This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: S+CNFfd21jXqJ6VO2BFUVKk9XYic19EC/64x6E21LiM= Subject key identifier: 6B:9A:5E:6D:37:D8:92:BB:E2:2F:C7:4A:B4:1A:A7:AD:BE:CE:35:26 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 37B5FEB47D7C6BC9993DBE238F60C5DDC250793F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 053C Signing time: Wed 31 Dec 2025 17:02:13 +0000 Manifest this update: Wed 31 Dec 2025 16:57:13 +0000 Manifest next update: Sun 04 Jan 2026 03:07:13 +0000 Files and hashes: 1: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: zvsoexV2oVf+KxTe/OCusxDYjZow/59zGT41nJUUdtk=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 4: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 03:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b5:fe:b4:7d:7c:6b:c9:99:3d:be:23:8f:60:c5:dd:c2:50:79:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Dec 31 16:57:13 2025 GMT Not After : Jan 4 03:07:13 2026 GMT Subject: CN=6B9A5E6D37D892BBE22FC74AB41AA7ADBECE3526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:1c:24:7a:62:bb:2e:f5:e4:d8:0e:d3:14: 3d:1c:b2:04:40:1d:db:c6:95:85:04:20:4a:5c:d5: 10:ef:ca:a5:48:f0:14:0f:d8:18:2d:33:74:96:e9: 3f:11:5b:4b:9a:e5:67:a8:3f:bb:74:45:a5:0c:18: b8:61:ac:51:f9:87:1f:3a:1e:52:fa:3e:dc:7b:5a: fc:74:d7:b4:a6:20:83:a2:f5:2a:17:f4:52:cf:5f: 39:dc:b4:64:8d:ac:2c:07:0c:59:59:76:95:d6:86: 41:e8:ea:5a:43:c4:a7:8b:38:36:dc:c5:59:4e:81: 3a:4f:01:d5:95:84:60:2c:33:36:01:8f:97:34:43: 77:15:8f:ce:12:8f:f0:a5:ce:2b:22:a1:45:43:60: b6:55:61:43:7e:95:67:86:c5:0a:3e:cf:8c:a3:89: 43:cf:38:ec:d4:62:96:d6:3c:98:ee:7f:b6:e1:93: 9d:ef:11:3e:18:c9:43:c7:d6:13:4c:0b:e6:14:9e: 52:32:8a:8e:dd:e3:af:81:19:c5:84:c8:df:0e:93: 8d:c1:05:a6:4b:e6:da:7f:26:4b:00:a6:12:5b:6b: 22:79:89:7d:f4:f4:1f:a6:8d:fa:64:c3:cc:23:db: 0e:2c:9f:07:9a:57:ee:60:5e:ae:18:f0:6d:c2:6b: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:5E:6D:37:D8:92:BB:E2:2F:C7:4A:B4:1A:A7:AD:BE:CE:35:26 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:69:8f:04:9c:c2:92:53:d0:0b:13:a9:54:ef:89:bf:74:b3: 9d:9e:31:d6:52:5e:2b:a0:f4:c9:d2:2b:9c:c2:56:11:c8:9b: 5d:0e:c6:74:a4:36:b8:27:b2:49:d3:90:7e:42:41:83:84:c8: 3a:71:18:d9:83:72:e9:74:77:00:58:41:3d:82:75:a4:be:48: fa:2d:0a:04:0a:eb:b9:e5:df:d2:9d:f6:dc:9d:f8:05:ab:9e: a6:8c:63:c9:79:80:ff:c4:67:51:30:5d:1b:9a:4b:7f:99:6d: 2c:09:56:f4:6a:7b:57:72:29:71:b6:1a:e2:39:b9:00:77:4e: 85:0c:d5:c4:b0:a1:d3:21:19:e4:c1:0d:09:96:a4:fb:af:ba: 90:dc:ed:e2:f1:1e:72:cb:97:74:fa:e8:6c:2c:cd:b9:bf:d7: 5f:1c:6b:18:4c:67:d4:c3:2e:b1:47:3a:3a:1a:9c:52:16:49: cd:38:00:23:d7:80:f2:3d:ed:48:8b:8f:cc:37:b5:2c:f3:3a: d1:77:b1:68:ff:b2:cf:9f:a5:76:d0:55:03:ec:11:2d:19:b7: ee:f8:79:5c:4e:30:25:83:57:d0:2f:3b:bd:61:af:8b:2c:24: 2d:fb:d7:7e:dd:0e:f1:fb:0b:cc:8e:46:39:6f:e8:0c:db:81: 64:1a:bf:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7X+tH18a8mZPb4jj2DF3cJQeT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTEyMzExNjU3MTNaFw0yNjAxMDQwMzA3MTNaMDMxMTAvBgNV BAMTKDZCOUE1RTZEMzdEODkyQkJFMjJGQzc0QUI0MUFBN0FEQkVDRTM1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4xwkemK7LvXk2A7TFD0csgRA HdvGlYUEIEpc1RDvyqVI8BQP2BgtM3SW6T8RW0ua5WeoP7t0RaUMGLhhrFH5hx86 HlL6Ptx7Wvx017SmIIOi9SoX9FLPXznctGSNrCwHDFlZdpXWhkHo6lpDxKeLODbc xVlOgTpPAdWVhGAsMzYBj5c0Q3cVj84Sj/ClzisioUVDYLZVYUN+lWeGxQo+z4yj iUPPOOzUYpbWPJjuf7bhk53vET4YyUPH1hNMC+YUnlIyio7d46+BGcWEyN8Ok43B BaZL5tp/JksAphJbayJ5iX309B+mjfpkw8wj2w4snweaV+5gXq4Y8G3Ca9I5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa5pebTfYkrviL8dKtBqnrb7ONSYwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJpjwScwpJT0AsTqVTvib90s52eMdZSXiug 9MnSK5zCVhHIm10OxnSkNrgnsknTkH5CQYOEyDpxGNmDcul0dwBYQT2CdaS+SPot CgQK67nl39Kd9tyd+AWrnqaMY8l5gP/EZ1EwXRuaS3+ZbSwJVvRqe1dyKXG2GuI5 uQB3ToUM1cSwodMhGeTBDQmWpPuvupDc7eLxHnLLl3T66Gwszbm/118caxhMZ9TD LrFHOjoanFIWSc04ACPXgPI97UiLj8w3tSzzOtF3sWj/ss+fpXbQVQPsES0Zt+74 eVxOMCWDV9AvO71hr4ssJC37137dDvH7C8yORjlv6AzbgWQav0Y= -----END CERTIFICATE-----Generated at Wed Dec 31 22:08:52 2025 by rpki-client