This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: Oc6nOq006dhQ/EjDWWtlIoER1elDF01fQkioDKAiDbQ= Subject key identifier: 50:5B:B0:4A:B6:B1:9F:73:5C:1A:20:D2:48:88:2A:B4:90:EB:F2:89 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 42A36FC6CA6DCD34F356449677194FAFB0BD344C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0154 Signing time: Mon 01 Dec 2025 14:31:22 +0000 Manifest this update: Mon 01 Dec 2025 14:26:22 +0000 Manifest next update: Fri 05 Dec 2025 01:35:22 +0000 Files and hashes: 1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: RYYasu6jLw2Fb8m+WvDojE/Nj0yBWUTrxIxe0c2E7u4=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:6f:c6:ca:6d:cd:34:f3:56:44:96:77:19:4f:af:b0:bd:34:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Dec 1 14:26:22 2025 GMT Not After : Dec 5 01:35:22 2025 GMT Subject: CN=505BB04AB6B19F735C1A20D248882AB490EBF289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:9d:d2:04:b8:39:cd:40:5e:22:26:e8:19: 87:b2:67:4c:1f:4f:f0:7c:8a:58:2c:2d:35:94:23: 6e:d6:7a:4a:26:27:f3:d0:5c:c3:9f:8c:b2:88:cf: f7:cc:c4:eb:1e:d8:d4:5d:90:f6:fa:fe:f9:4d:36: 12:5e:00:1f:16:e4:b3:68:aa:f0:b3:19:fb:c2:26: 9c:10:17:3e:c3:04:eb:90:de:fe:58:69:ab:8f:d0: 1b:c0:4f:7f:45:74:cf:b8:6f:b1:9e:36:84:a0:e0: 6d:61:ac:6a:53:0f:ea:4b:4a:21:61:82:74:b0:cb: be:6a:d4:c3:d8:20:ba:2c:2c:1a:e1:06:00:34:f2: ed:ee:1f:df:78:80:da:93:4f:63:c4:4a:15:9a:4b: c4:17:28:73:5b:f6:be:f2:cc:a1:81:21:15:96:79: 40:45:01:f6:ec:4e:fa:e6:c8:a2:ac:4d:89:f1:5f: f2:67:8f:2f:c4:69:da:e5:e7:0b:70:3b:7a:1e:3c: 01:43:a2:27:68:7d:43:23:40:3f:83:11:fd:4b:14: 2e:1a:51:d2:b8:5d:e0:07:97:f8:29:b3:12:a9:8d: b3:03:87:ef:d5:11:23:9f:1d:4e:b6:19:50:9e:0b: f8:c8:15:6d:94:30:69:9c:72:61:ea:17:11:9a:85: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:B0:4A:B6:B1:9F:73:5C:1A:20:D2:48:88:2A:B4:90:EB:F2:89 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a8:8f:9b:0c:b2:c7:32:0c:a7:85:fe:62:33:59:ef:d9:b1: 0f:da:41:88:c3:9f:e0:59:91:93:0e:78:47:b3:0e:f1:1e:8d: ed:83:d2:aa:82:0d:b6:9b:ac:ad:25:16:77:5e:17:8c:3f:31: ba:96:cc:dc:ed:37:55:be:18:a6:c2:a5:33:5b:11:a9:10:dc: f9:ac:47:22:08:20:42:15:77:c1:8e:33:23:cf:76:62:de:b5: ed:b9:9f:0b:c6:0f:8b:d5:59:71:14:28:41:19:01:46:fe:94: 5f:d8:01:a8:63:c7:66:4c:05:2b:31:c5:46:aa:9b:4d:28:f6: 80:18:e4:09:c4:9c:4b:36:24:4d:5f:f8:69:bd:67:6b:71:6c: 01:ad:69:00:ce:b3:8c:6a:c9:3c:5b:8c:e6:c1:4e:23:69:44: c7:09:d9:40:af:05:f1:ce:2b:98:34:0f:e6:12:4b:27:e9:38: dc:24:53:76:51:b3:87:1e:8e:52:24:42:f0:d8:b8:1c:6e:a0: c6:af:f8:1d:79:26:8b:00:73:d5:76:b4:45:75:79:53:8b:11: 66:72:a5:a9:18:9f:3d:81:07:0b:3d:6b:3a:c0:b9:80:ff:e1: 67:3c:83:7b:95:e5:d4:19:f9:4d:9b:0c:0b:3f:c5:14:18:0e: 11:97:03:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqNvxsptzTTzVkSWdxlPr7C9NEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTEyMDExNDI2MjJaFw0yNTEyMDUwMTM1MjJaMDMxMTAvBgNV BAMTKDUwNUJCMDRBQjZCMTlGNzM1QzFBMjBEMjQ4ODgyQUI0OTBFQkYyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCZ3SBLg5zUBeIiboGYeyZ0wf T/B8ilgsLTWUI27WekomJ/PQXMOfjLKIz/fMxOse2NRdkPb6/vlNNhJeAB8W5LNo qvCzGfvCJpwQFz7DBOuQ3v5YaauP0BvAT39FdM+4b7GeNoSg4G1hrGpTD+pLSiFh gnSwy75q1MPYILosLBrhBgA08u3uH994gNqTT2PEShWaS8QXKHNb9r7yzKGBIRWW eUBFAfbsTvrmyKKsTYnxX/Jnjy/Eadrl5wtwO3oePAFDoidofUMjQD+DEf1LFC4a UdK4XeAHl/gpsxKpjbMDh+/VESOfHU62GVCeC/jIFW2UMGmccmHqFxGahRBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFuwSraxn3NcGiDSSIgqtJDr8okwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqoj5sMsscyDKeF/mIzWe/ZsQ/aQYjDn+BZ kZMOeEezDvEeje2D0qqCDbabrK0lFndeF4w/MbqWzNztN1W+GKbCpTNbEakQ3Pms RyIIIEIVd8GOMyPPdmLete25nwvGD4vVWXEUKEEZAUb+lF/YAahjx2ZMBSsxxUaq m00o9oAY5AnEnEs2JE1f+Gm9Z2txbAGtaQDOs4xqyTxbjObBTiNpRMcJ2UCvBfHO K5g0D+YSSyfpONwkU3ZRs4cejlIkQvDYuBxuoMav+B15JosAc9V2tEV1eVOLEWZy pakYnz2BBws9azrAuYD/4Wc8g3uV5dQZ+U2bDAs/xRQYDhGXA/I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:52 2025 by rpki-client