This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: wEE+h8+krUdYcM+5YIduLgCzqCNPgvzqZW7s3HCjEfA= Subject key identifier: A7:F5:8A:BA:BA:07:6A:D2:DE:7C:35:DA:E2:89:24:94:75:41:51:C1 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 0AD58F9408545638AB65AA5BD52B19F553F77788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: E3 Signing time: Sun 07 Dec 2025 09:31:29 +0000 Manifest this update: Sun 07 Dec 2025 09:26:29 +0000 Manifest next update: Wed 10 Dec 2025 11:16:29 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: mMuQ7apMt49XjhUC+icd+XPtXUA0hG7iVpVLk2PqaZ4=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 4: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d5:8f:94:08:54:56:38:ab:65:aa:5b:d5:2b:19:f5:53:f7:77:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Dec 7 09:26:29 2025 GMT Not After : Dec 10 11:16:29 2025 GMT Subject: CN=A7F58ABABA076AD2DE7C35DAE2892494754151C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:52:96:06:7a:3f:b9:b1:43:18:01:c3:ff: 12:ad:ba:b3:04:13:36:fb:fc:b1:be:ae:a6:11:80: c4:cf:31:32:07:f6:44:f9:96:c2:f1:c8:21:55:d1: e4:40:cd:d2:2c:dd:0d:51:ef:5b:57:7f:36:b0:35: e1:91:72:6c:bc:d3:e8:7d:04:ab:ef:49:91:6e:10: 67:20:2e:cc:dd:8c:2e:f7:7a:41:5b:0a:ea:51:e7: 15:44:fa:58:f8:c6:04:89:5d:24:90:da:cf:91:1e: 75:6b:71:69:7c:9f:27:96:f9:9d:63:bf:51:a0:3d: 62:d9:7b:48:62:40:9d:1e:77:ba:78:02:a9:c3:c0: d3:ed:09:b0:25:60:ce:b2:a2:89:bc:92:8c:d6:e9: 99:d7:8d:97:72:01:43:ec:f6:8f:4e:23:d0:6d:6c: bb:cd:4b:f1:0d:26:fa:ab:20:01:cd:39:fb:92:38: dd:42:fe:5b:e5:76:e2:1e:4c:0d:c8:dc:a0:f3:7e: af:fd:bb:b6:35:9c:aa:cd:d4:46:d0:d4:7e:5b:ab: 41:a7:8a:34:ff:fa:66:c3:9e:75:a5:c7:f5:22:e9: a3:e4:60:10:6a:29:31:3b:80:33:61:94:8e:58:13: 8c:79:8a:34:33:bc:49:8b:97:f2:17:af:07:70:e4: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F5:8A:BA:BA:07:6A:D2:DE:7C:35:DA:E2:89:24:94:75:41:51:C1 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:81:13:21:34:96:e1:5e:15:99:bf:ff:0b:6c:dd:8a:d0: 59:31:93:60:46:9b:15:8a:7e:d9:53:8b:26:fd:1e:94:de:06: 7f:ff:ce:cb:84:dc:41:de:bc:00:6b:d8:34:86:1d:6c:18:b3: ee:6c:4a:02:b8:96:20:29:50:46:06:38:79:ac:a6:64:b5:99: eb:68:75:b6:1f:44:62:a6:25:46:65:88:91:bf:e7:72:72:53: 00:57:18:a0:cb:e8:cb:50:3f:4c:9a:a7:ea:ef:f9:b3:3d:63: f3:6f:7c:67:4f:9c:24:13:11:01:13:a5:e7:01:91:b9:19:7e: 0d:b6:05:b6:2b:3b:4c:f6:c9:f8:be:c1:7a:13:36:59:3d:54: 09:4e:52:ea:59:7e:62:ae:62:29:85:b5:99:91:b7:2d:57:42: 79:d7:98:80:6a:4f:69:de:ff:ac:18:6f:ea:b6:e5:e6:b2:8c: 84:5b:32:16:6c:8a:72:d7:be:90:2f:97:7b:93:ef:bf:d2:cf: 8f:b5:11:ac:30:f6:e0:bb:08:8c:62:39:93:d3:b2:59:3f:a8: ae:ba:90:c0:21:a2:d4:9c:29:d9:fd:0f:8f:a1:02:e9:de:bf: ef:b0:e1:88:7e:f1:01:02:4b:8c:51:87:9e:d1:e3:9e:da:19: 84:52:c1:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtWPlAhUVjirZapb1SsZ9VP3d4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTEyMDcwOTI2MjlaFw0yNTEyMTAxMTE2MjlaMDMxMTAvBgNV BAMTKEE3RjU4QUJBQkEwNzZBRDJERTdDMzVEQUUyODkyNDk0NzU0MTUxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lFKWBno/ubFDGAHD/xKturME Ezb7/LG+rqYRgMTPMTIH9kT5lsLxyCFV0eRAzdIs3Q1R71tXfzawNeGRcmy80+h9 BKvvSZFuEGcgLszdjC73ekFbCupR5xVE+lj4xgSJXSSQ2s+RHnVrcWl8nyeW+Z1j v1GgPWLZe0hiQJ0ed7p4AqnDwNPtCbAlYM6yoom8kozW6ZnXjZdyAUPs9o9OI9Bt bLvNS/ENJvqrIAHNOfuSON1C/lvlduIeTA3I3KDzfq/9u7Y1nKrN1EbQ1H5bq0Gn ijT/+mbDnnWlx/Ui6aPkYBBqKTE7gDNhlI5YE4x5ijQzvEmLl/IXrwdw5LANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/WKuroHatLefDXa4okklHVBUcEwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy0gRMhNJbhXhWZv/8LbN2K0Fkxk2BGmxWK ftlTiyb9HpTeBn//zsuE3EHevABr2DSGHWwYs+5sSgK4liApUEYGOHmspmS1meto dbYfRGKmJUZliJG/53JyUwBXGKDL6MtQP0yap+rv+bM9Y/NvfGdPnCQTEQETpecB kbkZfg22BbYrO0z2yfi+wXoTNlk9VAlOUupZfmKuYimFtZmRty1XQnnXmIBqT2ne /6wYb+q25eayjIRbMhZsinLXvpAvl3uT77/Sz4+1Eaww9uC7CIxiOZPTslk/qK66 kMAhotScKdn9D4+hAunev++w4Yh+8QECS4xRh57R457aGYRSwXY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:49 2025 by rpki-client