This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: 8TShaXihqdLeZIQKXmbBVjbTaUZ2vIYUqYgXlYbey4U= Subject key identifier: 1D:A2:DF:E2:6A:EB:DE:AD:91:88:D1:22:BB:DA:CF:2D:08:16:1D:AA Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 3532254D76E5131C8CCCEB78D1CB56A163E65813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04F5 Signing time: Thu 18 Dec 2025 16:21:59 +0000 Manifest this update: Thu 18 Dec 2025 16:16:59 +0000 Manifest next update: Mon 22 Dec 2025 00:51:59 +0000 Files and hashes: 1: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 2: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: BEzszVoyLY8Jq1YXxuad/YH+dwsY6aexlmcPDZ2iV0A=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 4: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 5: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:32:25:4d:76:e5:13:1c:8c:cc:eb:78:d1:cb:56:a1:63:e6:58:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Dec 18 16:16:59 2025 GMT Not After : Dec 22 00:51:59 2025 GMT Subject: CN=1DA2DFE26AEBDEAD9188D122BBDACF2D08161DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:ea:1d:74:a2:51:65:ae:bb:4e:40:2e:ab: 0f:dc:a0:eb:a5:1e:17:0d:c1:4d:98:45:2e:d7:20: cd:1b:1d:49:2c:eb:d3:e2:68:f6:a9:92:39:48:f0: 96:20:20:49:f4:19:49:a9:4e:41:54:ec:39:8c:4e: 90:49:43:15:52:23:d4:84:05:0a:c4:df:06:25:e3: 7e:f0:4e:fd:aa:f7:1e:57:b8:f5:dd:2a:f7:c5:db: 24:6a:fc:35:4b:0b:99:e8:8a:93:35:93:b0:db:56: 99:77:0b:4d:84:e8:b6:83:50:90:94:95:30:60:6e: 62:28:59:f7:05:2b:e1:79:6a:9e:5c:a4:28:4f:50: 48:8f:62:e7:65:95:d4:a8:a9:26:07:ee:2f:90:bb: a5:b8:51:20:c3:78:1c:15:a7:c4:18:35:a7:4d:6e: b1:db:e0:8d:61:e8:f3:95:e8:f0:b0:58:a5:8f:14: 3b:b2:a0:5c:44:70:e4:f2:1f:04:10:1d:f1:4b:65: 38:e3:32:a3:83:c8:4c:b2:07:e9:c5:34:78:34:f5: f2:0b:58:1f:73:03:52:62:e1:0f:41:4d:82:47:66: 11:e9:29:45:3f:a8:1a:37:53:f5:53:c8:ae:fb:ef: 99:85:34:16:a2:27:59:d4:71:cf:f1:9d:4b:13:10: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:DF:E2:6A:EB:DE:AD:91:88:D1:22:BB:DA:CF:2D:08:16:1D:AA X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:45:98:dd:67:98:ca:b5:8f:9f:70:d8:4a:12:13:35:c5:8c: e9:30:39:60:19:06:af:26:79:dc:c0:54:5a:bb:a1:0f:cd:47: 6b:49:8b:37:8a:73:fd:1d:92:09:43:f7:d7:ea:19:ec:b4:b1: be:76:08:01:6e:76:36:70:97:83:17:85:a6:25:18:45:c6:a1: 0a:3c:d3:8d:ac:5b:8b:f7:cd:31:67:b6:c6:2d:f1:62:67:be: f7:bb:ce:43:59:e1:33:bc:3a:4b:99:05:73:09:e1:94:cf:12: 49:46:60:1d:6a:4e:9e:e0:f4:7e:0f:7f:22:d0:25:16:cb:9d: 2f:8e:86:26:3f:33:3a:fa:d6:4e:02:9c:3e:88:9c:aa:b4:11: 03:31:b3:48:f4:c2:53:3d:e6:21:93:5c:95:bb:33:56:17:06: 24:aa:fe:35:17:55:b7:41:0b:ef:4d:23:d9:32:64:05:42:3a: d9:13:2e:f6:de:28:56:27:58:19:23:db:29:64:2d:eb:cf:6e: 42:c2:74:cb:cd:b4:93:d4:77:3f:92:ab:50:2e:cf:7f:3e:da: 3f:c6:cf:ac:13:e7:d6:0c:ac:84:f3:da:32:5c:85:6f:56:10: 8b:31:80:5c:3e:13:e8:cc:74:25:d6:77:b4:51:d4:13:af:b7: 42:ec:5f:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTIlTXblExyMzOt40ctWoWPmWBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEyMTgxNjE2NTlaFw0yNTEyMjIwMDUxNTlaMDMxMTAvBgNV BAMTKDFEQTJERkUyNkFFQkRFQUQ5MTg4RDEyMkJCREFDRjJEMDgxNjFEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNeoddKJRZa67TkAuqw/coOul HhcNwU2YRS7XIM0bHUks69PiaPapkjlI8JYgIEn0GUmpTkFU7DmMTpBJQxVSI9SE BQrE3wYl437wTv2q9x5XuPXdKvfF2yRq/DVLC5noipM1k7DbVpl3C02E6LaDUJCU lTBgbmIoWfcFK+F5ap5cpChPUEiPYudlldSoqSYH7i+Qu6W4USDDeBwVp8QYNadN brHb4I1h6POV6PCwWKWPFDuyoFxEcOTyHwQQHfFLZTjjMqODyEyyB+nFNHg09fIL WB9zA1Ji4Q9BTYJHZhHpKUU/qBo3U/VTyK7775mFNBaiJ1nUcc/xnUsTEMmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaLf4mrr3q2RiNEiu9rPLQgWHaowHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9FmN1nmMq1j59w2EoSEzXFjOkwOWAZBq8m edzAVFq7oQ/NR2tJizeKc/0dkglD99fqGey0sb52CAFudjZwl4MXhaYlGEXGoQo8 042sW4v3zTFntsYt8WJnvve7zkNZ4TO8OkuZBXMJ4ZTPEklGYB1qTp7g9H4PfyLQ JRbLnS+OhiY/Mzr61k4CnD6InKq0EQMxs0j0wlM95iGTXJW7M1YXBiSq/jUXVbdB C+9NI9kyZAVCOtkTLvbeKFYnWBkj2ylkLevPbkLCdMvNtJPUdz+Sq1Auz38+2j/G z6wT59YMrITz2jJchW9WEIsxgFw+E+jMdCXWd7RR1BOvt0LsX94= -----END CERTIFICATE-----Generated at Fri Dec 19 09:48:12 2025 by rpki-client