This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: hJBffHdOA2DsTTzKm8cVMLvQXibbyqoTg/s9beTRckQ= Subject key identifier: 0A:CB:25:5B:A5:90:75:5C:A8:F3:BC:02:FB:90:C7:51:7D:1F:DB:C6 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 57272CA232AF1BDB5EBFBE44590B51438FFC6EF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01D7 Signing time: Tue 02 Dec 2025 21:01:34 +0000 Manifest this update: Tue 02 Dec 2025 20:56:34 +0000 Manifest next update: Sat 06 Dec 2025 03:57:34 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: aGnnm6Pvmiumqsj1ta11IpBCdQF13qZsW5P6VxJAUIk=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:27:2c:a2:32:af:1b:db:5e:bf:be:44:59:0b:51:43:8f:fc:6e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Dec 2 20:56:34 2025 GMT Not After : Dec 6 03:57:34 2025 GMT Subject: CN=0ACB255BA590755CA8F3BC02FB90C7517D1FDBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:03:8d:f5:b3:ed:1a:9b:1b:ea:c1:64:46: 1f:86:21:98:70:fd:00:6d:bd:27:54:16:c9:cd:84: 49:24:e5:06:be:9a:08:54:12:78:fa:9b:e5:47:3b: d5:1a:3b:04:e5:0b:fb:0b:5f:3c:9b:a2:62:2e:3f: 52:28:43:a6:18:1a:99:8a:4a:bc:0d:94:52:92:7d: 14:35:e2:dc:ef:d0:4b:b0:37:e2:95:7c:4b:1f:af: 46:a4:ad:32:fb:3d:b2:7f:ea:b1:67:7b:eb:b8:e3: 99:88:75:83:46:3e:aa:20:5b:38:f4:ba:4e:5d:1a: b1:42:8c:5e:cd:8c:af:d8:9d:58:c5:26:ef:2b:f8: d4:a7:0f:6b:61:fd:74:74:2f:aa:f7:df:dc:3d:fa: a6:40:f3:8b:68:e8:c5:e6:72:ae:95:d9:cf:13:c6: be:0c:8a:c3:02:02:dc:c4:54:8c:3f:53:12:60:b8: a4:2b:a4:e3:c4:fa:8e:a5:01:1d:47:1b:01:70:78: b6:3c:30:98:2c:53:f5:53:4d:34:15:74:0e:fd:6d: 5e:50:1a:aa:94:5c:a8:22:c4:01:3f:5a:7b:de:f9: db:4e:17:12:3a:be:2c:aa:4f:5c:4f:a2:3b:6d:95: 70:27:07:cc:34:41:7f:ff:49:3b:ec:f3:a6:f4:1b: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CB:25:5B:A5:90:75:5C:A8:F3:BC:02:FB:90:C7:51:7D:1F:DB:C6 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:8a:6b:5a:98:0d:86:bc:a8:94:1e:bc:c8:d2:9c:e6:25: 0d:90:9b:9b:b4:19:85:16:24:7c:70:aa:0a:b0:d6:e5:9c:77: 4f:ef:96:7f:61:9d:03:c2:51:11:9f:9e:7c:0c:08:5d:09:5d: d0:11:c7:3a:ef:c5:63:f0:8e:16:30:97:21:45:9f:a9:05:5b: 6b:d5:4b:6b:2e:0a:b3:fd:b2:fe:9c:f1:b4:cc:29:6a:51:67: a0:fc:f0:42:f9:a5:84:3e:2e:9f:72:a7:4f:8a:7c:b3:12:97: 87:fc:dc:40:12:4c:90:a5:8d:1e:3e:a0:87:a3:26:20:44:c7: b3:b6:3f:47:1b:6f:a4:ee:d3:8e:0e:db:9f:2b:53:82:bc:65: ba:45:b6:aa:1a:44:82:15:6d:cb:d5:53:27:7e:72:32:8c:c2: b8:b1:92:fd:62:50:ad:a3:81:61:e2:ed:66:c7:3c:6f:d7:cd: 3d:23:b0:bc:68:4b:de:fb:24:d5:a2:19:a7:3b:30:dd:b7:19: 8b:a1:98:d5:f5:a8:f5:5e:c2:f1:c5:22:b7:4a:89:ea:aa:6f: a8:3e:cc:ef:c4:f5:2b:1e:47:4f:45:19:47:ec:0a:55:1b:bf: a3:84:70:05:e4:9b:0c:c8:6c:fe:4b:e5:da:88:39:82:09:9c: a3:61:c2:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVycsojKvG9tev75EWQtRQ4/8bvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTEyMDIyMDU2MzRaFw0yNTEyMDYwMzU3MzRaMDMxMTAvBgNV BAMTKDBBQ0IyNTVCQTU5MDc1NUNBOEYzQkMwMkZCOTBDNzUxN0QxRkRCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAAON9bPtGpsb6sFkRh+GIZhw /QBtvSdUFsnNhEkk5Qa+mghUEnj6m+VHO9UaOwTlC/sLXzybomIuP1IoQ6YYGpmK SrwNlFKSfRQ14tzv0EuwN+KVfEsfr0akrTL7PbJ/6rFne+u445mIdYNGPqogWzj0 uk5dGrFCjF7NjK/YnVjFJu8r+NSnD2th/XR0L6r339w9+qZA84to6MXmcq6V2c8T xr4MisMCAtzEVIw/UxJguKQrpOPE+o6lAR1HGwFweLY8MJgsU/VTTTQVdA79bV5Q GqqUXKgixAE/Wnve+dtOFxI6viyqT1xPojttlXAnB8w0QX//STvs86b0GxTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsslW6WQdVyo87wC+5DHUX0f28YwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWcimtamA2GvKiUHrzI0pzmJQ2Qm5u0GYUW JHxwqgqw1uWcd0/vln9hnQPCURGfnnwMCF0JXdARxzrvxWPwjhYwlyFFn6kFW2vV S2suCrP9sv6c8bTMKWpRZ6D88EL5pYQ+Lp9yp0+KfLMSl4f83EASTJCljR4+oIej JiBEx7O2P0cbb6Tu044O258rU4K8ZbpFtqoaRIIVbcvVUyd+cjKMwrixkv1iUK2j gWHi7WbHPG/XzT0jsLxoS977JNWiGac7MN23GYuhmNX1qPVewvHFIrdKieqqb6g+ zO/E9SseR09FGUfsClUbv6OEcAXkmwzIbP5L5dqIOYIJnKNhwhY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:38 2025 by rpki-client