This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: Y1HiwpwGMtyytsXWQ3OK6euK/ZEhCZ5uXMzfm1w9pcY= Subject key identifier: 2D:3A:42:A4:59:D0:B7:45:1A:98:C4:A4:FE:9A:D9:48:65:6E:B6:38 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 647F50AF47FE8534F92572EDF0E6A6B78F914A69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: F0 Signing time: Tue 02 Dec 2025 02:52:23 +0000 Manifest this update: Tue 02 Dec 2025 02:47:23 +0000 Manifest next update: Fri 05 Dec 2025 08:59:23 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: XuwfYeeUyFZjia2J5AHvZIX1vqTDYfZUCUSvINLfqq8=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:50:af:47:fe:85:34:f9:25:72:ed:f0:e6:a6:b7:8f:91:4a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Dec 2 02:47:23 2025 GMT Not After : Dec 5 08:59:23 2025 GMT Subject: CN=2D3A42A459D0B7451A98C4A4FE9AD948656EB638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:81:de:5a:64:43:f8:58:06:c0:c6:f6:a8: 78:0c:a2:e0:35:ef:ca:19:04:d8:2e:d3:c7:5c:58: b2:05:d7:05:58:b8:5e:b7:06:1f:38:ed:05:17:8b: a5:1f:68:96:7e:83:a0:f4:ec:f9:94:e7:06:40:59: fb:53:b7:e8:3e:db:37:c1:a2:9a:6f:20:08:3a:07: 2c:d6:a8:0d:08:7f:a2:79:78:15:ae:ae:35:70:71: 91:2d:33:10:f9:a1:a4:d8:e8:8b:bc:47:42:50:35: 84:4e:50:30:78:8c:b2:d3:c5:a5:d2:d6:c7:a0:a4: e8:4a:f6:66:27:ec:fc:09:10:46:6b:11:39:10:21: d7:d0:2c:9b:cc:43:9f:ff:cc:d0:20:70:2f:01:42: 9d:f1:b4:b6:25:a8:30:29:5a:06:8c:b0:ef:5a:c0: 27:bc:08:16:a9:5f:fe:d4:db:7a:65:6f:45:4e:01: 67:1c:6a:27:06:2d:f2:2c:21:2b:a9:9b:55:06:52: a9:43:d9:8f:82:68:e6:4b:48:0a:1a:f6:02:86:84: 31:fb:3d:00:11:74:74:bf:ff:ad:b4:36:43:54:3d: 63:67:a6:08:34:96:ee:10:63:99:a4:69:cf:14:fc: 57:30:80:78:25:4a:e4:e1:cd:05:79:7f:c0:c9:54: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3A:42:A4:59:D0:B7:45:1A:98:C4:A4:FE:9A:D9:48:65:6E:B6:38 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:62:3b:cb:5b:9e:81:1e:2d:79:2d:76:33:aa:af:07:39:bb: b3:1b:3c:d9:0e:65:5a:d6:96:0b:4c:c3:42:b9:c0:78:a2:a8: 1e:a4:cf:5c:4f:37:a9:30:7f:7a:cb:ea:2c:2a:4f:17:df:50: 45:66:15:75:d0:9e:d7:b9:50:33:f4:f4:2b:6e:ba:c3:28:9c: 5d:85:ed:7f:0b:65:e5:10:a7:73:45:53:16:27:ca:1d:8a:9c: da:67:06:d0:08:de:be:bc:69:20:79:ca:3e:29:9c:f5:e6:b1: e0:be:1b:a1:14:b4:28:27:b1:4f:75:58:df:c7:f6:42:fd:2d: 93:1c:f5:a6:87:c0:59:d7:99:93:b8:44:90:49:f4:45:55:a6: f4:3f:56:b5:c4:7c:62:d0:1c:56:c7:66:d1:3b:0a:0b:ab:1b: ce:c8:27:f3:47:a6:29:77:51:24:67:e1:b9:45:66:da:2c:f3: da:c2:92:63:67:50:dd:4d:34:fc:8e:e7:ce:c8:a4:e4:7d:dc: ce:a0:50:74:ea:5b:a1:a1:55:6c:82:75:d4:9f:09:68:71:2d: 21:92:c8:26:5b:30:fb:bc:72:6e:98:1e:df:f0:0e:12:70:36: 92:e6:c8:72:42:7b:69:e7:a9:d0:c4:4a:98:0e:48:18:e5:6b: 91:4f:44:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZH9Qr0f+hTT5JXLt8Oamt4+RSmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTEyMDIwMjQ3MjNaFw0yNTEyMDUwODU5MjNaMDMxMTAvBgNV BAMTKDJEM0E0MkE0NTlEMEI3NDUxQTk4QzRBNEZFOUFEOTQ4NjU2RUI2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xYHeWmRD+FgGwMb2qHgMouA1 78oZBNgu08dcWLIF1wVYuF63Bh847QUXi6UfaJZ+g6D07PmU5wZAWftTt+g+2zfB oppvIAg6ByzWqA0If6J5eBWurjVwcZEtMxD5oaTY6Iu8R0JQNYROUDB4jLLTxaXS 1segpOhK9mYn7PwJEEZrETkQIdfQLJvMQ5//zNAgcC8BQp3xtLYlqDApWgaMsO9a wCe8CBapX/7U23plb0VOAWccaicGLfIsISupm1UGUqlD2Y+CaOZLSAoa9gKGhDH7 PQARdHS//620NkNUPWNnpgg0lu4QY5mkac8U/FcwgHglSuThzQV5f8DJVB3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULTpCpFnQt0UamMSk/prZSGVutjgwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtiO8tbnoEeLXktdjOqrwc5u7MbPNkOZVrW lgtMw0K5wHiiqB6kz1xPN6kwf3rL6iwqTxffUEVmFXXQnte5UDP09CtuusMonF2F 7X8LZeUQp3NFUxYnyh2KnNpnBtAI3r68aSB5yj4pnPXmseC+G6EUtCgnsU91WN/H 9kL9LZMc9aaHwFnXmZO4RJBJ9EVVpvQ/VrXEfGLQHFbHZtE7CgurG87IJ/NHpil3 USRn4blFZtos89rCkmNnUN1NNPyO587IpOR93M6gUHTqW6GhVWyCddSfCWhxLSGS yCZbMPu8cm6YHt/wDhJwNpLmyHJCe2nnqdDESpgOSBjla5FPRDA= -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:33 2025 by rpki-client