This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: cztwOegFYgOibBots3wlkBQ8PTJuOXW9RlsncgrJC4A= Subject key identifier: 5D:38:5C:65:54:EE:51:8B:D2:1C:2F:B4:AC:2A:62:C2:A0:67:A6:DB Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 1C336615580AE286A6B75B42C31019C21E77CADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 047F Signing time: Mon 01 Dec 2025 14:51:08 +0000 Manifest this update: Mon 01 Dec 2025 14:46:08 +0000 Manifest next update: Thu 04 Dec 2025 20:39:08 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: pKHdGJHsGSGfDl46o2wosXGehRbXUqIap7Vy4E4vB9g=) 2: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: AVL+dQA9MipPaxVIeJbGk8qimnAmyuom1Scld/9M2rM=) 3: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: Bia3fhAnuM0WM/cexzetUIUAdBnuHvZSoJ5QGr5h+9U=) 4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: xjNgDeRMgF2rvQrnjQijkWjQJOO6HqOFcQsiUsDKJMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:33:66:15:58:0a:e2:86:a6:b7:5b:42:c3:10:19:c2:1e:77:ca:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Dec 1 14:46:08 2025 GMT Not After : Dec 4 20:39:08 2025 GMT Subject: CN=5D385C6554EE518BD21C2FB4AC2A62C2A067A6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:30:6e:a5:28:57:f4:2d:72:af:5c:6b:e5: 95:5a:66:04:65:63:06:1f:48:d8:95:51:23:b8:50: f1:24:f7:c4:b2:2d:d1:2c:a4:ed:23:04:b9:cd:32: dc:ca:45:f9:9c:f0:92:cf:55:1b:b3:b2:4f:05:d2: fc:e9:76:f4:f9:40:5f:47:e1:59:ea:d5:de:15:ee: 44:a8:66:5a:06:f2:20:1c:bd:6c:9a:dc:20:13:fe: 99:2a:d8:a4:9f:03:b6:2a:b3:0c:5c:c5:14:da:2e: cc:1d:66:fe:45:4c:c6:0f:fb:b6:4b:0e:2c:95:79: 75:e6:59:04:4c:e6:54:d3:24:57:ab:89:f3:60:3f: de:d9:35:c0:88:d5:dd:19:5e:5c:1b:5b:fc:3a:25: 39:39:03:09:7a:94:7a:49:b4:9d:d9:6a:85:26:ce: a7:8c:b2:53:0d:93:66:a8:eb:32:af:57:e2:77:46: 6d:b7:bb:cf:87:4e:01:e9:83:fa:66:71:fa:6f:6d: a7:bc:52:09:33:2c:4c:89:e8:43:eb:46:1d:37:d0: 08:d4:06:4a:cc:cb:f1:9f:6f:52:ec:51:e5:ef:0c: 14:21:2a:d2:e5:a3:7f:c1:dd:61:0e:e6:3e:80:07: 57:5a:f6:bf:85:7d:06:b9:02:a0:ed:76:a6:5f:93: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:38:5C:65:54:EE:51:8B:D2:1C:2F:B4:AC:2A:62:C2:A0:67:A6:DB X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7f:12:fb:90:4c:d9:06:d1:e6:2c:ce:1b:5d:c7:e5:a6:8d: 73:53:ad:46:cd:0b:8f:83:9a:07:7b:ec:9d:31:e6:6a:32:ba: d1:80:31:83:e3:30:c0:e9:0b:26:9f:a1:a3:5d:23:d7:28:bb: 09:52:90:cd:1e:0a:b7:3e:c3:11:4b:35:f7:e6:7c:67:d9:0e: 19:77:5e:7e:13:a9:a0:e9:68:49:9c:9c:62:e0:2e:57:55:ea: 90:bf:3e:d2:ce:ba:92:15:8a:1e:29:3e:ba:1f:ba:ac:b9:d9: d7:39:e1:1d:cb:2f:a7:ba:f9:8f:17:9a:d1:07:9a:e0:5c:27: 87:eb:6f:ac:63:f2:15:21:2b:e1:be:d4:ff:5e:03:fb:20:e4: 9d:47:5d:d0:f5:c0:42:ce:64:5a:6e:21:27:1d:be:f3:80:2d: ca:09:5b:34:e1:51:b0:25:22:da:1e:bc:17:05:00:d9:b3:8c: 97:40:24:18:36:0b:66:37:b6:29:78:d1:4f:13:68:08:59:29: c5:dd:68:99:86:ab:8f:5a:9d:4f:7e:32:b5:ba:17:15:cc:bc: db:a8:c2:a2:9d:be:7c:83:3c:a8:42:1d:c7:5d:16:b3:fc:32: 35:eb:54:17:07:90:a6:45:7b:0c:67:21:71:26:cc:a7:ad:32: 2b:bc:35:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDNmFVgK4oamt1tCwxAZwh53ytowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNTEyMDExNDQ2MDhaFw0yNTEyMDQyMDM5MDhaMDMxMTAvBgNV BAMTKDVEMzg1QzY1NTRFRTUxOEJEMjFDMkZCNEFDMkE2MkMyQTA2N0E2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBDBupShX9C1yr1xr5ZVaZgRl YwYfSNiVUSO4UPEk98SyLdEspO0jBLnNMtzKRfmc8JLPVRuzsk8F0vzpdvT5QF9H 4Vnq1d4V7kSoZloG8iAcvWya3CAT/pkq2KSfA7YqswxcxRTaLswdZv5FTMYP+7ZL DiyVeXXmWQRM5lTTJFerifNgP97ZNcCI1d0ZXlwbW/w6JTk5Awl6lHpJtJ3ZaoUm zqeMslMNk2ao6zKvV+J3Rm23u8+HTgHpg/pmcfpvbae8UgkzLEyJ6EPrRh030AjU BkrMy/Gfb1LsUeXvDBQhKtLlo3/B3WEO5j6AB1da9r+FfQa5AqDtdqZfk0NnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXThcZVTuUYvSHC+0rCpiwqBnptswHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt/EvuQTNkG0eYszhtdx+WmjXNTrUbNC4+D mgd77J0x5moyutGAMYPjMMDpCyafoaNdI9couwlSkM0eCrc+wxFLNffmfGfZDhl3 Xn4TqaDpaEmcnGLgLldV6pC/PtLOupIVih4pProfuqy52dc54R3LL6e6+Y8XmtEH muBcJ4frb6xj8hUhK+G+1P9eA/sg5J1HXdD1wELOZFpuIScdvvOALcoJWzThUbAl ItoevBcFANmzjJdAJBg2C2Y3til40U8TaAhZKcXdaJmGq49anU9+MrW6FxXMvNuo wqKdvnyDPKhCHcddFrP8MjXrVBcHkKZFewxnIXEmzKetMiu8NTY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:30 2025 by rpki-client