This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: 4iQhsRpJrZYXkrVqT7W73dmCTZhh4yjVXYjH/ETdW+U= Subject key identifier: 06:C5:D1:27:D0:05:61:49:1E:18:13:C2:8B:61:B1:3C:69:77:94:38 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 41867BE79FBED8D64A67963A08F28465EAFB32EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0532 Signing time: Wed 17 Dec 2025 01:40:01 +0000 Manifest this update: Wed 17 Dec 2025 01:35:01 +0000 Manifest next update: Sat 20 Dec 2025 04:18:01 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) 2: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 3: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: EmEtOUWVfhDrPrgbrpAerl116v8dY20kA3BvEAW54Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:86:7b:e7:9f:be:d8:d6:4a:67:96:3a:08:f2:84:65:ea:fb:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Dec 17 01:35:01 2025 GMT Not After : Dec 20 04:18:01 2025 GMT Subject: CN=06C5D127D00561491E1813C28B61B13C69779438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:77:d6:35:3b:d1:63:be:db:84:ee:cb:05: 73:4e:05:e1:36:b8:c9:96:3f:c9:64:b1:da:26:0d: a2:0a:ea:03:45:f2:be:ba:35:e5:bb:90:8d:d0:9c: 83:9d:84:2c:30:34:51:e0:fe:57:df:43:53:e2:d7: f7:54:16:5b:0e:3a:74:29:d6:00:ff:4d:7d:70:cb: c2:da:a9:46:68:19:84:98:d0:2b:fa:92:c9:a1:86: 29:02:55:6c:e6:15:8f:a9:ab:08:bb:4c:c2:b3:8c: cd:57:68:be:b3:12:2a:74:a1:7c:7e:d7:ff:87:22: a0:9c:da:69:f9:17:c7:6c:2b:b9:2e:cc:31:80:13: 3b:6b:93:41:b3:a0:3d:6a:09:0d:ab:b8:1d:82:03: d7:2d:e6:60:32:9d:f5:e1:ee:0a:69:d8:39:36:ea: 0c:23:4c:56:e4:75:d0:42:23:8d:9a:76:e5:6f:74: 7c:8c:ab:33:7f:79:a7:3d:89:52:cb:0a:f1:e3:c4: e0:72:84:67:a6:df:6d:ed:27:87:08:71:58:a6:6c: 75:c2:1c:bd:92:c8:04:d2:69:7f:be:1a:2a:36:2f: 32:11:84:41:e7:d5:3f:de:3f:d0:57:ef:1f:77:db: 09:c5:cf:22:42:c9:7e:08:db:65:34:58:a7:78:3c: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:D1:27:D0:05:61:49:1E:18:13:C2:8B:61:B1:3C:69:77:94:38 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d1:40:dd:0d:48:f0:8c:c5:8b:c5:c7:dd:fc:51:3c:c0:7f: 59:1e:14:e7:15:74:4a:34:6b:e9:8d:e4:7a:78:9b:14:f5:d8: 76:23:43:1e:a9:4a:69:da:31:73:2c:b3:18:c6:19:a2:d4:e8: 81:10:c8:96:f1:f4:41:32:9c:5b:11:b3:86:3c:eb:0f:76:c2: 28:bf:a6:1a:43:39:aa:0c:41:e9:33:79:ec:ef:ca:da:12:2d: 41:25:f2:df:06:57:82:2f:d9:f3:8c:91:25:14:b4:d9:1e:29: 87:40:ed:2d:90:0b:f9:7a:1d:89:3d:50:72:a8:16:b9:c4:1d: e3:8a:ae:83:56:a2:39:f6:5c:4d:4d:5b:46:ef:7b:6d:70:06: bb:79:dd:e1:18:ea:b8:53:f0:f9:95:71:94:66:62:4b:eb:81: 08:b9:31:3a:d4:ba:21:7a:5e:3d:fb:97:d1:20:9e:a3:0d:ec: 98:b2:f1:40:03:44:3c:60:6c:46:42:78:89:5a:38:74:06:1a: 7c:a0:39:85:9a:90:e5:4f:b6:36:dc:8b:b5:29:83:80:2b:11: d1:73:74:96:d4:1a:59:09:6f:ba:0f:6b:8e:be:87:23:25:ac: 56:4d:e9:82:85:3e:c7:c5:44:71:f8:ef:46:11:19:5a:d3:5e: b9:1c:42:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYZ755++2NZKZ5Y6CPKEZer7Mu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTEyMTcwMTM1MDFaFw0yNTEyMjAwNDE4MDFaMDMxMTAvBgNV BAMTKDA2QzVEMTI3RDAwNTYxNDkxRTE4MTNDMjhCNjFCMTNDNjk3Nzk0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4nfWNTvRY77bhO7LBXNOBeE2 uMmWP8lksdomDaIK6gNF8r66NeW7kI3QnIOdhCwwNFHg/lffQ1Pi1/dUFlsOOnQp 1gD/TX1wy8LaqUZoGYSY0Cv6ksmhhikCVWzmFY+pqwi7TMKzjM1XaL6zEip0oXx+ 1/+HIqCc2mn5F8dsK7kuzDGAEztrk0GzoD1qCQ2ruB2CA9ct5mAynfXh7gpp2Dk2 6gwjTFbkddBCI42aduVvdHyMqzN/eac9iVLLCvHjxOByhGem323tJ4cIcVimbHXC HL2SyATSaX++Gio2LzIRhEHn1T/eP9BX7x932wnFzyJCyX4I22U0WKd4PNcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsXRJ9AFYUkeGBPCi2GxPGl3lDgwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7RQN0NSPCMxYvFx938UTzAf1keFOcVdEo0 a+mN5Hp4mxT12HYjQx6pSmnaMXMssxjGGaLU6IEQyJbx9EEynFsRs4Y86w92wii/ phpDOaoMQekzeezvytoSLUEl8t8GV4Iv2fOMkSUUtNkeKYdA7S2QC/l6HYk9UHKo FrnEHeOKroNWojn2XE1NW0bve21wBrt53eEY6rhT8PmVcZRmYkvrgQi5MTrUuiF6 Xj37l9EgnqMN7Jiy8UADRDxgbEZCeIlaOHQGGnygOYWakOVPtjbci7Upg4ArEdFz dJbUGlkJb7oPa46+hyMlrFZN6YKFPsfFRHH470YRGVrTXrkcQnY= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:37 2025 by rpki-client