:05:65: 81:07:36:82:e1:02:e4:e8:50:73:68:1c:53:ab:c5: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:90:C3:78:76:7D:EA:97:71:6B:D9:FF:04:A7:06:1C:E3:36:16 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:69:19:8d:44:ee:6e:09:c5:ed:2d:54:2f:1b:9d:65:ba:da: 1f:d6:19:2e:25:af:97:33:b5:d1:02:90:5c:3f:17:66:fe:95: bb:26:dc:05:7b:07:0b:24:c5:a7:d8:b1:e0:1f:f1:a9:f7:a3: 46:5a:dd:c5:53:41:02:1f:f0:f8:af:1f:6c:84:dc:da:da:db: 5c:16:8b:6e:31:1e:96:ba:18:e3:5e:9a:47:fb:c2:84:0f:c6: f5:41:48:1a:4b:17:f5:f0:8d:d1:0f:08:c6:2a:62:ac:42:66: 50:bd:63:0c:a1:17:e3:3f:86:bc:08:ac:ce:89:de:bf:a1:62: d0:d8:70:f3:ce:60:ab:fc:b0:af:c7:4f:64:76:7f:7a:03:52: 68:6a:92:72:13:67:9b:63:e9:21:44:e5:54:a9:6d:dc:08:9b: 4c:0f:3e:f1:86:cf:2a:5f:84:71:16:09:19:f4:f6:ca:79:06: 63:60:30:3f:ce:e8:d8:dc:bf:d5:78:32:51:cd:48:11:a1:cd: 28:65:e8:71:04:f1:71:0d:18:42:b0:d6:9c:2d:79:a3:d1:5f: a5:b7:6b:fc:2f:40:da:a9:2e:41:a6:41:65:b2:82:06:34:11: aa:9e:b9:e5:24:bc:23:f7:ab:8a:0c:ac:fd:b9:90:57:e5:42: 4b:12:22:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULT6OuYBajfezPRluMYF/px0n50wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTEyMDUwMDE2MTJaFw0yNTEyMDgxMTQxMTJaMDMxMTAvBgNV BAMTKDMxNDE5MEMzNzg3NjdERUE5NzcxNkJEOUZGMDRBNzA2MUNFMzM2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFkxK8htLR1XA3NzStQKVkeqj ytrIy0Z5/VUaUojQcp/j5j6NDQ9RLWIDwXa+7fcpdutdtEzfBfXFO6y1mtnVmt3P 7mvAW4Tm6iqthfjAcuZJoeqoFAv4csjlLZd7krmsLOOO8rD+uwha0PkgraumjXS2 dkVDzzxe2eAeiBbIkuS89Gqtx5x7b/pEyOFx95DnTTfdaKrmHOVBVJLAM3m09rKP 2WAYRTyuM5KKOKRMzNIf0Wui6I5skKpoZ22lJh87kxj2L5alq4ttNH/9Ms3fPsKp CMK8WoMwZbMOnUYWqEny7DqRHOc4Im3XAIkFZYEHNoLhAuToUHNoHFOrxXshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUGQw3h2feqXcWvZ/wSnBhzjNhYwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNpGY1E7m4Jxe0tVC8bnWW62h/WGS4lr5cz tdECkFw/F2b+lbsm3AV7BwskxafYseAf8an3o0Za3cVTQQIf8PivH2yE3Nra21wW i24xHpa6GONemkf7woQPxvVBSBpLF/XwjdEPCMYqYqxCZlC9YwyhF+M/hrwIrM6J 3r+hYtDYcPPOYKv8sK/HT2R2f3oDUmhqknITZ5tj6SFE5VSpbdwIm0wPPvGGzypf hHEWCRn09sp5BmNgMD/O6Njcv9V4MlHNSBGhzShl6HEE8XENGEKw1pwteaPRX6W3 a/wvQNqpLkGmQWWyggY0EaqeueUkvCP3q4oMrP25kFflQksSItY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:09 2025 by rpki-client