This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: ngL5AgZ8zDKu/gGZTzuGC7tfxKXmANCMM2bASEnGQj4= Subject key identifier: 85:F0:FD:FB:D2:17:09:E8:EA:69:1E:DF:DF:CB:8A:47:75:07:F8:E6 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 3369AFEFEC814A84704C75F0697F3329AC4EC7F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 021C Signing time: Fri 05 Dec 2025 21:01:42 +0000 Manifest this update: Fri 05 Dec 2025 20:56:42 +0000 Manifest next update: Tue 09 Dec 2025 03:16:42 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: kYu61DpzS0SGIdEeMxQoELtwMsOLB9unMbfD0HrtUBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:69:af:ef:ec:81:4a:84:70:4c:75:f0:69:7f:33:29:ac:4e:c7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Dec 5 20:56:42 2025 GMT Not After : Dec 9 03:16:42 2025 GMT Subject: CN=85F0FDFBD21709E8EA691EDFDFCB8A477507F8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:d7:e6:66:0b:3e:51:fd:87:95:e2:3b:37: 64:70:49:91:28:f8:6f:46:2c:b3:ea:20:71:8d:39: f7:39:90:51:65:c7:6e:3b:d2:22:52:68:e7:d4:36: 1c:c2:12:70:eb:bd:c3:82:c1:78:d5:f2:ae:0f:19: 76:74:cf:43:d1:08:5e:30:e2:ad:92:df:a4:57:e9: 12:95:35:a9:67:f8:fc:dd:ff:4b:0c:01:7b:66:14: 3e:98:9a:16:b0:c6:d8:f6:14:a7:f0:3a:a3:0b:0c: fc:d9:43:8f:0c:c9:13:54:71:19:de:a5:06:a0:63: 5e:e2:e7:2f:96:c0:12:c7:12:a6:c9:dd:a8:47:c3: a0:e5:40:4d:30:7d:63:87:06:c5:4d:91:91:06:4c: 86:6f:ae:f0:66:de:a5:76:37:38:56:34:e2:02:81: 94:d7:65:59:a4:5c:c7:e5:94:c0:eb:f7:6d:1f:8c: 20:05:03:b2:a5:20:d1:16:76:42:d9:7f:90:06:48: b5:49:da:d9:37:19:9a:89:a4:d2:0a:2e:ab:84:fd: 59:66:a4:8f:dc:2f:b2:cd:a2:7a:be:2b:6e:e1:4e: b9:34:30:a4:8f:4e:e7:9d:34:94:01:30:d5:36:d0: 99:74:1f:47:b1:38:72:bd:f6:ac:91:62:42:d2:92: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:FD:FB:D2:17:09:E8:EA:69:1E:DF:DF:CB:8A:47:75:07:F8:E6 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f1:cc:e6:8c:11:93:37:76:e9:b0:47:88:1c:0e:3e:8b:bc: 4d:a9:a1:a1:e5:eb:ff:4a:14:5e:6a:41:bf:bf:e9:a1:f8:dc: aa:5f:8d:91:20:3c:f0:b9:a6:de:55:2f:33:ed:aa:58:ec:ca: cb:af:14:35:f6:67:f8:36:ea:fe:80:c9:19:4a:ba:0e:46:a1: 8c:af:d8:e4:87:79:9d:da:ea:62:79:f8:54:00:f1:45:fb:f7: 54:66:55:f9:96:48:d4:37:db:ae:3d:ee:2c:27:49:65:3c:e2: c5:7f:60:17:0b:fa:5d:e4:ed:77:33:1e:59:2b:b4:3c:bc:0b: 18:ad:34:fa:af:6a:e3:71:38:4e:4c:4c:4d:89:16:39:6f:3b: 1b:53:52:56:35:27:98:1c:a6:c8:18:21:a6:96:e3:84:e8:3a: a6:fc:ec:5d:18:4e:97:8b:4a:4b:be:3e:f9:7c:a0:3e:ac:ac: bc:32:26:96:3b:eb:6c:da:3c:08:80:da:6b:0c:58:2e:66:fe: cb:33:64:99:54:f9:86:76:6d:ae:52:4a:4d:e6:bc:99:6f:16: 05:eb:27:d9:97:61:4f:2a:47:ba:3a:37:d1:64:14:91:74:65: a1:de:6e:20:e5:45:57:92:bf:08:a4:ce:87:b2:df:c8:7c:ed: 3f:d9:8b:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2mv7+yBSoRwTHXwaX8zKaxOx/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTEyMDUyMDU2NDJaFw0yNTEyMDkwMzE2NDJaMDMxMTAvBgNV BAMTKDg1RjBGREZCRDIxNzA5RThFQTY5MUVERkRGQ0I4QTQ3NzUwN0Y4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUddfmZgs+Uf2HleI7N2RwSZEo +G9GLLPqIHGNOfc5kFFlx2470iJSaOfUNhzCEnDrvcOCwXjV8q4PGXZ0z0PRCF4w 4q2S36RX6RKVNaln+Pzd/0sMAXtmFD6Ymhawxtj2FKfwOqMLDPzZQ48MyRNUcRne pQagY17i5y+WwBLHEqbJ3ahHw6DlQE0wfWOHBsVNkZEGTIZvrvBm3qV2NzhWNOIC gZTXZVmkXMfllMDr920fjCAFA7KlINEWdkLZf5AGSLVJ2tk3GZqJpNIKLquE/Vlm pI/cL7LNonq+K27hTrk0MKSPTuedNJQBMNU20Jl0H0exOHK99qyRYkLSktm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhfD9+9IXCejqaR7f38uKR3UH+OYwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbxzOaMEZM3dumwR4gcDj6LvE2poaHl6/9K FF5qQb+/6aH43KpfjZEgPPC5pt5VLzPtqljsysuvFDX2Z/g26v6AyRlKug5GoYyv 2OSHeZ3a6mJ5+FQA8UX791RmVfmWSNQ326497iwnSWU84sV/YBcL+l3k7XczHlkr tDy8CxitNPqvauNxOE5MTE2JFjlvOxtTUlY1J5gcpsgYIaaW44ToOqb87F0YTpeL Sku+Pvl8oD6srLwyJpY762zaPAiA2msMWC5m/sszZJlU+YZ2ba5SSk3mvJlvFgXr J9mXYU8qR7o6N9FkFJF0ZaHebiDlRVeSvwikzoey38h87T/ZixM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:54 2025 by rpki-client