This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: XQHbc1fGFBoL0HU+f68FiBdhprouVmW6xxEb7FBh8Ug= Subject key identifier: 5D:CE:8D:A2:F6:57:2D:A7:60:32:3A:0B:5C:CA:42:22:10:83:A3:E1 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 7C6C539B9DE90D77264C2B2381CDBE4D5A91A21D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02FE Signing time: Tue 02 Dec 2025 00:02:28 +0000 Manifest this update: Mon 01 Dec 2025 23:57:28 +0000 Manifest next update: Fri 05 Dec 2025 03:47:28 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: qV0m+l1TFPTv1x1Mtg9/LImXOQNr3A2Y3J8XHV62yZc=) 2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=) 3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6c:53:9b:9d:e9:0d:77:26:4c:2b:23:81:cd:be:4d:5a:91:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Dec 1 23:57:28 2025 GMT Not After : Dec 5 03:47:28 2025 GMT Subject: CN=5DCE8DA2F6572DA760323A0B5CCA42221083A3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:14:3e:21:71:71:7d:74:7f:fc:a4:a0:22: 2e:33:2e:cc:0c:63:18:e6:07:82:65:a2:50:fe:44: db:24:08:17:ad:68:40:fc:6d:a6:b2:d8:65:a6:4d: 0a:c1:31:66:70:73:66:5f:6d:1b:b9:c5:5c:aa:fc: 2d:30:a2:27:fb:14:7d:2e:e6:e0:59:e6:f4:79:64: c8:e3:fc:bb:9c:a0:6b:78:53:4d:46:64:11:ff:33: 84:9d:97:73:cd:f6:26:bd:3c:17:10:92:dc:ca:34: 6b:ab:3e:17:99:f0:42:75:c5:bc:69:68:c6:ac:8f: 6e:0a:14:d2:df:21:21:1d:6e:75:34:01:3a:b5:93: 14:4e:2c:cd:4f:c4:02:07:36:d5:ae:6b:2f:88:c8: 0e:f7:7d:08:33:ff:78:fc:13:16:21:8c:89:3e:3b: 2e:77:02:42:eb:b9:e0:e8:0c:f8:c1:28:e0:d6:8a: de:d5:3e:b3:e2:7a:c3:f5:0b:9c:ca:a1:8e:25:92: e3:39:6d:eb:d0:43:46:65:ee:99:50:0d:fe:0d:b9: 30:ec:3d:52:90:6b:ae:32:80:ad:4a:78:a2:de:39: c8:c1:83:a9:d8:91:7c:4e:30:26:8a:21:6c:53:1d: 6a:b9:fb:be:46:7c:f4:ef:c7:e2:3b:dd:62:eb:2e: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:8D:A2:F6:57:2D:A7:60:32:3A:0B:5C:CA:42:22:10:83:A3:E1 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:21:f9:f0:a9:54:72:89:b2:e2:93:e1:29:4f:87:29:d3:3f: 7e:1f:f5:ce:0a:e8:b5:6b:e9:f0:c3:25:97:3e:81:e4:0c:2d: 0b:f1:3d:8d:e7:50:28:cd:18:bf:03:37:45:b3:e0:12:89:24: 7d:41:2c:c3:7d:50:50:ac:08:bf:24:53:b5:8b:31:b0:eb:d4: 3a:ca:c7:0f:67:52:e3:08:4a:38:86:4e:f1:84:ea:3a:2d:79: 99:60:2d:a3:fe:28:69:5a:f2:1c:9e:93:4e:e8:70:07:c3:35: d0:fe:51:c5:a1:f8:87:38:cb:9d:0a:c2:63:b7:63:4f:e4:6c: 05:3f:73:eb:c2:9c:5a:a9:ca:12:c6:e0:f5:a6:93:ea:e7:b3: e8:49:ae:a8:d3:cd:c2:ae:3b:e2:53:9e:3c:d9:44:f6:e1:94: 80:9f:86:98:0f:11:d1:6d:c9:66:47:40:09:24:b8:03:cb:90: 6a:a5:48:bd:af:0a:67:e1:b1:e9:4d:9e:08:a8:2d:52:8d:ee: 42:40:a1:31:9c:1f:96:85:83:86:4c:1d:dd:58:7d:16:de:4b: 6b:e6:e3:14:07:13:19:e4:c6:67:8f:e1:c6:6a:e0:28:fb:f7: 95:0e:0f:35:58:91:82:97:f6:bc:5e:a8:79:3c:3e:13:1f:67: ee:54:5f:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGxTm53pDXcmTCsjgc2+TVqRoh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTEyMDEyMzU3MjhaFw0yNTEyMDUwMzQ3MjhaMDMxMTAvBgNV BAMTKDVEQ0U4REEyRjY1NzJEQTc2MDMyM0EwQjVDQ0E0MjIyMTA4M0EzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wRQ+IXFxfXR//KSgIi4zLswM YxjmB4JlolD+RNskCBetaED8baay2GWmTQrBMWZwc2ZfbRu5xVyq/C0woif7FH0u 5uBZ5vR5ZMjj/LucoGt4U01GZBH/M4Sdl3PN9ia9PBcQktzKNGurPheZ8EJ1xbxp aMasj24KFNLfISEdbnU0ATq1kxROLM1PxAIHNtWuay+IyA73fQgz/3j8ExYhjIk+ Oy53AkLrueDoDPjBKODWit7VPrPiesP1C5zKoY4lkuM5bevQQ0Zl7plQDf4NuTDs PVKQa64ygK1KeKLeOcjBg6nYkXxOMCaKIWxTHWq5+75GfPTvx+I73WLrLrxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXc6NovZXLadgMjoLXMpCIhCDo+EwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIh+fCpVHKJsuKT4SlPhynTP34f9c4K6LVr 6fDDJZc+geQMLQvxPY3nUCjNGL8DN0Wz4BKJJH1BLMN9UFCsCL8kU7WLMbDr1DrK xw9nUuMISjiGTvGE6joteZlgLaP+KGla8hyek07ocAfDNdD+UcWh+Ic4y50KwmO3 Y0/kbAU/c+vCnFqpyhLG4PWmk+rns+hJrqjTzcKuO+JTnjzZRPbhlICfhpgPEdFt yWZHQAkkuAPLkGqlSL2vCmfhselNngioLVKN7kJAoTGcH5aFg4ZMHd1YfRbeS2vm 4xQHExnkxmeP4cZq4Cj795UODzVYkYKX9rxeqHk8PhMfZ+5UXyc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:22:53 2025 by rpki-client