This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft File: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json) Hash identifier: hTauLv83Amz5xIexAddY7g6cI7nxIu1kW5q6u9AeR+8= Subject key identifier: D3:8A:FE:B0:48:2E:36:32:AC:EF:19:33:4C:DA:8B:AC:0F:B0:F2:FB Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 Certificate issuer: /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Certificate serial: 32AFAB36F58676847330F9B7AC38C462B99C44EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 19:51:58 +0000 Manifest this update: Tue 02 Dec 2025 19:46:58 +0000 Manifest next update: Sat 06 Dec 2025 03:28:58 +0000 Files and hashes: 1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: SeigeuVQAVQsZx6hO8vw69mIiMcaqLs6YLrl9F1hamA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:af:ab:36:f5:86:76:84:73:30:f9:b7:ac:38:c4:62:b9:9c:44:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Validity Not Before: Dec 2 19:46:58 2025 GMT Not After : Dec 6 03:28:58 2025 GMT Subject: CN=D38AFEB0482E3632ACEF19334CDA8BAC0FB0F2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:5d:c8:5b:fa:d2:db:8a:fe:58:b3:7e:e9: db:2a:06:2b:21:74:c5:35:9c:b7:09:c9:68:2f:e6: ed:55:63:8f:e8:0d:9b:f9:ba:78:de:4c:6b:66:1f: b0:89:ec:55:37:2f:9a:53:ad:b2:03:73:12:92:09: 2d:57:61:2c:19:0d:e6:2b:10:22:c1:fa:67:99:9d: e8:6b:7f:0f:68:3a:0a:da:77:d0:f1:ef:88:41:5f: 8e:46:24:6a:11:a5:5d:a6:bc:e2:e8:2b:e6:c0:25: 94:3c:0c:2f:7c:5a:e0:ad:4a:bb:16:5f:f8:25:36: 34:c8:c3:9f:77:63:47:dc:bf:56:64:e7:0a:a2:3d: 9b:a2:86:d7:9d:d3:c9:b8:c6:02:e8:06:69:cd:a8: 30:52:4d:35:e4:a9:99:dd:2c:b8:46:92:db:96:a0: 68:28:55:20:e4:9a:69:a3:bd:57:82:55:b2:64:74: 03:8a:d2:ef:cc:d0:a1:8a:2d:af:0d:e4:b4:20:b6: c0:c5:2f:c0:fb:f9:41:d2:21:0c:1a:77:89:c8:e3: 6e:70:8c:d1:19:ad:28:3f:f7:56:a8:4b:7a:ea:6c: 39:bb:b9:00:ab:7a:71:13:09:1d:77:32:2a:fa:00: 76:0a:84:76:6c:68:9e:e8:f6:87:01:da:5c:c7:4d: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:FE:B0:48:2E:36:32:AC:EF:19:33:4C:DA:8B:AC:0F:B0:F2:FB X509v3 Authority Key Identifier: keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:99:71:83:41:7c:47:bb:c2:43:45:24:36:28:db:77:cf:f8: 2c:d1:fe:df:e3:c7:f2:db:38:49:0d:0c:3c:bf:4e:40:6d:da: f5:49:69:c2:7c:6b:99:ed:0a:32:74:5e:e4:e3:81:71:57:ad: ec:db:5c:53:d9:21:2d:af:ba:70:38:77:a1:91:1c:58:a6:a8: 4c:14:70:3f:58:f8:d9:ab:d2:02:c9:c2:ad:98:6e:8c:37:81: aa:ae:a2:6f:8d:38:19:83:0a:11:81:7b:b0:8b:0e:9e:f3:69: 8d:a8:78:e9:57:48:a6:9a:47:a5:5a:56:07:d3:03:e7:32:ee: c3:3b:36:15:41:1f:93:9f:96:1a:5c:60:51:95:3a:12:98:4f: f5:cb:a1:97:f1:af:57:61:09:b3:d9:7e:2b:da:df:ba:55:f1: 2c:11:d0:a9:ee:40:d9:2d:18:94:28:48:9a:dc:95:b8:18:e1: b2:1b:54:21:e2:db:ec:8e:3a:c7:0e:8b:6c:6d:62:98:3e:a7: cd:a9:80:b3:1f:1f:5d:d7:b6:ed:81:a3:29:02:fc:dc:63:da: b4:d2:6b:c3:63:e4:b1:ff:40:9f:2c:e7:c5:16:9d:2c:e1:6b: 2f:3a:ec:8f:60:23:11:cb:76:47:41:91:83:16:a2:16:c6:74: 73:1c:ba:ef -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUMq+rNvWGdoRzMPm3rDjEYrmcRO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC QjZBMjRBNzAeFw0yNTEyMDIxOTQ2NThaFw0yNTEyMDYwMzI4NThaMDMxMTAvBgNV BAMTKEQzOEFGRUIwNDgyRTM2MzJBQ0VGMTkzMzRDREE4QkFDMEZCMEYyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI113IW/rS24r+WLN+6dsqBish dMU1nLcJyWgv5u1VY4/oDZv5unjeTGtmH7CJ7FU3L5pTrbIDcxKSCS1XYSwZDeYr ECLB+meZnehrfw9oOgrad9Dx74hBX45GJGoRpV2mvOLoK+bAJZQ8DC98WuCtSrsW X/glNjTIw593Y0fcv1Zk5wqiPZuihted08m4xgLoBmnNqDBSTTXkqZndLLhGktuW oGgoVSDkmmmjvVeCVbJkdAOK0u/M0KGKLa8N5LQgtsDFL8D7+UHSIQwad4nI425w jNEZrSg/91aoS3rqbDm7uQCrenETCR13Mir6AHYKhHZsaJ7o9ocB2lzHTfvbAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQU04r+sEguNjKs7xkzTNqLrA+w8vswHwYDVR0j BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B AQsFAAOCAQEAOJlxg0F8R7vCQ0UkNijbd8/4LNH+3+PH8ts4SQ0MPL9OQG3a9Ulp wnxrme0KMnRe5OOBcVet7NtcU9khLa+6cDh3oZEcWKaoTBRwP1j42avSAsnCrZhu jDeBqq6ib404GYMKEYF7sIsOnvNpjah46VdIpppHpVpWB9MD5zLuwzs2FUEfk5+W GlxgUZU6EphP9cuhl/GvV2EJs9l+K9rfulXxLBHQqe5A2S0YlChImtyVuBjhshtU IeLb7I46xw6LbG1imD6nzamAsx8fXde27YGjKQL83GPatNJrw2Pksf9AnyznxRad LOFrLzrsj2AjEct2R0GRgxaiFsZ0cxy67w== -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:52 2025 by rpki-client