This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: LZSqQ9sp9gGyj9wBU7i1e7RVz9xccs0iU23kWDGVfsg= Subject key identifier: CB:6E:5A:AB:B9:63:D2:27:6D:E4:B4:CE:3F:3A:D1:A3:3E:0C:61:E3 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 16227B834D0916C544F823E5D2B9EC95E4F98C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01E3 Signing time: Mon 29 Dec 2025 13:41:34 +0000 Manifest this update: Mon 29 Dec 2025 13:36:34 +0000 Manifest next update: Thu 01 Jan 2026 14:11:34 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: eSLzkiTNJzzEON3Rbh0JvVY7BVWJ6GHuKmseufzrotU=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 14:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:22:7b:83:4d:09:16:c5:44:f8:23:e5:d2:b9:ec:95:e4:f9:8c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Dec 29 13:36:34 2025 GMT Not After : Jan 1 14:11:34 2026 GMT Subject: CN=CB6E5AABB963D2276DE4B4CE3F3AD1A33E0C61E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:48:31:31:cc:77:ba:40:6a:ef:ed:3f:0c: 9b:b5:7c:f8:6a:66:5a:5e:5c:c7:de:2f:9c:a7:45: aa:33:d2:13:d9:12:6b:43:d3:17:a6:89:1d:94:a7: 51:d6:d3:5f:77:ff:48:6d:79:3d:29:18:86:32:45: da:c3:f4:c3:46:d4:74:e0:77:65:3b:58:74:10:30: 00:16:0c:7a:84:28:ca:fe:86:3b:ae:46:c1:7e:c9: 43:d7:bd:c3:55:7f:07:6f:e5:97:9d:dd:c3:ef:f2: f9:80:b1:48:c9:f3:0c:d1:79:d2:a2:81:25:79:5d: e2:33:4a:8b:8f:bd:06:c0:ad:f0:d7:35:b8:71:d5: b0:5b:b1:9c:d6:1f:9b:d7:46:f2:ba:d6:2a:ed:d5: 41:c3:1a:42:f1:9f:20:2b:53:b7:29:77:ca:09:58: e0:84:4a:1b:b1:6f:54:bb:50:e9:62:74:31:cd:be: ff:c8:ff:7a:c1:dd:da:ca:d1:56:e4:44:52:68:07: ad:36:19:1d:53:4e:9d:f7:97:0f:30:a7:05:eb:62: 0d:9b:15:b4:0f:01:bb:cc:b3:24:96:59:9f:1e:7a: ee:93:53:40:ae:fa:0a:ba:df:94:44:a2:92:88:f9: 6e:60:30:99:3f:cf:81:66:51:bd:0c:dc:ae:37:34: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6E:5A:AB:B9:63:D2:27:6D:E4:B4:CE:3F:3A:D1:A3:3E:0C:61:E3 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:3f:5b:7a:99:6d:ed:7b:98:01:df:50:38:bb:ca:85:f6: 99:89:ad:3e:12:58:5e:fe:3c:16:bf:b9:fb:bc:7e:60:d2:7a: bd:c8:c9:de:24:67:df:33:73:55:a6:05:89:38:e2:dc:7b:f3: e1:09:df:35:a9:0b:3e:1b:20:45:67:03:f0:08:e8:79:c8:2b: b8:30:66:7b:d5:60:29:1d:dc:41:6c:ee:6a:9c:34:f3:62:03: 55:cd:9f:50:bc:5e:63:17:8d:78:bf:fe:f2:f6:1e:fd:b3:1a: bf:50:42:41:04:fd:81:ca:e2:94:42:83:7f:d0:03:04:21:d1: 31:83:f9:e1:f1:5d:22:a4:98:64:6b:5a:f0:23:19:21:b9:b6: 2a:1b:aa:bd:c7:e8:e9:cf:b9:4d:82:18:96:6b:a5:e8:c5:09: 43:3d:d4:bd:66:25:64:c3:32:a8:5a:f3:f6:37:80:80:0a:b6: 73:1b:42:0c:fb:57:51:e2:56:33:c6:6a:5e:e0:a1:15:38:96: d1:1d:b6:37:ca:09:c3:c7:e1:b8:eb:29:03:88:35:5a:a9:dc: 71:6f:25:c7:a1:71:f7:fb:12:c1:21:78:ca:e9:02:91:44:b2: d9:62:c2:cb:88:70:22:06:cf:33:30:11:37:5b:f8:49:64:48: d3:a3:9c:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiJ7g00JFsVE+CPl0rnsleT5jDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTEyMjkxMzM2MzRaFw0yNjAxMDExNDExMzRaMDMxMTAvBgNV BAMTKENCNkU1QUFCQjk2M0QyMjc2REU0QjRDRTNGM0FEMUEzM0UwQzYxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtEgxMcx3ukBq7+0/DJu1fPhq ZlpeXMfeL5ynRaoz0hPZEmtD0xemiR2Up1HW0193/0hteT0pGIYyRdrD9MNG1HTg d2U7WHQQMAAWDHqEKMr+hjuuRsF+yUPXvcNVfwdv5Zed3cPv8vmAsUjJ8wzRedKi gSV5XeIzSouPvQbArfDXNbhx1bBbsZzWH5vXRvK61irt1UHDGkLxnyArU7cpd8oJ WOCEShuxb1S7UOlidDHNvv/I/3rB3drK0VbkRFJoB602GR1TTp33lw8wpwXrYg2b FbQPAbvMsySWWZ8eeu6TU0Cu+gq635REopKI+W5gMJk/z4FmUb0M3K43NClpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy25aq7lj0idt5LTOPzrRoz4MYeMwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4OP1t6mW3te5gB31A4u8qF9pmJrT4SWF7+ PBa/ufu8fmDSer3Iyd4kZ98zc1WmBYk44tx78+EJ3zWpCz4bIEVnA/AI6HnIK7gw ZnvVYCkd3EFs7mqcNPNiA1XNn1C8XmMXjXi//vL2Hv2zGr9QQkEE/YHK4pRCg3/Q AwQh0TGD+eHxXSKkmGRrWvAjGSG5tiobqr3H6OnPuU2CGJZrpejFCUM91L1mJWTD Mqha8/Y3gIAKtnMbQgz7V1HiVjPGal7goRU4ltEdtjfKCcPH4bjrKQOINVqp3HFv Jcehcff7EsEheMrpApFEstliwsuIcCIGzzMwETdb+ElkSNOjnCE= -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:45 2025 by rpki-client