This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: VUg2PJVZqlOEsKTZ7V/a2f/CeQQlqM6d2KXQ2tK6KfM= Subject key identifier: 87:ED:E4:D1:1A:6A:D8:36:B7:A9:CC:FA:EA:3E:C1:7F:49:E6:0B:BF Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 2C1249C90A52C61F43B5524C4D1EF4D69D1766DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 01E6 Signing time: Mon 01 Dec 2025 03:22:16 +0000 Manifest this update: Mon 01 Dec 2025 03:17:16 +0000 Manifest next update: Thu 04 Dec 2025 13:59:16 +0000 Files and hashes: 1: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: PKh62Mq9L2v2dpUQEQJDboIq/9ov0EpbRrj51ZiP9Jc=) 2: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 3: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) 4: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:12:49:c9:0a:52:c6:1f:43:b5:52:4c:4d:1e:f4:d6:9d:17:66:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Dec 1 03:17:16 2025 GMT Not After : Dec 4 13:59:16 2025 GMT Subject: CN=87EDE4D11A6AD836B7A9CCFAEA3EC17F49E60BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:65:21:ae:92:43:93:77:99:24:2b:66:af: 9a:3b:66:1b:cf:e0:6b:80:96:4b:6c:2b:48:7c:d1: 11:d1:bb:4e:56:00:44:52:b8:37:a9:98:aa:f3:fb: 2b:37:8e:cb:ef:8b:ee:46:74:90:5e:4b:41:eb:f2: 94:61:d2:32:9b:af:dd:4e:86:8a:e1:ae:6c:a1:67: 67:75:bd:18:59:64:59:2e:17:45:59:d6:09:ea:b2: 0e:6d:a5:78:2d:cc:76:da:7f:10:9c:83:55:76:62: 12:bf:cf:8f:7c:21:5d:a8:2d:d0:81:64:b4:f2:b1: ef:56:3d:2f:ec:77:93:87:71:f6:23:40:5a:a5:6b: fc:ee:15:36:dd:21:9e:cf:ba:84:08:e7:66:63:d8: ca:31:98:a9:b9:db:39:37:d5:1c:7b:fe:4d:7c:66: 7a:eb:e7:97:39:c5:ad:a2:d2:06:fb:a6:42:31:40: c7:1e:e7:ca:37:8c:95:09:04:be:93:33:d9:d9:83: 23:ed:e4:46:f0:f7:01:a7:0e:a3:75:eb:2f:ce:eb: 7b:81:15:cc:77:f6:31:36:9e:40:20:62:cf:a1:21: 09:35:3d:c9:eb:1e:4f:d9:93:b6:06:15:7c:e1:c8: 47:a2:3a:cf:be:78:d8:73:a8:12:3f:bc:da:ed:2e: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:ED:E4:D1:1A:6A:D8:36:B7:A9:CC:FA:EA:3E:C1:7F:49:E6:0B:BF X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:03:11:97:ab:99:2c:7d:73:a3:90:3c:5c:73:1b:fa:6c:79: 28:1d:0f:68:a1:e2:2f:58:53:e3:61:5f:25:d4:28:cb:80:53: 59:2e:2d:c7:9a:23:1d:1d:10:45:cc:bc:37:b8:1f:49:7f:21: 1b:d7:52:49:d4:5a:1e:98:13:3f:c9:1e:c0:e4:6a:2d:37:31: d3:a3:8c:3a:fd:95:4d:04:75:f9:ef:f0:bb:0c:70:ed:07:39: 2b:53:03:bc:14:2f:8f:c3:b1:52:73:47:26:18:f2:99:5d:0c: 88:bc:94:01:87:d0:3e:6e:56:86:cf:61:52:60:60:fa:2b:bc: df:29:39:61:e6:6f:0d:53:1e:ad:e5:e8:21:09:84:e4:31:01: 4e:3c:1e:84:d9:60:c9:07:aa:2d:6b:e8:23:a6:47:8b:dd:cc: d5:aa:bb:08:fb:8d:c9:49:d4:8b:ff:83:62:35:0f:25:54:ca: da:a1:c9:26:40:dc:6b:7d:a0:29:82:df:8a:3c:9a:67:0e:09: 09:43:ed:35:6d:be:64:28:b4:08:be:79:13:a0:ba:81:b8:87: 52:9c:74:34:c3:16:3d:b7:31:87:6d:1e:1e:b8:f8:08:35:57: 9e:d5:17:f7:0b:1e:fc:74:52:7c:76:2b:1b:e3:92:90:47:bd: 6a:9f:18:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBJJyQpSxh9DtVJMTR701p0XZt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTEyMDEwMzE3MTZaFw0yNTEyMDQxMzU5MTZaMDMxMTAvBgNV BAMTKDg3RURFNEQxMUE2QUQ4MzZCN0E5Q0NGQUVBM0VDMTdGNDlFNjBCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPGUhrpJDk3eZJCtmr5o7ZhvP 4GuAlktsK0h80RHRu05WAERSuDepmKrz+ys3jsvvi+5GdJBeS0Hr8pRh0jKbr91O horhrmyhZ2d1vRhZZFkuF0VZ1gnqsg5tpXgtzHbafxCcg1V2YhK/z498IV2oLdCB ZLTyse9WPS/sd5OHcfYjQFqla/zuFTbdIZ7PuoQI52Zj2MoxmKm52zk31Rx7/k18 Znrr55c5xa2i0gb7pkIxQMce58o3jJUJBL6TM9nZgyPt5Ebw9wGnDqN16y/O63uB Fcx39jE2nkAgYs+hIQk1PcnrHk/Zk7YGFXzhyEeiOs++eNhzqBI/vNrtLu6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+3k0Rpq2Da3qcz66j7Bf0nmC78wHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8DEZermSx9c6OQPFxzG/pseSgdD2ih4i9Y U+NhXyXUKMuAU1kuLceaIx0dEEXMvDe4H0l/IRvXUknUWh6YEz/JHsDkai03MdOj jDr9lU0Edfnv8LsMcO0HOStTA7wUL4/DsVJzRyYY8pldDIi8lAGH0D5uVobPYVJg YPorvN8pOWHmbw1THq3l6CEJhOQxAU48HoTZYMkHqi1r6COmR4vdzNWquwj7jclJ 1Iv/g2I1DyVUytqhySZA3Gt9oCmC34o8mmcOCQlD7TVtvmQotAi+eROguoG4h1Kc dDTDFj23MYdtHh64+Ag1V57VF/cLHvx0Unx2KxvjkpBHvWqfGHo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:24 2025 by rpki-client