This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: ypZ8emCoQMpRGcy35ZATb8iYxyX0T4XGraAqdl6DsMc= Subject key identifier: 40:DE:61:87:04:89:95:90:64:CA:91:EA:81:96:66:3A:43:88:B3:AD Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 60C2B016FF57E859844AB920BCFB0F34CCB4992D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: BC Signing time: Sun 07 Dec 2025 10:10:05 +0000 Manifest this update: Sun 07 Dec 2025 10:05:05 +0000 Manifest next update: Wed 10 Dec 2025 10:48:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 2: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 3: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: MUtNFWPcM3FTGYs7EJoWMbWJzIke2zulbRkJoNoQlj8=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c2:b0:16:ff:57:e8:59:84:4a:b9:20:bc:fb:0f:34:cc:b4:99:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Dec 7 10:05:05 2025 GMT Not After : Dec 10 10:48:05 2025 GMT Subject: CN=40DE61870489959064CA91EA8196663A4388B3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:40:d0:ce:24:94:65:9c:54:c9:2d:4f:c6: 27:24:e7:fc:ab:01:b6:74:49:00:33:ae:65:54:9f: 11:ac:2c:e1:32:ec:bd:c2:0b:8e:bc:64:59:4f:50: 5d:c5:67:1b:83:a5:1f:12:54:b3:21:19:51:87:19: 93:c4:03:8c:8b:f5:9e:fa:44:68:cd:7e:ac:60:b8: b4:c8:13:c7:dd:bb:28:40:5e:e0:1c:f6:45:de:52: 28:e5:13:7e:c3:ec:2a:76:d2:05:75:f6:96:e0:65: c5:42:c1:46:d7:38:7f:47:dc:e8:f6:2f:63:b8:09: 70:a9:33:60:c1:08:c6:17:cb:cf:b7:89:e6:ba:e9: c3:5e:25:9b:8c:0f:13:fd:5d:5d:ca:46:0f:53:8c: 54:18:56:f2:76:bf:80:c1:df:19:25:e5:b2:a4:0a: a5:58:38:5e:db:fa:97:f2:02:de:0a:25:3f:c9:42: 48:b0:64:55:94:24:14:ad:13:8c:c5:52:a3:db:bf: 4b:76:72:71:05:56:5c:a5:3f:49:9b:84:da:0c:71: 3f:f1:4b:c4:93:da:78:5c:35:87:4b:52:86:77:d4: 6d:49:a8:9f:45:18:e8:bb:4a:5f:69:21:fa:e0:ab: 2c:b9:68:27:ca:c9:8a:97:4c:1b:54:39:11:51:ab: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:61:87:04:89:95:90:64:CA:91:EA:81:96:66:3A:43:88:B3:AD X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cf:64:60:94:15:4a:14:55:36:10:e4:62:02:17:94:a8:65: f3:5e:99:43:4c:2c:40:87:06:be:70:2a:08:bc:22:d0:93:23: 38:c2:7c:4e:27:4d:c4:ec:c5:78:96:02:8a:5c:8a:e9:de:fe: ff:41:85:f2:c8:cd:89:c1:d1:d0:f5:db:d7:e6:1c:14:38:90: cb:e4:76:e6:26:4d:c6:dc:60:9e:e5:87:10:bc:32:5e:61:9f: ac:7f:ce:4e:e5:c5:6d:72:46:23:0d:80:8b:0d:bc:94:5e:77: 48:94:11:3c:73:0f:42:5e:c9:c1:56:e8:93:80:2d:1c:76:ea: ca:97:44:00:39:39:bb:99:80:af:91:bc:0d:59:57:71:b0:1b: 0b:f2:29:76:e4:5c:76:26:cd:04:3c:70:f8:7c:b8:d3:de:d5: b3:e2:97:11:bf:8e:e6:d8:32:97:a4:10:5f:5e:a8:e1:d0:61: 79:5f:d4:d0:23:51:70:dc:c7:74:22:2a:c3:22:77:30:0f:e6: f5:f8:13:98:96:6f:a3:2e:d9:e5:69:81:b7:be:7e:ca:90:76: ef:5b:c5:a7:f3:b8:1b:bf:86:97:cd:03:9d:05:17:f0:83:d5: 71:e8:33:21:dc:b7:10:e7:4f:9a:2e:98:95:82:c2:4e:52:43: 82:62:1f:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMKwFv9X6FmESrkgvPsPNMy0mS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTEyMDcxMDA1MDVaFw0yNTEyMTAxMDQ4MDVaMDMxMTAvBgNV BAMTKDQwREU2MTg3MDQ4OTk1OTA2NENBOTFFQTgxOTY2NjNBNDM4OEIzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxEDQziSUZZxUyS1Pxick5/yr AbZ0SQAzrmVUnxGsLOEy7L3CC468ZFlPUF3FZxuDpR8SVLMhGVGHGZPEA4yL9Z76 RGjNfqxguLTIE8fduyhAXuAc9kXeUijlE37D7Cp20gV19pbgZcVCwUbXOH9H3Oj2 L2O4CXCpM2DBCMYXy8+3iea66cNeJZuMDxP9XV3KRg9TjFQYVvJ2v4DB3xkl5bKk CqVYOF7b+pfyAt4KJT/JQkiwZFWUJBStE4zFUqPbv0t2cnEFVlylP0mbhNoMcT/x S8ST2nhcNYdLUoZ31G1JqJ9FGOi7Sl9pIfrgqyy5aCfKyYqXTBtUORFRq3rTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQN5hhwSJlZBkypHqgZZmOkOIs60wHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzPZGCUFUoUVTYQ5GICF5SoZfNemUNMLECH Br5wKgi8ItCTIzjCfE4nTcTsxXiWAopciune/v9BhfLIzYnB0dD129fmHBQ4kMvk duYmTcbcYJ7lhxC8Ml5hn6x/zk7lxW1yRiMNgIsNvJRed0iUETxzD0JeycFW6JOA LRx26sqXRAA5ObuZgK+RvA1ZV3GwGwvyKXbkXHYmzQQ8cPh8uNPe1bPilxG/jubY MpekEF9eqOHQYXlf1NAjUXDcx3QiKsMidzAP5vX4E5iWb6Mu2eVpgbe+fsqQdu9b xafzuBu/hpfNA50FF/CD1XHoMyHctxDnT5oumJWCwk5SQ4JiHwM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:31 2025 by rpki-client