This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: DfN6tVkJ7Vpzm9bJyn4H4+XrlaNOX3eWZafJbmhNe7o= Subject key identifier: F3:0A:F9:46:EA:82:17:4D:62:02:BF:68:86:8A:EC:35:90:6A:74:53 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 5F4B185FE9F75F13285E146F07E890A09B514D9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: FF Signing time: Sat 06 Dec 2025 03:11:19 +0000 Manifest this update: Sat 06 Dec 2025 03:06:19 +0000 Manifest next update: Tue 09 Dec 2025 06:07:19 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 2: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 3: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 4: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: vduFTo+9CtcDpFdJs7iAsMcTjxt3If+H87IiuiU2V+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4b:18:5f:e9:f7:5f:13:28:5e:14:6f:07:e8:90:a0:9b:51:4d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Dec 6 03:06:19 2025 GMT Not After : Dec 9 06:07:19 2025 GMT Subject: CN=F30AF946EA82174D6202BF68868AEC35906A7453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:de:63:98:a4:f8:98:22:bd:26:e3:d7:d2: 53:af:43:29:1f:00:77:03:b1:e0:54:0e:42:94:cf: 0e:38:ea:27:d8:e9:5e:ca:48:33:8c:80:83:e9:ba: ae:c6:84:62:54:45:f8:67:b0:27:5c:d9:e3:69:b3: de:72:ad:c9:dc:08:1d:2e:51:d9:45:1c:d4:23:d7: a6:b5:9d:cc:4b:3f:e7:96:8d:f5:fe:0d:1f:f1:ee: 43:91:d0:3e:40:78:e2:d0:dc:d9:89:d5:f5:69:7b: 96:07:fe:c9:60:d0:5e:51:04:a5:db:8b:5b:5e:58: 8b:b5:47:95:92:45:bc:27:ca:89:ae:8a:f6:b8:b6: 5d:31:68:b0:5b:02:67:37:ef:6b:8b:70:43:3d:ff: 8d:38:37:36:b9:5e:5b:0a:31:2e:d4:20:e2:28:d4: 6e:98:f2:79:48:fd:e8:e0:e2:a1:39:41:03:e0:d4: 8e:1d:b4:74:c7:44:18:0d:b4:89:66:d5:d2:9c:a3: d2:95:97:46:8f:63:33:b6:0a:7d:d6:23:70:da:76: 42:21:ea:15:03:4b:ab:61:0b:2a:f1:e0:ad:4f:1c: c7:17:91:54:a2:47:b5:95:0d:10:e5:81:85:4f:04: 09:58:eb:cb:f9:e3:25:2a:68:8f:37:2e:e4:74:65: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0A:F9:46:EA:82:17:4D:62:02:BF:68:86:8A:EC:35:90:6A:74:53 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b5:2e:1e:0b:2e:b7:d4:cb:b1:69:03:6f:fd:ff:52:de:60: e7:1a:0e:35:5a:45:ed:54:d8:46:5d:78:a0:e3:7d:2f:86:91: db:6b:95:7d:a0:09:4d:bd:d9:dd:3c:9c:04:02:01:7c:ba:b8: ad:99:fb:d5:45:74:9d:1a:b2:c1:4f:4a:47:5f:63:27:a2:79: b9:e5:55:4e:26:e7:ac:3b:c0:c6:21:26:0f:2a:e9:08:22:63: fc:05:d1:25:a3:62:95:8c:fa:94:b8:93:af:86:aa:3f:75:ed: a2:54:0e:41:d5:1c:0e:8d:34:14:aa:2f:a8:3d:d5:4a:4e:1e: 11:63:47:e3:e0:13:60:9e:97:61:db:0e:3f:15:21:93:40:b7: e6:e3:d5:a8:13:e1:1e:5d:1b:ce:80:bc:e1:18:f6:72:64:e0: ef:e2:be:4a:d6:12:dd:d8:6a:10:0f:5c:b5:b3:07:a9:17:77: 0c:d0:e6:63:f6:4c:ee:c7:42:b9:5f:e8:85:78:6c:4f:ba:06: f9:f1:d5:3c:4f:10:99:ce:8a:28:54:38:21:b7:ff:c5:a5:40: d4:65:5b:75:bb:0c:f4:f5:02:45:ae:1f:75:28:2b:05:fd:55: b3:4c:a1:6c:53:21:c1:52:91:41:5c:97:50:1f:14:bd:77:6a: b5:b1:99:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0sYX+n3XxMoXhRvB+iQoJtRTZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTEyMDYwMzA2MTlaFw0yNTEyMDkwNjA3MTlaMDMxMTAvBgNV BAMTKEYzMEFGOTQ2RUE4MjE3NEQ2MjAyQkY2ODg2OEFFQzM1OTA2QTc0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClk95jmKT4mCK9JuPX0lOvQykf AHcDseBUDkKUzw446ifY6V7KSDOMgIPpuq7GhGJURfhnsCdc2eNps95yrcncCB0u UdlFHNQj16a1ncxLP+eWjfX+DR/x7kOR0D5AeOLQ3NmJ1fVpe5YH/slg0F5RBKXb i1teWIu1R5WSRbwnyomuiva4tl0xaLBbAmc372uLcEM9/404Nza5XlsKMS7UIOIo 1G6Y8nlI/ejg4qE5QQPg1I4dtHTHRBgNtIlm1dKco9KVl0aPYzO2Cn3WI3DadkIh 6hUDS6thCyrx4K1PHMcXkVSiR7WVDRDlgYVPBAlY68v54yUqaI83LuR0ZYs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wr5RuqCF01iAr9ohorsNZBqdFMwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANG1Lh4LLrfUy7FpA2/9/1LeYOcaDjVaRe1U 2EZdeKDjfS+GkdtrlX2gCU292d08nAQCAXy6uK2Z+9VFdJ0assFPSkdfYyeiebnl VU4m56w7wMYhJg8q6QgiY/wF0SWjYpWM+pS4k6+Gqj917aJUDkHVHA6NNBSqL6g9 1UpOHhFjR+PgE2Cel2HbDj8VIZNAt+bj1agT4R5dG86AvOEY9nJk4O/ivkrWEt3Y ahAPXLWzB6kXdwzQ5mP2TO7HQrlf6IV4bE+6Bvnx1TxPEJnOiihUOCG3/8WlQNRl W3W7DPT1AkWuH3UoKwX9VbNMoWxTIcFSkUFcl1AfFL13arWxmWk= -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:06 2025 by rpki-client