This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: YgfTczsUxUIdUsUqM/ipflTPfHn8rgW3iyf5wRulJMk= Subject key identifier: 98:59:0B:A6:7B:80:0D:02:B6:FA:D2:AA:35:C2:47:86:B0:EF:BC:89 Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 0CEE74A7C6DC60E84535E3D4F8548713EAEF3FBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 0473 Signing time: Sat 06 Dec 2025 23:42:08 +0000 Manifest this update: Sat 06 Dec 2025 23:37:08 +0000 Manifest next update: Wed 10 Dec 2025 00:38:08 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: bn95x1CLz2ExENurLe7J2SgvZrUjBisi6cI1AAEddcU=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: J74GMsLNIigAGgTpec6v5TMTTP38/QRxrBH/Eq2Xhk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ee:74:a7:c6:dc:60:e8:45:35:e3:d4:f8:54:87:13:ea:ef:3f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Dec 6 23:37:08 2025 GMT Not After : Dec 10 00:38:08 2025 GMT Subject: CN=98590BA67B800D02B6FAD2AA35C24786B0EFBC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:3a:4c:1d:f2:d9:83:41:d0:4c:eb:fa:9f: ea:4d:b6:fa:6e:1d:18:ca:8b:29:26:e5:41:1c:7e: 2d:47:0c:10:fd:ac:9b:aa:9c:6b:0d:9a:f9:30:a0: a3:bb:08:c8:3f:5c:cd:79:99:0e:d3:ab:34:46:e2: 2e:7b:99:89:f9:3b:72:e5:10:12:58:90:07:67:83: 92:3d:b1:a5:bd:99:72:42:f6:b4:45:fb:85:4a:49: 44:20:23:82:9c:e8:78:30:45:07:be:e2:99:25:5b: 73:d3:77:6d:37:f4:ec:44:33:95:a2:4b:e3:06:19: 78:48:87:02:35:70:f9:fe:19:30:e9:09:4b:9c:dc: b9:98:9b:70:88:12:13:5a:e9:db:e0:d7:de:5d:e2: 4a:bc:6b:76:d4:52:a9:ea:f6:b0:65:a2:a7:71:be: 3c:ca:d1:15:bd:3a:12:bf:04:92:a7:f5:63:53:fb: 36:b3:41:66:ea:e0:1d:be:50:a7:60:d2:0d:a8:cb: 5b:ad:69:ed:55:c9:b8:ef:3e:23:30:31:7e:fb:e8: 15:90:db:a9:73:46:e0:8b:15:4f:03:35:f4:fa:9d: b5:c2:e5:a3:58:84:b8:42:88:3f:f1:51:70:89:d8: f2:f6:37:b1:d9:da:19:d1:89:be:45:6f:4c:49:5d: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:59:0B:A6:7B:80:0D:02:B6:FA:D2:AA:35:C2:47:86:B0:EF:BC:89 X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:f0:10:42:d2:03:d6:ee:fb:7f:22:a2:76:f3:e9:2f:3c: ab:0c:cc:e8:fc:83:da:6b:b0:ad:47:1f:db:75:1f:9a:71:cf: aa:1e:c9:55:78:2a:1c:2b:58:1b:ed:5f:2d:5d:3c:6a:26:dd: 03:0c:af:7b:86:31:de:db:4c:9e:95:43:86:ef:79:01:14:ea: 26:bb:2c:c9:a4:9b:36:8a:cb:2c:ed:00:0f:b8:95:cb:d8:06: e1:06:fa:51:fb:8d:d8:a7:49:c2:b3:cc:6d:b4:86:d8:62:34: 65:28:a6:d5:f3:fc:65:2e:14:bd:44:af:7e:f8:78:12:c0:4a: aa:ea:16:04:2f:a7:34:1a:a5:00:ac:ae:1e:2b:c6:e5:33:e0: 14:c0:94:a0:0e:44:b1:e6:b8:ae:89:e1:89:5b:1a:d6:4f:c9: 27:cc:8a:0c:e6:bf:28:e3:85:6d:30:a2:5c:b5:b9:83:55:b4: 10:21:f5:73:5c:c7:cf:bc:e8:bc:83:83:a0:bd:5e:50:de:17: 78:cc:1b:89:d7:8b:ef:82:fa:d5:d0:a9:d8:f2:34:f6:d8:4d: 4c:7f:96:15:37:4f:e4:a1:9a:18:05:0c:69:34:a4:eb:26:b6: d0:52:b3:f5:e9:60:54:03:42:68:b2:9c:a8:8f:ee:1a:c3:84: 88:d6:85:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDO50p8bcYOhFNePU+FSHE+rvP7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTEyMDYyMzM3MDhaFw0yNTEyMTAwMDM4MDhaMDMxMTAvBgNV BAMTKDk4NTkwQkE2N0I4MDBEMDJCNkZBRDJBQTM1QzI0Nzg2QjBFRkJDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLjpMHfLZg0HQTOv6n+pNtvpu HRjKiykm5UEcfi1HDBD9rJuqnGsNmvkwoKO7CMg/XM15mQ7TqzRG4i57mYn5O3Ll EBJYkAdng5I9saW9mXJC9rRF+4VKSUQgI4Kc6HgwRQe+4pklW3PTd2039OxEM5Wi S+MGGXhIhwI1cPn+GTDpCUuc3LmYm3CIEhNa6dvg195d4kq8a3bUUqnq9rBloqdx vjzK0RW9OhK/BJKn9WNT+zazQWbq4B2+UKdg0g2oy1utae1VybjvPiMwMX776BWQ 26lzRuCLFU8DNfT6nbXC5aNYhLhCiD/xUXCJ2PL2N7HZ2hnRib5Fb0xJXfI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFkLpnuADQK2+tKqNcJHhrDvvIkwHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbv8BBC0gPW7vt/IqJ28+kvPKsMzOj8g9pr sK1HH9t1H5pxz6oeyVV4KhwrWBvtXy1dPGom3QMMr3uGMd7bTJ6VQ4bveQEU6ia7 LMmkmzaKyyztAA+4lcvYBuEG+lH7jdinScKzzG20hthiNGUoptXz/GUuFL1Er374 eBLASqrqFgQvpzQapQCsrh4rxuUz4BTAlKAORLHmuK6J4YlbGtZPySfMigzmvyjj hW0woly1uYNVtBAh9XNcx8+86LyDg6C9XlDeF3jMG4nXi++C+tXQqdjyNPbYTUx/ lhU3T+ShmhgFDGk0pOsmttBSs/XpYFQDQmiynKiP7hrDhIjWhbU= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:09 2025 by rpki-client