This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: gSreUPsyA7pL3IIakEQADIrsmuq1M7b0lbqwGJr6UNQ= Subject key identifier: 88:32:FB:F9:AF:C1:F1:62:40:20:CA:46:41:63:EB:26:A1:78:6A:91 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 3415B8804CB96A8CBDB63C7608EDA9EBBAE90D40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 13:51:42 +0000 Manifest this update: Sat 06 Dec 2025 13:46:42 +0000 Manifest next update: Tue 09 Dec 2025 20:10:42 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: vxAsSJSE5ebq5nuVCtf/m7auCZvMyEGKiBJDTHGV0x8=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 3: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:15:b8:80:4c:b9:6a:8c:bd:b6:3c:76:08:ed:a9:eb:ba:e9:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Dec 6 13:46:42 2025 GMT Not After : Dec 9 20:10:42 2025 GMT Subject: CN=8832FBF9AFC1F1624020CA464163EB26A1786A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:88:a5:16:bb:18:74:de:9b:49:29:c9:db: 1d:b1:a2:b5:8f:cb:fc:5f:89:42:9f:c8:fd:cf:3d: 0c:23:dc:1e:0a:58:ca:a6:90:56:1f:9c:99:99:38: 16:d7:ec:19:e8:9f:56:d0:f0:16:01:52:ea:61:e6: 04:d9:7d:55:ae:70:5e:56:11:5a:d3:2c:50:36:a4: cc:22:9d:4f:1d:c1:74:fd:5a:ee:27:b0:f4:95:3c: c4:7b:02:95:56:66:67:0b:ab:f3:38:e9:67:36:59: db:68:49:ac:9b:ee:aa:f9:7d:c4:23:f5:4c:41:ff: b7:6a:df:ea:d5:70:14:86:71:88:33:5e:2a:36:78: ab:ae:18:ad:b3:7d:80:b9:ee:98:b3:37:31:1b:84: 57:2c:d5:46:95:e5:c8:d3:40:ca:7d:eb:b9:cf:58: 4d:6d:5f:30:68:cc:c2:7a:41:e5:23:30:bd:9c:4d: 53:ec:8e:cd:57:10:0b:ec:15:e4:bc:75:31:a2:54: b8:96:f2:49:b5:6f:ff:0b:53:ed:1e:30:80:d5:ec: e5:6f:e5:25:f2:d9:79:69:bc:c2:4e:3e:88:09:33: e2:88:ec:1d:7e:28:e9:6b:fc:ca:7c:d7:51:db:42: 9b:f0:3d:d3:67:73:9d:ae:29:cd:9f:db:42:90:67: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:FB:F9:AF:C1:F1:62:40:20:CA:46:41:63:EB:26:A1:78:6A:91 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b7:9b:bd:fe:c2:f6:53:79:a4:ff:60:2e:5e:28:58:8c:89: 9a:2d:32:12:72:b5:2b:89:17:2c:1c:e1:f0:32:54:3c:12:1c: 2b:8a:58:e5:76:9b:e0:e9:e4:85:24:48:1d:50:e1:06:40:fa: 38:df:97:5b:a0:81:15:39:15:b2:cf:92:bd:e7:98:26:a3:c3: 88:f4:ad:39:d7:07:39:85:1a:c8:1d:27:57:50:f1:b6:4a:48: f0:68:16:4c:08:2f:a7:90:e1:78:73:b3:18:3f:35:b8:ff:cf: b4:95:64:45:62:97:f0:f7:13:3f:c2:48:ce:75:55:ea:b7:63: 84:09:49:dd:e8:5f:3e:ee:d1:fc:53:1a:2a:e8:1e:26:94:9d: ff:e9:0c:6f:c7:86:08:59:32:3a:4c:8c:ef:a1:ed:8d:43:fc: 13:47:03:7f:a1:11:37:ad:34:9f:b0:ed:a8:a0:f3:45:17:f2: 6c:41:f1:c0:e1:71:6d:a9:c3:29:62:5f:9f:d6:cd:bd:90:e6: 90:b7:89:3a:5b:70:92:39:5f:8d:3d:76:dc:2b:26:fc:33:b3: 33:d7:5c:64:21:46:ee:59:be:c3:27:5d:79:f1:c9:16:54:0b: 0d:ba:4d:bc:5e:c8:9a:20:80:fe:42:52:d7:78:a7:49:54:cd: 35:af:e6:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBW4gEy5aoy9tjx2CO2p67rpDUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTEyMDYxMzQ2NDJaFw0yNTEyMDkyMDEwNDJaMDMxMTAvBgNV BAMTKDg4MzJGQkY5QUZDMUYxNjI0MDIwQ0E0NjQxNjNFQjI2QTE3ODZBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQoilFrsYdN6bSSnJ2x2xorWP y/xfiUKfyP3PPQwj3B4KWMqmkFYfnJmZOBbX7Bnon1bQ8BYBUuph5gTZfVWucF5W EVrTLFA2pMwinU8dwXT9Wu4nsPSVPMR7ApVWZmcLq/M46Wc2WdtoSayb7qr5fcQj 9UxB/7dq3+rVcBSGcYgzXio2eKuuGK2zfYC57pizNzEbhFcs1UaV5cjTQMp967nP WE1tXzBozMJ6QeUjML2cTVPsjs1XEAvsFeS8dTGiVLiW8km1b/8LU+0eMIDV7OVv 5SXy2XlpvMJOPogJM+KI7B1+KOlr/Mp811HbQpvwPdNnc52uKc2f20KQZ1Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDL7+a/B8WJAIMpGQWPrJqF4apEwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMC3m73+wvZTeaT/YC5eKFiMiZotMhJytSuJ Fywc4fAyVDwSHCuKWOV2m+Dp5IUkSB1Q4QZA+jjfl1uggRU5FbLPkr3nmCajw4j0 rTnXBzmFGsgdJ1dQ8bZKSPBoFkwIL6eQ4Xhzsxg/Nbj/z7SVZEVil/D3Ez/CSM51 Veq3Y4QJSd3oXz7u0fxTGiroHiaUnf/pDG/HhghZMjpMjO+h7Y1D/BNHA3+hETet NJ+w7aig80UX8mxB8cDhcW2pwyliX5/Wzb2Q5pC3iTpbcJI5X409dtwrJvwzszPX XGQhRu5ZvsMnXXnxyRZUCw26TbxeyJoggP5CUtd4p0lUzTWv5rA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:05 2025 by rpki-client