This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft File: 9E6AD12E8763F68692055BC4EE5A1741D489D240.mft (raw, json) Hash identifier: e3X85GtSyjW0gM+a1YsMNCvifK6pTbLXSZMJIJv17Kk= Subject key identifier: 71:D1:01:24:EA:C6:DA:70:DD:ED:89:3A:A2:56:5D:69:0C:D5:CF:B1 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 74FFD9C841028A7659A8B765396E0EB4C7A95C4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft Manifest number: 0152 Signing time: Sun 14 Dec 2025 04:22:06 +0000 Manifest this update: Sun 14 Dec 2025 04:17:06 +0000 Manifest next update: Wed 17 Dec 2025 05:51:06 +0000 Files and hashes: 1: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: XewhVGdMZGfa1gubSokKY6kMLA2RRqqki4nl2Mtbjwk=) 2: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo=) 3: 9E6AD12E8763F68692055BC4EE5A1741D489D240.crl (hash: 1KXCf0mxyZMzS51OGU2AwBBmAPm9059QMivgusryi4Q=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Jq8yXQh2Quimw2J5Di1Jpnv+kf1Drg9qN3sT7DolU0U=) 5: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: Pu8JRhFp9Ytx+ko3+34MhGiKzNpbqOoP8zXRhQdIFW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 05:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ff:d9:c8:41:02:8a:76:59:a8:b7:65:39:6e:0e:b4:c7:a9:5c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Dec 14 04:17:06 2025 GMT Not After : Dec 17 05:51:06 2025 GMT Subject: CN=71D10124EAC6DA70DDED893AA2565D690CD5CFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b4:7d:2a:25:9a:fc:cf:21:72:6d:02:46: 8f:fd:7d:84:4b:b8:d7:48:fb:72:c7:d0:cd:54:60: 45:73:27:15:6a:c1:fc:db:38:27:10:fa:67:0b:04: 8d:9a:44:a2:7d:b7:32:66:e2:e0:d1:0a:d5:f8:c1: 15:ae:c8:63:5c:b6:c5:fa:ab:5c:3b:8a:68:dd:7a: 17:f6:58:cb:cc:f3:0a:f1:e2:d1:b2:33:25:c6:2c: 6d:de:e5:43:a3:f5:5b:f9:38:42:38:af:fb:9e:97: 4f:29:e5:bd:07:6f:fb:85:94:ad:a9:3d:f7:ed:67: 4c:d2:73:11:a2:9d:ec:29:c6:3b:0f:74:2f:66:2d: f8:8c:93:c1:4e:8f:3f:8f:4e:24:db:dd:c4:79:52: 4f:ff:38:9f:94:28:b6:d7:af:40:4e:38:18:7b:e5: 44:68:89:ec:1f:3d:10:dd:53:35:39:bf:1a:be:2e: 65:2a:37:4e:31:84:2e:d7:0d:2c:c0:4a:0f:e7:3a: f3:58:5d:d0:78:49:5c:24:c0:91:68:a5:65:26:8c: 64:e4:83:8e:ae:e1:88:40:2c:22:ca:02:c7:70:ba: f4:33:07:66:62:bd:ce:b8:1b:b7:e3:3f:b6:2f:ff: 28:38:42:e5:fd:34:b3:60:69:bd:7b:d2:65:e2:f4: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:01:24:EA:C6:DA:70:DD:ED:89:3A:A2:56:5D:69:0C:D5:CF:B1 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a1:b9:1e:66:49:81:4a:f9:90:eb:c7:e9:3c:7b:47:3a:06: 98:ea:56:c2:83:2a:28:51:02:36:d6:ac:4c:2c:fe:48:bb:23: 52:da:87:61:4e:ef:0b:58:bd:99:aa:6d:b1:38:ea:09:38:d9: dd:c5:b1:67:70:ea:b4:9b:1e:ad:aa:e4:30:b7:c8:98:20:29: d1:8e:4e:69:0b:b2:88:97:3b:2c:7c:ef:f6:21:39:0c:6f:9a: 77:2e:d7:0d:a1:98:6d:2d:98:3f:91:99:cd:39:8c:a7:db:1a: ec:1c:ab:86:41:17:a2:0d:d5:88:2a:90:71:a1:86:25:0b:92: d4:b8:fd:50:62:a7:25:0e:12:36:85:d1:ab:d2:5a:14:8b:f0: 96:93:06:28:0e:3e:50:9c:08:fc:fa:ac:bb:79:a5:f1:d0:d5: 62:95:db:a9:fb:74:1c:08:5c:29:ef:f0:3c:e8:03:ef:89:d5: 8e:e7:dc:28:23:45:83:4b:8b:c7:cf:5a:ec:8b:8d:eb:cb:58: 1b:00:c9:66:70:9e:f0:f5:55:ae:e5:b3:d6:bd:d9:ee:46:db: 14:08:e4:e7:b2:e3:4c:cf:99:f4:13:c5:f0:93:24:a9:b7:e4: 7a:f4:23:20:68:3b:f6:ed:74:71:67:89:26:7b:82:64:dc:14: 15:49:de:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdP/ZyEECinZZqLdlOW4OtMepXE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTEyMTQwNDE3MDZaFw0yNTEyMTcwNTUxMDZaMDMxMTAvBgNV BAMTKDcxRDEwMTI0RUFDNkRBNzBEREVEODkzQUEyNTY1RDY5MENENUNGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJLR9KiWa/M8hcm0CRo/9fYRL uNdI+3LH0M1UYEVzJxVqwfzbOCcQ+mcLBI2aRKJ9tzJm4uDRCtX4wRWuyGNctsX6 q1w7imjdehf2WMvM8wrx4tGyMyXGLG3e5UOj9Vv5OEI4r/uel08p5b0Hb/uFlK2p PfftZ0zScxGinewpxjsPdC9mLfiMk8FOjz+PTiTb3cR5Uk//OJ+UKLbXr0BOOBh7 5URoiewfPRDdUzU5vxq+LmUqN04xhC7XDSzASg/nOvNYXdB4SVwkwJFopWUmjGTk g46u4YhALCLKAsdwuvQzB2Zivc64G7fjP7Yv/yg4QuX9NLNgab170mXi9OZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdEBJOrG2nDd7Yk6olZdaQzVz7EwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3 NDFENDg5RDI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqhuR5mSYFK+ZDrx+k8e0c6BpjqVsKDKihR AjbWrEws/ki7I1Lah2FO7wtYvZmqbbE46gk42d3FsWdw6rSbHq2q5DC3yJggKdGO TmkLsoiXOyx87/YhOQxvmncu1w2hmG0tmD+Rmc05jKfbGuwcq4ZBF6IN1YgqkHGh hiULktS4/VBipyUOEjaF0avSWhSL8JaTBigOPlCcCPz6rLt5pfHQ1WKV26n7dBwI XCnv8DzoA++J1Y7n3CgjRYNLi8fPWuyLjevLWBsAyWZwnvD1Va7ls9a92e5G2xQI 5Oey40zPmfQTxfCTJKm35Hr0IyBoO/btdHFniSZ7gmTcFBVJ3tY= -----END CERTIFICATE-----Generated at Mon Dec 15 13:24:00 2025 by rpki-client