This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: PcxgQSTczbOp8pATXwP95lqpmeeMeSJV9LN5k+00BCA= Subject key identifier: FE:BD:52:3D:C9:EF:B1:4B:23:8C:69:A9:AB:E9:D6:E7:0C:AA:F6:D8 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 4E098E4CCB9CCB639B9ADA609AF409742B1766CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: F9 Signing time: Sat 22 Nov 2025 18:51:18 +0000 Manifest this update: Sat 22 Nov 2025 18:46:18 +0000 Manifest next update: Tue 25 Nov 2025 21:02:18 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 2: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 3: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: Iz3Cq0j1LVaqExrBGdyEYlw1xu5RB4Z8swlem8f0HWc=) 4: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 16:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:09:8e:4c:cb:9c:cb:63:9b:9a:da:60:9a:f4:09:74:2b:17:66:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Nov 22 18:46:18 2025 GMT Not After : Nov 25 21:02:18 2025 GMT Subject: CN=FEBD523DC9EFB14B238C69A9ABE9D6E70CAAF6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:8e:2b:0f:05:b8:8b:99:97:df:23:79:8d: 4b:55:44:3e:4d:ff:b2:0b:03:e9:a0:b7:71:0e:3b: 84:20:20:35:ca:35:e0:79:00:49:a6:07:ef:32:c3: 0e:c1:eb:45:e2:b6:77:b7:fd:38:7d:6a:da:e9:e0: af:7d:ee:20:65:ff:fd:5f:9c:42:56:0f:fd:1e:d9: 2d:6c:6a:66:18:6e:b2:40:6c:13:5b:34:33:43:8f: 6c:38:8c:31:4a:96:ca:96:25:f7:1e:b0:f2:9d:52: 20:07:37:4d:1d:ca:75:19:23:02:66:ae:81:23:d4: 83:bc:e1:15:1e:30:db:99:04:44:6e:a0:80:bb:39: f5:5a:10:f6:4c:f7:65:eb:e2:f6:c3:9c:b8:d2:9b: dd:54:98:e5:45:84:12:9b:1a:bf:9c:59:ec:a6:be: 7e:06:bb:2e:79:77:df:ce:85:dd:a2:a6:6e:ca:31: f0:65:bc:a7:30:0c:20:de:1f:5c:49:41:97:db:b0: 06:ac:b9:e1:ac:06:dc:2d:77:bd:67:4d:57:9a:ef: c6:44:d9:76:53:cd:ea:d8:c7:41:fe:07:b0:57:07: 07:b8:48:63:e1:f4:e3:94:0e:99:cb:12:8f:97:84: 3d:20:1a:e4:a9:bc:72:c3:d5:30:80:8a:66:34:e9: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:52:3D:C9:EF:B1:4B:23:8C:69:A9:AB:E9:D6:E7:0C:AA:F6:D8 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:20:d3:7c:2e:9b:6e:48:b1:66:93:6b:f4:cf:25:0e:38:45: 14:55:ce:6b:71:ab:79:0d:56:8d:ec:5a:f0:da:bf:5c:2e:ca: b6:8d:d4:c5:56:20:39:3e:d0:1d:7d:68:23:01:41:5e:5b:75: 67:2c:d0:43:72:d3:84:e2:eb:a9:61:7c:52:ba:62:6d:87:52: cd:96:51:fc:e8:29:6b:82:4d:da:64:6d:04:07:fc:9b:30:1b: e0:69:d6:bc:53:3f:a6:c4:93:fa:07:0d:18:b4:63:83:0d:3e: d7:2a:f4:ca:0e:a0:0d:58:a9:d6:13:c6:fe:85:fd:38:f7:6e: 2c:1a:b4:f9:7e:37:db:27:6b:8b:6a:c4:dc:73:ce:74:2b:82: c0:ad:d1:13:ac:7b:2a:4c:db:68:1c:10:22:15:9a:81:0d:82: 4b:d2:27:ca:67:8e:70:19:4f:e5:e4:07:37:86:59:06:bd:f2: 8e:3f:75:df:0d:5c:06:fc:30:39:6f:10:07:2f:15:f3:ae:b6: ad:8b:ce:22:d6:07:1b:fb:ac:e2:e1:15:50:37:a2:f9:07:c0: ed:63:82:24:8e:56:50:43:09:34:2d:fc:4c:23:97:51:05:17: 4a:1c:8f:52:8d:fe:c4:c1:6c:f2:1a:45:c5:8e:3d:a0:b5:c7: 8a:3b:43:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgmOTMucy2ObmtpgmvQJdCsXZsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTExMjIxODQ2MThaFw0yNTExMjUyMTAyMThaMDMxMTAvBgNV BAMTKEZFQkQ1MjNEQzlFRkIxNEIyMzhDNjlBOUFCRTlENkU3MENBQUY2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYY4rDwW4i5mX3yN5jUtVRD5N /7ILA+mgt3EOO4QgIDXKNeB5AEmmB+8yww7B60Xitne3/Th9atrp4K997iBl//1f nEJWD/0e2S1samYYbrJAbBNbNDNDj2w4jDFKlsqWJfcesPKdUiAHN00dynUZIwJm roEj1IO84RUeMNuZBERuoIC7OfVaEPZM92Xr4vbDnLjSm91UmOVFhBKbGr+cWeym vn4Guy55d9/Ohd2ipm7KMfBlvKcwDCDeH1xJQZfbsAasueGsBtwtd71nTVea78ZE 2XZTzerYx0H+B7BXBwe4SGPh9OOUDpnLEo+XhD0gGuSpvHLD1TCAimY06ZjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/r1SPcnvsUsjjGmpq+nW5wyq9tgwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIg03wum25IsWaTa/TPJQ44RRRVzmtxq3kN Vo3sWvDav1wuyraN1MVWIDk+0B19aCMBQV5bdWcs0ENy04Ti66lhfFK6Ym2HUs2W UfzoKWuCTdpkbQQH/JswG+Bp1rxTP6bEk/oHDRi0Y4MNPtcq9MoOoA1YqdYTxv6F /Tj3biwatPl+N9sna4tqxNxzznQrgsCt0ROseypM22gcECIVmoENgkvSJ8pnjnAZ T+XkBzeGWQa98o4/dd8NXAb8MDlvEAcvFfOutq2LziLWBxv7rOLhFVA3ovkHwO1j giSOVlBDCTQt/Ewjl1EFF0ocj1KN/sTBbPIaRcWOPaC1x4o7Q6w= -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:27 2025 by rpki-client