This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: tgUt3EhSLx5Czeyn3/wqBKCBHkrjjVPdARlBPD0evT8= Subject key identifier: 62:69:AA:20:09:79:F7:49:41:AF:10:EA:A5:8D:02:5D:71:6E:CF:CD Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 334F242976B3AB6F3B422DBDFEC9AA6F460D8087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 052F Signing time: Tue 09 Dec 2025 17:51:45 +0000 Manifest this update: Tue 09 Dec 2025 17:46:45 +0000 Manifest next update: Fri 12 Dec 2025 19:27:45 +0000 Files and hashes: 1: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 2: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: XzPrb17HK+4PM0YmFYn2X/k65Gh0sWrvHvcl5wreoKQ=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 19:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4f:24:29:76:b3:ab:6f:3b:42:2d:bd:fe:c9:aa:6f:46:0d:80:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Dec 9 17:46:45 2025 GMT Not After : Dec 12 19:27:45 2025 GMT Subject: CN=6269AA200979F74941AF10EAA58D025D716ECFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:5e:9d:81:43:3f:9d:dc:a9:93:4e:44:97: 09:70:0a:6f:7c:d5:5e:6a:48:32:02:d5:9f:4f:8d: 4b:4d:0c:aa:ad:c1:87:5a:3f:ab:21:82:bd:31:9c: 6d:cf:7a:1f:a4:4b:5f:92:79:b8:26:e1:e0:30:dc: 5b:65:b0:bc:31:13:04:ad:4f:65:8c:1d:fe:2d:25: 96:a9:cf:84:8c:68:c0:33:55:77:ed:a1:64:5b:9f: ab:49:72:e2:ac:a3:22:e1:7e:59:0a:66:c3:14:99: 54:c4:c4:74:e6:a4:bb:99:16:25:2a:71:a8:6f:08: 34:f5:0a:b4:6a:35:8e:24:20:4b:44:de:a0:5a:c8: ae:22:75:a9:dc:3e:ac:f7:6b:8a:a3:45:65:dc:18: 97:a6:82:23:c2:99:47:8d:f1:bf:9a:7f:d2:95:9b: b2:36:21:77:83:26:b4:0f:c6:fa:b5:54:69:45:74: 11:de:b4:74:be:01:13:2c:e9:09:4b:f6:f5:47:37: 32:59:49:d1:bb:97:9b:43:39:ff:04:50:24:d4:40: c4:3a:fd:09:be:df:cc:35:35:0c:83:58:57:5f:87: 8f:29:ad:b2:7e:f3:de:75:bc:16:28:e8:83:c6:75: ce:93:d9:c8:6b:5e:78:91:db:8d:10:43:72:97:b5: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:69:AA:20:09:79:F7:49:41:AF:10:EA:A5:8D:02:5D:71:6E:CF:CD X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:27:11:82:64:ad:f7:67:b0:08:59:3c:f4:78:8a:35:d2:bb: 76:42:24:28:8c:53:fd:3c:e8:95:c1:80:fc:15:6f:c6:df:f1: 88:e6:4d:0e:7e:6b:96:04:a5:b2:3c:da:69:d3:05:af:b3:48: 7d:5f:46:90:08:1f:b1:94:d1:83:50:96:e2:93:f4:c7:69:0b: ec:2b:c0:03:e3:5c:4f:e5:fb:7f:f6:eb:bc:35:18:97:1d:2d: d7:cf:29:d8:11:01:12:8d:05:6f:4d:b6:5e:78:d6:a3:e1:38: 1f:3f:57:30:7e:02:d0:14:aa:ab:1b:08:e6:5b:12:bf:d2:1d: f7:21:4f:5d:b5:5c:c2:6b:6b:8a:ba:0a:3a:25:74:3f:33:df: 37:98:af:e2:1f:82:00:99:43:65:88:81:b8:a9:7d:5d:fb:e3: 29:4c:18:ed:38:30:06:b8:c2:d6:6f:cb:61:fd:dd:49:f3:1b: 8b:4b:46:b7:5d:c5:f4:43:8a:0d:e5:4b:aa:a3:77:1c:c2:3f: b2:06:db:63:45:b4:eb:ce:c5:af:94:36:df:ac:65:81:98:84: 3f:07:0e:35:72:53:b8:c1:71:60:42:f9:d3:58:2d:bc:7a:4a: 19:6a:43:28:71:26:b5:c3:88:f4:b9:e8:c2:13:c8:65:b9:70: c5:d3:ee:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM08kKXazq287Qi29/smqb0YNgIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTEyMDkxNzQ2NDVaFw0yNTEyMTIxOTI3NDVaMDMxMTAvBgNV BAMTKDYyNjlBQTIwMDk3OUY3NDk0MUFGMTBFQUE1OEQwMjVENzE2RUNGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK16dgUM/ndypk05ElwlwCm98 1V5qSDIC1Z9PjUtNDKqtwYdaP6shgr0xnG3Peh+kS1+Sebgm4eAw3FtlsLwxEwSt T2WMHf4tJZapz4SMaMAzVXftoWRbn6tJcuKsoyLhflkKZsMUmVTExHTmpLuZFiUq cahvCDT1CrRqNY4kIEtE3qBayK4idancPqz3a4qjRWXcGJemgiPCmUeN8b+af9KV m7I2IXeDJrQPxvq1VGlFdBHetHS+ARMs6QlL9vVHNzJZSdG7l5tDOf8EUCTUQMQ6 /Qm+38w1NQyDWFdfh48prbJ+8951vBYo6IPGdc6T2chrXniR240QQ3KXtfcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYmmqIAl590lBrxDqpY0CXXFuz80wHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQnEYJkrfdnsAhZPPR4ijXSu3ZCJCiMU/08 6JXBgPwVb8bf8YjmTQ5+a5YEpbI82mnTBa+zSH1fRpAIH7GU0YNQluKT9MdpC+wr wAPjXE/l+3/267w1GJcdLdfPKdgRARKNBW9Ntl541qPhOB8/VzB+AtAUqqsbCOZb Er/SHfchT121XMJra4q6CjoldD8z3zeYr+IfggCZQ2WIgbipfV374ylMGO04MAa4 wtZvy2H93UnzG4tLRrddxfRDig3lS6qjdxzCP7IG22NFtOvOxa+UNt+sZYGYhD8H DjVyU7jBcWBC+dNYLbx6ShlqQyhxJrXDiPS56MITyGW5cMXT7s0= -----END CERTIFICATE-----Generated at Wed Dec 10 05:22:33 2025 by rpki-client