This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: Kxuf1aSYibJ8sNuvbCFyNMtwzzkRlq1UC1XApazeLqI= Subject key identifier: 0E:4C:72:BE:59:F1:14:9A:93:5F:66:5B:4C:EB:49:B1:E8:45:56:9B Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 58A518DB69C3A711315755EE98F47B7B01F0F091 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0536 Signing time: Wed 17 Dec 2025 22:32:11 +0000 Manifest this update: Wed 17 Dec 2025 22:27:11 +0000 Manifest next update: Sun 21 Dec 2025 02:33:11 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: 0GKSaYriwIgJgmdpOz9a55rW7DnCLSvC+f96B3Viclc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a5:18:db:69:c3:a7:11:31:57:55:ee:98:f4:7b:7b:01:f0:f0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Dec 17 22:27:11 2025 GMT Not After : Dec 21 02:33:11 2025 GMT Subject: CN=0E4C72BE59F1149A935F665B4CEB49B1E845569B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:d2:5f:fc:91:00:ae:1e:df:09:03:90:e4: 4c:c6:ce:49:ed:86:d7:57:df:c8:ab:9c:31:e3:c1: 42:0f:ce:c6:04:5c:15:2b:e7:4e:b2:03:c2:74:29: 5e:e0:3b:3b:86:53:d5:4b:fa:af:e1:31:84:7f:93: cf:8a:cf:e3:aa:23:3e:91:03:55:70:e3:a3:64:19: 5d:d0:26:5e:1c:fd:1b:6f:e5:87:c6:53:27:d6:bf: 1d:d9:84:0d:4b:2e:8f:d8:9d:20:1a:a8:3d:6a:8c: 36:53:df:b8:ea:0b:55:e5:64:12:12:61:91:75:e9: 7c:50:e6:c3:51:ef:15:e1:e4:47:ad:6f:19:97:71: 02:21:42:b4:c7:fd:dd:93:be:a8:cb:fb:e7:c4:3c: 02:08:c1:ac:fb:09:ba:00:73:9d:36:8d:33:f1:95: 6a:44:a2:e1:3c:f7:12:39:06:e4:79:90:db:18:cf: 55:d9:51:51:82:37:47:4f:e4:45:0c:e5:3e:e2:4c: 3d:35:4f:7c:e8:41:f4:b8:24:c8:1a:7f:fe:df:53: b1:74:1b:90:3c:4d:c6:0a:6d:f0:0f:a3:fe:d8:3e: 0f:69:9f:0c:2a:89:e2:a2:83:20:03:b4:f6:db:00: a3:81:42:35:2c:7c:12:ad:23:79:ca:e1:25:8d:26: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4C:72:BE:59:F1:14:9A:93:5F:66:5B:4C:EB:49:B1:E8:45:56:9B X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:e5:49:45:62:c5:65:cb:58:af:48:e6:6c:fe:a9:5f:a6:7f: 76:e0:06:38:bf:bc:70:96:1a:da:87:3f:86:43:05:a5:3c:f7: 4f:75:57:94:a7:0b:3e:5c:28:34:32:79:5a:95:d0:ad:41:38: cd:cb:3c:9f:ed:af:74:e1:a4:8b:21:fc:c9:33:03:d3:30:d1: 2f:06:45:7b:b3:00:83:a9:ab:92:fa:50:ed:4a:02:e5:f4:ea: 49:48:07:c3:5d:55:77:97:14:d8:a3:02:06:4b:d9:7e:f1:6e: 4a:25:1d:76:7c:e6:d5:49:71:8d:33:a9:b7:f3:66:8b:86:5f: 8d:a2:dc:0d:e9:8d:22:5b:3f:63:f2:87:5d:57:2d:e7:92:58: 23:a9:13:67:90:cf:9b:35:63:fd:78:a5:ef:ed:aa:e1:4a:13: d4:c3:8f:51:e2:93:d9:da:5d:64:98:8c:0a:37:ad:ea:da:0c: d5:03:59:fc:05:66:03:7e:5f:f5:b4:4a:1b:61:90:da:34:a9: 72:7a:74:78:8f:0c:31:4b:44:bd:bd:af:1f:a3:20:fe:54:4d: 4b:06:09:dc:57:08:78:81:96:0f:ed:d7:67:ee:76:ab:39:91: 99:ee:c6:81:5c:dc:72:94:cf:2b:47:d4:4a:e6:1e:83:15:01: c8:b1:9d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKUY22nDpxExV1XumPR7ewHw8JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTEyMTcyMjI3MTFaFw0yNTEyMjEwMjMzMTFaMDMxMTAvBgNV BAMTKDBFNEM3MkJFNTlGMTE0OUE5MzVGNjY1QjRDRUI0OUIxRTg0NTU2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVK9Jf/JEArh7fCQOQ5EzGzknt htdX38irnDHjwUIPzsYEXBUr506yA8J0KV7gOzuGU9VL+q/hMYR/k8+Kz+OqIz6R A1Vw46NkGV3QJl4c/Rtv5YfGUyfWvx3ZhA1LLo/YnSAaqD1qjDZT37jqC1XlZBIS YZF16XxQ5sNR7xXh5EetbxmXcQIhQrTH/d2TvqjL++fEPAIIwaz7CboAc502jTPx lWpEouE89xI5BuR5kNsYz1XZUVGCN0dP5EUM5T7iTD01T3zoQfS4JMgaf/7fU7F0 G5A8TcYKbfAPo/7YPg9pnwwqieKigyADtPbbAKOBQjUsfBKtI3nK4SWNJlAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkxyvlnxFJqTX2ZbTOtJsehFVpswHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzlSUVixWXLWK9I5mz+qV+mf3bgBji/vHCW GtqHP4ZDBaU89091V5SnCz5cKDQyeVqV0K1BOM3LPJ/tr3ThpIsh/MkzA9Mw0S8G RXuzAIOpq5L6UO1KAuX06klIB8NdVXeXFNijAgZL2X7xbkolHXZ85tVJcY0zqbfz ZouGX42i3A3pjSJbP2Pyh11XLeeSWCOpE2eQz5s1Y/14pe/tquFKE9TDj1Hik9na XWSYjAo3reraDNUDWfwFZgN+X/W0ShthkNo0qXJ6dHiPDDFLRL29rx+jIP5UTUsG CdxXCHiBlg/t12fudqs5kZnuxoFc3HKUzytH1ErmHoMVAcixnX0= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:15 2025 by rpki-client