This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: vBtiVTTqBNiIouurkPKZx4aWNh/Ero7/3jzo4J0mAL0= Subject key identifier: E1:47:E0:D3:FE:32:7B:FB:17:F4:83:7A:98:29:41:F5:65:28:DF:11 Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 4F129B3E8C72A55A07463E452657F9775B7119E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 03A9 Signing time: Mon 01 Dec 2025 04:51:22 +0000 Manifest this update: Mon 01 Dec 2025 04:46:22 +0000 Manifest next update: Thu 04 Dec 2025 13:53:22 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: 5Pbdtyi9/tCYHds3VuXa4wxw//88StNdH1JK1OJ3rt0=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:12:9b:3e:8c:72:a5:5a:07:46:3e:45:26:57:f9:77:5b:71:19:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Dec 1 04:46:22 2025 GMT Not After : Dec 4 13:53:22 2025 GMT Subject: CN=E147E0D3FE327BFB17F4837A982941F56528DF11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:6e:5c:a8:0d:3f:17:f2:f4:d2:26:93:67: d9:1f:81:3c:ef:cd:50:1e:37:18:67:1d:66:a8:ae: a9:1b:c7:65:23:a4:33:66:77:1f:d7:65:cf:49:75: 84:21:81:79:3e:c6:66:58:c2:2f:fe:41:ed:86:ca: c1:4d:a6:66:43:0d:be:ac:38:ca:61:e9:45:74:62: ff:aa:a8:bc:20:97:82:17:2c:8e:20:c2:3d:41:94: be:66:63:98:b1:59:e1:ef:ee:ae:c5:eb:04:ce:58: c7:83:a0:4f:74:17:b9:31:70:fe:65:1b:b8:b6:44: 76:40:93:09:71:32:55:b1:aa:df:65:4c:11:01:b6: 34:c8:c7:e1:cc:85:d7:4b:58:f5:0d:4d:7e:d1:06: b9:f0:db:be:74:51:e8:da:3c:76:36:da:8d:80:70: 16:68:4c:cc:0a:45:cd:47:30:f2:92:12:1d:d2:98: 08:15:8e:a8:e5:7f:93:35:14:58:05:b5:b0:53:3e: 08:a7:6f:d3:20:f5:97:00:fd:db:a3:c7:c6:73:0a: ff:01:78:be:26:8f:b5:c9:a7:23:61:79:7f:5a:03: c0:ae:4b:ab:42:58:07:54:01:5a:b0:01:16:73:8d: ee:4e:b2:8d:8d:e5:a3:b5:34:e2:95:1b:d1:9e:00: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:E0:D3:FE:32:7B:FB:17:F4:83:7A:98:29:41:F5:65:28:DF:11 X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:67:0c:68:77:8d:ab:df:f1:04:9d:9e:dd:e4:64:a2:89:b7: b5:f3:38:8d:c3:13:e9:f7:b5:0a:dd:2e:41:06:27:eb:f3:4e: 48:73:b7:d2:fd:9f:84:d9:df:87:b8:85:41:b1:fe:ec:78:7e: 29:62:b9:85:b2:91:a6:98:c8:73:35:12:cd:78:98:23:7c:1d: 99:49:49:09:37:79:cf:04:72:75:ad:cf:0b:ed:f7:08:7d:50: a9:dc:97:ad:45:d7:5e:6f:4d:dd:a7:1d:08:cb:e9:22:70:12: a8:be:78:e6:aa:c3:d3:b3:4d:43:4e:c2:67:a0:50:db:cb:7b: cd:74:8c:36:8c:11:76:30:2f:e4:5c:20:3d:a5:15:cf:6b:d7: 24:c8:57:5d:5a:4f:ad:e5:f1:e3:f1:cc:db:df:8a:0d:13:0c: 97:ca:b6:b8:a1:33:6a:08:af:42:58:95:8f:96:ef:f3:29:c8: 0d:c3:c3:d0:b3:df:2b:40:da:d4:c1:ec:d6:b1:37:d9:35:98: a5:08:55:11:e5:d4:f7:94:94:58:37:c7:8b:15:97:d1:87:e2: ad:c9:ad:53:1d:f6:47:46:c0:ae:db:9c:3f:f5:ef:d6:79:75: 22:a8:03:ff:70:8d:37:68:df:2c:39:56:68:74:4a:e4:ae:06: 91:11:58:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxKbPoxypVoHRj5FJlf5d1txGekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNTEyMDEwNDQ2MjJaFw0yNTEyMDQxMzUzMjJaMDMxMTAvBgNV BAMTKEUxNDdFMEQzRkUzMjdCRkIxN0Y0ODM3QTk4Mjk0MUY1NjUyOERGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xG5cqA0/F/L00iaTZ9kfgTzv zVAeNxhnHWaorqkbx2UjpDNmdx/XZc9JdYQhgXk+xmZYwi/+Qe2GysFNpmZDDb6s OMph6UV0Yv+qqLwgl4IXLI4gwj1BlL5mY5ixWeHv7q7F6wTOWMeDoE90F7kxcP5l G7i2RHZAkwlxMlWxqt9lTBEBtjTIx+HMhddLWPUNTX7RBrnw2750UejaPHY22o2A cBZoTMwKRc1HMPKSEh3SmAgVjqjlf5M1FFgFtbBTPginb9Mg9ZcA/dujx8ZzCv8B eL4mj7XJpyNheX9aA8CuS6tCWAdUAVqwARZzje5Oso2N5aO1NOKVG9GeAELJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ufg0/4ye/sX9IN6mClB9WUo3xEwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBnDGh3javf8QSdnt3kZKKJt7XzOI3DE+n3 tQrdLkEGJ+vzTkhzt9L9n4TZ34e4hUGx/ux4filiuYWykaaYyHM1Es14mCN8HZlJ SQk3ec8EcnWtzwvt9wh9UKncl61F115vTd2nHQjL6SJwEqi+eOaqw9OzTUNOwmeg UNvLe810jDaMEXYwL+RcID2lFc9r1yTIV11aT63l8ePxzNvfig0TDJfKtrihM2oI r0JYlY+W7/MpyA3Dw9Cz3ytA2tTB7NaxN9k1mKUIVRHl1PeUlFg3x4sVl9GH4q3J rVMd9kdGwK7bnD/179Z5dSKoA/9wjTdo3yw5Vmh0SuSuBpERWPQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:11 2025 by rpki-client