This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: /EJJx/qaPav7Ck4jI6G17HMED+mgskLs0NPpXGUMN/E= Subject key identifier: 20:32:DD:A2:CE:2C:FF:53:71:1F:56:00:F7:DA:B2:1B:2D:C5:DF:62 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 4114E8DA574EE1FFE204163B2A9E851B58564A84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01CF Signing time: Mon 01 Dec 2025 04:20:56 +0000 Manifest this update: Mon 01 Dec 2025 04:15:56 +0000 Manifest next update: Thu 04 Dec 2025 13:30:56 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: BQyrpVA1FYfaQSURmUFrsgDT5R1HZ6OCLaGwENmWK0Q=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:14:e8:da:57:4e:e1:ff:e2:04:16:3b:2a:9e:85:1b:58:56:4a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Dec 1 04:15:56 2025 GMT Not After : Dec 4 13:30:56 2025 GMT Subject: CN=2032DDA2CE2CFF53711F5600F7DAB21B2DC5DF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:b7:d7:69:e0:de:be:d0:44:f9:a2:ee:05: 86:20:8f:55:2d:e9:9b:46:7b:14:11:ec:6f:9b:2b: b0:54:a0:eb:89:25:08:34:25:7f:7c:91:9e:f7:10: 28:22:8a:44:35:41:de:f9:de:c5:6f:34:f6:f2:7c: 56:99:61:e7:b0:f4:5f:52:85:2f:9e:b3:9f:e4:8a: 02:d5:38:95:7f:ec:7f:49:bc:29:75:81:5a:9d:c2: 89:18:b2:06:db:a6:ef:2d:54:34:ce:33:60:63:fa: 03:66:9e:3a:d9:8b:4a:06:e8:12:88:72:ba:e9:a3: 98:d3:3f:fa:d0:1f:17:ec:f8:28:ba:eb:fd:20:34: b4:82:5a:6f:18:d6:3c:db:f2:24:8e:65:96:c4:45: bc:0d:0a:0f:55:4c:48:24:cb:a0:7d:af:44:93:03: 6d:c2:65:24:f7:26:f1:3c:4d:8e:6a:c0:f6:94:02: 6a:64:a5:cd:0d:f4:76:34:30:67:3f:f4:b7:7d:66: d3:bb:ed:8f:eb:cd:5d:bb:62:f8:55:32:aa:d3:fc: 6c:e3:ff:35:de:23:fa:43:37:17:0b:47:0e:e1:0b: e8:d2:56:3b:29:ef:29:b7:23:9f:af:db:ea:c0:91: de:2e:24:28:95:67:e1:ad:8b:fd:14:7d:16:c4:a5: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:DD:A2:CE:2C:FF:53:71:1F:56:00:F7:DA:B2:1B:2D:C5:DF:62 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d5:26:e9:d3:17:12:3d:81:b4:4f:1d:c2:5e:e3:55:ed:01: e7:75:dd:f0:6f:ec:cb:7d:0d:d6:3b:c0:0b:a0:d7:eb:e2:24: 18:55:b0:2a:5a:97:7a:95:a0:94:22:0a:31:5d:21:d9:ea:6c: 37:68:08:38:a9:d8:fa:6f:ec:c6:a1:54:26:59:83:98:8b:1f: c3:a9:28:98:9d:bb:0d:50:b3:1d:b9:8c:0e:e1:b1:b3:58:09: 27:3d:21:64:34:0e:1b:8a:8e:92:37:15:b8:ed:87:db:a5:5a: 83:57:3a:21:6d:91:4f:75:18:1c:fa:01:1f:91:d9:bf:ee:9f: 55:c6:61:c0:12:d7:d7:f0:5a:89:8e:ca:87:07:11:97:60:47: 00:77:9f:3d:02:11:20:3e:39:b5:ef:e9:ee:be:b8:c4:8c:05: ea:61:25:3d:d5:ff:9e:18:49:25:68:37:4e:50:cc:ad:e5:14: 0d:b7:6d:ae:11:7e:32:17:12:89:70:6b:f0:b7:4c:6a:e7:9b: a5:7f:4d:7b:33:e8:39:1e:c6:e9:88:85:2d:cf:68:af:eb:c6: 3e:bb:6a:63:bb:f9:e9:16:85:ce:4b:28:07:6f:48:9a:94:eb: 2e:0b:5c:56:9b:d4:50:e4:75:f9:22:5e:a8:6f:c1:8b:d7:ad: 27:e0:07:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRTo2ldO4f/iBBY7Kp6FG1hWSoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTEyMDEwNDE1NTZaFw0yNTEyMDQxMzMwNTZaMDMxMTAvBgNV BAMTKDIwMzJEREEyQ0UyQ0ZGNTM3MTFGNTYwMEY3REFCMjFCMkRDNURGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1I7fXaeDevtBE+aLuBYYgj1Ut 6ZtGexQR7G+bK7BUoOuJJQg0JX98kZ73ECgiikQ1Qd753sVvNPbyfFaZYeew9F9S hS+es5/kigLVOJV/7H9JvCl1gVqdwokYsgbbpu8tVDTOM2Bj+gNmnjrZi0oG6BKI crrpo5jTP/rQHxfs+Ci66/0gNLSCWm8Y1jzb8iSOZZbERbwNCg9VTEgky6B9r0ST A23CZST3JvE8TY5qwPaUAmpkpc0N9HY0MGc/9Ld9ZtO77Y/rzV27YvhVMqrT/Gzj /zXeI/pDNxcLRw7hC+jSVjsp7ym3I5+v2+rAkd4uJCiVZ+Gti/0UfRbEpYNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDLdos4s/1NxH1YA99qyGy3F32IwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrVJunTFxI9gbRPHcJe41XtAed13fBv7Mt9 DdY7wAug1+viJBhVsCpal3qVoJQiCjFdIdnqbDdoCDip2Ppv7MahVCZZg5iLH8Op KJiduw1Qsx25jA7hsbNYCSc9IWQ0DhuKjpI3Fbjth9ulWoNXOiFtkU91GBz6AR+R 2b/un1XGYcAS19fwWomOyocHEZdgRwB3nz0CESA+ObXv6e6+uMSMBephJT3V/54Y SSVoN05QzK3lFA23ba4RfjIXEolwa/C3TGrnm6V/TXsz6DkexumIhS3PaK/rxj67 amO7+ekWhc5LKAdvSJqU6y4LXFab1FDkdfkiXqhvwYvXrSfgBzM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:34 2025 by rpki-client