This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft File: 9E6AD12E8763F68692055BC4EE5A1741D489D240.mft (raw, json) Hash identifier: xEI6PURylo+Y3LIONOiDOu9ZCd7Ejm4Z6kQa167qPSA= Subject key identifier: 86:E9:83:C7:B1:C0:6D:BE:FF:BD:F6:7B:99:E1:16:38:F1:08:48:80 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 33FD11566A73A168C1FAEAF494A37BAF8943571D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft Manifest number: 0153 Signing time: Tue 16 Dec 2025 05:52:08 +0000 Manifest this update: Tue 16 Dec 2025 05:47:08 +0000 Manifest next update: Fri 19 Dec 2025 08:30:08 +0000 Files and hashes: 1: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo=) 2: 9E6AD12E8763F68692055BC4EE5A1741D489D240.crl (hash: /hVDGXjShi2oOgXhZIoh/g9775/GYG9e5gyterJRjY8=) 3: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: XewhVGdMZGfa1gubSokKY6kMLA2RRqqki4nl2Mtbjwk=) 4: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: Pu8JRhFp9Ytx+ko3+34MhGiKzNpbqOoP8zXRhQdIFW8=) 5: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Jq8yXQh2Quimw2J5Di1Jpnv+kf1Drg9qN3sT7DolU0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 08:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fd:11:56:6a:73:a1:68:c1:fa:ea:f4:94:a3:7b:af:89:43:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Dec 16 05:47:08 2025 GMT Not After : Dec 19 08:30:08 2025 GMT Subject: CN=86E983C7B1C06DBEFFBDF67B99E11638F1084880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:8e:0a:87:e5:b1:f2:7f:46:63:26:f6:31: 1a:fe:b3:54:81:af:2a:8c:62:e8:2b:23:01:22:6d: 6c:c0:18:1a:fc:05:0b:6f:c9:a5:aa:33:89:c6:1c: 96:e5:e5:56:45:fe:99:3a:94:48:ee:50:46:81:3b: ec:86:d7:1c:ab:30:bc:a3:e3:6d:48:46:b4:a4:34: 82:0d:2d:5b:3e:dc:f9:56:87:5f:7b:ba:a5:4b:31: 60:93:cd:b3:47:b0:c6:82:27:a4:d1:3f:d1:be:10: b8:26:05:65:c4:b3:17:be:ff:ab:19:62:f7:ad:c7: 54:1e:ad:2a:b6:44:6b:45:b8:06:7f:fe:db:c0:a1: ee:a2:e0:d7:c5:e9:d8:a2:b4:a9:75:03:ad:f9:4a: 8c:45:88:47:44:41:7d:22:b1:41:c5:3d:b8:05:20: 52:3e:9e:1b:63:9b:cd:33:aa:ed:82:41:43:7d:8c: 3a:e6:eb:f5:c2:86:35:fe:73:49:e3:cc:7c:d6:e3: 1d:0b:61:b0:76:2f:b7:d5:e1:6a:1e:c0:29:f0:c3: 21:bf:43:a1:9b:b3:02:77:bd:9e:5f:97:46:86:98: 90:b8:df:e3:64:16:c6:b4:56:ff:7a:dd:18:49:d3: 3b:5c:79:99:21:66:7c:96:93:4d:c9:cb:41:b7:a7: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:83:C7:B1:C0:6D:BE:FF:BD:F6:7B:99:E1:16:38:F1:08:48:80 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:06:99:37:7a:71:23:c9:43:79:c2:13:34:48:d1:bb:3e:38: fa:8f:d7:45:4d:33:a0:e5:62:56:fd:cc:e7:a2:4d:ac:f1:13: 51:40:d6:9e:d1:01:bf:d9:e1:3e:a3:fe:0c:31:85:8e:8f:58: 19:fb:ac:56:36:e5:d1:75:73:16:4a:a5:6f:1e:d4:31:ac:f0: bf:ee:19:4e:28:ed:1d:c9:6e:e3:f4:3b:ea:db:52:22:f8:8e: ce:d4:a8:13:c2:27:72:8a:93:bd:d6:38:de:7d:dd:6a:7b:2a: 93:19:76:c4:34:73:e9:52:66:14:33:15:ff:03:45:24:d9:1f: 13:ec:49:06:a4:ff:75:09:c9:46:ec:47:55:7d:9d:4a:a6:d6: c4:09:c3:8d:97:36:a7:b3:9f:bb:de:5e:b9:a6:7d:1c:22:f6: 73:c9:f7:6c:6e:0e:a3:61:fb:0a:4c:06:f1:fd:39:d2:26:4d: 23:af:a6:8a:7a:be:8c:0f:5e:54:7d:ba:42:bd:cc:e7:5d:a8: c6:e8:ab:c3:c9:cd:60:af:59:e1:60:d6:7d:63:19:64:c0:3f: ef:0f:34:55:18:99:3a:e6:ce:08:62:bb:6a:4f:d0:6c:12:d5: c9:58:5c:61:41:c7:31:cb:1c:f3:a6:ac:1f:87:21:16:1f:a7: 2d:83:3a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/0RVmpzoWjB+ur0lKN7r4lDVx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTEyMTYwNTQ3MDhaFw0yNTEyMTkwODMwMDhaMDMxMTAvBgNV BAMTKDg2RTk4M0M3QjFDMDZEQkVGRkJERjY3Qjk5RTExNjM4RjEwODQ4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1I4Kh+Wx8n9GYyb2MRr+s1SB ryqMYugrIwEibWzAGBr8BQtvyaWqM4nGHJbl5VZF/pk6lEjuUEaBO+yG1xyrMLyj 421IRrSkNIINLVs+3PlWh197uqVLMWCTzbNHsMaCJ6TRP9G+ELgmBWXEsxe+/6sZ Yvetx1QerSq2RGtFuAZ//tvAoe6i4NfF6diitKl1A635SoxFiEdEQX0isUHFPbgF IFI+nhtjm80zqu2CQUN9jDrm6/XChjX+c0njzHzW4x0LYbB2L7fV4WoewCnwwyG/ Q6GbswJ3vZ5fl0aGmJC43+NkFsa0Vv963RhJ0ztceZkhZnyWk03Jy0G3p8v5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhumDx7HAbb7/vfZ7meEWOPEISIAwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3 NDFENDg5RDI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEGmTd6cSPJQ3nCEzRI0bs+OPqP10VNM6Dl Ylb9zOeiTazxE1FA1p7RAb/Z4T6j/gwxhY6PWBn7rFY25dF1cxZKpW8e1DGs8L/u GU4o7R3JbuP0O+rbUiL4js7UqBPCJ3KKk73WON593Wp7KpMZdsQ0c+lSZhQzFf8D RSTZHxPsSQak/3UJyUbsR1V9nUqm1sQJw42XNqezn7veXrmmfRwi9nPJ92xuDqNh +wpMBvH9OdImTSOvpop6vowPXlR9ukK9zOddqMboq8PJzWCvWeFg1n1jGWTAP+8P NFUYmTrmzghiu2pP0GwS1clYXGFBxzHLHPOmrB+HIRYfpy2DOiM= -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:46 2025 by rpki-client