This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: VyA6JRFhGTufmlqosPiFR6OYvAx4NrhoqQMENKZQSqQ= Subject key identifier: 67:22:F8:36:C8:49:5E:A8:FD:A8:13:FB:F5:01:FA:99:3A:03:66:32 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 2CB61F4ED31F62AFC80E30264D74578488A5000D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: 0114 Signing time: Sat 06 Dec 2025 13:42:21 +0000 Manifest this update: Sat 06 Dec 2025 13:37:21 +0000 Manifest next update: Tue 09 Dec 2025 20:23:21 +0000 Files and hashes: 1: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: dzAZdjyeeBREqdq2JDIN2MzGys18SUpMPa0F1mrYb/g=) 2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b6:1f:4e:d3:1f:62:af:c8:0e:30:26:4d:74:57:84:88:a5:00:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Dec 6 13:37:21 2025 GMT Not After : Dec 9 20:23:21 2025 GMT Subject: CN=6722F836C8495EA8FDA813FBF501FA993A036632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d5:58:f3:7a:22:3f:40:cf:9d:01:16:68:d3: 0b:86:fb:5b:25:72:28:1b:1a:ff:ac:b3:9c:15:95: 54:43:98:8b:8d:ef:12:f5:02:47:a9:18:4a:90:2f: 0b:19:1e:7a:bc:d7:55:aa:54:c1:9a:cf:f1:e8:86: c3:e2:9e:f7:ed:73:3d:a0:c0:21:6f:4e:77:ff:53: b2:b2:bc:cf:1f:ca:3c:2e:e2:f0:20:ff:2d:9e:ba: e3:44:d5:b3:55:2b:57:c4:7c:76:14:fa:25:bc:a8: 99:d4:f1:2a:6e:6c:59:c0:f7:3a:13:25:5a:3f:ff: 3f:94:d7:93:da:2c:02:3f:20:f4:ea:df:ed:ac:05: bb:8f:36:92:4b:3c:41:50:e1:ff:86:62:a4:9b:18: 8a:7d:34:dc:05:7b:a2:ff:ce:e2:2f:a1:ea:2d:55: 94:4a:fb:fd:15:59:8e:a1:da:cb:f2:26:d6:05:89: 76:3a:ba:79:d2:16:7a:e6:66:f2:0f:bd:01:84:55: c0:6d:db:4d:6e:aa:5d:b1:31:20:1b:8c:26:e0:80: d8:e3:ad:29:ab:87:90:96:c4:ce:e2:27:33:9a:07: b7:ae:ed:13:da:95:1a:d0:90:38:73:a3:c3:60:a9: c3:2c:f9:0e:74:af:1a:02:85:70:86:4a:9e:7c:53: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:F8:36:C8:49:5E:A8:FD:A8:13:FB:F5:01:FA:99:3A:03:66:32 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:62:ec:11:4f:c7:7d:97:37:f2:3f:a7:e5:26:97:eb:dc:db: 48:93:1f:35:36:23:3e:41:6a:4d:67:34:a3:fa:8a:b9:66:d0: 25:97:d7:6c:e2:e3:42:5a:75:dc:19:13:90:8e:f9:1a:bc:79: 5a:09:4f:a7:ab:c2:82:eb:b3:8e:28:9a:0e:99:7b:73:b1:3b: 9d:b6:80:b3:3a:43:90:d7:59:e9:8f:ef:b1:76:9a:b1:7d:6b: 5e:c2:88:aa:59:28:df:8d:09:dc:fc:7c:f5:53:36:60:1e:4d: d1:69:4c:86:a3:5b:ee:c2:d8:97:8c:10:51:5d:b8:6c:62:32: 72:7c:d7:6b:42:23:dd:0f:e6:96:27:7d:1c:3e:0e:f7:2d:a3: 15:dd:91:5a:52:e5:dc:b1:f1:90:4d:f9:d2:b9:4d:0c:91:db: ae:50:d2:db:91:72:ba:47:f5:1a:24:5a:40:09:0e:0d:60:3a: 4e:c0:03:dd:15:dc:85:fb:0a:8f:ce:bc:12:78:ff:92:33:c1: 5a:7a:d6:bd:05:d7:0d:55:b8:eb:f8:fd:90:68:fc:cc:22:cd: d4:b9:ac:b4:d2:c3:0d:46:36:e7:55:77:b9:5d:c9:51:00:d0: b5:b1:c1:ca:88:87:2e:39:ee:38:27:43:c6:72:1b:22:26:b6: d3:f3:8a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLYfTtMfYq/IDjAmTXRXhIilAA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTEyMDYxMzM3MjFaFw0yNTEyMDkyMDIzMjFaMDMxMTAvBgNV BAMTKDY3MjJGODM2Qzg0OTVFQThGREE4MTNGQkY1MDFGQTk5M0EwMzY2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1VjzeiI/QM+dARZo0wuG+1sl cigbGv+ss5wVlVRDmIuN7xL1AkepGEqQLwsZHnq811WqVMGaz/HohsPinvftcz2g wCFvTnf/U7KyvM8fyjwu4vAg/y2euuNE1bNVK1fEfHYU+iW8qJnU8SpubFnA9zoT JVo//z+U15PaLAI/IPTq3+2sBbuPNpJLPEFQ4f+GYqSbGIp9NNwFe6L/zuIvoeot VZRK+/0VWY6h2svyJtYFiXY6unnSFnrmZvIPvQGEVcBt201uql2xMSAbjCbggNjj rSmrh5CWxM7iJzOaB7eu7RPalRrQkDhzo8NgqcMs+Q50rxoChXCGSp58U0JrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyL4NshJXqj9qBP79QH6mToDZjIwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZi7BFPx32XN/I/p+Uml+vc20iTHzU2Iz5B ak1nNKP6irlm0CWX12zi40JaddwZE5CO+Rq8eVoJT6erwoLrs44omg6Ze3OxO522 gLM6Q5DXWemP77F2mrF9a17CiKpZKN+NCdz8fPVTNmAeTdFpTIajW+7C2JeMEFFd uGxiMnJ812tCI90P5pYnfRw+DvctoxXdkVpS5dyx8ZBN+dK5TQyR265Q0tuRcrpH 9RokWkAJDg1gOk7AA90V3IX7Co/OvBJ4/5IzwVp61r0F1w1VuOv4/ZBo/MwizdS5 rLTSww1GNudVd7ldyVEA0LWxwcqIhy457jgnQ8ZyGyImttPzinY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:31 2025 by rpki-client