This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: npnNopNbfPiFRL96IHrka1qyhEA7ebJigr9hQuTwgaU= Subject key identifier: 4A:E5:91:7B:80:66:E7:FD:51:9F:95:FC:30:CF:CD:2D:31:4F:BC:EF Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 770413B2AEB04683BD5FF74C724E500181B1F9CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: C9 Signing time: Mon 01 Dec 2025 13:11:32 +0000 Manifest this update: Mon 01 Dec 2025 13:06:32 +0000 Manifest next update: Thu 04 Dec 2025 17:28:32 +0000 Files and hashes: 1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: pR8EI2gPhtIDbRFZTXYJb0ghSFMaeGD2ipZG9+NT1HI=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) 3: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) 4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:04:13:b2:ae:b0:46:83:bd:5f:f7:4c:72:4e:50:01:81:b1:f9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Dec 1 13:06:32 2025 GMT Not After : Dec 4 17:28:32 2025 GMT Subject: CN=4AE5917B8066E7FD519F95FC30CFCD2D314FBCEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:6a:76:fa:9b:80:3f:db:27:20:9f:73:b1: 27:a0:24:2c:54:db:84:0d:bb:a4:df:bb:80:b9:7c: 1a:9d:1f:1a:ab:2b:2f:b3:6d:d4:b2:f3:bd:ef:7a: 76:16:64:12:6b:de:01:42:4f:5d:9a:55:82:14:85: 01:ef:ae:f7:ca:67:df:7a:b2:1d:f6:ee:e9:20:31: 43:9f:fd:8f:78:b5:39:c8:aa:53:da:1a:79:0a:c6: e7:c0:b9:5b:39:8e:a2:91:48:81:b6:a6:63:c8:10: ba:87:e5:24:05:35:b6:d1:18:c5:e8:3f:0a:37:f0: d8:8f:ad:f0:71:49:69:fa:fd:c4:ab:3b:32:90:14: be:41:dd:15:58:1f:eb:eb:3d:01:03:46:79:25:3d: 54:47:c7:11:e7:29:e9:42:41:90:46:81:5f:77:de: 7e:29:62:ae:21:b7:22:c5:ad:12:d3:2d:42:14:2f: 82:ff:f6:1d:de:d1:90:7f:75:04:76:c7:62:27:07: b0:bd:80:4e:af:bb:96:bb:c3:52:20:09:a7:0f:93: ee:b0:e2:30:b2:1a:c9:9c:a0:ed:2c:97:88:f1:e5: 1b:c3:4b:fb:93:d2:6d:e1:64:98:0d:13:5d:67:a4: c9:04:72:b3:ba:46:fe:61:69:8b:df:20:ee:a0:0c: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E5:91:7B:80:66:E7:FD:51:9F:95:FC:30:CF:CD:2D:31:4F:BC:EF X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f1:b5:4c:4a:cf:b1:f5:bf:bf:91:80:19:b1:26:96:e2:d7: f7:07:24:7c:ca:8f:89:3d:45:5d:76:20:93:c4:70:50:9e:b6: db:57:0a:86:80:34:3f:70:28:b9:e6:ae:63:77:fb:e9:0e:52: 17:f4:a1:c7:44:e7:ea:d1:39:64:73:cb:8c:c4:0a:57:4b:cd: ba:f5:cd:07:18:2a:b1:f2:8c:d4:b2:76:12:66:92:08:5a:bb: 50:ab:ac:d5:2f:f1:bd:61:32:e0:f0:97:e1:e2:bb:07:98:61: 1d:58:49:68:c1:f5:19:ba:46:e9:83:05:b5:e1:43:ec:2c:f1: fd:3e:5c:2c:f9:19:b9:4c:39:c1:0f:de:58:4a:eb:5a:74:f1: 6a:ca:79:0d:79:3c:fd:6a:49:71:ba:5d:39:e3:66:c7:d2:f2: 4b:4f:e5:0b:79:c6:a6:64:29:0e:05:2e:31:5b:d0:85:fa:93: e1:f9:80:a5:d5:c4:70:23:e8:a8:a3:bb:2f:5d:2f:77:eb:a1: bd:45:f9:cb:4d:ee:d5:88:4c:ed:c9:8f:24:f7:38:68:4a:23: cc:cf:77:e5:44:ef:99:87:9e:2f:e9:67:42:a4:49:2e:d7:bc: a3:f8:d6:4c:d2:ae:8d:e3:26:2b:77:e1:b6:c5:b8:ee:95:5d: c1:a4:02:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwQTsq6wRoO9X/dMck5QAYGx+c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTEyMDExMzA2MzJaFw0yNTEyMDQxNzI4MzJaMDMxMTAvBgNV BAMTKDRBRTU5MTdCODA2NkU3RkQ1MTlGOTVGQzMwQ0ZDRDJEMzE0RkJDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHimp2+puAP9snIJ9zsSegJCxU 24QNu6Tfu4C5fBqdHxqrKy+zbdSy873venYWZBJr3gFCT12aVYIUhQHvrvfKZ996 sh327ukgMUOf/Y94tTnIqlPaGnkKxufAuVs5jqKRSIG2pmPIELqH5SQFNbbRGMXo Pwo38NiPrfBxSWn6/cSrOzKQFL5B3RVYH+vrPQEDRnklPVRHxxHnKelCQZBGgV93 3n4pYq4htyLFrRLTLUIUL4L/9h3e0ZB/dQR2x2InB7C9gE6vu5a7w1IgCacPk+6w 4jCyGsmcoO0sl4jx5RvDS/uT0m3hZJgNE11npMkEcrO6Rv5haYvfIO6gDJ0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSuWRe4Bm5/1Rn5X8MM/NLTFPvO8wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPxtUxKz7H1v7+RgBmxJpbi1/cHJHzKj4k9 RV12IJPEcFCetttXCoaAND9wKLnmrmN3++kOUhf0ocdE5+rROWRzy4zECldLzbr1 zQcYKrHyjNSydhJmkghau1CrrNUv8b1hMuDwl+HiuweYYR1YSWjB9Rm6RumDBbXh Q+ws8f0+XCz5GblMOcEP3lhK61p08WrKeQ15PP1qSXG6XTnjZsfS8ktP5Qt5xqZk KQ4FLjFb0IX6k+H5gKXVxHAj6Kijuy9dL3frob1F+ctN7tWITO3JjyT3OGhKI8zP d+VE75mHni/pZ0KkSS7XvKP41kzSro3jJit34bbFuO6VXcGkAno= -----END CERTIFICATE-----Generated at Wed Dec 3 16:13:53 2025 by rpki-client