This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: 0RM+tqqlS6TrwsgAa/021bQjbEnb9WCIVC0O7VBJGZE= Subject key identifier: 52:8F:0D:AB:FF:F6:84:9A:31:05:34:40:E0:7C:39:F6:69:80:D2:D8 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 1E130BC119E1754057949E74C28ACC0E7B9963E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: EA Signing time: Sun 07 Dec 2025 06:10:05 +0000 Manifest this update: Sun 07 Dec 2025 06:05:05 +0000 Manifest next update: Wed 10 Dec 2025 08:51:05 +0000 Files and hashes: 1: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 2: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: OzQqgOcPSEtMFJ4IUFEtFfi9QfqdcvTiob4AbC0+/5o=) 3: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:13:0b:c1:19:e1:75:40:57:94:9e:74:c2:8a:cc:0e:7b:99:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Dec 7 06:05:05 2025 GMT Not After : Dec 10 08:51:05 2025 GMT Subject: CN=528F0DABFFF6849A31053440E07C39F66980D2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:7d:f8:15:08:c3:e7:40:89:4f:35:ea:f6: 78:aa:d4:e6:e4:28:60:90:88:04:da:6e:4c:b8:02: e6:04:38:86:7b:0e:c9:5b:34:3a:96:4a:6e:5b:3f: 80:c0:31:c4:77:91:4c:ea:04:ef:e5:09:b9:a3:cf: 22:f7:f9:79:cd:c2:d9:34:a1:11:03:ad:ff:f4:ef: cc:dc:c5:1d:81:a9:85:9b:99:31:c2:e8:c8:9c:4e: 70:70:65:dc:d7:6a:bb:25:c5:ad:46:fc:43:2e:c3: f4:b2:c6:3a:f7:ae:7a:e8:c7:9f:9f:4c:59:c8:71: bd:9d:bc:97:97:17:f3:12:4a:13:a3:f3:4f:fc:8b: 81:45:45:db:5f:96:ac:1c:1c:46:f4:f1:1e:72:99: 5d:a1:48:d8:ed:3d:83:f3:93:5a:d6:23:8a:98:53: 15:f8:2c:d7:ca:85:90:e3:76:05:ec:83:b2:7f:af: e2:b4:e7:ab:97:ee:ad:12:75:7c:fd:09:66:99:b1: ed:07:a7:e5:2a:4e:2d:d8:03:87:ec:b3:f9:11:95: 2a:a1:bf:d3:65:21:36:23:d9:b5:dd:f7:f3:ff:9b: 75:5d:46:59:d8:48:a1:67:d0:7e:dc:d7:0c:e3:73: 10:70:a4:3b:b6:cf:e9:77:e3:1a:7e:70:b2:f1:c4: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:0D:AB:FF:F6:84:9A:31:05:34:40:E0:7C:39:F6:69:80:D2:D8 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ee:4c:07:2e:1a:49:dd:12:31:9b:8d:6a:33:d7:c5:78:cf: 31:c7:ca:5b:e5:a3:86:4f:30:52:b1:0f:57:c1:63:bc:cc:6c: e2:12:69:0a:be:6c:27:68:20:b6:cb:3f:69:df:94:fc:b4:52: f0:17:3e:ed:27:52:88:81:2b:83:07:cb:a4:30:dd:d9:6f:ce: d4:ef:ad:69:cc:53:88:ad:b8:2a:90:f6:ea:38:5d:29:45:d7: 3b:a2:e6:6e:04:f5:66:3b:ad:4d:f0:50:c3:15:6c:26:73:1e: 00:86:1b:14:2d:5a:4f:ea:68:6a:68:d7:19:3c:ad:97:b0:35: 9b:b6:d7:e2:51:29:5b:d4:9e:2d:80:7d:8e:52:10:c8:ff:e7: 37:18:b0:0b:13:c1:27:44:73:56:a8:70:11:23:3c:34:3a:bb: 37:d9:00:66:06:84:97:c1:08:84:53:17:e8:3d:dc:6b:d8:03: 58:4b:c2:4d:93:5e:17:ad:fb:31:d9:60:0e:be:29:b5:59:49: 14:1d:7a:b4:0c:bb:91:8b:93:8e:21:e7:c4:3f:86:13:6b:34: 56:98:a6:60:8b:f2:8d:f3:a2:ca:aa:25:be:df:8f:ec:c3:9d: 48:e7:0f:12:80:fa:21:da:cc:07:35:d5:fe:16:9d:60:2f:3b: 80:93:f6:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhMLwRnhdUBXlJ50worMDnuZY+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTEyMDcwNjA1MDVaFw0yNTEyMTAwODUxMDVaMDMxMTAvBgNV BAMTKDUyOEYwREFCRkZGNjg0OUEzMTA1MzQ0MEUwN0MzOUY2Njk4MEQyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdt334FQjD50CJTzXq9niq1Obk KGCQiATabky4AuYEOIZ7DslbNDqWSm5bP4DAMcR3kUzqBO/lCbmjzyL3+XnNwtk0 oREDrf/078zcxR2BqYWbmTHC6MicTnBwZdzXarslxa1G/EMuw/Syxjr3rnrox5+f TFnIcb2dvJeXF/MSShOj80/8i4FFRdtflqwcHEb08R5ymV2hSNjtPYPzk1rWI4qY UxX4LNfKhZDjdgXsg7J/r+K056uX7q0SdXz9CWaZse0Hp+UqTi3YA4fss/kRlSqh v9NlITYj2bXd9/P/m3VdRlnYSKFn0H7c1wzjcxBwpDu2z+l34xp+cLLxxGQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUo8Nq//2hJoxBTRA4Hw59mmA0tgwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnuTAcuGkndEjGbjWoz18V4zzHHylvlo4ZP MFKxD1fBY7zMbOISaQq+bCdoILbLP2nflPy0UvAXPu0nUoiBK4MHy6Qw3dlvztTv rWnMU4ituCqQ9uo4XSlF1zui5m4E9WY7rU3wUMMVbCZzHgCGGxQtWk/qaGpo1xk8 rZewNZu21+JRKVvUni2AfY5SEMj/5zcYsAsTwSdEc1aocBEjPDQ6uzfZAGYGhJfB CIRTF+g93GvYA1hLwk2TXhet+zHZYA6+KbVZSRQderQMu5GLk44h58Q/hhNrNFaY pmCL8o3zosqqJb7fj+zDnUjnDxKA+iHazAc11f4WnWAvO4CT9oA= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:10 2025 by rpki-client