This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: yHAti6Dw/OurFaQ/ADAy/PezRGhPTyrEis/Wk//ktps= Subject key identifier: 8E:B9:34:13:F8:8F:D0:FB:95:DC:E0:49:18:05:83:75:1D:49:54:0E Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 2A0A102AF0680DA7D2EB348399E0045788487F83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 023F Signing time: Mon 01 Dec 2025 17:10:02 +0000 Manifest this update: Mon 01 Dec 2025 17:05:02 +0000 Manifest next update: Thu 04 Dec 2025 17:10:02 +0000 Files and hashes: 1: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 2: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: gqghD7kz0D7n/T/W2vNtXpCNSVIZv8IDTc6567ovViA=) 3: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 4: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 5: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 6: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0a:10:2a:f0:68:0d:a7:d2:eb:34:83:99:e0:04:57:88:48:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Dec 1 17:05:02 2025 GMT Not After : Dec 4 17:10:02 2025 GMT Subject: CN=8EB93413F88FD0FB95DCE049180583751D49540E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:a9:b7:8a:00:82:cf:82:db:24:4e:42:a8: 69:db:5b:54:82:89:6a:77:52:f0:72:f4:f5:ac:80: 47:07:b2:f4:c7:8e:fe:36:4e:14:d5:02:9c:ef:d0: e4:d3:e8:dc:ec:98:31:84:27:f8:53:1b:cd:e0:89: 03:26:8b:e7:e4:f5:1b:65:ff:51:dc:60:cb:db:4a: 7d:80:8a:55:74:dc:93:7f:ed:6e:a6:ab:d2:52:d6: 50:2e:bc:dd:02:b0:97:d7:72:fc:39:ea:7a:0f:a4: af:c1:31:04:56:cd:9b:a9:ee:ed:2f:3d:1f:f7:d3: fe:8c:52:2c:fc:a7:39:1d:87:9b:35:62:fb:60:7e: 68:1e:6c:a3:56:ed:05:4e:b4:1f:42:6b:99:e8:83: d7:1a:88:8c:7e:6b:0e:38:3e:ca:a5:bb:4d:e8:f8: e9:65:4b:33:1e:ec:3e:24:43:cb:07:70:ea:a6:e6: 5c:4b:14:3b:dd:e7:98:38:08:f2:d0:70:3e:60:4b: e6:9e:bb:79:53:ef:e2:6d:bb:ab:b7:7d:52:71:d2: f9:30:a5:72:94:f2:5b:f3:49:37:e9:df:c3:35:1b: c9:dd:6c:19:d1:2a:fb:ec:71:ee:7c:36:38:b0:00: dd:0d:40:a3:f2:c1:c9:8f:33:95:fb:74:b5:38:54: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:34:13:F8:8F:D0:FB:95:DC:E0:49:18:05:83:75:1D:49:54:0E X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:14:b7:65:0c:67:79:d7:04:d5:73:de:cb:9c:45:06:97:54: 78:c6:a6:34:86:50:33:ca:76:03:be:fa:5a:10:82:c9:70:30: 6c:f6:2a:56:82:33:64:20:3c:a0:60:00:0b:4f:80:ab:97:7e: 86:6d:fb:78:c5:e8:ed:09:62:ef:6a:67:49:bf:7b:68:24:46: 59:09:c6:41:c0:9c:14:e5:2a:24:ef:c1:ce:08:02:18:b4:32: 40:07:ee:f9:0d:93:07:48:09:6f:83:64:c7:29:95:27:7a:d7: 9f:be:3b:47:4f:9b:2e:c7:cd:8c:80:d3:68:4f:75:0e:b3:d3: 12:cc:de:41:95:dd:a4:ae:eb:21:33:1b:69:a9:03:d4:f3:01: f8:a8:4a:9a:a5:d6:f8:2d:ea:0d:a9:33:fa:47:09:18:95:d7: 8a:1f:e8:14:53:bc:ec:bf:ff:56:6a:63:8b:7d:1d:f8:eb:07: 46:40:c9:35:fb:05:f1:ee:fe:0a:c1:23:28:74:ac:6b:29:af: 85:03:cb:7a:5e:b1:b8:7c:8e:ae:9e:31:15:93:ac:8f:65:ff: 58:a1:ae:cd:c9:79:06:45:da:98:e6:f6:6f:a4:36:f7:48:47: f4:03:d5:9b:49:8d:44:e6:3b:da:a0:81:68:7e:27:f9:87:76: a2:28:97:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgoQKvBoDafS6zSDmeAEV4hIf4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTEyMDExNzA1MDJaFw0yNTEyMDQxNzEwMDJaMDMxMTAvBgNV BAMTKDhFQjkzNDEzRjg4RkQwRkI5NURDRTA0OTE4MDU4Mzc1MUQ0OTU0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HKm3igCCz4LbJE5CqGnbW1SC iWp3UvBy9PWsgEcHsvTHjv42ThTVApzv0OTT6NzsmDGEJ/hTG83giQMmi+fk9Rtl /1HcYMvbSn2AilV03JN/7W6mq9JS1lAuvN0CsJfXcvw56noPpK/BMQRWzZup7u0v PR/30/6MUiz8pzkdh5s1YvtgfmgebKNW7QVOtB9Ca5nog9caiIx+aw44Psqlu03o +OllSzMe7D4kQ8sHcOqm5lxLFDvd55g4CPLQcD5gS+aeu3lT7+Jtu6u3fVJx0vkw pXKU8lvzSTfp38M1G8ndbBnRKvvsce58NjiwAN0NQKPywcmPM5X7dLU4VAgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrk0E/iP0PuV3OBJGAWDdR1JVA4wHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcUt2UMZ3nXBNVz3sucRQaXVHjGpjSGUDPK dgO++loQgslwMGz2KlaCM2QgPKBgAAtPgKuXfoZt+3jF6O0JYu9qZ0m/e2gkRlkJ xkHAnBTlKiTvwc4IAhi0MkAH7vkNkwdICW+DZMcplSd615++O0dPmy7HzYyA02hP dQ6z0xLM3kGV3aSu6yEzG2mpA9TzAfioSpql1vgt6g2pM/pHCRiV14of6BRTvOy/ /1ZqY4t9HfjrB0ZAyTX7BfHu/grBIyh0rGspr4UDy3pesbh8jq6eMRWTrI9l/1ih rs3JeQZF2pjm9m+kNvdIR/QD1ZtJjUTmO9qggWh+J/mHdqIolx8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:24 2025 by rpki-client