This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: swp14OG8LNsZTL5BjGVGo5O3GpwiJd4az5Au/5W9TAQ= Subject key identifier: 53:C9:18:AE:A9:76:19:F0:A9:AC:F5:5E:0F:0C:BF:32:22:9A:6D:B0 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 174EC67474284B3F94BB0199E1C06C7211C50696 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: A9 Signing time: Mon 01 Dec 2025 20:31:50 +0000 Manifest this update: Mon 01 Dec 2025 20:26:50 +0000 Manifest next update: Fri 05 Dec 2025 04:18:50 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: Pm4P7YqzAyoJTe5nF2O77aU9bDYDmLBmxn3LhMxXDNQ=) 2: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=) 3: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=) 4: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=) 5: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4e:c6:74:74:28:4b:3f:94:bb:01:99:e1:c0:6c:72:11:c5:06:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Dec 1 20:26:50 2025 GMT Not After : Dec 5 04:18:50 2025 GMT Subject: CN=53C918AEA97619F0A9ACF55E0F0CBF32229A6DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:7d:55:d5:08:88:7f:7c:88:1e:96:2b:f4: 6f:38:1d:22:ab:92:7b:54:2d:56:7f:e9:53:7c:a4: 1d:fd:6f:ab:4c:ff:c4:17:19:d6:6a:6a:ad:7c:84: 35:9a:c2:6a:db:98:26:fa:8e:e3:b1:f6:8f:29:58: 5c:d6:21:8f:aa:3c:ca:5b:e6:e3:8a:b4:9a:7f:b2: c8:ba:30:83:3b:3d:c6:93:58:bc:51:dd:c5:6a:d7: 87:f9:24:34:7b:8f:a2:14:ee:f6:b6:4a:19:d9:44: 21:ff:9b:ec:21:9a:fa:e5:f0:fa:e3:68:e4:69:b6: b3:01:bc:91:f6:4e:aa:b8:62:ca:ec:c3:8a:6d:6d: a8:7f:ed:01:b8:39:3a:35:ec:92:27:32:d6:c7:54: 9b:e0:4c:b3:10:0d:f2:58:03:5e:e5:25:c2:b7:f1: 05:e8:28:89:73:15:13:ae:13:b5:ae:df:68:26:d7: 7c:99:3c:e6:92:d7:70:1d:d2:18:ab:e3:29:91:a9: 97:96:62:fd:ea:65:94:7c:b2:a4:0e:30:f0:9d:e2: cd:79:8a:68:af:eb:13:15:57:ee:b5:01:e4:38:08: 95:4f:9e:c5:12:e6:29:01:bd:32:2f:a5:1b:0c:b6: 5f:31:5a:68:38:f3:ed:3f:22:07:42:04:01:77:8e: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:18:AE:A9:76:19:F0:A9:AC:F5:5E:0F:0C:BF:32:22:9A:6D:B0 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1f:0c:25:6f:f5:6d:f9:19:7e:9e:c8:90:70:bf:39:4c:fd: 66:58:86:ee:3b:c1:2c:bf:d1:52:17:35:b0:08:04:7f:55:98: e4:be:6a:a4:d6:8f:ef:12:cc:35:9c:be:8b:e9:56:f2:3a:ba: 78:02:44:c2:bd:9e:45:28:89:0a:76:1d:d7:07:8e:40:3e:f5: 56:37:5d:bc:60:ee:12:16:61:13:40:1c:79:69:f4:5d:e4:1c: 50:cf:8d:fa:b4:ff:0d:ee:03:4a:69:ea:24:63:d5:6c:bc:a5: ee:47:ab:aa:89:e7:5c:3d:c1:53:ba:a1:e8:97:08:e7:a2:a2: 86:dc:7f:fd:34:1b:4e:2d:1b:8b:75:96:a5:3b:18:ba:82:3f: 00:33:46:eb:69:0d:fa:bd:62:e3:7b:0a:c5:32:1c:29:8d:96: 25:00:18:1b:84:8b:4b:4b:bc:bf:1c:f6:82:45:ae:98:d1:9e: ac:a3:de:00:d0:3f:18:1b:48:b7:4c:da:18:e7:cd:9d:8c:43: 6b:42:ae:fe:a2:8c:3a:eb:c5:40:68:c2:12:b6:20:62:d5:a3: f4:4c:07:68:01:54:4f:fb:e2:ce:38:84:ce:fb:e3:3a:e9:ff: 9d:71:3f:d7:95:5f:56:22:8e:29:13:47:dc:b9:01:36:98:55: 48:da:4e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF07GdHQoSz+UuwGZ4cBschHFBpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTEyMDEyMDI2NTBaFw0yNTEyMDUwNDE4NTBaMDMxMTAvBgNV BAMTKDUzQzkxOEFFQTk3NjE5RjBBOUFDRjU1RTBGMENCRjMyMjI5QTZEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+n1V1QiIf3yIHpYr9G84HSKr kntULVZ/6VN8pB39b6tM/8QXGdZqaq18hDWawmrbmCb6juOx9o8pWFzWIY+qPMpb 5uOKtJp/ssi6MIM7PcaTWLxR3cVq14f5JDR7j6IU7va2ShnZRCH/m+whmvrl8Prj aORptrMBvJH2Tqq4Ysrsw4ptbah/7QG4OTo17JInMtbHVJvgTLMQDfJYA17lJcK3 8QXoKIlzFROuE7Wu32gm13yZPOaS13Ad0hir4ymRqZeWYv3qZZR8sqQOMPCd4s15 imiv6xMVV+61AeQ4CJVPnsUS5ikBvTIvpRsMtl8xWmg48+0/IgdCBAF3jvbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8kYrql2GfCprPVeDwy/MiKabbAwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsfDCVv9W35GX6eyJBwvzlM/WZYhu47wSy/ 0VIXNbAIBH9VmOS+aqTWj+8SzDWcvovpVvI6ungCRMK9nkUoiQp2HdcHjkA+9VY3 Xbxg7hIWYRNAHHlp9F3kHFDPjfq0/w3uA0pp6iRj1Wy8pe5Hq6qJ51w9wVO6oeiX COeioobcf/00G04tG4t1lqU7GLqCPwAzRutpDfq9YuN7CsUyHCmNliUAGBuEi0tL vL8c9oJFrpjRnqyj3gDQPxgbSLdM2hjnzZ2MQ2tCrv6ijDrrxUBowhK2IGLVo/RM B2gBVE/74s44hM774zrp/51xP9eVX1YijikTR9y5ATaYVUjaTjw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client