This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: Aszm39OONlhYnvbfC9ldZP4vSChRO4S1NeBC82VKDKc= Subject key identifier: 8E:16:A1:5F:61:54:85:64:BD:0A:DA:BD:5A:22:2D:7D:EF:C1:D0:53 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 4B66CA87D0FCE34B7AEFB1F76E06CBE5994A95DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 033A Signing time: Tue 02 Dec 2025 06:21:42 +0000 Manifest this update: Tue 02 Dec 2025 06:16:42 +0000 Manifest next update: Fri 05 Dec 2025 12:51:42 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: IsQHszFGy720BfN4KHpO9TPooreMSeRFGkotoQlYWUQ=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:66:ca:87:d0:fc:e3:4b:7a:ef:b1:f7:6e:06:cb:e5:99:4a:95:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Dec 2 06:16:42 2025 GMT Not After : Dec 5 12:51:42 2025 GMT Subject: CN=8E16A15F61548564BD0ADABD5A222D7DEFC1D053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:31:9c:e7:fd:7c:47:18:c3:a0:c0:5e:db:36: 4d:d9:98:6d:57:08:b0:b5:de:87:2a:3b:ad:7e:ad: 37:fa:44:d6:da:a9:2f:0a:b9:6b:3c:be:0a:74:05: 1f:7a:db:36:a9:b3:3e:e7:d4:d1:a3:4b:2d:ff:53: 69:3b:56:f7:55:a0:db:ec:92:98:c7:51:20:27:06: 46:15:db:39:45:89:97:f9:51:03:9f:43:ad:87:db: 61:13:55:6d:a4:9f:9d:1b:12:08:38:18:f4:56:81: 41:52:e4:37:d2:22:9c:5d:04:8c:32:dc:24:61:34: da:74:3e:c4:41:ac:95:ae:e3:b4:ef:e0:d1:a7:c5: ad:4b:c0:9b:2e:c8:d2:bc:5d:7b:db:fa:67:62:d4: ce:4d:14:6e:b0:ec:19:75:45:2e:f3:95:e0:52:75: 25:db:2c:bd:22:a9:b6:8c:ba:ef:3e:b8:45:c0:9f: 97:87:1e:ac:59:ff:57:1f:28:0f:50:76:57:45:0f: 03:9b:06:11:de:42:90:3f:85:88:df:09:bb:c9:a0: 8d:8a:cc:bc:26:86:77:0c:51:a6:f5:66:3c:39:99: 75:cc:73:fb:ce:1a:ec:98:0a:8e:d5:1f:60:41:8e: e2:16:c9:d2:b7:5c:98:97:cd:4b:cc:25:76:09:3a: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:A1:5F:61:54:85:64:BD:0A:DA:BD:5A:22:2D:7D:EF:C1:D0:53 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:47:e3:23:28:60:c8:69:a4:f2:87:5f:1d:27:35:30:b7:1c: cc:76:c8:06:9d:8d:c4:36:39:fd:62:b8:8d:25:51:78:89:b5: 0e:19:de:1d:7e:38:e8:86:a4:13:8a:87:d1:ad:68:2b:ad:85: a4:77:d1:3c:78:ca:65:5c:06:c3:eb:41:5d:e2:54:33:03:e9: 0d:d8:22:90:15:7e:e7:88:e5:7c:79:51:e6:db:d1:5f:c5:45: 2c:91:92:2c:ab:5e:b5:89:46:d0:89:53:0f:bb:d8:ba:9b:59: 01:17:c7:60:1b:52:39:aa:89:fa:90:89:34:92:a1:ba:dc:06: 82:11:8c:eb:e3:8f:6b:2c:f2:1b:05:14:a0:69:2c:74:c8:5a: ff:11:c5:49:f0:7e:a6:1e:cb:2d:7c:80:8c:5e:cd:ec:e8:ec: 32:66:bf:d4:08:0e:d8:4b:8d:6e:60:66:27:09:eb:cc:41:7b: e8:6c:ea:7e:78:21:67:9b:f1:cd:bc:da:02:50:c4:1d:03:97: 13:eb:a0:d8:f8:c8:b4:5a:70:c6:35:a4:c4:bb:90:96:ac:61: ec:4a:48:45:0d:75:fd:c0:ba:94:99:af:5e:3d:f5:97:32:96: 97:1b:43:05:ad:a1:b0:b1:9f:61:52:50:39:58:15:5c:20:e1: 7d:3a:41:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2bKh9D840t677H3bgbL5ZlKld4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTEyMDIwNjE2NDJaFw0yNTEyMDUxMjUxNDJaMDMxMTAvBgNV BAMTKDhFMTZBMTVGNjE1NDg1NjRCRDBBREFCRDVBMjIyRDdERUZDMUQwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtMZzn/XxHGMOgwF7bNk3ZmG1X CLC13ocqO61+rTf6RNbaqS8KuWs8vgp0BR962zapsz7n1NGjSy3/U2k7VvdVoNvs kpjHUSAnBkYV2zlFiZf5UQOfQ62H22ETVW2kn50bEgg4GPRWgUFS5DfSIpxdBIwy 3CRhNNp0PsRBrJWu47Tv4NGnxa1LwJsuyNK8XXvb+mdi1M5NFG6w7Bl1RS7zleBS dSXbLL0iqbaMuu8+uEXAn5eHHqxZ/1cfKA9QdldFDwObBhHeQpA/hYjfCbvJoI2K zLwmhncMUab1Zjw5mXXMc/vOGuyYCo7VH2BBjuIWydK3XJiXzUvMJXYJOiStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhahX2FUhWS9Ctq9WiItfe/B0FMwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBH4yMoYMhppPKHXx0nNTC3HMx2yAadjcQ2 Of1iuI0lUXiJtQ4Z3h1+OOiGpBOKh9GtaCuthaR30Tx4ymVcBsPrQV3iVDMD6Q3Y IpAVfueI5Xx5Uebb0V/FRSyRkiyrXrWJRtCJUw+72LqbWQEXx2AbUjmqifqQiTSS obrcBoIRjOvjj2ss8hsFFKBpLHTIWv8RxUnwfqYeyy18gIxezezo7DJmv9QIDthL jW5gZicJ68xBe+hs6n54IWeb8c282gJQxB0DlxProNj4yLRacMY1pMS7kJasYexK SEUNdf3AupSZr1499ZcylpcbQwWtobCxn2FSUDlYFVwg4X06Qb0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:53 2025 by rpki-client