This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: HshnR0zBkm/W8LvFJmzlVF+SDdOdY1J+NKdPr9jt3KY= Subject key identifier: F5:51:E5:9C:B2:9B:30:12:B6:63:50:39:A2:86:33:77:26:3B:D8:8A Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 0A09D62D9DB7798315CD8859A93ED1433CBC1AD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01E1 Signing time: Thu 25 Dec 2025 01:11:36 +0000 Manifest this update: Thu 25 Dec 2025 01:06:36 +0000 Manifest next update: Sun 28 Dec 2025 11:23:36 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: u8cSBpDu/Xgvho521YUiqTykLfks2Lwqg4xRHEuf/r0=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 11:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:d6:2d:9d:b7:79:83:15:cd:88:59:a9:3e:d1:43:3c:bc:1a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Dec 25 01:06:36 2025 GMT Not After : Dec 28 11:23:36 2025 GMT Subject: CN=F551E59CB29B3012B6635039A2863377263BD88A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:7d:ba:39:6e:6a:18:45:3c:81:2c:c1:19: 5b:19:d3:8d:18:49:58:3f:08:3f:bc:84:16:a0:f1: b5:ff:d0:41:68:28:66:1f:49:bc:57:a7:f7:2f:b4: b4:05:d0:10:f6:b2:2c:cf:5f:e2:26:18:42:d9:50: 08:f4:24:61:7b:80:84:db:03:fb:21:e1:a1:e2:75: 83:68:7d:14:74:3b:eb:0b:6e:8c:9b:06:9f:03:b5: 79:cc:28:5f:58:07:2c:2d:33:e1:e1:5b:95:c6:b4: d1:3c:05:27:d4:0d:ec:ac:e0:34:27:2b:69:71:7f: d0:00:8b:f7:63:77:1d:e5:f0:da:fd:1b:6b:d6:86: 4a:5a:58:6b:3c:ca:9f:04:bd:8c:8c:0b:b0:4d:1e: a1:c9:08:da:b4:fd:aa:8f:97:34:e3:5a:9e:63:f9: d1:98:82:97:0e:76:44:ee:e5:cc:c7:1b:b6:77:eb: 59:ff:1f:14:23:93:c4:bd:d0:f2:45:e5:bd:70:bc: b2:c8:b0:24:c3:f9:10:dc:5d:0c:33:ef:f0:70:b4: 22:78:91:09:f5:58:51:34:fb:21:33:11:79:b2:8e: 41:d6:7d:5a:a5:b8:e5:66:2b:92:1a:59:b3:a7:d2: 7c:01:dc:4f:4c:f4:8e:5f:96:c0:81:69:28:b1:ae: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:51:E5:9C:B2:9B:30:12:B6:63:50:39:A2:86:33:77:26:3B:D8:8A X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:1f:89:b9:96:90:f7:51:84:2d:f7:99:98:8f:57:22:50: 7b:ba:f5:76:fb:f8:ad:2d:2f:c1:8e:d7:66:13:c7:89:b7:cf: 84:97:bb:85:4d:6f:05:34:67:06:7a:80:20:84:62:bf:3c:52: 94:6c:e1:74:11:a0:a6:f6:06:23:3a:82:65:f5:f4:00:b4:b1: ea:46:78:aa:9c:22:97:fc:d1:dc:b2:47:6a:7e:b9:90:8f:4c: 24:36:68:60:c8:c8:17:30:28:64:c6:da:74:7e:02:83:bc:47: b4:46:ba:e2:5a:2f:f8:7e:74:40:12:c4:01:33:69:3c:46:69: ff:a3:6c:c1:9e:23:cb:6a:2f:73:89:2e:9c:f5:f9:b5:a2:7d: e7:91:23:cd:43:b1:91:98:48:e8:73:25:16:4d:87:ce:79:fe: 87:33:d5:a3:87:07:ba:6e:8d:38:25:2f:d3:7f:1c:2f:00:0f: 09:65:c0:19:db:d3:b5:59:3c:52:60:65:0b:30:ae:6a:4d:61: 09:83:c0:2f:9a:39:d2:c5:bb:71:45:49:04:c4:de:ac:c0:46: a8:78:57:d5:75:97:90:d7:85:94:43:ae:93:a7:3f:96:4d:d7: d5:d8:8c:e2:2a:2b:93:28:aa:65:3c:94:6b:57:2e:08:e9:79: 5e:a9:38:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgnWLZ23eYMVzYhZqT7RQzy8GtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTEyMjUwMTA2MzZaFw0yNTEyMjgxMTIzMzZaMDMxMTAvBgNV BAMTKEY1NTFFNTlDQjI5QjMwMTJCNjYzNTAzOUEyODYzMzc3MjYzQkQ4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92n26OW5qGEU8gSzBGVsZ040Y SVg/CD+8hBag8bX/0EFoKGYfSbxXp/cvtLQF0BD2sizPX+ImGELZUAj0JGF7gITb A/sh4aHidYNofRR0O+sLboybBp8DtXnMKF9YBywtM+HhW5XGtNE8BSfUDeys4DQn K2lxf9AAi/djdx3l8Nr9G2vWhkpaWGs8yp8EvYyMC7BNHqHJCNq0/aqPlzTjWp5j +dGYgpcOdkTu5czHG7Z361n/HxQjk8S90PJF5b1wvLLIsCTD+RDcXQwz7/BwtCJ4 kQn1WFE0+yEzEXmyjkHWfVqluOVmK5IaWbOn0nwB3E9M9I5flsCBaSixro/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VHlnLKbMBK2Y1A5ooYzdyY72IowHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo2H4m5lpD3UYQt95mYj1ciUHu69Xb7+K0t L8GO12YTx4m3z4SXu4VNbwU0ZwZ6gCCEYr88UpRs4XQRoKb2BiM6gmX19AC0sepG eKqcIpf80dyyR2p+uZCPTCQ2aGDIyBcwKGTG2nR+AoO8R7RGuuJaL/h+dEASxAEz aTxGaf+jbMGeI8tqL3OJLpz1+bWifeeRI81DsZGYSOhzJRZNh855/ocz1aOHB7pu jTglL9N/HC8ADwllwBnb07VZPFJgZQswrmpNYQmDwC+aOdLFu3FFSQTE3qzARqh4 V9V1l5DXhZRDrpOnP5ZN19XYjOIqK5MoqmU8lGtXLgjpeV6pOJs= -----END CERTIFICATE-----Generated at Fri Dec 26 01:33:47 2025 by rpki-client