This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: dIuHWQyaOkapo9kPPRAnuSsVB7o+m69hGjVMbkMJA7A= Subject key identifier: 8A:BE:74:8E:55:2D:2F:88:CD:F8:B9:AC:C6:AE:81:2F:17:6E:C4:BD Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 46A94756755CA65951059ABA18057AFE8C5B2479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 041C Signing time: Tue 02 Dec 2025 23:11:32 +0000 Manifest this update: Tue 02 Dec 2025 23:06:32 +0000 Manifest next update: Sat 06 Dec 2025 04:14:32 +0000 Files and hashes: 1: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: y7c/Y77+B+XuuLfUCVgZdIzNer7X9A5ChMl4ywa8tjU=) 2: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) 3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 5: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a9:47:56:75:5c:a6:59:51:05:9a:ba:18:05:7a:fe:8c:5b:24:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Dec 2 23:06:32 2025 GMT Not After : Dec 6 04:14:32 2025 GMT Subject: CN=8ABE748E552D2F88CDF8B9ACC6AE812F176EC4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:21:39:a3:dd:12:ff:ee:e1:cb:2b:8d:d6: d6:44:f1:95:44:39:d8:f1:d7:02:db:7e:4d:91:2b: ca:9a:d6:d0:c1:f6:99:f8:c0:d4:7e:ba:73:b6:ca: 9f:c8:04:ac:da:53:59:11:16:d6:d7:77:9e:9d:a6: 42:9f:da:76:9b:9f:4a:38:3d:a4:4d:a8:fb:52:ac: ed:9b:c3:43:04:ec:62:73:a9:9c:6f:b1:5b:09:05: 50:5f:d7:01:48:f1:80:e7:8f:2e:9c:ae:4f:c7:23: a9:72:68:6a:8e:3a:81:93:b3:08:f3:18:3b:03:12: 5a:ab:1b:18:e0:d5:6b:28:4a:fa:7d:11:e2:15:63: 9b:01:62:21:aa:32:95:39:4a:d0:3f:54:23:3b:63: 0b:85:30:a9:d6:14:cb:20:ea:dd:ab:0a:a1:1a:8e: 29:94:56:7e:58:ce:64:f1:08:8a:88:f6:9b:d3:85: dd:ff:39:9f:05:fa:4e:77:6d:09:61:a9:61:8a:b3: bb:60:bf:54:a9:f4:27:47:e2:42:6f:c7:e9:37:87: 73:34:98:b3:8e:af:20:e9:4d:20:91:af:c8:b7:30: cf:67:0b:f6:f7:22:36:6f:68:31:72:58:77:c4:ff: cd:dc:56:66:4d:18:94:7b:bd:29:7b:d3:e9:91:b2: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BE:74:8E:55:2D:2F:88:CD:F8:B9:AC:C6:AE:81:2F:17:6E:C4:BD X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1a:d5:e3:ed:1d:e5:a5:d7:d2:60:ba:67:33:ce:ab:89:07: 42:6b:f4:10:49:02:7e:79:84:e8:5b:03:a9:17:8c:87:53:08: 83:ce:5a:09:dc:6e:3a:c0:49:68:3c:2f:89:7a:36:f2:e5:74: 8a:38:ee:b8:6e:9d:07:04:ac:dd:cc:25:86:0c:06:ef:7b:5f: 54:d3:0a:e7:95:93:63:7b:1a:3b:99:b5:30:38:9b:48:fb:b0: 0a:40:49:88:30:2f:03:3b:11:59:b0:23:24:be:88:db:ab:49: 2a:9f:eb:9a:34:54:d1:c5:b6:d1:9b:1b:7f:3c:f3:34:1d:0b: 08:25:f6:71:01:b0:51:6b:66:b7:ef:17:7f:d6:85:53:73:54: 89:e8:34:c1:dc:b8:92:b8:05:7f:7e:a6:3d:fe:d3:a9:33:08: fe:39:14:0a:37:39:7f:fb:db:55:7e:15:e5:36:6e:fd:d3:dc: 32:31:df:b3:6e:45:ba:6f:a8:cd:80:1c:1e:c3:52:9b:2d:8f: 9f:08:2e:7d:ca:c3:8b:e1:28:d1:63:43:18:7b:c7:3c:66:c8: eb:9f:0d:af:8e:f1:fe:3d:4a:77:38:01:c4:a7:6c:d6:d9:58: 66:7d:43:fe:bc:b3:6a:5d:01:59:e2:01:70:ab:09:55:9e:21: 77:eb:56:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqlHVnVcpllRBZq6GAV6/oxbJHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTEyMDIyMzA2MzJaFw0yNTEyMDYwNDE0MzJaMDMxMTAvBgNV BAMTKDhBQkU3NDhFNTUyRDJGODhDREY4QjlBQ0M2QUU4MTJGMTc2RUM0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWiE5o90S/+7hyyuN1tZE8ZVE Odjx1wLbfk2RK8qa1tDB9pn4wNR+unO2yp/IBKzaU1kRFtbXd56dpkKf2nabn0o4 PaRNqPtSrO2bw0ME7GJzqZxvsVsJBVBf1wFI8YDnjy6crk/HI6lyaGqOOoGTswjz GDsDElqrGxjg1WsoSvp9EeIVY5sBYiGqMpU5StA/VCM7YwuFMKnWFMsg6t2rCqEa jimUVn5YzmTxCIqI9pvThd3/OZ8F+k53bQlhqWGKs7tgv1Sp9CdH4kJvx+k3h3M0 mLOOryDpTSCRr8i3MM9nC/b3IjZvaDFyWHfE/83cVmZNGJR7vSl70+mRsrG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUir50jlUtL4jN+Lmsxq6BLxduxL0wHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8a1ePtHeWl19JgumczzquJB0Jr9BBJAn55 hOhbA6kXjIdTCIPOWgncbjrASWg8L4l6NvLldIo47rhunQcErN3MJYYMBu97X1TT CueVk2N7GjuZtTA4m0j7sApASYgwLwM7EVmwIyS+iNurSSqf65o0VNHFttGbG388 8zQdCwgl9nEBsFFrZrfvF3/WhVNzVInoNMHcuJK4BX9+pj3+06kzCP45FAo3OX/7 21V+FeU2bv3T3DIx37NuRbpvqM2AHB7DUpstj58ILn3Kw4vhKNFjQxh7xzxmyOuf Da+O8f49Snc4AcSnbNbZWGZ9Q/68s2pdAVniAXCrCVWeIXfrVi0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:31 2025 by rpki-client