This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: bNJdNqTW+fQksAF9rSdAWjxrox6l6DU5HAV24sT6C5s= Subject key identifier: F5:85:B9:7A:C3:40:E4:5C:84:C8:37:2B:9D:FB:3A:52:3A:A1:0B:E4 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 1C6D6EA710726BE953B6427C09F88939DA5FED8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: A3 Signing time: Sun 07 Dec 2025 08:01:23 +0000 Manifest this update: Sun 07 Dec 2025 07:56:23 +0000 Manifest next update: Wed 10 Dec 2025 17:02:23 +0000 Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: +o0YmIgl1T25U/JebsOiQZctiwyilEy1OsuTr6nphc8=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6d:6e:a7:10:72:6b:e9:53:b6:42:7c:09:f8:89:39:da:5f:ed:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Dec 7 07:56:23 2025 GMT Not After : Dec 10 17:02:23 2025 GMT Subject: CN=F585B97AC340E45C84C8372B9DFB3A523AA10BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:5e:4b:bb:57:23:a1:49:58:81:df:e5:61: 84:4b:88:81:71:51:30:ba:fa:a2:ba:ff:e5:4f:55: cb:c8:10:96:dc:7e:43:e0:21:67:e1:8f:a5:70:d2: 5b:63:3d:d0:d4:7a:9d:5c:c9:00:8f:15:93:73:35: 78:da:40:6b:aa:a4:3e:9c:9d:0d:b5:4e:7f:07:60: 0a:07:c4:97:69:70:b6:0d:9b:c9:35:75:fc:4a:3e: bb:73:a2:6e:90:65:fe:bb:7a:7e:93:5d:9d:97:77: c5:bd:0a:28:28:66:20:ce:24:61:91:d7:be:79:ad: 33:df:95:01:e3:09:d8:27:09:48:a0:83:9e:2b:91: bb:31:fe:3e:20:bf:cf:0b:20:fd:41:cc:96:77:a9: 66:1e:3d:7d:f4:01:0f:55:c1:95:ce:e4:54:a6:48: 25:d9:2f:7a:6d:a1:89:ea:fd:70:0c:63:5a:96:f6: 15:0c:22:0f:f7:a6:55:13:4f:7d:be:09:7c:f0:85: 46:19:b0:0a:87:44:a9:aa:47:d9:e3:82:64:51:1b: 91:6b:8e:f8:93:b5:29:6e:5e:f7:d8:0a:35:e3:42: 91:14:d2:e4:a9:d1:c6:45:e8:d5:a9:ca:4d:ec:24: ef:46:0e:bf:88:b3:d8:36:23:ca:a5:0e:d1:e3:16: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:B9:7A:C3:40:E4:5C:84:C8:37:2B:9D:FB:3A:52:3A:A1:0B:E4 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:17:94:08:90:d1:a5:61:71:34:a6:86:8e:e0:1c:3f:ef: 41:2c:98:35:3e:97:c0:cf:73:ac:84:15:55:45:20:10:2f:0c: 87:89:42:2c:1b:fd:1c:4f:f1:1d:0f:af:7c:5c:90:e4:31:e1: 81:86:df:90:c3:5e:93:e4:66:68:6d:15:c9:1a:66:10:03:b3: 42:9b:15:5e:b8:7d:78:04:ec:18:6d:0a:2a:bf:e7:25:b1:b1: ba:e6:28:a8:64:80:43:2b:2e:72:4d:83:66:e5:7d:1f:2d:4f: dd:72:e8:66:1b:ec:14:83:dd:2a:70:e4:06:82:c6:a7:16:3a: 57:6a:87:db:2e:bc:97:4f:96:d8:40:6c:ed:be:6f:ed:77:c6: 5d:c0:3b:50:a2:a2:e2:34:ea:4c:7c:af:19:bd:5d:bb:eb:82: 40:a4:b8:5e:4c:71:8a:55:1e:08:21:e6:34:45:4f:21:0d:b6: fb:e7:c1:4b:0f:17:12:fa:a2:c6:20:e7:ea:c6:42:90:0e:08: 7c:a4:13:d5:95:75:80:cd:d0:9b:75:3a:b0:8c:1b:dc:91:7f: 9d:93:40:e7:d5:9d:62:41:fd:54:a3:f7:4d:07:91:87:a7:c5: a0:ab:84:a7:6a:47:3c:99:6a:2b:c0:13:c6:32:4a:e0:85:0e: 82:c2:e6:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHG1upxBya+lTtkJ8CfiJOdpf7Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTEyMDcwNzU2MjNaFw0yNTEyMTAxNzAyMjNaMDMxMTAvBgNV BAMTKEY1ODVCOTdBQzM0MEU0NUM4NEM4MzcyQjlERkIzQTUyM0FBMTBCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNV5Lu1cjoUlYgd/lYYRLiIFx UTC6+qK6/+VPVcvIEJbcfkPgIWfhj6Vw0ltjPdDUep1cyQCPFZNzNXjaQGuqpD6c nQ21Tn8HYAoHxJdpcLYNm8k1dfxKPrtzom6QZf67en6TXZ2Xd8W9CigoZiDOJGGR 1755rTPflQHjCdgnCUigg54rkbsx/j4gv88LIP1BzJZ3qWYePX30AQ9VwZXO5FSm SCXZL3ptoYnq/XAMY1qW9hUMIg/3plUTT32+CXzwhUYZsAqHRKmqR9njgmRRG5Fr jviTtSluXvfYCjXjQpEU0uSp0cZF6NWpyk3sJO9GDr+Is9g2I8qlDtHjFn3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9YW5esNA5FyEyDcrnfs6UjqhC+QwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOfF5QIkNGlYXE0poaO4Bw/70EsmDU+l8DP c6yEFVVFIBAvDIeJQiwb/RxP8R0Pr3xckOQx4YGG35DDXpPkZmhtFckaZhADs0Kb FV64fXgE7BhtCiq/5yWxsbrmKKhkgEMrLnJNg2blfR8tT91y6GYb7BSD3Spw5AaC xqcWOldqh9suvJdPlthAbO2+b+13xl3AO1CiouI06kx8rxm9XbvrgkCkuF5McYpV Hggh5jRFTyENtvvnwUsPFxL6osYg5+rGQpAOCHykE9WVdYDN0Jt1OrCMG9yRf52T QOfVnWJB/VSj900HkYenxaCrhKdqRzyZaivAE8YySuCFDoLC5kM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:07 2025 by rpki-client