This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: P3Asv1wQJz+SkfaQm2HrV8zoNY9eCYL2W/KKnwxxqsw= Subject key identifier: C3:F1:92:BA:B9:3F:84:EF:E3:4F:AF:4D:58:4E:4D:4E:83:72:DF:EE Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 7EA6D7CAD2F602632D7EAC60FFEF87E3C79DA520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: A5 Signing time: Sun 07 Dec 2025 09:41:40 +0000 Manifest this update: Sun 07 Dec 2025 09:36:40 +0000 Manifest next update: Wed 10 Dec 2025 18:03:40 +0000 Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: UUpw8HVWdV9BkeYuHTUymJdWYgwGFTfsYtgsUquPG/w=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a6:d7:ca:d2:f6:02:63:2d:7e:ac:60:ff:ef:87:e3:c7:9d:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Dec 7 09:36:40 2025 GMT Not After : Dec 10 18:03:40 2025 GMT Subject: CN=C3F192BAB93F84EFE34FAF4D584E4D4E8372DFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:36:4e:6e:ed:09:00:4b:c9:fb:a1:ca:f6: f0:e3:5b:1a:2e:c5:38:17:6a:df:62:db:4a:dd:a1: ff:bd:f7:bf:d9:54:9c:94:18:74:c0:a0:c4:16:0b: 35:27:a8:3d:d5:34:fa:f9:0c:34:f5:47:f9:65:9f: eb:d9:de:84:f0:c2:59:08:c6:7d:77:87:eb:95:7e: db:26:3d:a3:73:84:92:c0:7c:71:95:18:4c:85:6c: f6:6e:3e:85:fc:2b:8f:51:83:09:a3:a3:75:55:18: 24:8f:07:df:1b:17:a4:f3:a8:15:af:f9:ef:40:94: a5:e5:78:7f:ac:1f:39:26:01:6e:32:4e:0c:cf:91: 40:56:f8:55:b1:c9:b2:27:f9:55:1b:1d:4d:f9:60: 81:99:a3:b7:91:af:9f:ba:4d:44:b3:94:3f:b1:d2: f7:c6:a5:77:7b:fe:86:8c:fe:f3:63:20:ee:f2:86: f1:fa:d0:a8:91:e3:d6:5f:67:66:a6:17:50:b8:de: d2:7b:7c:44:ba:1c:b2:3e:e7:96:fb:ba:65:ce:54: 0e:02:b4:af:53:8f:96:92:49:ea:de:e0:16:60:dd: 0f:09:00:a3:17:7e:0b:5a:8a:67:74:87:9e:54:69: 21:c9:ad:d7:e6:4c:69:c7:80:b0:5d:6f:5a:68:a8: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:92:BA:B9:3F:84:EF:E3:4F:AF:4D:58:4E:4D:4E:83:72:DF:EE X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:87:96:49:d4:71:f0:40:ea:04:01:01:39:5b:13:c9:03:f0: bb:8d:e6:0d:4c:93:bb:0f:03:03:65:34:57:c3:46:6e:c6:82: 89:bc:c3:0a:cd:5c:00:ab:0d:c6:ca:b9:ba:8e:7a:60:23:43: a5:83:21:30:79:4d:de:24:dc:a6:aa:2d:2e:98:fa:45:6d:7f: 3d:d2:66:55:6d:13:dc:ce:7a:08:b3:f0:af:10:6e:17:f7:80: b5:78:e3:f2:36:d8:74:22:8b:16:03:23:9d:cd:2b:b3:ee:d7: d9:64:cf:cd:02:e9:ea:ef:0d:d7:d9:6f:fc:f9:95:d1:b7:c0: 5e:5c:71:bb:a8:f5:a6:71:f4:b0:6c:ff:01:71:3f:7e:4f:ad: bb:9e:30:6f:44:70:73:b7:af:f8:0d:d4:ea:94:3b:da:a7:31: ce:7b:ca:51:5e:68:20:32:3f:1b:10:96:8b:cb:b4:72:7b:af: b6:66:62:4c:9e:b8:31:5a:18:5a:2d:4d:fa:99:66:2e:d6:76: 43:80:87:c9:12:26:61:09:42:5a:84:1a:01:57:e6:3c:6d:18: 61:17:95:a3:84:27:e7:44:60:a0:9a:f5:db:40:70:b7:ab:59: f0:fd:c3:63:e1:fc:09:39:73:e1:62:79:18:68:25:cc:02:86: fe:fe:eb:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqbXytL2AmMtfqxg/++H48edpSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTEyMDcwOTM2NDBaFw0yNTEyMTAxODAzNDBaMDMxMTAvBgNV BAMTKEMzRjE5MkJBQjkzRjg0RUZFMzRGQUY0RDU4NEU0RDRFODM3MkRGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQjZObu0JAEvJ+6HK9vDjWxou xTgXat9i20rdof+997/ZVJyUGHTAoMQWCzUnqD3VNPr5DDT1R/lln+vZ3oTwwlkI xn13h+uVftsmPaNzhJLAfHGVGEyFbPZuPoX8K49Rgwmjo3VVGCSPB98bF6TzqBWv +e9AlKXleH+sHzkmAW4yTgzPkUBW+FWxybIn+VUbHU35YIGZo7eRr5+6TUSzlD+x 0vfGpXd7/oaM/vNjIO7yhvH60KiR49ZfZ2amF1C43tJ7fES6HLI+55b7umXOVA4C tK9Tj5aSSere4BZg3Q8JAKMXfgtaimd0h55UaSHJrdfmTGnHgLBdb1poqD4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/GSurk/hO/jT69NWE5NToNy3+4wHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGHlknUcfBA6gQBATlbE8kD8LuN5g1Mk7sP AwNlNFfDRm7Ggom8wwrNXACrDcbKubqOemAjQ6WDITB5Td4k3KaqLS6Y+kVtfz3S ZlVtE9zOegiz8K8Qbhf3gLV44/I22HQiixYDI53NK7Pu19lkz80C6ervDdfZb/z5 ldG3wF5ccbuo9aZx9LBs/wFxP35PrbueMG9EcHO3r/gN1OqUO9qnMc57ylFeaCAy PxsQlovLtHJ7r7ZmYkyeuDFaGFotTfqZZi7WdkOAh8kSJmEJQlqEGgFX5jxtGGEX laOEJ+dEYKCa9dtAcLerWfD9w2Ph/Ak5c+FieRhoJcwChv7+68s= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:47 2025 by rpki-client