This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft File: 9E6AD12E8763F68692055BC4EE5A1741D489D240.mft (raw, json) Hash identifier: OXAmGdCGT4vv+JnEHZBm0OjzhN0PH9Uq3+gDihlbQhs= Subject key identifier: 34:C0:AB:6A:4E:E4:E3:A9:A7:23:AA:1D:D0:FB:C0:07:5D:66:AC:40 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 024E27910DECCA64F697DC4929503DC96BA508F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft Manifest number: 014E Signing time: Fri 05 Dec 2025 12:12:09 +0000 Manifest this update: Fri 05 Dec 2025 12:07:09 +0000 Manifest next update: Mon 08 Dec 2025 18:17:09 +0000 Files and hashes: 1: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo=) 2: 9E6AD12E8763F68692055BC4EE5A1741D489D240.crl (hash: i9SreFXOVVS58chFT+XW90b7iSN+RscctW/M5JmOeKM=) 3: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: Pu8JRhFp9Ytx+ko3+34MhGiKzNpbqOoP8zXRhQdIFW8=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Jq8yXQh2Quimw2J5Di1Jpnv+kf1Drg9qN3sT7DolU0U=) 5: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: XewhVGdMZGfa1gubSokKY6kMLA2RRqqki4nl2Mtbjwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4e:27:91:0d:ec:ca:64:f6:97:dc:49:29:50:3d:c9:6b:a5:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Dec 5 12:07:09 2025 GMT Not After : Dec 8 18:17:09 2025 GMT Subject: CN=34C0AB6A4EE4E3A9A723AA1DD0FBC0075D66AC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:c1:2d:8c:96:a8:fb:ad:b4:40:80:53:40: 0f:f2:d6:a6:0e:0b:4d:b1:44:ab:f0:a6:eb:87:34: e7:74:45:55:5e:a5:68:a3:16:56:49:e5:b0:be:bd: 7e:dc:c7:a8:d7:b7:e0:68:e4:21:89:d4:47:ba:bd: fb:f4:ea:7a:d5:30:7c:91:15:aa:4b:9a:97:c6:07: 4e:b7:8f:d7:2e:4e:88:cd:4b:76:9a:2d:39:ff:1f: 48:22:2b:a5:b2:4e:f1:08:1c:75:23:7b:9d:ae:01: 31:83:22:f5:2f:17:6b:22:51:a5:b1:40:ae:bd:a5: bd:5c:77:bc:d9:f9:2c:d4:13:e8:0c:c1:3c:4e:fb: ff:19:b4:24:58:64:ca:7a:8a:a7:04:dc:2d:c7:af: b0:c3:9f:73:eb:41:f0:1d:3b:3b:d6:03:4d:50:31: 67:21:63:10:63:a3:7c:81:91:3a:b8:7b:1d:ba:d8: 24:0f:68:f5:25:3a:12:88:7e:cb:1a:26:25:56:82: 21:b3:02:01:13:0c:da:93:d2:53:6c:e7:36:93:a0: 7f:8f:62:a2:26:9f:96:29:c4:dd:80:f6:27:2c:d5: 1d:ce:c5:23:da:1b:b4:0f:a1:0d:69:02:df:6e:d3: db:ea:ab:52:2b:4c:f8:8f:2e:06:ce:48:4e:58:3c: 51:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:AB:6A:4E:E4:E3:A9:A7:23:AA:1D:D0:FB:C0:07:5D:66:AC:40 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:29:fb:20:d8:df:ef:88:c9:26:b2:be:79:c2:af:cc:e9:ab: 31:55:88:3c:22:50:43:94:ab:1b:ec:0b:93:c0:15:62:a6:a7: 0c:49:70:e4:f7:db:f7:80:13:8d:b6:ca:c1:28:cf:13:58:1b: f2:3a:0e:86:4a:06:25:71:f7:02:1d:b4:a9:eb:fc:05:e1:58: c5:85:85:2b:56:28:b7:ad:28:b6:f5:8e:50:c9:e2:a5:3b:87: 90:10:da:d5:b3:3d:e5:3c:2d:a1:2c:4b:71:ab:b2:56:00:d7: 2b:01:9b:b9:dd:99:92:96:2e:a4:1c:d5:d7:70:7a:71:27:9e: f3:a9:5c:8c:53:a4:3e:a5:fd:33:cc:8f:fe:a3:d6:b5:b2:e9: 73:14:c7:4e:49:27:b9:0c:3b:ba:42:b1:8d:81:33:9b:57:ef: 31:78:3d:a6:ea:86:9b:7e:d6:59:59:b3:77:d2:3a:cb:e8:cc: 01:c2:8d:0f:70:63:a2:a9:71:f7:df:8a:4b:05:b7:10:4c:63: 6b:7a:d9:2c:15:09:c0:86:0a:14:ff:53:1a:a1:3f:4a:42:6d: 36:22:4d:58:c0:2a:1b:d0:59:9e:7e:1f:27:4d:5c:f1:09:fe: 4a:6e:11:c6:8c:61:e1:22:f7:dc:ef:52:39:24:1b:63:17:65: 53:59:bc:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk4nkQ3symT2l9xJKVA9yWulCPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTEyMDUxMjA3MDlaFw0yNTEyMDgxODE3MDlaMDMxMTAvBgNV BAMTKDM0QzBBQjZBNEVFNEUzQTlBNzIzQUExREQwRkJDMDA3NUQ2NkFDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCcEtjJao+620QIBTQA/y1qYO C02xRKvwpuuHNOd0RVVepWijFlZJ5bC+vX7cx6jXt+Bo5CGJ1Ee6vfv06nrVMHyR FapLmpfGB063j9cuTojNS3aaLTn/H0giK6WyTvEIHHUje52uATGDIvUvF2siUaWx QK69pb1cd7zZ+SzUE+gMwTxO+/8ZtCRYZMp6iqcE3C3Hr7DDn3PrQfAdOzvWA01Q MWchYxBjo3yBkTq4ex262CQPaPUlOhKIfssaJiVWgiGzAgETDNqT0lNs5zaToH+P YqImn5YpxN2A9ics1R3OxSPaG7QPoQ1pAt9u09vqq1IrTPiPLgbOSE5YPFEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNMCrak7k46mnI6od0PvAB11mrEAwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3 NDFENDg5RDI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJop+yDY3++IySayvnnCr8zpqzFViDwiUEOU qxvsC5PAFWKmpwxJcOT32/eAE422ysEozxNYG/I6DoZKBiVx9wIdtKnr/AXhWMWF hStWKLetKLb1jlDJ4qU7h5AQ2tWzPeU8LaEsS3GrslYA1ysBm7ndmZKWLqQc1ddw enEnnvOpXIxTpD6l/TPMj/6j1rWy6XMUx05JJ7kMO7pCsY2BM5tX7zF4Pabqhpt+ 1llZs3fSOsvozAHCjQ9wY6KpcfffiksFtxBMY2t62SwVCcCGChT/UxqhP0pCbTYi TVjAKhvQWZ5+HydNXPEJ/kpuEcaMYeEi99zvUjkkG2MXZVNZvIE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:53 2025 by rpki-client