This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: V4uqfW8ukNHTyX+zOPo+wVSA4gCrOqeWT67RaM1nHv0= Subject key identifier: 63:A2:51:73:36:90:D7:A8:9D:F0:00:BE:58:BB:CD:14:89:F2:7F:1A Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 192082D9F2BA391AA7BC354D3E27154626B76906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: F7 Signing time: Wed 17 Dec 2025 23:41:30 +0000 Manifest this update: Wed 17 Dec 2025 23:36:30 +0000 Manifest next update: Sun 21 Dec 2025 08:43:30 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: IkqKlcmWrI4zuvysh5cqc7EuYoatGEkRDETu9DM1/IU=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:20:82:d9:f2:ba:39:1a:a7:bc:35:4d:3e:27:15:46:26:b7:69:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Dec 17 23:36:30 2025 GMT Not After : Dec 21 08:43:30 2025 GMT Subject: CN=63A251733690D7A89DF000BE58BBCD1489F27F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:bc:16:ef:08:69:2c:c3:42:09:48:ab:14: 1b:17:5c:32:e0:84:e9:fd:28:44:40:b2:ef:b4:54: 4e:09:e2:fa:17:2f:97:81:c1:73:7a:55:4a:76:49: 1b:c1:06:5a:83:da:3f:56:a1:e6:3e:f1:ef:98:42: c1:59:5f:28:4f:a4:fb:07:b9:94:93:28:76:c4:60: f8:4c:2d:39:c8:1c:99:fc:c4:a9:bb:14:97:d0:89: 2c:0e:a5:78:fa:ec:cc:4b:b5:c1:4e:55:50:0e:f8: 7c:31:1a:d4:4f:74:d3:c0:79:cc:e8:6f:83:26:20: 8b:e2:b3:7f:33:3b:38:d2:d4:96:54:cd:f3:50:c8: c9:40:96:fc:44:6a:f8:7e:a5:2f:d0:14:f8:a9:e7: f3:e4:cf:ab:6a:c8:8e:65:11:4f:3f:8e:f0:36:43: 7c:74:7c:76:5a:fa:ec:d5:f8:4a:4c:79:1c:6e:d1: 18:37:36:32:f8:6a:02:73:35:57:de:21:84:ff:9c: 6d:5e:37:61:94:55:cb:d5:08:0c:ba:45:6f:86:0c: 31:3a:2a:5d:ef:13:7e:2a:28:f1:11:8d:57:59:43: 2b:e1:7c:41:d8:a4:ec:16:3d:f6:de:45:67:3f:dc: c2:50:18:da:84:41:49:8a:c0:30:0d:66:7d:a5:bd: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:51:73:36:90:D7:A8:9D:F0:00:BE:58:BB:CD:14:89:F2:7F:1A X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ad:5c:54:17:ed:6e:65:0a:79:ba:c9:6b:83:a8:e8:12:8a: 8c:2a:9f:e7:61:8a:bc:72:61:bf:7a:49:58:34:e4:c6:ae:30: 68:52:1d:ce:47:11:25:f6:16:14:53:9d:82:e5:89:13:6b:c1: f6:73:e3:3e:ce:92:ff:11:53:b8:e2:e7:34:c4:cc:38:f6:c2: d9:e3:78:ce:86:50:06:26:3f:64:3d:be:32:ac:24:81:68:ae: 5d:38:52:c2:23:99:e7:c2:5a:79:80:e1:20:1d:21:8e:6e:77: 66:1b:a7:76:2c:e6:f7:f6:65:7c:d5:98:f7:f2:bd:04:88:d6: a9:e8:4e:40:f3:ae:b0:78:44:fd:5d:b9:df:0e:23:18:ff:c6: 38:f2:83:d9:74:3c:3b:b8:d4:fc:b7:8c:6a:36:97:a8:7b:d2: 1e:2e:70:c1:aa:7d:13:f7:6d:6f:76:80:5c:4c:bc:18:cf:de: 2a:c1:e3:7a:59:d4:6e:28:26:38:5b:0b:82:22:2c:94:2d:0d: f7:33:fd:fc:8d:94:44:60:ee:28:c9:99:e7:89:19:f6:82:53: 5d:27:57:be:f5:8d:ee:a7:0b:9c:43:af:7e:45:55:ca:16:46: a7:95:12:6c:c0:06:fb:d6:37:02:22:c5:d7:dc:ae:90:fd:53: 2c:67:7c:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSCC2fK6ORqnvDVNPicVRia3aQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTEyMTcyMzM2MzBaFw0yNTEyMjEwODQzMzBaMDMxMTAvBgNV BAMTKDYzQTI1MTczMzY5MEQ3QTg5REYwMDBCRTU4QkJDRDE0ODlGMjdGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnd7wW7whpLMNCCUirFBsXXDLg hOn9KERAsu+0VE4J4voXL5eBwXN6VUp2SRvBBlqD2j9WoeY+8e+YQsFZXyhPpPsH uZSTKHbEYPhMLTnIHJn8xKm7FJfQiSwOpXj67MxLtcFOVVAO+HwxGtRPdNPAeczo b4MmIIvis38zOzjS1JZUzfNQyMlAlvxEavh+pS/QFPip5/Pkz6tqyI5lEU8/jvA2 Q3x0fHZa+uzV+EpMeRxu0Rg3NjL4agJzNVfeIYT/nG1eN2GUVcvVCAy6RW+GDDE6 Kl3vE34qKPERjVdZQyvhfEHYpOwWPfbeRWc/3MJQGNqEQUmKwDANZn2lvbc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6JRczaQ16id8AC+WLvNFInyfxowHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGtXFQX7W5lCnm6yWuDqOgSiowqn+dhirxy Yb96SVg05MauMGhSHc5HESX2FhRTnYLliRNrwfZz4z7Okv8RU7ji5zTEzDj2wtnj eM6GUAYmP2Q9vjKsJIForl04UsIjmefCWnmA4SAdIY5ud2Ybp3Ys5vf2ZXzVmPfy vQSI1qnoTkDzrrB4RP1dud8OIxj/xjjyg9l0PDu41Py3jGo2l6h70h4ucMGqfRP3 bW92gFxMvBjP3irB43pZ1G4oJjhbC4IiLJQtDfcz/fyNlERg7ijJmeeJGfaCU10n V771je6nC5xDr35FVcoWRqeVEmzABvvWNwIixdfcrpD9UyxnfJg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:49:02 2025 by rpki-client