This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: 444IkoQ/sNoGoBInjjydm/aZtymhdByEyOABV4e8D9I= Subject key identifier: 5B:FB:EA:1A:2D:F6:D2:AC:11:83:79:D0:E7:73:29:4E:0C:82:10:52 Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 55C7BC284B609131D047347280FA34EAA3B93F26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 04D8 Signing time: Wed 24 Dec 2025 16:40:51 +0000 Manifest this update: Wed 24 Dec 2025 16:35:51 +0000 Manifest next update: Sun 28 Dec 2025 02:02:51 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: iAHJXG4K6+3EiEQSytu2MEfHZRYK05stg/Yr8f+Zlv8=) 2: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: VkWWhYGjjUn8YIaDXdxlSFXJ+ChuLjqoGbpl9eMmB6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c7:bc:28:4b:60:91:31:d0:47:34:72:80:fa:34:ea:a3:b9:3f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Dec 24 16:35:51 2025 GMT Not After : Dec 28 02:02:51 2025 GMT Subject: CN=5BFBEA1A2DF6D2AC118379D0E773294E0C821052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:3e:36:9a:c5:ea:f2:ab:1f:a8:af:9f:a4: 42:c0:40:d3:ef:62:c5:30:0e:a1:7b:0c:fa:b7:0d: 56:a5:21:0c:39:22:2d:18:f6:63:cb:22:7c:d4:44: 42:ee:85:0a:76:2a:5a:45:90:78:09:ec:e2:b7:c9: 8f:54:7b:d1:c3:d4:78:80:82:d7:03:93:4f:20:91: b4:35:54:73:a1:fa:6c:3e:de:eb:d7:48:c7:9d:d9: 1d:59:c0:30:51:d8:09:15:9d:37:8c:f9:d3:ed:97: 89:b1:99:ae:d2:e0:b0:d1:a9:ea:8d:e0:b9:f1:b7: 2a:65:46:b6:9e:32:93:b9:fe:5d:67:86:8a:61:95: 8b:b9:a1:0e:88:df:53:c0:bc:03:8a:10:cb:b3:ec: 94:c2:12:cf:b6:f0:d5:6b:42:d2:8a:4c:2e:b3:8a: 27:4c:d6:f4:27:68:eb:98:7c:73:83:5b:b2:a1:e8: d5:c1:e8:83:36:eb:dd:df:cc:7f:84:49:db:26:2b: 2f:fe:49:a8:b8:8b:74:c9:d6:5c:2c:86:66:54:7e: 17:fd:a0:99:ac:ec:f6:e2:67:f6:60:98:77:15:e1: ae:48:ad:e7:a3:ba:c6:85:a4:6f:a3:d4:26:d6:93: dd:27:d1:4c:40:16:03:ca:52:c6:ab:f4:e2:69:e3: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FB:EA:1A:2D:F6:D2:AC:11:83:79:D0:E7:73:29:4E:0C:82:10:52 X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:60:d1:22:8a:73:49:83:e5:7c:ff:76:3e:34:10:22:7c:4b: b2:0a:bb:6e:8d:6f:a1:04:e2:7a:30:af:53:fe:8b:d2:b4:bf: 55:eb:33:5f:1f:dc:80:cd:a9:5d:eb:ee:78:95:31:6d:c6:23: 9d:a2:11:5e:c0:8a:b8:47:eb:9d:19:ce:f7:53:a7:81:3a:35: 4f:16:e3:c3:fe:eb:6f:13:9b:3f:f2:5b:6e:24:1d:13:b3:06: 9e:61:4f:c1:7c:76:27:f2:48:50:f7:89:95:5b:6f:37:70:32: 8f:35:b6:87:e1:9d:9b:02:6d:83:65:69:33:7a:55:6d:ec:90: e8:8b:8a:ca:ca:87:3c:49:2c:a3:70:68:87:f1:5d:36:07:28: 79:5a:87:92:0c:39:d8:9f:c2:0c:28:e7:87:4b:2b:ac:b2:f9: 65:4f:ef:9f:87:be:60:45:fd:72:17:47:5d:ef:b7:9a:e6:fb: f9:3d:f5:2b:e4:3a:2b:54:bd:dd:e8:97:12:04:b1:c3:6a:dc: de:38:70:e6:d0:7a:4a:3a:e7:ff:83:3f:70:a9:9b:75:34:b0: 89:a3:a7:2c:45:6f:9c:ee:37:59:20:92:ad:76:27:d2:3d:00: 36:50:dd:7c:11:f6:2c:e0:02:9d:d2:e3:da:ef:e3:62:a4:3c: 1a:72:91:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVce8KEtgkTHQRzRygPo06qO5PyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNTEyMjQxNjM1NTFaFw0yNTEyMjgwMjAyNTFaMDMxMTAvBgNV BAMTKDVCRkJFQTFBMkRGNkQyQUMxMTgzNzlEMEU3NzMyOTRFMEM4MjEwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUz42msXq8qsfqK+fpELAQNPv YsUwDqF7DPq3DValIQw5Ii0Y9mPLInzURELuhQp2KlpFkHgJ7OK3yY9Ue9HD1HiA gtcDk08gkbQ1VHOh+mw+3uvXSMed2R1ZwDBR2AkVnTeM+dPtl4mxma7S4LDRqeqN 4LnxtyplRraeMpO5/l1nhophlYu5oQ6I31PAvAOKEMuz7JTCEs+28NVrQtKKTC6z iidM1vQnaOuYfHODW7Kh6NXB6IM2693fzH+ESdsmKy/+Sai4i3TJ1lwshmZUfhf9 oJms7PbiZ/ZgmHcV4a5IreejusaFpG+j1CbWk90n0UxAFgPKUsar9OJp45AhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW/vqGi320qwRg3nQ53MpTgyCEFIwHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5g0SKKc0mD5Xz/dj40ECJ8S7IKu26Nb6EE 4nowr1P+i9K0v1XrM18f3IDNqV3r7niVMW3GI52iEV7AirhH650ZzvdTp4E6NU8W 48P+628Tmz/yW24kHROzBp5hT8F8difySFD3iZVbbzdwMo81tofhnZsCbYNlaTN6 VW3skOiLisrKhzxJLKNwaIfxXTYHKHlah5IMOdifwgwo54dLK6yy+WVP75+HvmBF /XIXR13vt5rm+/k99SvkOitUvd3olxIEscNq3N44cObQeko65/+DP3Cpm3U0sImj pyxFb5zuN1kgkq12J9I9ADZQ3XwR9izgAp3S49rv42KkPBpyka0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:56 2025 by rpki-client