This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: As09SgkJtb2D5bqTR1vIRnOIk7FMhYDcYPIDrG5/xEs= Subject key identifier: AC:45:99:C1:82:92:83:88:75:FE:00:B9:D1:B9:35:3F:69:D4:4D:48 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 39D15F45E0E752687CF7EE2902AA61151F527C5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02B7 Signing time: Sat 06 Dec 2025 13:41:11 +0000 Manifest this update: Sat 06 Dec 2025 13:36:11 +0000 Manifest next update: Tue 09 Dec 2025 14:14:11 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 2: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 3: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 4: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) 5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: oEWX/np3d09VwRKZEtalZQ3yBZCmAbHSBogXmD+ml8M=) 6: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 7: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d1:5f:45:e0:e7:52:68:7c:f7:ee:29:02:aa:61:15:1f:52:7c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Dec 6 13:36:11 2025 GMT Not After : Dec 9 14:14:11 2025 GMT Subject: CN=AC4599C18292838875FE00B9D1B9353F69D44D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:00:4e:b6:9f:9e:d3:1a:47:cb:31:4c:62: 3f:91:5d:a9:c7:00:b8:2a:6a:5b:0b:05:4f:e6:db: 9f:cf:30:c8:b6:c3:54:1b:70:a7:75:56:22:99:00: b5:5b:78:a7:75:ce:6e:c8:f3:e0:82:85:2b:b6:5d: cf:f4:f6:fe:9a:76:51:4a:da:87:d8:47:fc:2f:e3: d9:4e:9f:60:9e:43:0b:36:aa:0a:c2:e5:05:e7:11: db:ae:7c:80:bd:f1:35:82:f4:89:2a:a9:e8:0f:7e: d5:28:86:b0:3b:5d:89:af:6b:4a:5d:15:b1:00:5e: 6b:85:db:7e:dd:a0:3c:ad:ae:fe:1e:98:b9:ea:1f: d9:e1:ff:3d:c2:bb:2f:7f:a1:e7:d2:b4:e3:f2:86: ba:ac:df:9b:18:2c:8d:e6:e6:80:22:15:14:db:76: c5:cb:04:e9:7a:ed:59:6c:12:1c:22:05:b0:e3:79: 1b:8d:97:95:f9:d2:71:7f:4f:c7:c1:96:c8:d0:64: 34:3e:c4:94:68:20:df:1e:52:0a:0e:4a:97:9d:53: 3a:a3:54:2d:0d:e7:1c:4e:26:8d:2c:6e:38:4d:0a: 13:42:81:04:94:3e:02:75:7f:42:d4:a1:bb:17:25: bd:5c:b2:0a:28:d2:b2:75:74:5b:6d:94:8b:74:0c: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:45:99:C1:82:92:83:88:75:FE:00:B9:D1:B9:35:3F:69:D4:4D:48 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:12:f3:8e:8b:15:4f:1f:7f:9d:19:39:00:3b:2a:e2:9d: 2b:9c:a2:5c:b8:63:79:2e:25:3d:6e:fa:97:c3:91:4f:f8:7a: 24:74:3b:3f:58:75:21:ec:cc:17:d8:37:46:97:da:33:50:e5: 17:4a:8e:09:d0:f2:5d:83:d8:6e:5d:f3:bf:c7:80:f7:2f:d8: f4:c1:b4:6d:2c:52:a2:10:fd:99:10:f0:4e:38:e1:b7:81:37: 11:eb:3f:b9:f9:9b:07:f9:08:66:c3:61:03:b4:dc:10:72:e5: 63:d9:40:fc:70:14:e8:7c:85:82:5e:65:b7:9b:0c:b1:22:cd: 79:e8:77:ac:45:66:71:0d:a9:95:5c:79:c8:04:60:49:56:a8: 1d:5e:3e:c4:1f:a2:19:ab:5c:a3:df:56:88:48:ab:ef:3e:13: 91:0b:2d:8d:b3:d5:39:97:a8:00:28:12:71:6f:d9:a2:4c:14: 1d:48:32:c8:be:96:7a:c4:85:7a:cd:7a:67:fc:23:c8:ef:5a: ed:d8:a1:ff:4e:65:0d:53:70:48:2e:ca:a5:76:7d:82:3e:64: 12:49:c8:c0:1e:d1:4f:8f:4a:2c:ea:5c:3d:c5:1b:3c:bf:fb: 53:22:18:ff:ac:be:ce:fa:8e:00:d7:55:06:76:72:72:72:94: df:b0:1e:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdFfReDnUmh89+4pAqphFR9SfFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTEyMDYxMzM2MTFaFw0yNTEyMDkxNDE0MTFaMDMxMTAvBgNV BAMTKEFDNDU5OUMxODI5MjgzODg3NUZFMDBCOUQxQjkzNTNGNjlENDRENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8gBOtp+e0xpHyzFMYj+RXanH ALgqalsLBU/m25/PMMi2w1QbcKd1ViKZALVbeKd1zm7I8+CChSu2Xc/09v6adlFK 2ofYR/wv49lOn2CeQws2qgrC5QXnEduufIC98TWC9IkqqegPftUohrA7XYmva0pd FbEAXmuF237doDytrv4emLnqH9nh/z3Cuy9/oefStOPyhrqs35sYLI3m5oAiFRTb dsXLBOl67VlsEhwiBbDjeRuNl5X50nF/T8fBlsjQZDQ+xJRoIN8eUgoOSpedUzqj VC0N5xxOJo0sbjhNChNCgQSUPgJ1f0LUobsXJb1csgoo0rJ1dFttlIt0DDLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrEWZwYKSg4h1/gC50bk1P2nUTUgwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMsEvOOixVPH3+dGTkAOyrinSucoly4Y3ku JT1u+pfDkU/4eiR0Oz9YdSHszBfYN0aX2jNQ5RdKjgnQ8l2D2G5d87/HgPcv2PTB tG0sUqIQ/ZkQ8E444beBNxHrP7n5mwf5CGbDYQO03BBy5WPZQPxwFOh8hYJeZbeb DLEizXnod6xFZnENqZVcecgEYElWqB1ePsQfohmrXKPfVohIq+8+E5ELLY2z1TmX qAAoEnFv2aJMFB1IMsi+lnrEhXrNemf8I8jvWu3Yof9OZQ1TcEguyqV2fYI+ZBJJ yMAe0U+PSizqXD3FGzy/+1MiGP+svs76jgDXVQZ2cnJylN+wHsM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:09:42 2025 by rpki-client