This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: bLPFqJzgO2rojKRhNeFGqMec72JWE16o1jr6aeCU58s= Subject key identifier: 48:3D:AF:B7:54:3A:C3:97:FD:8A:AC:1E:F6:55:6B:90:AA:F9:BA:8B Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 033B07008B6D26323B86B87B3B82E33B22E48010 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: C3 Signing time: Tue 23 Dec 2025 17:50:06 +0000 Manifest this update: Tue 23 Dec 2025 17:45:05 +0000 Manifest next update: Sat 27 Dec 2025 04:28:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 2: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: SRYjPs68kuOP2WTzb80i/uTqWoQ+NZ951rckHQDL+SA=) 3: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) 4: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 04:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3b:07:00:8b:6d:26:32:3b:86:b8:7b:3b:82:e3:3b:22:e4:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Dec 23 17:45:05 2025 GMT Not After : Dec 27 04:28:05 2025 GMT Subject: CN=483DAFB7543AC397FD8AAC1EF6556B90AAF9BA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:bc:c0:a4:0f:86:c0:0f:55:d0:00:12:21: ad:a8:44:54:b9:ef:5e:77:72:c0:cd:db:01:2d:a8: 26:c3:b9:a2:e0:7a:9e:9e:64:0a:4c:f0:10:e9:9e: aa:f7:cf:45:c2:ac:f4:12:c7:54:5f:2b:0e:80:1d: a7:cd:34:94:7e:cc:81:6c:bf:43:ba:07:ee:a4:93: a2:8a:ef:68:a1:fa:9b:d1:6c:63:7f:4a:03:07:0d: d3:b1:26:26:68:05:6f:be:2a:91:e8:f2:42:42:ee: 05:b6:78:b7:91:67:6e:32:34:74:ef:f1:26:2f:2f: c5:fe:31:27:f1:22:7a:f2:3d:69:d9:94:4c:91:2a: 54:cd:b9:7e:ef:da:8d:5a:51:b0:a7:b4:02:3b:f8: 6a:09:3f:f0:ea:6e:d7:88:2f:d3:4b:3b:5e:a0:ba: 4b:12:96:14:21:13:bc:0c:f1:dd:a0:e6:d8:2e:56: 7b:f1:dd:f4:45:d8:52:64:87:41:32:b4:7f:bc:7f: bc:ac:b9:63:a7:0a:54:0d:5f:a9:5e:73:ea:d9:2e: f4:c6:c7:79:43:ee:14:41:d3:72:7a:ab:98:08:e3: f3:c0:84:01:f7:60:a4:f4:16:60:77:cc:18:8a:8e: 8b:0a:82:fd:ca:e8:c2:f0:4a:f7:db:e7:99:77:b6: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3D:AF:B7:54:3A:C3:97:FD:8A:AC:1E:F6:55:6B:90:AA:F9:BA:8B X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4c:ae:73:75:0f:a7:22:41:39:52:7e:62:a2:ed:be:94:83: d6:13:41:ca:ec:96:13:3b:69:24:05:e2:42:fd:0f:84:f4:db: 92:2f:36:34:f3:96:05:6b:45:81:85:e1:85:33:2d:e8:41:11: 0c:96:95:df:ce:3e:ee:cf:92:d5:a5:6d:a2:60:71:63:73:43: 44:92:15:37:37:1e:2c:6c:4e:8b:15:61:48:8b:87:e3:6d:85: e2:0a:61:60:59:61:70:d2:4f:b9:29:3c:5f:fb:61:5a:d1:90: ad:f7:93:78:19:88:89:99:34:6e:5c:15:29:28:cf:d5:20:0d: ed:98:27:d5:fa:6d:40:b3:65:89:3e:d7:61:05:c7:ba:f1:76: de:76:e9:33:d5:39:d2:e9:9e:7a:07:0e:6c:fd:08:3e:fc:59: 49:a1:f9:c4:57:55:41:23:e7:20:73:61:31:ec:03:5e:59:fe: dd:aa:d1:94:c0:cc:56:09:fb:2a:c4:30:7e:4f:ff:09:4d:fa: 66:45:96:21:c2:9e:d8:c4:8a:80:dd:3b:6e:17:12:00:d2:0f: bb:52:22:72:c9:02:c8:94:7a:d8:bf:29:9f:4c:d0:ff:5b:d2: 83:9c:41:1d:99:75:84:55:2c:c9:01:b7:59:50:40:ed:29:e1: d8:75:82:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzsHAIttJjI7hrh7O4LjOyLkgBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTEyMjMxNzQ1MDVaFw0yNTEyMjcwNDI4MDVaMDMxMTAvBgNV BAMTKDQ4M0RBRkI3NTQzQUMzOTdGRDhBQUMxRUY2NTU2QjkwQUFGOUJBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0rzApA+GwA9V0AASIa2oRFS5 7153csDN2wEtqCbDuaLgep6eZApM8BDpnqr3z0XCrPQSx1RfKw6AHafNNJR+zIFs v0O6B+6kk6KK72ih+pvRbGN/SgMHDdOxJiZoBW++KpHo8kJC7gW2eLeRZ24yNHTv 8SYvL8X+MSfxInryPWnZlEyRKlTNuX7v2o1aUbCntAI7+GoJP/DqbteIL9NLO16g uksSlhQhE7wM8d2g5tguVnvx3fRF2FJkh0EytH+8f7ysuWOnClQNX6lec+rZLvTG x3lD7hRB03J6q5gI4/PAhAH3YKT0FmB3zBiKjosKgv3K6MLwSvfb55l3tkk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSD2vt1Q6w5f9iqwe9lVrkKr5uoswHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhMrnN1D6ciQTlSfmKi7b6Ug9YTQcrslhM7 aSQF4kL9D4T025IvNjTzlgVrRYGF4YUzLehBEQyWld/OPu7PktWlbaJgcWNzQ0SS FTc3HixsTosVYUiLh+NtheIKYWBZYXDST7kpPF/7YVrRkK33k3gZiImZNG5cFSko z9UgDe2YJ9X6bUCzZYk+12EFx7rxdt526TPVOdLpnnoHDmz9CD78WUmh+cRXVUEj 5yBzYTHsA15Z/t2q0ZTAzFYJ+yrEMH5P/wlN+mZFliHCntjEioDdO24XEgDSD7tS InLJAsiUeti/KZ9M0P9b0oOcQR2ZdYRVLMkBt1lQQO0p4dh1gvo= -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:29 2025 by rpki-client