This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: WgHQmCc678ov5WjbG4zU90/WaHSGsfKg+I8hvKi0xEI= Subject key identifier: BE:8E:04:FB:D8:4D:DC:94:A7:37:8C:1E:E0:73:06:B9:70:6F:C5:62 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 4DD22A1AE53B79FCF9AA314419847B72167537EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: C1 Signing time: Thu 18 Dec 2025 22:20:06 +0000 Manifest this update: Thu 18 Dec 2025 22:15:06 +0000 Manifest next update: Mon 22 Dec 2025 10:01:06 +0000 Files and hashes: 1: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: 8g3e8+hy27vaa28Bk3XzmKkv6zqmcIMiLgs+JCsm6Yo=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 4: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:2a:1a:e5:3b:79:fc:f9:aa:31:44:19:84:7b:72:16:75:37:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Dec 18 22:15:06 2025 GMT Not After : Dec 22 10:01:06 2025 GMT Subject: CN=BE8E04FBD84DDC94A7378C1EE07306B9706FC562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:ea:f6:91:cd:18:b4:93:6d:3b:92:86:37: 60:7b:48:25:7d:6d:07:2e:05:5d:f9:e4:de:f0:1a: 7a:b9:d8:6b:1d:cf:73:16:ee:b0:51:25:ea:92:5e: b4:49:da:d1:1d:4d:55:0d:00:e4:b8:c9:6f:9f:7b: 43:7e:51:6e:ca:3d:69:56:3c:f4:79:3d:09:11:a6: 9b:90:b9:9d:5d:c9:53:09:c5:c9:8a:f9:21:01:85: 82:56:1b:7d:d8:eb:19:37:ad:6b:fa:d4:28:b2:6b: f9:ea:94:89:61:a5:d8:b1:65:9c:9f:cf:2b:09:77: d2:8f:10:9c:04:6d:2d:90:01:3c:dd:cf:1e:8c:f4: a0:70:cd:8f:ae:97:bc:74:e0:cd:ce:2a:49:8e:3a: 43:28:f6:7e:b8:14:36:19:d3:83:9c:4b:d8:49:e1: 67:a6:f0:84:1b:55:9a:34:cd:68:6f:d3:18:18:c0: 44:30:96:e7:6f:5d:3b:6a:0c:ea:20:c9:7d:8a:fc: 58:b9:97:da:c1:22:3f:2f:bd:29:e6:48:6d:2a:06: 4d:c5:55:90:ab:14:71:ea:88:92:fe:34:73:75:85: 7f:a2:e5:e9:1f:71:45:bd:fe:be:b9:eb:e1:83:de: ab:7a:ba:fd:30:cb:54:0e:f2:6f:bc:cf:e6:09:78: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:04:FB:D8:4D:DC:94:A7:37:8C:1E:E0:73:06:B9:70:6F:C5:62 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:46:e9:2a:39:df:b0:1e:a6:b9:e7:ca:2e:be:5c:ce:f1:a0: 4a:fc:96:72:35:ae:cf:50:e6:02:b5:39:b3:17:d5:a9:d2:7f: 06:d3:19:f7:30:d0:b7:cb:5f:43:7f:08:46:46:06:8e:be:26: fa:21:a6:b1:cf:3a:9e:e6:fd:3e:78:94:47:6e:68:bf:a9:ff: 65:b5:c5:c2:5a:be:90:6f:50:35:45:c9:31:79:bf:5c:f1:95: c5:55:2f:d3:ea:90:a5:b2:d8:f2:f0:3a:2a:19:c9:c2:90:27: 83:31:f8:c4:47:77:7e:96:ff:1a:e5:48:67:74:b0:c6:c5:f4: 90:68:88:ae:f9:40:1d:0e:e6:1f:e6:fe:3e:fe:3e:3f:92:e5: 29:9b:c0:db:6d:81:89:42:36:96:7f:9a:c3:83:cc:b9:78:83: 98:c7:19:b1:52:93:02:58:fe:34:aa:4d:5b:f4:a9:eb:f8:f0: 09:8d:51:42:c8:51:bf:a9:36:73:06:f9:5c:f7:50:a7:4e:83: 53:0a:60:79:84:39:c1:0f:ee:fe:8c:90:32:23:34:56:16:6f: 32:cb:a0:98:32:a9:01:66:7b:15:e6:1e:d7:e7:93:fd:91:90: a1:41:09:62:35:16:3f:8a:83:1f:26:00:29:e8:41:2a:1f:b9: ec:76:b3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdIqGuU7efz5qjFEGYR7chZ1N+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTEyMTgyMjE1MDZaFw0yNTEyMjIxMDAxMDZaMDMxMTAvBgNV BAMTKEJFOEUwNEZCRDg0RERDOTRBNzM3OEMxRUUwNzMwNkI5NzA2RkM1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37ur2kc0YtJNtO5KGN2B7SCV9 bQcuBV355N7wGnq52Gsdz3MW7rBRJeqSXrRJ2tEdTVUNAOS4yW+fe0N+UW7KPWlW PPR5PQkRppuQuZ1dyVMJxcmK+SEBhYJWG33Y6xk3rWv61Ciya/nqlIlhpdixZZyf zysJd9KPEJwEbS2QATzdzx6M9KBwzY+ul7x04M3OKkmOOkMo9n64FDYZ04OcS9hJ 4Wem8IQbVZo0zWhv0xgYwEQwludvXTtqDOogyX2K/Fi5l9rBIj8vvSnmSG0qBk3F VZCrFHHqiJL+NHN1hX+i5ekfcUW9/r656+GD3qt6uv0wy1QO8m+8z+YJeAQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvo4E+9hN3JSnN4we4HMGuXBvxWIwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBG6So537Aeprnnyi6+XM7xoEr8lnI1rs9Q 5gK1ObMX1anSfwbTGfcw0LfLX0N/CEZGBo6+JvohprHPOp7m/T54lEduaL+p/2W1 xcJavpBvUDVFyTF5v1zxlcVVL9PqkKWy2PLwOioZycKQJ4Mx+MRHd36W/xrlSGd0 sMbF9JBoiK75QB0O5h/m/j7+Pj+S5SmbwNttgYlCNpZ/msODzLl4g5jHGbFSkwJY /jSqTVv0qev48AmNUULIUb+pNnMG+Vz3UKdOg1MKYHmEOcEP7v6MkDIjNFYWbzLL oJgyqQFmexXmHtfnk/2RkKFBCWI1Fj+Kgx8mACnoQSofuex2s8s= -----END CERTIFICATE-----Generated at Sun Dec 21 20:56:40 2025 by rpki-client