This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: yi+XIwRFzCy8c/GSYeO0NJ+xmuIbi8OB+bVlvhth1T8= Subject key identifier: A5:3B:1E:F6:0C:FB:0D:D1:02:62:54:4A:9B:B7:1C:3E:72:20:92:83 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 2B3538354361377F0EB7E3CF8EECE83E682921E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 021A Signing time: Mon 01 Dec 2025 07:11:42 +0000 Manifest this update: Mon 01 Dec 2025 07:06:42 +0000 Manifest next update: Thu 04 Dec 2025 16:25:42 +0000 Files and hashes: 1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: KNK4PWQv1Z/ds0LwPGJwTPOIhBIKtY376F20SP6qvqc=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:35:38:35:43:61:37:7f:0e:b7:e3:cf:8e:ec:e8:3e:68:29:21:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Dec 1 07:06:42 2025 GMT Not After : Dec 4 16:25:42 2025 GMT Subject: CN=A53B1EF60CFB0DD10262544A9BB71C3E72209283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:e3:3f:67:7c:1d:ab:13:58:9e:c6:aa:f8: 3e:3b:6d:38:04:60:a0:70:cf:c5:d6:46:d0:87:19: 81:ee:01:a7:39:5f:7a:67:53:98:e2:0b:08:63:f6: a7:98:65:7c:11:72:2d:ee:4b:c4:6c:97:fd:19:51: 39:8e:a9:b9:85:d9:2b:28:a7:2a:8c:c6:1e:3f:5b: d2:f8:d6:a8:e2:90:44:6b:7e:88:55:e0:24:72:52: 9e:9a:d9:57:6a:05:a8:3f:bc:5d:c9:9f:de:a4:92: dc:db:58:fd:3d:0a:a3:e5:83:aa:47:87:0f:7b:63: 19:5b:93:35:ed:8f:41:01:7a:5b:a3:06:e9:67:51: 04:de:54:f5:23:65:ac:e5:6f:00:1a:b4:69:75:ce: 43:17:2c:3d:79:87:4c:60:b7:e8:dd:ed:a0:e1:dd: 26:a7:5f:d6:0a:66:b9:ce:cf:05:04:d0:4a:e1:c3: 8c:b4:68:62:47:1b:ef:d8:2c:39:ad:35:66:e0:67: a0:bb:98:6e:ba:1e:69:d5:71:cd:9d:ab:66:aa:fe: c4:e5:e3:10:a2:8c:f4:c2:d2:ba:ca:3a:d0:9a:d4: 79:39:14:7a:13:c4:50:46:ea:a1:2f:c7:41:e6:54: 54:dc:38:5a:04:2f:f6:c4:e5:ab:9f:ec:54:4a:9f: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:1E:F6:0C:FB:0D:D1:02:62:54:4A:9B:B7:1C:3E:72:20:92:83 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:7c:42:7f:5f:14:f3:7e:83:ca:54:9f:34:f2:fb:8f:cc: 0d:d1:be:75:54:24:57:a0:09:4d:4e:f8:a8:b0:b2:d8:f2:82: 60:b0:16:9d:4d:0c:fa:57:1e:7f:84:90:06:fd:f5:db:e0:d8: 40:d2:ae:b3:13:c7:ba:4c:61:4e:c9:6a:c8:12:64:7b:84:0d: 7e:5f:1f:26:a7:a7:92:fe:e5:a0:3b:cd:85:1c:c9:06:33:e0: c6:e3:bc:3f:22:b8:42:f2:be:79:7e:d2:ed:e7:65:4b:a3:2f: 7c:d2:65:60:73:a2:73:55:04:c2:9d:d2:99:bc:9d:81:85:9c: 88:9a:56:9a:78:ec:8a:c4:ea:52:95:6d:b9:69:f8:40:53:0e: 98:75:30:7a:76:fa:ef:c4:53:0b:f9:d0:2f:87:e3:4e:d5:76: ee:34:b4:38:18:83:60:dc:fb:96:e9:5b:4c:94:44:69:9b:44: f0:0c:6c:6f:24:56:d2:8f:68:28:a2:e7:bc:30:ef:a7:15:a1: 01:31:11:93:ca:e0:c9:55:1d:db:64:34:fd:26:c8:de:90:07: a4:1d:3c:1c:7a:98:f9:3b:f3:cf:2e:da:c0:ef:a8:ae:b1:f5: a2:c9:3b:e6:64:1c:27:2d:f4:ca:cb:7f:00:1a:73:04:13:70: 83:2b:4d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzU4NUNhN38Ot+PPjuzoPmgpIeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTEyMDEwNzA2NDJaFw0yNTEyMDQxNjI1NDJaMDMxMTAvBgNV BAMTKEE1M0IxRUY2MENGQjBERDEwMjYyNTQ0QTlCQjcxQzNFNzIyMDkyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yOM/Z3wdqxNYnsaq+D47bTgE YKBwz8XWRtCHGYHuAac5X3pnU5jiCwhj9qeYZXwRci3uS8Rsl/0ZUTmOqbmF2Sso pyqMxh4/W9L41qjikERrfohV4CRyUp6a2VdqBag/vF3Jn96kktzbWP09CqPlg6pH hw97YxlbkzXtj0EBelujBulnUQTeVPUjZazlbwAatGl1zkMXLD15h0xgt+jd7aDh 3SanX9YKZrnOzwUE0Erhw4y0aGJHG+/YLDmtNWbgZ6C7mG66HmnVcc2dq2aq/sTl 4xCijPTC0rrKOtCa1Hk5FHoTxFBG6qEvx0HmVFTcOFoEL/bE5auf7FRKn6wpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTse9gz7DdECYlRKm7ccPnIgkoMwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoVfEJ/XxTzfoPKVJ808vuPzA3RvnVUJFeg CU1O+KiwstjygmCwFp1NDPpXHn+EkAb99dvg2EDSrrMTx7pMYU7JasgSZHuEDX5f Hyanp5L+5aA7zYUcyQYz4MbjvD8iuELyvnl+0u3nZUujL3zSZWBzonNVBMKd0pm8 nYGFnIiaVpp47IrE6lKVbblp+EBTDph1MHp2+u/EUwv50C+H407Vdu40tDgYg2Dc +5bpW0yURGmbRPAMbG8kVtKPaCii57ww76cVoQExEZPK4MlVHdtkNP0myN6QB6Qd PBx6mPk7888u2sDvqK6x9aLJO+ZkHCct9MrLfwAacwQTcIMrTcY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:54 2025 by rpki-client