This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: dbvxwt3hbVPg4C50bAYuh8XQ4MI57rv+L5E99dFzbyg= Subject key identifier: D7:71:69:1F:4A:40:B3:F2:84:F7:EE:E8:6F:12:72:E6:56:0F:5C:6B Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 0F5A3EEB9FC4CD7A1C0A3A23C06B9097E7C09B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: A7 Signing time: Fri 12 Dec 2025 02:31:38 +0000 Manifest this update: Fri 12 Dec 2025 02:26:38 +0000 Manifest next update: Mon 15 Dec 2025 13:21:38 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: 1WZmR6jQoXEiAT9Sahczrhcm/n8lZCrDua4A0EiGlrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 13:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5a:3e:eb:9f:c4:cd:7a:1c:0a:3a:23:c0:6b:90:97:e7:c0:9b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Dec 12 02:26:38 2025 GMT Not After : Dec 15 13:21:38 2025 GMT Subject: CN=D771691F4A40B3F284F7EEE86F1272E6560F5C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:29:f9:d7:01:f5:9c:82:02:86:f6:30:24: 3a:3f:30:dc:1c:44:e0:8c:e2:78:a4:61:5c:61:38: 92:75:ee:1a:55:7a:30:d6:8e:97:bd:d0:88:d2:3a: 8d:e4:db:e6:9f:ae:37:54:83:3f:63:80:67:9e:3b: ae:13:f0:86:f3:ae:4d:22:39:8e:77:73:37:69:76: 65:53:68:68:54:0e:d8:b4:66:ee:9e:b8:8c:8e:40: 3d:20:c9:66:66:bf:b5:f6:a6:eb:56:95:c3:14:e0: ce:58:47:c2:0d:af:af:27:9b:64:cc:c2:45:34:bb: da:7b:ba:2d:4f:7a:a3:71:53:9b:46:6d:3c:33:30: 89:e3:87:5d:cd:35:a4:0a:b0:23:5d:67:d1:61:77: 43:b3:f8:2f:f0:1e:e7:e3:90:27:87:f6:63:63:53: 22:68:18:d9:6b:5f:51:69:8f:3e:17:db:e1:40:4a: 61:b8:80:96:78:eb:ca:1e:47:eb:57:7f:a5:77:be: d0:49:b7:8c:6b:30:1f:8f:bc:f2:dd:0d:7b:fa:c3: 4f:33:35:a7:f4:22:b9:42:23:a1:e6:7a:c4:69:4d: 83:83:1e:dc:ea:1c:58:b2:46:98:c6:ba:6a:bb:63: 0a:70:e7:9b:ef:3c:52:eb:25:4f:57:9f:88:3f:f1: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:71:69:1F:4A:40:B3:F2:84:F7:EE:E8:6F:12:72:E6:56:0F:5C:6B X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:18:e6:f9:43:9a:b5:e7:76:04:26:db:a2:0f:76:c0:75:7a: ae:3e:f0:76:db:00:0b:4c:3b:92:30:4f:c4:f8:af:3e:8d:64: 61:63:95:db:ac:83:6f:7d:08:29:be:01:11:ab:f1:e4:53:be: 39:18:4f:46:81:7d:d3:b0:7b:a9:65:93:3e:ca:2d:d0:ef:37: bd:2a:e4:21:92:1f:6f:42:0e:76:32:a5:a5:52:58:fb:c2:74: c2:34:03:e3:e4:fd:31:0b:6f:02:31:82:70:75:0d:ee:33:eb: ec:fb:5b:35:5b:01:a4:df:c7:84:cc:56:9a:36:a8:e1:07:16: a0:3d:bc:fd:e0:c5:b1:13:eb:c9:e3:24:37:2f:4b:a9:4b:7b: 4d:89:56:13:47:3f:08:de:72:16:0a:98:2d:13:46:92:fe:69: 16:10:4d:05:88:2f:3e:85:da:15:25:31:f1:1d:d1:a2:91:ab: 09:b2:1e:8c:57:17:c4:cb:2a:51:51:74:de:8d:59:b5:d4:94: c4:47:38:91:44:69:fe:51:f2:4c:21:18:ce:e4:17:46:93:ef: 16:b0:96:28:d9:ba:dd:75:c0:46:59:77:51:b5:ba:d6:34:78: 46:98:84:eb:d9:84:98:0f:76:bc:2c:c4:f9:67:d6:eb:a9:ba: bc:83:1c:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1o+65/EzXocCjojwGuQl+fAm1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTEyMTIwMjI2MzhaFw0yNTEyMTUxMzIxMzhaMDMxMTAvBgNV BAMTKEQ3NzE2OTFGNEE0MEIzRjI4NEY3RUVFODZGMTI3MkU2NTYwRjVDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+Sn51wH1nIIChvYwJDo/MNwc ROCM4nikYVxhOJJ17hpVejDWjpe90IjSOo3k2+afrjdUgz9jgGeeO64T8Ibzrk0i OY53czdpdmVTaGhUDti0Zu6euIyOQD0gyWZmv7X2putWlcMU4M5YR8INr68nm2TM wkU0u9p7ui1PeqNxU5tGbTwzMInjh13NNaQKsCNdZ9Fhd0Oz+C/wHufjkCeH9mNj UyJoGNlrX1Fpjz4X2+FASmG4gJZ468oeR+tXf6V3vtBJt4xrMB+PvPLdDXv6w08z Naf0IrlCI6HmesRpTYODHtzqHFiyRpjGumq7Ywpw55vvPFLrJU9Xn4g/8WSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13FpH0pAs/KE9+7obxJy5lYPXGswHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOoY5vlDmrXndgQm26IPdsB1eq4+8HbbAAtM O5IwT8T4rz6NZGFjldusg299CCm+ARGr8eRTvjkYT0aBfdOwe6llkz7KLdDvN70q 5CGSH29CDnYypaVSWPvCdMI0A+Pk/TELbwIxgnB1De4z6+z7WzVbAaTfx4TMVpo2 qOEHFqA9vP3gxbET68njJDcvS6lLe02JVhNHPwjechYKmC0TRpL+aRYQTQWILz6F 2hUlMfEd0aKRqwmyHoxXF8TLKlFRdN6NWbXUlMRHOJFEaf5R8kwhGM7kF0aT7xaw lijZut11wEZZd1G1utY0eEaYhOvZhJgPdrwsxPln1uupuryDHPg= -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:12 2025 by rpki-client