This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: H3goRougb/TSP7KNf5e85kf/ECV/d65j1wJYe0ufo1g= Subject key identifier: 63:65:27:0D:63:37:4C:2B:01:6B:55:21:B6:8C:55:1E:C7:2D:47:42 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 7236B38D9BF64F44E3B1E9B051A6436B6066EFFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: EC Signing time: Wed 03 Dec 2025 13:50:40 +0000 Manifest this update: Wed 03 Dec 2025 13:45:40 +0000 Manifest next update: Sat 06 Dec 2025 19:28:40 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: StghQrFZDGwBZ900HezvAZ1Fge0ofqViYb1I/oDCFSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:b3:8d:9b:f6:4f:44:e3:b1:e9:b0:51:a6:43:6b:60:66:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Dec 3 13:45:40 2025 GMT Not After : Dec 6 19:28:40 2025 GMT Subject: CN=6365270D63374C2B016B5521B68C551EC72D4742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:9d:7a:7b:04:6f:01:15:da:f0:28:b7:c4: 39:6a:70:3f:8f:23:5a:4d:64:1f:d7:37:44:20:d8: a9:f2:04:10:9e:8d:38:7b:09:c0:f8:d5:4b:ca:21: cb:d7:c0:69:c7:f8:b5:52:d0:44:d4:7b:f1:ba:4b: ed:59:7f:fc:11:46:b0:d1:9b:0b:d0:a7:c0:c0:d8: ef:c6:a8:69:6b:17:b3:fe:06:3d:01:97:3f:40:bd: 7d:59:1b:03:22:f8:34:b9:66:e0:2e:1c:02:16:34: f9:76:10:6c:54:84:2c:54:e9:d6:e6:b3:7b:5d:b7: d6:6f:9c:6c:cc:59:c9:bf:52:e0:aa:5f:ed:05:ff: d2:86:f1:5d:18:64:8e:78:db:4f:41:92:e1:5d:1b: c8:90:f3:c4:f0:29:45:80:5c:c6:a8:5e:d6:d2:c9: c1:e8:ae:61:44:bb:9f:c6:fd:7e:ef:b2:b7:ef:f6: 47:0a:02:50:b3:bb:54:b0:d4:cf:c6:59:39:30:a9: d4:9f:5a:2f:9e:76:ee:de:ce:d5:41:00:57:ba:e3: 4a:ef:21:dc:27:15:cd:a3:a2:25:70:5a:20:67:e7: b1:46:7b:9a:ec:cf:f0:23:3a:42:e8:9f:d9:35:e0: 1d:88:a8:51:42:63:cb:30:76:c6:2e:86:76:d0:0e: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:65:27:0D:63:37:4C:2B:01:6B:55:21:B6:8C:55:1E:C7:2D:47:42 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:99:e2:f0:af:9f:c2:aa:76:e9:ad:9b:a2:c3:07:be:ac:eb: cb:52:0c:e8:50:df:71:43:a3:67:94:e8:3a:15:ef:62:22:50: 51:70:9e:a6:50:d3:04:22:df:f1:90:66:4e:69:81:ae:80:20: 81:97:de:1e:8c:0d:cd:ce:31:6f:21:14:5b:7b:a3:5d:c7:90: 0c:61:a3:75:e3:d3:60:5c:f1:8c:eb:da:e9:b8:a5:2f:d7:39: f2:b9:95:93:aa:64:1f:90:78:a0:73:c2:a1:de:c3:b4:d1:c8: 7d:db:6a:f3:a6:09:47:12:b7:12:e8:0c:72:ee:36:1a:69:42: 26:77:d3:fc:de:b9:6c:d1:5c:b0:92:ab:f8:d4:af:f8:0c:a7: 56:e5:7a:74:69:4d:05:a3:45:f1:40:3f:51:fb:5b:ff:ac:eb: 12:fc:1d:13:76:ae:06:39:c7:38:28:78:e6:eb:1d:6f:05:fb: c6:c4:41:9c:b4:ed:4d:60:e4:b3:e7:e0:86:2d:00:03:8d:ec: cf:f3:ef:65:a8:b2:73:d1:cc:f3:d9:09:37:6a:c0:1c:73:6f: 53:b9:83:fa:fc:60:12:86:be:3e:f5:c1:f0:22:f2:f8:69:0a: 20:2a:0c:fc:af:d9:c4:04:8a:3e:19:52:bf:19:45:46:6c:da: 3c:c4:3b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjazjZv2T0TjsemwUaZDa2Bm7/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTEyMDMxMzQ1NDBaFw0yNTEyMDYxOTI4NDBaMDMxMTAvBgNV BAMTKDYzNjUyNzBENjMzNzRDMkIwMTZCNTUyMUI2OEM1NTFFQzcyRDQ3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oZ16ewRvARXa8Ci3xDlqcD+P I1pNZB/XN0Qg2KnyBBCejTh7CcD41UvKIcvXwGnH+LVS0ETUe/G6S+1Zf/wRRrDR mwvQp8DA2O/GqGlrF7P+Bj0Blz9AvX1ZGwMi+DS5ZuAuHAIWNPl2EGxUhCxU6dbm s3tdt9ZvnGzMWcm/UuCqX+0F/9KG8V0YZI54209BkuFdG8iQ88TwKUWAXMaoXtbS ycHormFEu5/G/X7vsrfv9kcKAlCzu1Sw1M/GWTkwqdSfWi+edu7eztVBAFe640rv IdwnFc2joiVwWiBn57FGe5rsz/AjOkLon9k14B2IqFFCY8swdsYuhnbQDrZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2UnDWM3TCsBa1UhtoxVHsctR0IwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuZ4vCvn8Kqdumtm6LDB76s68tSDOhQ33FD o2eU6DoV72IiUFFwnqZQ0wQi3/GQZk5pga6AIIGX3h6MDc3OMW8hFFt7o13HkAxh o3Xj02Bc8Yzr2um4pS/XOfK5lZOqZB+QeKBzwqHew7TRyH3bavOmCUcStxLoDHLu NhppQiZ30/zeuWzRXLCSq/jUr/gMp1blenRpTQWjRfFAP1H7W/+s6xL8HRN2rgY5 xzgoeObrHW8F+8bEQZy07U1g5LPn4IYtAAON7M/z72WosnPRzPPZCTdqwBxzb1O5 g/r8YBKGvj71wfAi8vhpCiAqDPyv2cQEij4ZUr8ZRUZs2jzEOwA= -----END CERTIFICATE-----Generated at Wed Dec 3 18:02:16 2025 by rpki-client