This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: hMHQLmQEWo8jaYoQb227xOMHquuBSRCvq3xnwN9yfb8= Subject key identifier: 3F:D2:B7:08:E3:5B:84:A3:A8:7A:6F:78:18:51:FD:37:01:64:99:D8 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 37F03AE729C95321CFF351A6756718A9421FA837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: E7 Signing time: Fri 05 Dec 2025 16:00:06 +0000 Manifest this update: Fri 05 Dec 2025 15:55:06 +0000 Manifest next update: Tue 09 Dec 2025 01:32:06 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: aZvxMeD9vGXhU6XBtl+ZoTFPyZ4pnB2TEwSxN+TEegU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f0:3a:e7:29:c9:53:21:cf:f3:51:a6:75:67:18:a9:42:1f:a8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Dec 5 15:55:06 2025 GMT Not After : Dec 9 01:32:06 2025 GMT Subject: CN=3FD2B708E35B84A3A87A6F781851FD37016499D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:41:f9:ca:f8:33:24:10:3a:b5:8e:5a:c3: 60:a7:d3:71:69:c6:d0:3e:2d:53:12:ae:f8:05:e5: e9:a3:fe:4f:8e:d3:b7:28:b8:d5:3d:25:8d:64:37: 45:01:0a:0c:a9:63:d2:45:28:e8:64:75:b5:83:fa: a8:8d:18:b1:9a:d9:12:bd:2e:1e:70:09:9d:c6:18: 3c:a5:7c:ee:0b:5c:63:d7:62:7e:b8:01:e1:b6:49: 33:53:77:f3:d3:35:76:e6:82:d5:ec:bc:03:dc:c9: 45:6c:b3:2e:0f:42:2e:70:9c:4e:96:10:14:4c:d8: 49:73:39:32:65:44:27:9a:76:bd:0b:5c:06:67:61: 4c:6b:f7:66:7b:7f:d4:93:60:43:38:9a:4d:73:09: a8:bf:7a:aa:4a:2a:ec:9b:de:3f:e5:39:72:89:63: 38:6e:4e:4f:3a:7b:10:b3:ec:38:d7:ac:6a:bf:16: 82:a4:db:be:6e:56:1c:9a:1a:76:b1:83:b0:97:1c: f3:58:63:87:0b:56:51:67:e6:58:fc:33:0f:4e:cc: 31:5b:77:e0:f9:9f:09:8f:b7:6a:39:b6:3c:80:38: 24:01:6b:dd:26:65:ba:7d:a5:ef:ac:eb:31:e6:f6: 2e:2b:1b:fb:83:1b:c9:0e:2a:d6:7f:5a:5d:bd:4b: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:B7:08:E3:5B:84:A3:A8:7A:6F:78:18:51:FD:37:01:64:99:D8 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bf:dc:5f:5b:ea:bd:67:ae:11:b7:81:d4:b2:d5:33:26:b6: 4b:27:50:ff:f9:5e:e5:d5:55:35:bf:79:df:30:7f:c4:4d:a8: 92:e0:58:48:d4:45:41:f8:46:49:94:ac:e1:ab:65:86:a6:ce: 2b:7b:77:c2:3e:66:8a:b4:be:b5:48:d2:39:5b:2a:f9:aa:3a: b5:71:f7:87:3d:4f:1b:9b:e0:f8:e3:69:9e:b7:e8:fa:63:6b: da:8f:8d:97:51:05:2a:39:bd:3a:3f:0e:17:bd:ae:14:a4:eb: 52:56:e0:1e:f7:f7:58:f7:4c:b1:fc:99:6b:33:b4:fc:e1:df: 85:0f:cc:b8:95:88:40:c5:18:78:a7:f9:ce:9a:5d:8c:4a:71: 17:95:c3:52:d5:78:59:91:a3:d3:71:a9:b6:1d:40:8a:6b:bd: 28:55:64:00:08:e0:b6:bb:46:43:c0:74:4b:49:87:45:1b:08: 43:69:aa:74:22:a1:55:bb:64:24:b2:57:f9:4e:ed:8b:0f:b5: f1:b6:06:be:4b:72:da:d0:89:2d:5e:04:38:cb:bd:83:47:93: de:95:93:a3:a3:5e:0f:e4:11:79:25:84:02:37:6a:dc:0a:ea: c3:df:2d:a6:ba:45:b4:3f:94:81:05:3d:4b:74:54:f7:14:06: 6f:89:0b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/A65ynJUyHP81GmdWcYqUIfqDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTEyMDUxNTU1MDZaFw0yNTEyMDkwMTMyMDZaMDMxMTAvBgNV BAMTKDNGRDJCNzA4RTM1Qjg0QTNBODdBNkY3ODE4NTFGRDM3MDE2NDk5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0F0H5yvgzJBA6tY5aw2Cn03Fp xtA+LVMSrvgF5emj/k+O07couNU9JY1kN0UBCgypY9JFKOhkdbWD+qiNGLGa2RK9 Lh5wCZ3GGDylfO4LXGPXYn64AeG2STNTd/PTNXbmgtXsvAPcyUVssy4PQi5wnE6W EBRM2ElzOTJlRCeadr0LXAZnYUxr92Z7f9STYEM4mk1zCai/eqpKKuyb3j/lOXKJ YzhuTk86exCz7DjXrGq/FoKk275uVhyaGnaxg7CXHPNYY4cLVlFn5lj8Mw9OzDFb d+D5nwmPt2o5tjyAOCQBa90mZbp9pe+s6zHm9i4rG/uDG8kOKtZ/Wl29S95DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP9K3CONbhKOoem94GFH9NwFkmdgwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq/3F9b6r1nrhG3gdSy1TMmtksnUP/5XuXV VTW/ed8wf8RNqJLgWEjURUH4RkmUrOGrZYamzit7d8I+Zoq0vrVI0jlbKvmqOrVx 94c9Txub4PjjaZ636Ppja9qPjZdRBSo5vTo/Dhe9rhSk61JW4B7391j3TLH8mWsz tPzh34UPzLiViEDFGHin+c6aXYxKcReVw1LVeFmRo9NxqbYdQIprvShVZAAI4La7 RkPAdEtJh0UbCENpqnQioVW7ZCSyV/lO7YsPtfG2Br5LctrQiS1eBDjLvYNHk96V k6OjXg/kEXklhAI3atwK6sPfLaa6RbQ/lIEFPUt0VPcUBm+JC2Q= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:03 2025 by rpki-client