This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json) Hash identifier: rUwXtc3UObgq9F8d8KMhk98h9bICLAGJH0LUP0C/dMU= Subject key identifier: C6:AD:6E:9E:65:31:84:A5:84:C3:83:72:36:B4:99:20:2A:E0:D1:C8 Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Certificate serial: 0A1CB5FBDB602911B098C6D27E7179A9A3218374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft Manifest number: 0532 Signing time: Wed 17 Dec 2025 06:41:54 +0000 Manifest this update: Wed 17 Dec 2025 06:36:54 +0000 Manifest next update: Sat 20 Dec 2025 15:46:54 +0000 Files and hashes: 1: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: mU5KjHeWmIS6YLaIMo3nGK3rYd9Koptxw8RYyHXJlgM=) 2: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=) 3: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=) 4: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=) 5: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=) 6: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=) 7: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=) 8: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=) 9: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=) 10: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=) 11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1c:b5:fb:db:60:29:11:b0:98:c6:d2:7e:71:79:a9:a3:21:83:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Validity Not Before: Dec 17 06:36:54 2025 GMT Not After : Dec 20 15:46:54 2025 GMT Subject: CN=C6AD6E9E653184A584C3837236B499202AE0D1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:f8:37:46:b0:7c:e5:b5:02:3e:52:78:6b: 73:5b:ab:cf:de:18:de:0a:42:6a:97:bb:69:3d:b1: 66:a2:14:af:b6:6a:0b:b6:fa:d2:0c:d9:4d:95:cf: 98:09:ab:e4:f2:af:da:02:93:cb:4b:d5:f0:30:6c: 52:ca:db:54:66:c1:20:0b:10:33:65:d6:6e:85:9b: ea:c3:52:a1:a8:da:42:3d:6f:75:f5:69:e5:34:d2: 84:70:15:98:08:ae:f7:9f:22:85:29:cc:53:b9:eb: eb:fb:02:42:6b:e3:aa:a3:df:83:fc:4d:a1:2c:52: 5c:9d:cd:fc:95:bf:1d:e6:2f:19:69:d9:62:00:bb: 4e:9c:30:4c:a6:a0:fb:2f:75:4c:cb:eb:ff:68:44: e4:e4:86:e5:3e:5c:69:34:68:46:c6:17:0a:71:57: 13:06:4e:b2:f8:66:c0:3e:a8:4f:95:08:60:39:8d: 47:8f:af:44:39:e9:71:89:a0:6c:8e:72:af:a3:b7: 2b:77:e8:51:24:fe:55:91:19:70:85:c8:26:21:7b: 8f:11:e2:5c:17:a8:13:93:df:49:b7:e2:88:b6:d8: f6:52:60:2b:bd:cc:40:c4:92:09:15:30:d6:34:d0: be:2c:53:fb:2f:5c:22:25:f0:0b:e6:a4:be:54:7a: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AD:6E:9E:65:31:84:A5:84:C3:83:72:36:B4:99:20:2A:E0:D1:C8 X509v3 Authority Key Identifier: keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a5:37:ea:c6:5d:ae:f7:f7:6f:61:50:0c:f7:ba:46:3a:8b: 8b:b7:11:f8:4b:bd:95:04:8e:3f:d3:54:47:3a:cc:1d:af:af: 2b:87:6d:77:87:c6:25:64:c7:66:b6:21:18:8b:2a:c9:a0:c1: 79:4b:db:44:e3:6f:b6:57:2a:55:34:55:30:ee:b7:cb:fc:3c: f4:26:a6:40:e1:0c:1f:ea:fb:9d:be:69:2b:cf:0b:af:e8:eb: f5:81:3b:7b:21:cf:e2:47:82:45:eb:78:21:e9:0a:e2:b9:f0: 16:db:49:b3:8c:b3:11:85:53:d7:11:30:fd:16:9f:f0:63:f8: bb:62:d0:de:a6:12:79:21:a2:4d:6a:a4:37:61:b2:3f:eb:f8: 54:74:d0:cb:79:e9:a9:73:e9:49:33:11:47:f6:b0:0b:04:d7: 09:cf:b7:ba:be:c2:72:80:24:c6:46:30:fb:43:e5:08:f5:24: 9d:31:b4:cd:1a:27:cf:e6:88:69:a1:8e:99:62:1b:9c:cc:86: b1:c3:b6:bc:3e:d4:4b:09:7d:55:ba:ee:08:7a:7b:ef:15:c9: 80:98:87:e4:2a:3e:2b:25:07:9f:11:2c:91:df:db:04:68:f0: 07:4a:75:61:d4:82:34:f6:c3:67:c1:86:5d:dd:6f:e3:78:b5: fb:0d:d4:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChy1+9tgKRGwmMbSfnF5qaMhg3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz RjBCNzBCNTAeFw0yNTEyMTcwNjM2NTRaFw0yNTEyMjAxNTQ2NTRaMDMxMTAvBgNV BAMTKEM2QUQ2RTlFNjUzMTg0QTU4NEMzODM3MjM2QjQ5OTIwMkFFMEQxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39Pg3RrB85bUCPlJ4a3Nbq8/e GN4KQmqXu2k9sWaiFK+2agu2+tIM2U2Vz5gJq+Tyr9oCk8tL1fAwbFLK21RmwSAL EDNl1m6Fm+rDUqGo2kI9b3X1aeU00oRwFZgIrvefIoUpzFO56+v7AkJr46qj34P8 TaEsUlydzfyVvx3mLxlp2WIAu06cMEymoPsvdUzL6/9oROTkhuU+XGk0aEbGFwpx VxMGTrL4ZsA+qE+VCGA5jUePr0Q56XGJoGyOcq+jtyt36FEk/lWRGXCFyCYhe48R 4lwXqBOT30m34oi22PZSYCu9zEDEkgkVMNY00L4sU/svXCIl8AvmpL5Uev3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxq1unmUxhKWEw4NyNrSZICrg0cgwHwYDVR0j BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZD NUEzRjBCNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEilN+rGXa73929hUAz3ukY6i4u3EfhLvZUE jj/TVEc6zB2vryuHbXeHxiVkx2a2IRiLKsmgwXlL20Tjb7ZXKlU0VTDut8v8PPQm pkDhDB/q+52+aSvPC6/o6/WBO3shz+JHgkXreCHpCuK58BbbSbOMsxGFU9cRMP0W n/Bj+Lti0N6mEnkhok1qpDdhsj/r+FR00Mt56alz6UkzEUf2sAsE1wnPt7q+wnKA JMZGMPtD5Qj1JJ0xtM0aJ8/miGmhjpliG5zMhrHDtrw+1EsJfVW67gh6e+8VyYCY h+QqPislB58RLJHf2wRo8AdKdWHUgjT2w2fBhl3db+N4tfsN1Kc= -----END CERTIFICATE-----Generated at Fri Dec 19 17:08:42 2025 by rpki-client