This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: wcGXaSvT8oky+gaR0gKb9wbhANWjhDBE5nfmTMiqiIs= Subject key identifier: 07:1B:06:70:D7:7F:DD:39:13:BF:24:8C:41:13:D8:89:8C:DF:88:C4 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 1A038964A8B58F9CE85357D002084B92ABFA8DB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: A9 Signing time: Sun 21 Dec 2025 04:01:24 +0000 Manifest this update: Sun 21 Dec 2025 03:56:24 +0000 Manifest next update: Wed 24 Dec 2025 15:11:24 +0000 Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: sBWabFgFf+UxqYwNEBtlfKm0UerhuTp0pU6Gny736nA=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:03:89:64:a8:b5:8f:9c:e8:53:57:d0:02:08:4b:92:ab:fa:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Dec 21 03:56:24 2025 GMT Not After : Dec 24 15:11:24 2025 GMT Subject: CN=071B0670D77FDD3913BF248C4113D8898CDF88C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:59:66:9a:f5:2e:f6:d7:15:d4:c3:ec:0e:28: 89:92:6d:d0:0f:55:3f:85:4a:9e:57:c8:6c:bd:37: b5:b5:38:de:d4:d6:5a:36:f3:84:6a:96:02:81:81: 59:91:86:21:cf:ee:ab:88:f2:e3:b0:01:21:71:7d: 75:eb:20:3d:7c:5d:be:54:1b:dd:24:b1:16:38:d5: 8b:39:d4:4f:eb:0f:39:6f:5c:3b:b9:75:db:10:1b: d0:30:fd:4b:40:cd:1c:d5:06:b3:5f:71:65:38:cd: 61:05:82:0b:0d:cd:84:c8:32:d2:ae:82:31:f8:c9: 9d:25:10:47:f0:33:da:f7:7a:bf:d3:bc:48:02:af: b7:17:85:8c:0b:c0:e2:53:de:f6:cf:7b:02:1a:0d: a8:13:ad:d1:2b:93:b8:c7:ff:70:d3:59:b5:29:71: cd:85:4e:e0:37:57:81:7b:78:b1:bf:1e:a7:05:c3: f8:d8:19:02:64:b6:3a:f9:db:f9:55:5b:41:3d:69: a6:89:94:ec:5b:10:58:40:b3:a0:d5:cc:eb:8a:64: 9b:24:58:40:67:a8:f4:b9:28:ee:2f:73:4d:54:d4: 50:ba:2e:d3:89:5c:ad:f0:6e:7d:fa:17:77:8b:a4: 93:dd:55:d5:53:bd:c0:2d:5d:1e:fa:37:35:45:18: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1B:06:70:D7:7F:DD:39:13:BF:24:8C:41:13:D8:89:8C:DF:88:C4 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6d:48:b0:0f:19:ca:72:59:75:08:42:35:a7:e0:9b:e1:66: d2:fc:90:4f:67:a3:33:17:82:6a:50:19:27:8e:43:bb:a2:c1: 52:e3:b2:52:1b:99:dd:c0:a5:c8:41:08:7c:f3:19:ea:53:8b: 35:96:9d:9a:03:44:df:11:5d:9d:e5:d3:52:fb:63:48:77:a8: 2e:32:0f:ee:24:d6:fd:a5:89:5f:4b:f5:ee:c9:85:b8:32:cb: 42:55:94:0d:88:f8:ae:29:33:10:a6:d5:85:6f:9b:6f:4a:99: ef:8f:9b:3c:85:84:83:88:cc:30:20:8c:a0:68:f7:f6:39:db: 08:55:d7:04:33:d5:10:cf:3a:8a:37:50:1d:41:10:8f:ac:8a: 2a:7e:88:f6:a2:77:7a:58:d8:6c:07:02:c7:84:ff:31:ec:c0: 84:df:47:5a:4d:f2:09:7f:4a:41:9f:f9:5c:9e:c6:bb:88:2f: 04:fd:88:a0:1e:5f:db:d7:22:8b:89:fc:bf:4f:c9:33:ce:8f: 90:8a:af:31:fd:c0:21:f8:36:f4:63:5b:b8:5c:c0:b1:a4:3f: d5:d4:b8:08:2d:35:49:60:3c:2b:6a:94:ec:c7:c7:23:6f:db: 6d:74:f2:b5:47:fe:12:57:0c:3e:c8:1b:65:81:a7:6d:16:bb: a5:ae:8b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgOJZKi1j5zoU1fQAghLkqv6jbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTEyMjEwMzU2MjRaFw0yNTEyMjQxNTExMjRaMDMxMTAvBgNV BAMTKDA3MUIwNjcwRDc3RkREMzkxM0JGMjQ4QzQxMTNEODg5OENERjg4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpWWaa9S721xXUw+wOKImSbdAP VT+FSp5XyGy9N7W1ON7U1lo284RqlgKBgVmRhiHP7quI8uOwASFxfXXrID18Xb5U G90ksRY41Ys51E/rDzlvXDu5ddsQG9Aw/UtAzRzVBrNfcWU4zWEFggsNzYTIMtKu gjH4yZ0lEEfwM9r3er/TvEgCr7cXhYwLwOJT3vbPewIaDagTrdErk7jH/3DTWbUp cc2FTuA3V4F7eLG/HqcFw/jYGQJktjr52/lVW0E9aaaJlOxbEFhAs6DVzOuKZJsk WEBnqPS5KO4vc01U1FC6LtOJXK3wbn36F3eLpJPdVdVTvcAtXR76NzVFGD73AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxsGcNd/3TkTvySMQRPYiYzfiMQwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1tSLAPGcpyWXUIQjWn4JvhZtL8kE9nozMX gmpQGSeOQ7uiwVLjslIbmd3ApchBCHzzGepTizWWnZoDRN8RXZ3l01L7Y0h3qC4y D+4k1v2liV9L9e7Jhbgyy0JVlA2I+K4pMxCm1YVvm29Kme+PmzyFhIOIzDAgjKBo 9/Y52whV1wQz1RDPOoo3UB1BEI+siip+iPaid3pY2GwHAseE/zHswITfR1pN8gl/ SkGf+VyexruILwT9iKAeX9vXIouJ/L9PyTPOj5CKrzH9wCH4NvRjW7hcwLGkP9XU uAgtNUlgPCtqlOzHxyNv22108rVH/hJXDD7IG2WBp20Wu6Wuiw0= -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:09 2025 by rpki-client