This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: yx/p99Y18Pz2Xlm9430APzL/gAEFW1Y8YEw8qpmGftM= Subject key identifier: 9C:B5:26:D5:82:2B:DB:FE:08:0A:CD:58:F7:62:80:8F:A1:F1:00:DD Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 7117613627F9ABAC2845EFACEB7C722AD7D16F6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 0239 Signing time: Fri 05 Dec 2025 15:30:00 +0000 Manifest this update: Fri 05 Dec 2025 15:25:00 +0000 Manifest next update: Tue 09 Dec 2025 01:41:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: RZDfvmY0EGDCyM3dZVKyIJXW5QnIZbJ2Nn092uAOMg0=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:17:61:36:27:f9:ab:ac:28:45:ef:ac:eb:7c:72:2a:d7:d1:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Dec 5 15:25:00 2025 GMT Not After : Dec 9 01:41:00 2025 GMT Subject: CN=9CB526D5822BDBFE080ACD58F762808FA1F100DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:77:3d:43:56:73:5d:1d:97:38:12:82:c9: e9:bd:4e:e5:23:23:33:6c:3a:e8:6e:0d:35:c5:eb: 25:80:35:ad:c4:f4:48:6e:ed:e0:6d:bc:5f:b7:50: 1b:8d:ff:b9:22:2d:0c:c8:de:bf:fb:7c:6a:8a:d0: b1:17:e2:38:f8:b2:b9:10:ae:ed:96:f8:16:b0:f4: 40:64:4d:82:89:e0:aa:8a:87:ed:f2:f5:cf:cd:f6: 8b:14:05:a4:57:c4:f0:74:5c:98:c1:9c:bf:2d:4b: 49:41:5d:3f:10:85:e2:70:b3:df:97:8f:ca:dc:ce: 64:29:46:a8:69:df:36:70:84:a1:b4:26:70:71:93: d1:be:76:5a:8d:ef:c9:29:b8:6f:d5:a3:c7:bf:eb: 37:2e:93:bb:8f:19:cf:68:35:94:9b:88:24:43:b9: 79:80:7d:89:9b:72:61:89:51:41:29:e7:cc:19:ce: c2:73:f7:06:b9:1e:7e:46:fa:70:c1:66:b4:67:f4: 85:21:67:18:41:5f:52:05:67:88:d3:b5:96:9c:e0: b9:d2:e7:bf:0f:6b:ed:cc:b6:25:e6:37:90:28:4b: ca:37:3c:4a:49:8b:e6:2d:5f:8b:95:ef:c4:3e:2a: 3b:f4:68:30:15:55:02:78:b1:73:d5:80:16:27:3f: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:26:D5:82:2B:DB:FE:08:0A:CD:58:F7:62:80:8F:A1:F1:00:DD X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:6a:22:88:8e:5d:55:e5:b0:fc:44:6d:cb:d6:dd:87:7a: a6:92:ee:8e:b9:cc:ef:10:af:a3:d3:96:15:86:f3:d4:ee:a5: c5:01:ba:38:74:a9:6c:36:7d:3f:53:90:60:39:7e:c8:c5:85: e2:f0:db:ec:41:ee:9b:3c:1f:3e:c4:1f:80:14:d7:80:b9:9d: fd:45:3e:f3:d1:81:ca:ff:72:cb:fd:d5:0e:93:63:ee:17:da: 25:64:1c:3a:03:9c:1a:f7:e0:12:0a:78:31:29:b3:b1:85:9c: b8:30:52:5c:fc:e3:f9:c5:32:e6:c0:99:20:eb:a8:c0:ae:b9: 32:27:4a:38:f8:23:7f:56:72:d1:96:b4:87:73:c4:55:e7:f6: 74:e3:94:cb:0d:3d:fa:6f:bb:34:31:d3:a9:3e:b7:31:d6:c8: af:d0:3f:94:f9:6b:50:83:b1:c9:a0:2b:b3:02:2e:ba:dd:6e: 24:72:45:5c:fa:04:56:8c:9d:ff:6a:94:ea:da:52:7e:f1:7c: 28:e1:de:05:67:95:95:5d:ca:a0:33:96:85:c5:7d:88:d0:19: 8f:d3:ff:97:19:8f:9e:06:2b:af:9d:9d:42:44:10:74:fe:61: 99:a0:30:a8:14:21:37:e0:f1:e9:5f:05:60:24:bb:eb:b8:92: 99:eb:5d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRdhNif5q6woRe+s63xyKtfRb2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTEyMDUxNTI1MDBaFw0yNTEyMDkwMTQxMDBaMDMxMTAvBgNV BAMTKDlDQjUyNkQ1ODIyQkRCRkUwODBBQ0Q1OEY3NjI4MDhGQTFGMTAwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWXc9Q1ZzXR2XOBKCyem9TuUj IzNsOuhuDTXF6yWANa3E9Ehu7eBtvF+3UBuN/7kiLQzI3r/7fGqK0LEX4jj4srkQ ru2W+Baw9EBkTYKJ4KqKh+3y9c/N9osUBaRXxPB0XJjBnL8tS0lBXT8QheJws9+X j8rczmQpRqhp3zZwhKG0JnBxk9G+dlqN78kpuG/Vo8e/6zcuk7uPGc9oNZSbiCRD uXmAfYmbcmGJUUEp58wZzsJz9wa5Hn5G+nDBZrRn9IUhZxhBX1IFZ4jTtZac4LnS 578Pa+3MtiXmN5AoS8o3PEpJi+YtX4uV78Q+Kjv0aDAVVQJ4sXPVgBYnP/SVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLUm1YIr2/4ICs1Y92KAj6HxAN0wHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqaaiKIjl1V5bD8RG3L1t2HeqaS7o65zO8Q r6PTlhWG89TupcUBujh0qWw2fT9TkGA5fsjFheLw2+xB7ps8Hz7EH4AU14C5nf1F PvPRgcr/csv91Q6TY+4X2iVkHDoDnBr34BIKeDEps7GFnLgwUlz84/nFMubAmSDr qMCuuTInSjj4I39WctGWtIdzxFXn9nTjlMsNPfpvuzQx06k+tzHWyK/QP5T5a1CD scmgK7MCLrrdbiRyRVz6BFaMnf9qlOraUn7xfCjh3gVnlZVdyqAzloXFfYjQGY/T /5cZj54GK6+dnUJEEHT+YZmgMKgUITfg8elfBWAku+u4kpnrXec= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:22 2025 by rpki-client