This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: l2VbqBEy+o2WkvqMyoh9uwvHtzvXTAjbaUzTDsg2Eu8= Subject key identifier: 40:FA:B9:DA:AD:C3:52:F5:5D:C4:5D:B6:AA:4E:98:41:11:42:5E:1F Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 5D178DDA4EE0267F87339071A81136C150C31A09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 23:12:55 +0000 Manifest this update: Mon 01 Dec 2025 23:07:55 +0000 Manifest next update: Fri 05 Dec 2025 05:24:55 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: TtuXvEyEGp1ObNrd692BGxX32whSha7JHeResWE7HzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:17:8d:da:4e:e0:26:7f:87:33:90:71:a8:11:36:c1:50:c3:1a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Dec 1 23:07:55 2025 GMT Not After : Dec 5 05:24:55 2025 GMT Subject: CN=40FAB9DAADC352F55DC45DB6AA4E984111425E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fe:7b:70:11:b8:32:80:b6:f9:75:f7:dd:5f: 44:06:7f:fb:4a:26:50:62:aa:71:8d:cd:d9:c2:52: 78:90:a2:71:9e:e0:7d:c6:3f:2b:53:ba:e9:ba:71: 08:72:46:a0:8a:6b:5a:3d:95:ff:a6:93:dd:d8:6e: 28:b2:8e:e4:09:50:92:a4:e8:ea:ef:36:5f:f9:11: 28:99:cc:ce:9e:07:f0:28:36:b1:31:ba:04:89:e1: b4:cc:27:9c:a7:d7:28:cf:d9:17:eb:5c:5c:37:00: 18:14:c7:fe:1c:c6:b2:94:13:63:ec:1c:69:ae:ad: 15:c8:38:f9:a9:27:21:e7:4f:57:66:4f:0a:b1:c5: b1:93:00:92:5e:c5:05:f0:f5:dd:52:6c:c5:66:ef: 2b:d8:3d:fe:54:e0:71:05:83:45:7e:6d:3a:5d:42: b8:05:dc:db:48:6f:b2:a9:6f:83:0a:a9:53:43:41: 95:9a:a6:56:07:1b:ae:97:68:2d:28:b4:2d:9e:fc: 2f:16:29:d4:6c:1b:3c:92:c0:06:5b:ad:97:ea:7b: 27:e8:d5:bb:5c:40:7b:47:59:25:04:d0:de:7e:c3: 13:c8:2f:a2:be:88:6b:1d:0e:79:3a:31:c0:5a:de: 3f:a8:3c:2c:c7:4d:b2:f2:97:70:c4:72:c8:ee:76: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FA:B9:DA:AD:C3:52:F5:5D:C4:5D:B6:AA:4E:98:41:11:42:5E:1F X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e7:f6:ac:57:cd:af:89:af:cd:c7:18:3b:cf:45:a3:2a:a5: ad:4d:60:75:43:80:a0:97:bb:de:29:b2:ed:34:76:17:d7:2e: de:f7:5c:62:b6:af:9c:63:a2:f7:d0:fa:54:3d:42:12:6e:ce: 33:bd:0f:84:32:f4:c8:70:3e:08:cb:9c:0c:6d:cd:81:ba:31: b6:a8:2b:1f:98:35:fc:80:bd:80:0e:c4:3b:20:6c:7c:16:60: 3c:52:d3:70:b4:e4:7e:0e:c8:d1:fc:3c:07:d7:d6:83:1a:17: c0:b9:31:87:a7:c3:68:bc:3c:83:ca:85:02:80:bd:15:34:1e: 2c:e5:03:b5:93:46:48:56:bc:a0:3f:ea:81:30:0c:54:5c:0e: 0f:60:f1:76:1f:e6:b6:87:7a:d0:8c:d1:68:9e:c1:48:01:92: 7f:7e:f0:8f:08:cf:77:74:1e:6d:7b:69:c5:7f:7a:58:e9:f7: af:6b:87:c4:9e:23:c1:1c:e1:f7:80:e7:fe:a2:37:da:58:b0: 87:0c:08:ed:49:b0:3b:65:e0:93:39:8b:15:d8:6a:05:e1:c5: a0:ec:68:98:5e:ca:e0:22:e7:43:35:47:9f:a4:44:47:c1:fa: 60:52:25:2e:fb:e2:9c:91:cb:06:5d:52:e0:5e:31:bb:7d:b4: 39:6a:2a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXReN2k7gJn+HM5BxqBE2wVDDGgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTEyMDEyMzA3NTVaFw0yNTEyMDUwNTI0NTVaMDMxMTAvBgNV BAMTKDQwRkFCOURBQURDMzUyRjU1REM0NURCNkFBNEU5ODQxMTE0MjVFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/ntwEbgygLb5dffdX0QGf/tK JlBiqnGNzdnCUniQonGe4H3GPytTuum6cQhyRqCKa1o9lf+mk93YbiiyjuQJUJKk 6OrvNl/5ESiZzM6eB/AoNrExugSJ4bTMJ5yn1yjP2RfrXFw3ABgUx/4cxrKUE2Ps HGmurRXIOPmpJyHnT1dmTwqxxbGTAJJexQXw9d1SbMVm7yvYPf5U4HEFg0V+bTpd QrgF3NtIb7Kpb4MKqVNDQZWaplYHG66XaC0otC2e/C8WKdRsGzySwAZbrZfqeyfo 1btcQHtHWSUE0N5+wxPIL6K+iGsdDnk6McBa3j+oPCzHTbLyl3DEcsjudrnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPq52q3DUvVdxF22qk6YQRFCXh8wHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjn9qxXza+Jr83HGDvPRaMqpa1NYHVDgKCX u94psu00dhfXLt73XGK2r5xjovfQ+lQ9QhJuzjO9D4Qy9MhwPgjLnAxtzYG6Mbao Kx+YNfyAvYAOxDsgbHwWYDxS03C05H4OyNH8PAfX1oMaF8C5MYenw2i8PIPKhQKA vRU0HizlA7WTRkhWvKA/6oEwDFRcDg9g8XYf5raHetCM0WiewUgBkn9+8I8Iz3d0 Hm17acV/eljp969rh8SeI8Ec4feA5/6iN9pYsIcMCO1JsDtl4JM5ixXYagXhxaDs aJheyuAi50M1R5+kREfB+mBSJS774pyRywZdUuBeMbt9tDlqKnc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:05 2025 by rpki-client