This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: I8J9tUDvMSnnxxO1/nfc0hHuUlL4V7RnEgdoSBaG+Ik= Subject key identifier: CD:FD:F3:82:A2:39:D4:FC:00:91:B6:22:5A:FB:95:81:AB:77:D6:F6 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 6AE70A887926198C8D0FE9AB74AFF3716B971E3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 0222 Signing time: Tue 02 Dec 2025 01:52:26 +0000 Manifest this update: Tue 02 Dec 2025 01:47:26 +0000 Manifest next update: Fri 05 Dec 2025 09:35:26 +0000 Files and hashes: 1: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: ylq7HjnB+eFoyXtqtO1wv/yEm7Xk8uL9GepTjf5EL8g=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e7:0a:88:79:26:19:8c:8d:0f:e9:ab:74:af:f3:71:6b:97:1e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Dec 2 01:47:26 2025 GMT Not After : Dec 5 09:35:26 2025 GMT Subject: CN=CDFDF382A239D4FC0091B6225AFB9581AB77D6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:cc:04:62:44:cf:76:26:cb:cb:b6:97:6a: 63:56:5b:6d:df:49:1d:00:50:0c:a8:b6:e5:4f:ce: 6d:37:c5:4b:18:78:2c:16:dd:fd:ae:fa:e4:79:0d: d0:1c:e5:0b:6e:3b:60:5d:7f:a8:1e:64:d8:de:2c: 02:1d:8d:29:c2:b9:88:bd:33:c0:82:fd:ae:57:78: 97:6a:bc:df:3f:5e:48:4d:74:ce:d4:d5:b2:44:45: 0a:10:49:2a:a2:9a:a9:d0:3d:4d:27:85:f5:a6:7c: 0d:05:25:d5:0f:19:36:d4:c6:30:73:a2:b2:f1:99: 29:b2:e5:fd:a4:a4:1b:4c:0d:71:3f:fd:24:5c:34: bb:0d:75:c2:b6:d3:76:d0:8c:28:e7:c5:47:db:63: 5c:62:96:1f:8d:06:89:4e:d3:f7:38:e7:fd:35:9e: b4:a3:ab:90:1c:c7:9e:2f:13:89:5a:36:bf:0f:6d: fb:46:ee:4c:11:b7:b8:d1:ec:b0:e1:16:08:dd:f0: 48:f7:e9:b2:5e:be:c8:cc:e4:de:70:3b:72:fc:d7: 3c:e0:09:35:75:bd:34:04:a7:40:13:a1:af:ee:b8: 84:0e:b9:78:56:aa:83:7c:32:0a:57:2b:ff:51:10: 77:f1:14:f3:21:ab:13:c0:4a:44:6b:4f:fe:e3:04: f5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FD:F3:82:A2:39:D4:FC:00:91:B6:22:5A:FB:95:81:AB:77:D6:F6 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8c:d1:61:3f:2f:e8:b0:e7:fb:86:15:4b:54:1c:68:b4:f1: 68:1d:15:a8:64:27:c8:cd:16:03:c7:9d:ad:53:ad:97:98:56: 40:ef:5d:ed:9a:6a:fc:1f:88:4b:61:ca:c6:2e:1d:f2:82:b2: 7e:15:ed:c6:b4:b7:0c:93:94:fa:57:0c:5a:ea:79:59:74:30: eb:c8:ce:2c:c7:ee:d9:4c:53:e8:cb:00:19:de:64:5a:ad:3c: bf:87:cb:9d:32:49:cc:ad:0c:8f:66:e4:14:f1:6f:af:f8:22: d8:67:de:c9:94:9b:28:d2:03:9d:78:c0:25:c8:95:62:8a:cb: 94:81:38:fe:26:f6:e1:bf:ed:bc:d1:b8:0b:61:68:8e:15:06: 6c:a0:fe:11:18:ca:b4:78:c1:6e:4a:f1:83:69:6e:09:64:3d: 5b:b7:d4:b2:7e:48:0e:9c:db:ca:ac:88:53:11:c4:f5:2b:90: ac:9f:e2:1a:0b:c5:97:a5:17:d1:40:66:96:32:d1:53:8a:f0: d2:ad:3c:76:93:df:85:80:17:ba:9f:09:94:e8:6b:c0:81:fa: 6d:31:6f:f6:b6:3d:33:22:64:09:fa:6f:fd:40:8b:de:a7:d9: 0b:8a:45:9a:48:88:be:0e:76:aa:7f:88:3e:f4:44:78:a5:3e: 04:b0:19:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaucKiHkmGYyND+mrdK/zcWuXHj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNTEyMDIwMTQ3MjZaFw0yNTEyMDUwOTM1MjZaMDMxMTAvBgNV BAMTKENERkRGMzgyQTIzOUQ0RkMwMDkxQjYyMjVBRkI5NTgxQUI3N0Q2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49cwEYkTPdibLy7aXamNWW23f SR0AUAyotuVPzm03xUsYeCwW3f2u+uR5DdAc5QtuO2Bdf6geZNjeLAIdjSnCuYi9 M8CC/a5XeJdqvN8/XkhNdM7U1bJERQoQSSqimqnQPU0nhfWmfA0FJdUPGTbUxjBz orLxmSmy5f2kpBtMDXE//SRcNLsNdcK203bQjCjnxUfbY1xilh+NBolO0/c45/01 nrSjq5Acx54vE4laNr8PbftG7kwRt7jR7LDhFgjd8Ej36bJevsjM5N5wO3L81zzg CTV1vTQEp0AToa/uuIQOuXhWqoN8MgpXK/9REHfxFPMhqxPASkRrT/7jBPWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzf3zgqI51PwAkbYiWvuVgat31vYwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+M0WE/L+iw5/uGFUtUHGi08WgdFahkJ8jN FgPHna1TrZeYVkDvXe2aavwfiEthysYuHfKCsn4V7ca0twyTlPpXDFrqeVl0MOvI zizH7tlMU+jLABneZFqtPL+Hy50yScytDI9m5BTxb6/4Ithn3smUmyjSA514wCXI lWKKy5SBOP4m9uG/7bzRuAthaI4VBmyg/hEYyrR4wW5K8YNpbglkPVu31LJ+SA6c 28qsiFMRxPUrkKyf4hoLxZelF9FAZpYy0VOK8NKtPHaT34WAF7qfCZToa8CB+m0x b/a2PTMiZAn6b/1Ai96n2QuKRZpIiL4Odqp/iD70RHilPgSwGec= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:21 2025 by rpki-client