This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: 4dgeOEe7xxErzkbSLfh1NmmXA20gYuXMt2vnBaz+E/0= Subject key identifier: 70:D5:36:EA:03:82:FB:CF:8D:E5:0D:EE:1B:28:4F:8B:62:CA:48:19 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 5A1C8DCED36802E18A6A07435CE3A519DAA94039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 15:00:53 +0000 Manifest this update: Fri 05 Dec 2025 14:55:53 +0000 Manifest next update: Mon 08 Dec 2025 22:01:53 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: f6Tp5aYzEYJnpLmwpeXTfWIa/vPVSiAzxO6UJIvKlEE=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1c:8d:ce:d3:68:02:e1:8a:6a:07:43:5c:e3:a5:19:da:a9:40:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Dec 5 14:55:53 2025 GMT Not After : Dec 8 22:01:53 2025 GMT Subject: CN=70D536EA0382FBCF8DE50DEE1B284F8B62CA4819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:48:46:3c:d3:91:08:87:63:b2:3f:42:2c: 79:86:53:db:01:e4:b3:72:df:33:56:a1:9d:00:3a: ba:6c:16:ec:81:cd:f4:45:f6:9b:e1:05:41:bc:38: 55:3c:52:16:15:88:22:98:0c:27:26:8a:b7:55:e4: 92:e6:96:1e:71:fe:5b:4f:4e:02:90:37:31:09:48: f8:a5:1c:35:53:84:13:2e:99:30:01:24:e1:53:da: cd:9d:5a:b2:fd:94:66:44:8d:06:62:29:eb:dd:12: dd:76:f6:46:6d:87:63:16:e5:3b:ba:7d:75:5e:6c: 50:08:56:92:8c:ab:91:b2:21:b6:cd:02:cd:fa:53: 8f:1a:17:99:ab:48:04:25:30:b0:39:27:96:6d:0d: c0:be:6c:fc:0d:50:a0:4c:8a:78:97:30:4a:da:d2: 1f:03:30:86:52:74:d7:6e:31:2b:ed:70:5b:17:f9: 24:5d:f7:7d:05:70:9e:40:2f:d9:78:3a:73:36:c9: fd:7b:e3:c6:01:22:79:a3:d5:71:6e:a5:45:f0:30: b5:60:ab:78:2a:a5:29:d1:60:22:62:d4:e4:86:41: ec:c7:80:52:ba:f2:97:90:25:fc:71:92:11:6d:0e: c0:7b:59:ef:a0:a8:0e:5f:e7:66:b5:9c:23:7b:6c: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:36:EA:03:82:FB:CF:8D:E5:0D:EE:1B:28:4F:8B:62:CA:48:19 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:22:d8:4f:d7:e8:cc:95:24:94:d3:b3:b5:c0:1f:27:98:34: 6b:ce:91:89:2d:89:ab:95:73:83:99:37:cc:a9:45:14:1c:e0: 2d:66:2e:e5:ac:f8:ed:85:07:46:8c:de:0e:e0:43:23:24:0e: fe:ac:36:40:2d:94:2b:22:b3:5c:4c:f7:5a:1e:e0:b8:4d:25: f8:55:50:a6:77:62:84:b8:c6:7b:e9:95:53:39:3b:e8:2e:45: 87:c1:8a:7c:87:7f:c9:ae:53:f0:38:c2:84:8c:17:0e:37:03: 7b:a6:e9:a6:29:67:31:83:80:76:4e:02:13:15:15:84:9d:b2: 38:e0:d7:dc:c4:e5:79:f7:9e:df:c8:d2:42:e6:31:63:3e:e0: 40:6b:ef:e9:b1:e0:3e:3d:b5:49:da:bd:a5:ac:5a:9a:f2:58: 68:31:0c:cf:2a:84:18:40:69:2b:81:69:9a:fb:43:9b:57:cf: 2b:34:6e:d4:a3:af:de:49:80:da:ef:87:24:76:30:50:56:68: 98:40:f8:d2:58:da:ee:f8:92:66:0d:d5:fc:66:76:62:c2:0d: cd:85:ab:9b:85:c1:cc:36:4f:9c:e0:cb:99:a4:62:d9:7b:23: 96:a3:20:69:ab:07:0b:9c:5a:a0:55:36:20:fa:16:90:42:ae: 46:ac:37:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhyNztNoAuGKagdDXOOlGdqpQDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTEyMDUxNDU1NTNaFw0yNTEyMDgyMjAxNTNaMDMxMTAvBgNV BAMTKDcwRDUzNkVBMDM4MkZCQ0Y4REU1MERFRTFCMjg0RjhCNjJDQTQ4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlK0hGPNORCIdjsj9CLHmGU9sB 5LNy3zNWoZ0AOrpsFuyBzfRF9pvhBUG8OFU8UhYViCKYDCcmirdV5JLmlh5x/ltP TgKQNzEJSPilHDVThBMumTABJOFT2s2dWrL9lGZEjQZiKevdEt129kZth2MW5Tu6 fXVebFAIVpKMq5GyIbbNAs36U48aF5mrSAQlMLA5J5ZtDcC+bPwNUKBMiniXMEra 0h8DMIZSdNduMSvtcFsX+SRd930FcJ5AL9l4OnM2yf1748YBInmj1XFupUXwMLVg q3gqpSnRYCJi1OSGQezHgFK68peQJfxxkhFtDsB7We+gqA5f52a1nCN7bOgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcNU26gOC+8+N5Q3uGyhPi2LKSBkwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwi2E/X6MyVJJTTs7XAHyeYNGvOkYktiauV c4OZN8ypRRQc4C1mLuWs+O2FB0aM3g7gQyMkDv6sNkAtlCsis1xM91oe4LhNJfhV UKZ3YoS4xnvplVM5O+guRYfBinyHf8muU/A4woSMFw43A3um6aYpZzGDgHZOAhMV FYSdsjjg19zE5Xn3nt/I0kLmMWM+4EBr7+mx4D49tUnavaWsWpryWGgxDM8qhBhA aSuBaZr7Q5tXzys0btSjr95JgNrvhyR2MFBWaJhA+NJY2u74kmYN1fxmdmLCDc2F q5uFwcw2T5zgy5mkYtl7I5ajIGmrBwucWqBVNiD6FpBCrkasNxQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:20 2025 by rpki-client