This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: EMIg/1jdgX3WhSLqB2mcIsG88BM3n0Fd9HTGOed1WyI= Subject key identifier: 07:3A:35:C4:95:BC:B3:AE:4F:A3:B3:58:A3:D1:1D:16:30:0C:38:12 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 5CAA5993C2145BE721BFF506671B76AF66C13631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0225 Signing time: Tue 02 Dec 2025 18:21:57 +0000 Manifest this update: Tue 02 Dec 2025 18:16:57 +0000 Manifest next update: Fri 05 Dec 2025 21:27:57 +0000 Files and hashes: 1: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 2: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 3: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 4: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 5: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 6: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: H6fZ9uW4rw+gNtJHDMBZk8fbl1DpB4kBv/iYskF5xNQ=) 7: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 8: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 9: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 10: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 11: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 12: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 13: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 14: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 15: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 16: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 17: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:aa:59:93:c2:14:5b:e7:21:bf:f5:06:67:1b:76:af:66:c1:36:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Dec 2 18:16:57 2025 GMT Not After : Dec 5 21:27:57 2025 GMT Subject: CN=073A35C495BCB3AE4FA3B358A3D11D16300C3812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:bc:0e:f8:49:49:07:7f:d0:a4:72:be:65: eb:81:ea:a0:3e:c5:02:3e:fc:77:7b:60:c3:72:c2: 8d:e4:e9:ad:05:ca:25:76:04:2c:bd:83:a1:f1:6a: 18:95:6a:76:3f:3c:84:6f:5c:7d:18:da:ab:f3:13: 65:cb:14:f5:86:1c:ba:4a:e5:26:10:70:fe:2a:7a: bb:3d:78:dc:91:6a:c7:21:60:a3:6d:e2:b8:9d:6f: 60:1b:51:fd:c0:70:c3:57:fd:64:6d:f6:3b:f9:2c: e1:3a:14:3c:88:65:1f:64:9a:47:d4:85:db:e8:eb: c1:78:6a:85:18:8d:9a:e9:94:49:00:81:a0:e6:50: 05:e9:6d:b4:d0:bd:bd:cb:26:27:5d:52:8e:bc:f9: 9b:62:30:3d:34:3a:bb:a1:2e:49:b4:42:da:42:4e: ec:c4:84:cd:58:27:21:52:20:49:9a:dc:fe:e3:5f: 23:94:68:80:90:10:39:a1:7a:e0:af:a0:bc:83:cd: 38:78:0d:a7:ad:94:22:09:20:fa:ac:6b:4f:37:7d: 71:34:eb:4d:42:43:2a:6b:c9:a1:86:cc:f9:42:e4: f6:01:25:e4:9d:f4:76:ea:d1:a0:a6:5f:18:dc:4f: 4d:ce:2c:bb:bb:99:9e:67:3e:6d:8f:98:fb:53:76: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3A:35:C4:95:BC:B3:AE:4F:A3:B3:58:A3:D1:1D:16:30:0C:38:12 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:0a:b3:cf:01:5d:ac:b9:f2:42:27:47:ef:e6:fe:a6:30: 72:bb:e8:ad:a8:34:37:25:92:d9:12:18:d4:78:7b:71:13:b3: ee:01:99:15:68:ed:40:3d:cc:01:12:f6:3f:0e:93:1d:fb:a4: 15:78:92:6c:a1:0b:c9:8e:4d:00:07:1a:95:8e:43:94:58:05: 02:26:b1:8f:00:a6:a7:18:2b:7d:24:29:5b:0d:b4:80:fc:0c: 51:39:e4:ef:c2:6e:9a:81:ec:28:ac:ea:da:07:ee:a8:6b:74: 93:5f:00:64:4c:23:4a:f7:a4:41:37:14:9e:1f:63:3e:98:90: 96:34:fa:1a:46:4d:73:a8:9d:13:0f:d2:8c:0d:8c:ce:3a:1e: 25:ee:3a:c0:d4:eb:73:bb:05:94:9e:e7:9b:2d:85:e2:62:66: 55:2e:bb:9f:25:2d:ee:96:f1:aa:e3:c6:88:72:6f:72:eb:b2: c4:ec:f5:40:bc:d3:6c:94:7b:fa:28:7b:3c:d5:0e:b4:dd:81: 25:69:3b:d2:1c:a6:79:d0:22:f7:6b:38:84:39:83:09:cc:ef: a4:4d:83:25:00:90:8e:66:90:b9:b1:ab:82:c5:e7:68:ea:31: 0e:6f:16:3d:59:85:1c:31:43:e7:43:d1:6f:00:46:80:11:ad: 36:f4:85:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKpZk8IUW+chv/UGZxt2r2bBNjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTEyMDIxODE2NTdaFw0yNTEyMDUyMTI3NTdaMDMxMTAvBgNV BAMTKDA3M0EzNUM0OTVCQ0IzQUU0RkEzQjM1OEEzRDExRDE2MzAwQzM4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCrwO+ElJB3/QpHK+ZeuB6qA+ xQI+/Hd7YMNywo3k6a0FyiV2BCy9g6HxahiVanY/PIRvXH0Y2qvzE2XLFPWGHLpK 5SYQcP4qers9eNyRaschYKNt4ridb2AbUf3AcMNX/WRt9jv5LOE6FDyIZR9kmkfU hdvo68F4aoUYjZrplEkAgaDmUAXpbbTQvb3LJiddUo68+ZtiMD00OruhLkm0QtpC TuzEhM1YJyFSIEma3P7jXyOUaICQEDmheuCvoLyDzTh4DaetlCIJIPqsa083fXE0 601CQypryaGGzPlC5PYBJeSd9Hbq0aCmXxjcT03OLLu7mZ5nPm2PmPtTdvAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzo1xJW8s65Po7NYo9EdFjAMOBIwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7ECrPPAV2sufJCJ0fv5v6mMHK76K2oNDcl ktkSGNR4e3ETs+4BmRVo7UA9zAES9j8Okx37pBV4kmyhC8mOTQAHGpWOQ5RYBQIm sY8ApqcYK30kKVsNtID8DFE55O/CbpqB7Cis6toH7qhrdJNfAGRMI0r3pEE3FJ4f Yz6YkJY0+hpGTXOonRMP0owNjM46HiXuOsDU63O7BZSe55stheJiZlUuu58lLe6W 8arjxohyb3LrssTs9UC802yUe/ooezzVDrTdgSVpO9IcpnnQIvdrOIQ5gwnM76RN gyUAkI5mkLmxq4LF52jqMQ5vFj1ZhRwxQ+dD0W8ARoARrTb0hTA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client