This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: 9/yKbyjALC8p3+jmDn7NWisBdX9Zb2/dS1tEFAGrUgc= Subject key identifier: 9F:4E:08:2E:89:75:FF:F3:FA:01:32:69:4F:0B:27:52:1A:16:30:74 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 728B70D726CE8E0DDC1662619E1705C582CE1BF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 17:01:13 +0000 Manifest this update: Tue 02 Dec 2025 16:56:13 +0000 Manifest next update: Sat 06 Dec 2025 00:16:13 +0000 Files and hashes: 1: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: hua1W41jzrcY8UuCVV1YgIXBKzf7QfwQQqbFRhZHmmY=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8b:70:d7:26:ce:8e:0d:dc:16:62:61:9e:17:05:c5:82:ce:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Dec 2 16:56:13 2025 GMT Not After : Dec 6 00:16:13 2025 GMT Subject: CN=9F4E082E8975FFF3FA0132694F0B27521A163074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:f2:3d:97:b3:19:a7:bd:e9:20:c5:bd:c8: d3:8a:fd:4b:f8:40:df:0c:81:e6:51:e0:0d:dc:aa: 63:83:38:49:9d:8b:82:27:94:18:ba:3d:43:97:33: 49:61:40:c7:24:f1:81:b9:b7:40:b7:f6:8f:23:0f: bc:4e:d7:31:4d:2f:9a:3d:4d:cb:a1:cd:12:e8:03: 5a:d8:92:9a:70:3c:e5:86:7d:d1:59:25:6b:e1:1f: 0b:de:33:3d:3c:de:87:c2:1f:2d:dc:5b:4c:c7:71: 94:2f:1a:e7:f0:6c:c9:13:39:fc:db:50:ce:72:24: f8:69:ed:0c:12:cd:a1:45:20:c4:13:37:80:01:a0: e2:54:c1:c8:80:ff:6c:cc:78:f2:12:a6:22:c7:6e: 55:90:73:13:dc:69:db:4f:47:98:60:58:9f:9d:a8: 31:10:b3:b6:27:6f:41:a5:e1:cc:ef:a0:83:61:be: 7b:6d:ea:50:92:99:4f:53:0e:75:21:49:bb:d6:cb: 1e:c6:de:8c:08:d2:18:3c:a3:1e:d0:ef:5c:48:d6: 3f:e0:a4:4f:fc:af:28:63:05:7d:6e:9e:00:dd:cb: 7b:8e:c5:c3:7e:68:d0:10:b3:25:60:79:c1:8e:72: b7:80:7f:16:c1:e3:5a:d0:35:e5:59:f6:0d:18:eb: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4E:08:2E:89:75:FF:F3:FA:01:32:69:4F:0B:27:52:1A:16:30:74 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4b:b6:60:dc:ef:20:de:d3:f0:58:d6:e4:f3:9e:3f:fe:64: 9b:51:99:0d:6b:6d:32:7d:3b:5e:56:0a:15:80:19:f4:c8:17: 52:a5:cd:f9:7b:a8:0c:e6:6f:bd:97:dc:5e:7e:84:0a:31:f4: 85:cc:e6:c4:bb:d8:70:ef:0e:18:ff:a8:54:c2:31:b5:35:bf: 83:17:26:95:2e:5f:a7:c6:77:51:c5:5e:55:44:7b:66:e4:44: f7:bb:d7:ae:e3:3e:da:eb:28:ee:3d:fd:0b:84:d9:5b:b2:0b: 55:39:a1:a7:53:8c:97:5d:f3:75:2a:5c:c3:27:28:95:9b:9d: 88:c6:c1:35:5c:b2:7f:9c:da:18:a4:c2:46:89:8a:41:42:72: 47:a2:c1:9b:38:f6:3e:6c:53:7e:71:55:94:0d:60:1f:86:e5: 60:4e:ae:2a:9e:16:1a:b6:a1:10:9f:67:be:0c:71:38:21:28: f5:a1:b2:88:cf:3d:c6:2d:2e:61:b8:83:78:2e:e4:b4:75:4a: 61:38:f3:c2:43:bc:60:75:5b:28:45:ed:c7:89:e4:2d:d7:c8: e9:2c:b2:d2:69:64:0c:5b:1a:66:b3:a6:96:cb:68:d7:f7:3c: 41:76:37:b7:94:ec:49:9b:d8:0c:32:3b:60:ec:0d:d7:5c:3c: 07:a4:ad:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcotw1ybOjg3cFmJhnhcFxYLOG/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTEyMDIxNjU2MTNaFw0yNTEyMDYwMDE2MTNaMDMxMTAvBgNV BAMTKDlGNEUwODJFODk3NUZGRjNGQTAxMzI2OTRGMEIyNzUyMUExNjMwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaK/I9l7MZp73pIMW9yNOK/Uv4 QN8MgeZR4A3cqmODOEmdi4InlBi6PUOXM0lhQMck8YG5t0C39o8jD7xO1zFNL5o9 TcuhzRLoA1rYkppwPOWGfdFZJWvhHwveMz083ofCHy3cW0zHcZQvGufwbMkTOfzb UM5yJPhp7QwSzaFFIMQTN4ABoOJUwciA/2zMePISpiLHblWQcxPcadtPR5hgWJ+d qDEQs7Ynb0Gl4czvoINhvntt6lCSmU9TDnUhSbvWyx7G3owI0hg8ox7Q71xI1j/g pE/8ryhjBX1ungDdy3uOxcN+aNAQsyVgecGOcreAfxbB41rQNeVZ9g0Y61wHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn04ILol1//P6ATJpTwsnUhoWMHQwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANLtmDc7yDe0/BY1uTznj/+ZJtRmQ1rbTJ9 O15WChWAGfTIF1Klzfl7qAzmb72X3F5+hAox9IXM5sS72HDvDhj/qFTCMbU1v4MX JpUuX6fGd1HFXlVEe2bkRPe7167jPtrrKO49/QuE2VuyC1U5oadTjJdd83UqXMMn KJWbnYjGwTVcsn+c2hikwkaJikFCckeiwZs49j5sU35xVZQNYB+G5WBOriqeFhq2 oRCfZ74McTghKPWhsojPPcYtLmG4g3gu5LR1SmE488JDvGB1WyhF7ceJ5C3XyOks stJpZAxbGmazppbLaNf3PEF2N7eU7Emb2AwyO2DsDddcPAekrfA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:09 2025 by rpki-client