This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: 4fCAD5W7j8y8jyrPAYib1+XzcHie5bL0Sm4IC4yp1Gw= Subject key identifier: 9F:A5:98:21:2B:6F:84:DD:6E:D5:4C:62:BA:AF:BD:E4:87:56:70:8C Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 5CE10D994C9993ACD1D90CBD8F518E7ED9B6A19B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: DF Signing time: Sat 20 Dec 2025 22:40:00 +0000 Manifest this update: Sat 20 Dec 2025 22:35:00 +0000 Manifest next update: Wed 24 Dec 2025 05:35:00 +0000 Files and hashes: 1: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: q29x18alywhc47zf38j+BjQk2d2/++oTrJd9KNisebg=) 2: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e1:0d:99:4c:99:93:ac:d1:d9:0c:bd:8f:51:8e:7e:d9:b6:a1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Dec 20 22:35:00 2025 GMT Not After : Dec 24 05:35:00 2025 GMT Subject: CN=9FA598212B6F84DD6ED54C62BAAFBDE48756708C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:3d:78:3f:60:29:75:5f:b2:c0:b1:73:a3: 5b:ed:04:aa:76:e5:f7:ac:77:df:30:af:31:37:ac: 2b:25:81:31:6d:e8:68:0d:07:db:52:10:e7:55:ef: 4d:06:58:59:24:c2:3a:83:c2:9f:54:5e:bd:b8:6c: 7f:16:06:ee:f6:a5:99:c4:e1:bf:90:a4:f4:af:49: d1:6c:81:fd:0d:ef:a0:4f:e7:c6:a2:f5:0a:ea:74: af:0e:b0:65:58:85:9d:8d:04:3b:90:a3:2b:88:27: 62:de:b5:2e:b1:45:9d:69:67:b0:9e:d0:94:3b:81: b4:30:91:67:d5:ea:64:7d:f6:80:6d:61:3b:f3:62: 0b:ea:16:c6:bf:c1:f8:d7:a5:91:1e:81:09:0e:aa: 36:f9:e9:f7:df:d1:be:8e:9c:95:5b:64:e4:a8:6c: 6f:a9:a2:71:a0:04:b7:67:d9:97:91:35:d5:db:43: 28:08:ac:9b:3d:97:bb:70:3b:b7:bf:34:66:e6:39: 4f:79:dd:8f:b3:03:12:2e:b9:5d:b5:75:3f:b4:05: af:5f:8b:d0:6f:20:04:be:c8:71:ae:e7:f2:57:da: a2:59:a2:62:e2:28:59:54:90:99:b3:47:8a:a9:0e: 70:4a:2a:1c:c7:1f:9f:af:f5:59:76:c3:7f:f7:31: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:98:21:2B:6F:84:DD:6E:D5:4C:62:BA:AF:BD:E4:87:56:70:8C X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cd:c1:fd:50:3a:d5:77:b5:77:f6:19:a6:f8:0e:b6:e8:9b: c1:0e:e2:23:6a:29:36:12:db:44:43:9f:97:cb:58:24:bc:48: 38:e4:fd:d7:bb:cb:78:d5:0f:54:69:b3:97:99:ce:7c:2e:1e: ff:a2:04:c2:fe:ef:73:d6:3b:25:3c:98:cb:6d:88:c4:0d:f0: 2c:8c:0e:dc:27:79:aa:84:de:a8:74:bf:c8:80:39:bc:9b:97: 4c:39:ac:1b:3a:d4:13:54:3b:5f:78:03:b4:73:07:2f:3c:df: d2:fa:50:48:1b:f2:7f:ba:8b:d2:a7:07:9d:9e:46:1e:2b:83: 51:64:c3:94:db:64:5b:15:f2:0d:1e:9f:65:97:e2:09:77:73: 53:86:27:ef:7a:d4:57:0b:b6:16:0c:4b:e0:50:36:07:36:73: 48:4c:ff:3e:92:52:a2:5f:42:ef:e8:7c:34:24:f9:2d:62:ba: a7:c8:fe:60:e8:c7:24:c9:32:1c:7c:85:11:7c:ae:88:ea:d7: c6:e2:5a:87:44:70:df:b7:16:37:f1:fd:9c:23:a4:ec:81:a8: 5b:ed:f3:27:2a:2e:ba:1c:2f:3f:ed:9d:57:79:04:ab:91:82: 92:5c:bd:a6:d6:e4:3d:c4:e5:ee:f5:3f:54:c6:41:32:88:a2: 2a:38:e2:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOENmUyZk6zR2Qy9j1GOftm2oZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTEyMjAyMjM1MDBaFw0yNTEyMjQwNTM1MDBaMDMxMTAvBgNV BAMTKDlGQTU5ODIxMkI2Rjg0REQ2RUQ1NEM2MkJBQUZCREU0ODc1NjcwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCD14P2ApdV+ywLFzo1vtBKp2 5fesd98wrzE3rCslgTFt6GgNB9tSEOdV700GWFkkwjqDwp9UXr24bH8WBu72pZnE 4b+QpPSvSdFsgf0N76BP58ai9QrqdK8OsGVYhZ2NBDuQoyuIJ2LetS6xRZ1pZ7Ce 0JQ7gbQwkWfV6mR99oBtYTvzYgvqFsa/wfjXpZEegQkOqjb56fff0b6OnJVbZOSo bG+ponGgBLdn2ZeRNdXbQygIrJs9l7twO7e/NGbmOU953Y+zAxIuuV21dT+0Ba9f i9BvIAS+yHGu5/JX2qJZomLiKFlUkJmzR4qpDnBKKhzHH5+v9Vl2w3/3MUPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn6WYIStvhN1u1Uxiuq+95IdWcIwwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvNwf1QOtV3tXf2Gab4Drbom8EO4iNqKTYS 20RDn5fLWCS8SDjk/de7y3jVD1Rps5eZznwuHv+iBML+73PWOyU8mMttiMQN8CyM DtwneaqE3qh0v8iAObybl0w5rBs61BNUO194A7RzBy8839L6UEgb8n+6i9KnB52e Rh4rg1Fkw5TbZFsV8g0en2WX4gl3c1OGJ+961FcLthYMS+BQNgc2c0hM/z6SUqJf Qu/ofDQk+S1iuqfI/mDoxyTJMhx8hRF8rojq18biWodEcN+3Fjfx/ZwjpOyBqFvt 8ycqLrocLz/tnVd5BKuRgpJcvabW5D3E5e71P1TGQTKIoio44uw= -----END CERTIFICATE-----Generated at Mon Dec 22 02:22:13 2025 by rpki-client