This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: VBSPWSheKyAyyvM2EsW01fskWOzGovXfPBlV9byJVac= Subject key identifier: 08:B8:F4:7F:83:17:93:E4:9A:DC:FC:3A:77:D3:05:4C:15:B9:9A:89 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 1489490D6F6476E9BC1E93C3960A8E9D17B09F64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01DE Signing time: Thu 18 Dec 2025 10:01:34 +0000 Manifest this update: Thu 18 Dec 2025 09:56:34 +0000 Manifest next update: Sun 21 Dec 2025 20:18:34 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 3: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: t71CeocHtCBWUzAyrX3bsBEskFgIJ8GKQ3HafMfbUao=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:89:49:0d:6f:64:76:e9:bc:1e:93:c3:96:0a:8e:9d:17:b0:9f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Dec 18 09:56:34 2025 GMT Not After : Dec 21 20:18:34 2025 GMT Subject: CN=08B8F47F831793E49ADCFC3A77D3054C15B99A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:04:77:db:05:2f:b9:b1:f2:67:1c:36:62: 6c:9f:1f:55:55:8c:b5:b1:0b:b7:df:0a:69:c8:87: 5c:68:5f:ac:aa:e8:8f:09:69:53:68:2c:e2:bc:cd: b9:30:8a:84:31:79:bb:3a:ed:fc:fd:ac:e9:88:ca: 4d:8d:e5:33:d3:13:6a:65:a4:27:ff:7c:7b:32:2f: 39:07:cd:4b:89:f4:0a:15:37:d5:96:1e:21:62:d9: 69:d5:83:2a:47:04:da:ec:ea:da:1a:3d:47:15:d1: 7d:66:80:92:bd:5f:f7:c0:36:cc:45:36:3a:dd:12: 62:46:b6:fe:f5:6d:8c:0a:d3:d2:8c:cb:73:8f:c8: c8:a3:c0:02:86:cb:01:83:c4:86:1d:76:eb:c5:da: 29:bc:3c:cf:5a:c9:cf:1c:56:64:45:ff:6e:95:ff: 7a:ab:24:9b:cf:b0:ae:d4:0a:52:7d:b5:59:cb:07: b1:03:12:ed:c8:27:7f:5a:d4:79:33:56:1f:f3:41: 80:eb:46:0c:03:6e:d7:24:f9:98:07:f6:ec:47:46: 55:4b:e4:be:07:50:33:d4:fe:19:01:d2:8a:e2:62: b1:c8:a1:99:83:a8:37:a1:90:34:ad:90:fb:8a:fc: 2b:23:9a:d4:13:f8:7b:a6:cd:d7:af:a4:5d:40:0d: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B8:F4:7F:83:17:93:E4:9A:DC:FC:3A:77:D3:05:4C:15:B9:9A:89 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6d:c2:25:a6:5b:d7:59:8d:a6:2f:fe:f1:86:64:a5:aa:0c: ec:3b:eb:e1:cb:7a:de:fc:47:99:d6:b1:d3:33:01:18:7f:c8: 57:40:32:31:a4:86:7e:2a:e5:27:4c:39:ae:f6:3f:f9:90:4e: b7:1a:85:d1:99:93:29:45:f9:3a:6a:84:1e:17:8a:67:db:3d: 53:12:57:c8:be:7d:11:4d:c6:55:d1:88:13:e4:1a:5b:71:a8: 69:9c:9f:17:36:2e:8e:13:26:b8:18:84:24:28:3f:6f:6a:0e: a9:aa:e6:d0:0b:b9:81:27:e2:86:1a:98:93:58:84:9d:ea:bc: 44:2a:01:29:79:c3:9b:d1:46:40:39:35:68:f1:26:cb:f6:3e: 97:f0:fe:58:e8:53:a3:03:24:e9:97:2f:d5:65:5a:0b:72:99: dc:81:04:ba:02:6d:ac:71:a7:61:e0:d2:37:52:cf:d9:fa:ec: 8e:36:b5:0f:b4:d8:40:2c:81:8e:59:f4:f8:63:c2:bb:20:3d: 50:07:12:48:2c:d0:d2:e4:ec:22:72:ba:5f:47:2b:e1:9c:8a: 60:c8:d1:89:7e:09:f3:34:ac:1c:49:a8:bf:3b:c4:b9:3c:04: 70:b7:5c:0c:8f:fa:2f:67:ef:07:df:34:44:0d:ce:88:1c:7c: c1:4e:af:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIlJDW9kdum8HpPDlgqOnRewn2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTEyMTgwOTU2MzRaFw0yNTEyMjEyMDE4MzRaMDMxMTAvBgNV BAMTKDA4QjhGNDdGODMxNzkzRTQ5QURDRkMzQTc3RDMwNTRDMTVCOTlBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVAR32wUvubHyZxw2YmyfH1VV jLWxC7ffCmnIh1xoX6yq6I8JaVNoLOK8zbkwioQxebs67fz9rOmIyk2N5TPTE2pl pCf/fHsyLzkHzUuJ9AoVN9WWHiFi2WnVgypHBNrs6toaPUcV0X1mgJK9X/fANsxF NjrdEmJGtv71bYwK09KMy3OPyMijwAKGywGDxIYdduvF2im8PM9ayc8cVmRF/26V /3qrJJvPsK7UClJ9tVnLB7EDEu3IJ39a1HkzVh/zQYDrRgwDbtck+ZgH9uxHRlVL 5L4HUDPU/hkB0oriYrHIoZmDqDehkDStkPuK/CsjmtQT+HumzdevpF1ADTkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLj0f4MXk+Sa3Pw6d9MFTBW5mokwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHltwiWmW9dZjaYv/vGGZKWqDOw76+HLet78 R5nWsdMzARh/yFdAMjGkhn4q5SdMOa72P/mQTrcahdGZkylF+TpqhB4XimfbPVMS V8i+fRFNxlXRiBPkGltxqGmcnxc2Lo4TJrgYhCQoP29qDqmq5tALuYEn4oYamJNY hJ3qvEQqASl5w5vRRkA5NWjxJsv2Ppfw/ljoU6MDJOmXL9VlWgtymdyBBLoCbaxx p2Hg0jdSz9n67I42tQ+02EAsgY5Z9PhjwrsgPVAHEkgs0NLk7CJyul9HK+GcimDI 0Yl+CfM0rBxJqL87xLk8BHC3XAyP+i9n7wffNEQNzogcfMFOr6M= -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:46 2025 by rpki-client