This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json) Hash identifier: dBIwCokbpYLq7jF0YW9UzFW1/rv8LqM7X4Dgt70ggIU= Subject key identifier: 67:37:34:6D:95:DD:FF:68:3A:82:BE:FD:D4:8C:EF:83:09:99:F4:23 Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 2A4C6C0FC0273BDF83F087F90DA43B249990D459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft Manifest number: DA Signing time: Fri 05 Dec 2025 12:41:23 +0000 Manifest this update: Fri 05 Dec 2025 12:36:23 +0000 Manifest next update: Mon 08 Dec 2025 22:29:23 +0000 Files and hashes: 1: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: zK90jmviS5skAn/jDcVMI3Aok7WFlX9b62aRW8Ax9FY=) 2: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: eve2icSh8Fu8Srb/W5YB87PX01R4XsRxqoskugxQLJU=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4c:6c:0f:c0:27:3b:df:83:f0:87:f9:0d:a4:3b:24:99:90:d4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Dec 5 12:36:23 2025 GMT Not After : Dec 8 22:29:23 2025 GMT Subject: CN=6737346D95DDFF683A82BEFDD48CEF830999F423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:78:51:09:9b:1f:d5:d3:a1:e1:55:5a:c9: fb:89:b0:bf:14:68:b1:77:7f:5d:01:e2:e6:42:4a: bb:a3:cf:94:0a:81:32:61:a4:a9:8d:d3:24:71:00: 2d:9d:3b:07:10:e0:d8:76:b5:26:3d:7f:c7:88:b0: 03:8f:43:ba:7a:98:99:c7:c8:ac:69:44:7e:ea:70: 5b:cb:ce:2a:72:f9:c1:c8:ce:d0:e5:a8:79:6a:3c: dd:17:48:40:41:aa:2b:28:dc:ef:cd:56:d0:6b:c5: 2d:fa:0c:bf:f0:1b:34:89:00:db:f3:01:73:bf:bd: 7d:52:46:fa:29:d5:ac:92:b4:a9:c9:a3:cb:e1:d9: 40:1a:9b:bd:91:b9:d7:b8:87:ae:6f:88:ce:04:9a: 6f:ea:ff:f2:ed:30:cb:aa:6d:4d:5e:4a:7d:98:8a: fd:48:79:50:c8:87:87:53:8a:a8:c4:64:ab:37:61: a4:b8:ff:a2:f8:c4:c0:db:54:f8:14:6c:b2:31:26: 84:fa:46:4e:7e:89:42:91:5a:0c:fe:c5:fd:3b:7a: 6b:9c:a9:d5:69:33:34:f0:15:b9:cb:a8:ee:7d:34: 0a:1e:7a:a1:04:8f:ec:60:6c:7b:3c:71:cc:36:fb: 69:71:6f:19:8d:75:df:00:59:18:4d:98:a5:58:a0: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:34:6D:95:DD:FF:68:3A:82:BE:FD:D4:8C:EF:83:09:99:F4:23 X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d6:b6:65:fc:b4:7f:92:af:e0:33:97:da:2f:53:7d:41:e3: e1:14:6f:a9:f6:74:fb:9f:c2:88:c2:16:03:a7:92:c4:a6:b1: e4:bd:e5:3d:4c:47:1e:59:7c:62:03:25:78:63:fe:9a:5a:54: b0:2c:b1:f0:92:8b:61:a8:7e:2f:c9:46:1d:06:e3:49:3a:7c: 98:0d:f0:51:c1:e0:2c:8a:36:e8:88:3b:79:12:71:02:f5:dc: 82:b1:c5:bd:9d:56:1e:ef:48:d7:e5:32:5a:7e:f7:07:29:47: f3:44:13:f2:dc:68:76:bc:16:78:11:7d:d3:7f:f2:d1:f4:1b: 6c:f4:aa:c6:70:ed:77:6c:cb:1e:47:50:6d:ba:ab:e0:d6:03: 45:88:ca:2b:70:99:b4:b8:41:ab:a8:05:79:22:de:16:fe:83: 98:dc:e6:cf:0e:7d:a8:51:fd:45:ad:8c:f1:d8:90:53:56:02: 38:1e:54:bd:22:19:46:32:02:e7:28:9c:d8:49:ab:ec:2c:88: a5:07:5d:5b:c6:ec:db:bf:80:85:92:5c:bb:ee:41:bb:dc:50: 66:41:49:56:75:27:f1:f5:97:53:f3:30:dd:b7:92:34:0a:ba: 33:8a:00:22:64:1c:e0:5d:ca:5d:6b:7a:69:5b:dd:b4:ec:01: 0d:5e:d3:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkxsD8AnO9+D8If5DaQ7JJmQ1FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTEyMDUxMjM2MjNaFw0yNTEyMDgyMjI5MjNaMDMxMTAvBgNV BAMTKDY3MzczNDZEOTVEREZGNjgzQTgyQkVGREQ0OENFRjgzMDk5OUY0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecHhRCZsf1dOh4VVayfuJsL8U aLF3f10B4uZCSrujz5QKgTJhpKmN0yRxAC2dOwcQ4Nh2tSY9f8eIsAOPQ7p6mJnH yKxpRH7qcFvLzipy+cHIztDlqHlqPN0XSEBBqiso3O/NVtBrxS36DL/wGzSJANvz AXO/vX1SRvop1ayStKnJo8vh2UAam72Rude4h65viM4Emm/q//LtMMuqbU1eSn2Y iv1IeVDIh4dTiqjEZKs3YaS4/6L4xMDbVPgUbLIxJoT6Rk5+iUKRWgz+xf07emuc qdVpMzTwFbnLqO59NAoeeqEEj+xgbHs8ccw2+2lxbxmNdd8AWRhNmKVYoPdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzc0bZXd/2g6gr791IzvgwmZ9CMwHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMy RjYzMUM4RDc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrWtmX8tH+Sr+Azl9ovU31B4+EUb6n2dPuf wojCFgOnksSmseS95T1MRx5ZfGIDJXhj/ppaVLAssfCSi2Gofi/JRh0G40k6fJgN 8FHB4CyKNuiIO3kScQL13IKxxb2dVh7vSNflMlp+9wcpR/NEE/LcaHa8FngRfdN/ 8tH0G2z0qsZw7Xdsyx5HUG26q+DWA0WIyitwmbS4QauoBXki3hb+g5jc5s8OfahR /UWtjPHYkFNWAjgeVL0iGUYyAuconNhJq+wsiKUHXVvG7Nu/gIWSXLvuQbvcUGZB SVZ1J/H1l1PzMN23kjQKujOKACJkHOBdyl1remlb3bTsAQ1e0yc= -----END CERTIFICATE-----Generated at Sun Dec 7 09:36:51 2025 by rpki-client