This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: EzL/laLBAtElKm4jfWQ5gPgCvfq7KjaY+7OKjnjDxSk= Subject key identifier: 45:66:81:03:B2:46:1A:93:34:2F:1A:83:4B:5F:FC:C2:9E:3C:25:63 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 65159F669D23B9D3AEB04568391359140B68A5F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01F0 Signing time: Mon 15 Dec 2025 17:51:24 +0000 Manifest this update: Mon 15 Dec 2025 17:46:24 +0000 Manifest next update: Fri 19 Dec 2025 00:27:24 +0000 Files and hashes: 1: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=) 3: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: HlqcW/QRTlAhYNWg3irBVckT3QXssd50XS+0jl9OA8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:15:9f:66:9d:23:b9:d3:ae:b0:45:68:39:13:59:14:0b:68:a5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Dec 15 17:46:24 2025 GMT Not After : Dec 19 00:27:24 2025 GMT Subject: CN=45668103B2461A93342F1A834B5FFCC29E3C2563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:99:35:6d:57:64:ff:e2:b6:26:b7:01:4d: 09:2b:f6:3b:69:5e:8d:d3:c8:85:f7:91:47:e0:3e: ab:e9:57:d9:dc:fd:33:8a:e7:49:f2:51:21:8f:b4: 49:1f:39:86:c9:2f:76:b4:af:35:a4:12:0c:4c:92: 20:d9:b3:2a:34:1e:90:e8:a1:7b:fb:a2:8a:1c:ab: 59:73:f3:12:79:21:41:7c:29:80:46:66:fd:c8:e5: 63:42:59:5f:cd:73:d4:d8:6d:ff:fb:8e:7e:fe:c4: 92:65:1c:63:b8:6b:6b:72:42:e0:d9:a3:97:69:1f: a7:e0:75:7c:4a:c9:bc:05:e4:4d:c9:ca:d2:ca:ee: 6c:a5:aa:5b:26:29:25:8c:37:f3:c7:3d:bc:4e:4a: 36:34:c4:fa:8d:da:96:8f:51:09:bd:60:ea:e0:76: cd:45:e7:8d:f6:33:e2:63:eb:f0:34:32:0c:9b:83: 10:c7:35:06:39:e3:81:a2:2d:66:e8:ce:bd:fc:27: ab:af:eb:07:d3:4a:9e:53:fe:0b:58:1a:b6:f4:90: bb:a1:d9:bc:c2:ed:75:46:fc:da:63:61:fe:58:87: 47:1b:6a:d8:5b:72:7a:c4:17:eb:a7:1a:50:66:4a: bb:31:3f:d2:52:31:38:83:c3:d9:59:8d:27:57:22: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:66:81:03:B2:46:1A:93:34:2F:1A:83:4B:5F:FC:C2:9E:3C:25:63 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2b:af:0e:26:ee:a4:bf:76:7f:88:34:9f:cf:5e:6c:9e:94: 89:85:1a:15:c0:4a:2b:32:b5:6e:cf:67:51:5a:db:43:14:42: 52:d2:08:84:8e:09:c1:81:4c:71:77:de:d1:63:6f:84:f3:4e: 27:6e:11:76:05:2e:5a:d1:19:bf:02:49:f4:a7:13:7f:da:a2: f7:cf:c9:62:28:05:99:7c:c3:c2:28:9d:38:98:42:75:95:2a: 9f:05:a9:03:ba:00:db:5c:04:e7:c4:e0:60:ee:94:ff:83:32: 64:e4:13:8f:fe:28:71:96:e6:54:4a:77:ca:57:f7:01:c6:78: 65:ce:c4:d7:62:3c:21:7b:f1:ed:81:f8:6d:c1:4c:a4:a8:2a: 39:17:64:6f:9a:a4:a1:9d:a9:33:32:40:a4:b8:8c:11:d2:78: c4:ec:e1:20:77:2d:f9:07:88:78:a3:cc:79:15:b2:50:2b:3a: 89:29:dd:0a:15:5a:44:f5:c1:9a:4e:6b:d0:3d:86:9a:ef:7f: 0c:d7:f4:25:94:47:32:b1:1d:1c:c0:a2:9b:fd:98:22:9b:bf: 45:25:1e:4d:31:06:ca:3f:8c:3c:ab:8e:4f:49:1d:f3:06:49: 6a:67:77:12:64:5d:21:76:e4:b6:11:e7:7c:67:7f:63:99:ac: 76:bd:8f:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRWfZp0judOusEVoORNZFAtopfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTEyMTUxNzQ2MjRaFw0yNTEyMTkwMDI3MjRaMDMxMTAvBgNV BAMTKDQ1NjY4MTAzQjI0NjFBOTMzNDJGMUE4MzRCNUZGQ0MyOUUzQzI1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W5k1bVdk/+K2JrcBTQkr9jtp Xo3TyIX3kUfgPqvpV9nc/TOK50nyUSGPtEkfOYbJL3a0rzWkEgxMkiDZsyo0HpDo oXv7ooocq1lz8xJ5IUF8KYBGZv3I5WNCWV/Nc9TYbf/7jn7+xJJlHGO4a2tyQuDZ o5dpH6fgdXxKybwF5E3JytLK7mylqlsmKSWMN/PHPbxOSjY0xPqN2paPUQm9YOrg ds1F5432M+Jj6/A0MgybgxDHNQY544GiLWbozr38J6uv6wfTSp5T/gtYGrb0kLuh 2bzC7XVG/NpjYf5Yh0cbathbcnrEF+unGlBmSrsxP9JSMTiDw9lZjSdXIgLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURWaBA7JGGpM0LxqDS1/8wp48JWMwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUrrw4m7qS/dn+INJ/PXmyelImFGhXASisy tW7PZ1Fa20MUQlLSCISOCcGBTHF33tFjb4TzTiduEXYFLlrRGb8CSfSnE3/aovfP yWIoBZl8w8IonTiYQnWVKp8FqQO6ANtcBOfE4GDulP+DMmTkE4/+KHGW5lRKd8pX 9wHGeGXOxNdiPCF78e2B+G3BTKSoKjkXZG+apKGdqTMyQKS4jBHSeMTs4SB3LfkH iHijzHkVslArOokp3QoVWkT1wZpOa9A9hprvfwzX9CWURzKxHRzAopv9mCKbv0Ul Hk0xBso/jDyrjk9JHfMGSWpndxJkXSF25LYR53xnf2OZrHa9j/o= -----END CERTIFICATE-----Generated at Tue Dec 16 20:22:46 2025 by rpki-client