This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: 4vqEBYHLvVnf8o4m62t5NKi6wbW9n1To/UGoSvDKsfc= Subject key identifier: 93:32:71:1A:0E:F5:FC:8C:94:0A:25:C7:6E:1E:DA:03:D5:44:56:D0 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 4B1343A0F650BCF40F7661EF32D57B592FC6C101 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 013B Signing time: Mon 01 Dec 2025 03:11:20 +0000 Manifest this update: Mon 01 Dec 2025 03:06:20 +0000 Manifest next update: Thu 04 Dec 2025 14:34:20 +0000 Files and hashes: 1: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: 6TJcUtXLylYOU7NR10Zy7HUVurSNV9mh6GUAA2jbCeU=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) 3: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) 4: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:13:43:a0:f6:50:bc:f4:0f:76:61:ef:32:d5:7b:59:2f:c6:c1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Dec 1 03:06:20 2025 GMT Not After : Dec 4 14:34:20 2025 GMT Subject: CN=9332711A0EF5FC8C940A25C76E1EDA03D54456D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:46:4b:a6:94:bf:ca:dd:c7:e7:2f:83:67: 68:b6:bb:c9:a6:8e:89:e8:92:24:c5:a4:d7:b7:ce: cc:43:d0:9f:e0:20:20:83:f8:23:d2:c3:12:34:6a: d5:b1:94:d3:48:46:fb:d5:91:ea:86:29:dc:fe:73: 7a:cc:c1:36:01:76:be:cb:71:98:f5:e7:50:7c:6d: 7c:b4:79:e9:05:b0:ad:6c:09:1d:c1:7b:d0:9d:da: 57:0a:80:49:84:56:50:b0:99:45:3a:9f:77:21:40: b5:b4:58:a3:aa:3b:df:80:01:b2:bd:f9:f1:64:93: 14:a3:e2:c3:ff:50:e0:34:ad:44:82:9c:43:7a:89: 45:3c:7e:84:85:99:94:63:51:33:84:c8:b6:cb:f3: 13:4c:df:d4:6c:8a:08:43:fe:02:c5:71:80:74:d2: b2:de:95:d9:c0:d9:09:56:ae:34:eb:61:14:bc:0c: 45:3a:7a:5a:57:82:ae:eb:a1:8c:61:f0:08:77:05: 8e:fc:9e:6b:de:ac:88:8e:4a:e4:19:f1:3c:29:2a: c8:be:86:76:44:e6:57:6d:3c:33:70:53:82:7a:7e: 0f:0e:59:80:bd:90:37:79:2e:d3:41:ea:c7:7b:2b: 51:06:ac:3e:00:e1:a9:24:e4:c3:0a:95:72:a2:50: cd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:32:71:1A:0E:F5:FC:8C:94:0A:25:C7:6E:1E:DA:03:D5:44:56:D0 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b4:d0:aa:46:a8:c4:21:5a:db:44:be:b2:58:ad:63:11:ba: 7b:a6:86:ad:ed:f1:62:f4:88:ed:ba:c8:b6:02:58:c5:04:57: c1:28:3f:01:49:98:fe:4f:e3:b5:e3:a9:d1:32:15:ec:8d:c0: 84:5c:e8:73:39:dd:89:1e:09:29:9f:31:a0:fa:51:95:53:4b: 16:fe:30:78:0d:e2:d9:49:67:6e:12:1a:04:24:6c:ea:ac:a8: 8d:35:3e:38:6a:7f:6e:e5:f4:3c:e5:fd:e4:c8:14:c8:e5:74: ff:a9:a7:13:84:a3:65:4a:73:f3:37:e7:f0:d0:4d:57:18:41: e2:07:09:61:70:2a:9a:fe:69:56:8e:d5:32:75:03:37:74:56: 55:8d:f6:46:d9:41:82:4c:69:b1:07:a0:83:69:2a:85:a2:e8: 7f:c9:cc:cb:9d:55:f0:59:14:7d:34:b1:9b:98:e7:fd:10:5b: 57:e5:4a:81:02:1e:e2:c2:34:03:5f:88:f1:a0:2c:28:7c:42: 6a:8f:52:3b:40:00:1c:9c:8b:1e:3a:02:b5:65:f2:c8:d0:b1: 85:32:cb:e1:e3:89:30:d1:f7:1c:9c:b4:28:83:3b:19:46:41: 87:86:b5:f6:88:3d:96:2a:41:1d:d5:d5:13:40:6c:5b:ba:52: 87:13:85:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxNDoPZQvPQPdmHvMtV7WS/GwQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTEyMDEwMzA2MjBaFw0yNTEyMDQxNDM0MjBaMDMxMTAvBgNV BAMTKDkzMzI3MTFBMEVGNUZDOEM5NDBBMjVDNzZFMUVEQTAzRDU0NDU2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr50ZLppS/yt3H5y+DZ2i2u8mm jonokiTFpNe3zsxD0J/gICCD+CPSwxI0atWxlNNIRvvVkeqGKdz+c3rMwTYBdr7L cZj151B8bXy0eekFsK1sCR3Be9Cd2lcKgEmEVlCwmUU6n3chQLW0WKOqO9+AAbK9 +fFkkxSj4sP/UOA0rUSCnEN6iUU8foSFmZRjUTOEyLbL8xNM39RsighD/gLFcYB0 0rLeldnA2QlWrjTrYRS8DEU6elpXgq7roYxh8Ah3BY78nmverIiOSuQZ8TwpKsi+ hnZE5ldtPDNwU4J6fg8OWYC9kDd5LtNB6sd7K1EGrD4A4akk5MMKlXKiUM0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkzJxGg71/IyUCiXHbh7aA9VEVtAwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK00KpGqMQhWttEvrJYrWMRunumhq3t8WL0 iO26yLYCWMUEV8EoPwFJmP5P47XjqdEyFeyNwIRc6HM53YkeCSmfMaD6UZVTSxb+ MHgN4tlJZ24SGgQkbOqsqI01Pjhqf27l9Dzl/eTIFMjldP+ppxOEo2VKc/M35/DQ TVcYQeIHCWFwKpr+aVaO1TJ1Azd0VlWN9kbZQYJMabEHoINpKoWi6H/JzMudVfBZ FH00sZuY5/0QW1flSoECHuLCNANfiPGgLCh8QmqPUjtAABycix46ArVl8sjQsYUy y+HjiTDR9xyctCiDOxlGQYeGtfaIPZYqQR3V1RNAbFu6UocThdI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:12:11 2025 by rpki-client