This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: f86PZVnS8IF07+v7CqOFahGMtalyavmhmEXOzNYl6jU= Subject key identifier: D7:49:E3:5C:A6:4A:25:76:74:7F:E2:82:5B:50:46:98:BA:4B:46:79 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 5E146CF089E8C73928BCEC13A608FDE5DDDCA7AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: FA Signing time: Wed 24 Dec 2025 13:31:39 +0000 Manifest this update: Wed 24 Dec 2025 13:26:39 +0000 Manifest next update: Sat 27 Dec 2025 22:33:39 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: xgivbVXREb6pxoRtI425hWiHPQ1f3h7gMrSetRjXyXs=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:14:6c:f0:89:e8:c7:39:28:bc:ec:13:a6:08:fd:e5:dd:dc:a7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Dec 24 13:26:39 2025 GMT Not After : Dec 27 22:33:39 2025 GMT Subject: CN=D749E35CA64A2576747FE2825B504698BA4B4679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:2c:80:e2:ed:79:cf:b2:c9:85:5f:ba:69: 99:ff:d6:3b:0f:84:59:87:c8:78:f6:c0:39:bf:3b: 9d:4c:24:64:2b:28:29:30:ce:49:39:ae:81:ea:7b: 36:49:41:11:ef:bd:34:e7:da:59:c5:98:51:ed:cd: ba:97:48:d4:c9:0d:f6:19:8e:35:57:ae:41:3b:60: cb:a8:15:75:0e:d3:45:ad:61:98:93:48:dd:9e:be: 26:36:6b:35:12:b1:7b:66:af:c8:77:b0:2a:ed:59: ec:d1:99:48:5a:23:ef:24:ee:65:91:38:75:9f:3f: e9:72:7a:be:b4:86:4d:7f:84:ee:55:31:14:cc:40: 06:94:33:04:85:a4:86:4b:6e:0e:5f:c3:cf:5e:ca: e5:6e:46:11:2e:a7:da:ba:7f:fc:ec:f3:71:3f:ad: b9:7e:85:ee:34:4f:1a:6d:d2:cb:a8:de:70:e9:37: 2c:03:3f:43:4c:e8:a3:98:c1:3f:f3:4b:fc:3b:b4: c4:e0:0d:20:5e:91:83:fe:2e:0e:a0:24:1e:90:2d: 32:c0:99:19:ce:30:40:fd:a3:0c:e1:93:9a:28:0a: a6:16:65:93:e0:cc:20:4b:a0:46:45:88:d7:cf:33: 27:6a:92:2d:d7:69:9d:21:1b:c7:23:bb:f9:e8:21: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:49:E3:5C:A6:4A:25:76:74:7F:E2:82:5B:50:46:98:BA:4B:46:79 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b8:70:08:1e:30:16:11:4f:c6:96:d9:4a:d3:9c:3e:aa:d5: 90:a2:70:80:5d:5a:91:73:cc:56:f9:e5:8e:b2:f4:29:2b:b2: 22:79:60:ac:60:e0:28:0c:e3:7d:88:4b:a5:55:b5:f1:b1:6e: d8:eb:4b:12:6c:06:34:10:e1:19:4a:a6:71:ef:a6:e7:f1:6a: d9:73:15:d6:bb:20:27:04:f1:06:d2:00:97:85:3d:36:a7:c0: 86:c4:af:11:16:30:a9:a9:84:de:74:f0:f2:bd:3a:4d:09:28: 83:1a:b0:09:51:ea:a5:0d:fa:af:37:ef:64:72:b5:cc:12:9e: 98:28:f2:93:09:93:ff:82:c4:97:a2:dc:d6:fd:49:79:89:b7: 7c:c6:d4:b4:05:92:a5:ae:27:b4:ad:ae:ad:6e:f1:02:1a:29: f8:9a:c9:ba:60:d0:f2:ad:36:27:57:c6:d6:c6:22:2e:c6:42: f4:e9:1e:91:a7:1e:42:95:1e:ca:3f:61:aa:0b:93:f5:02:69: fe:ff:ee:f7:97:ee:c7:cf:70:e8:c7:15:b0:67:19:60:6d:97: 30:c3:08:58:42:f1:16:e3:4f:aa:ac:72:39:8a:21:7d:5d:c1: 65:21:e3:c2:df:97:cb:45:06:1d:ee:bb:7b:d6:19:0b:14:5d: ae:c8:eb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhRs8InoxzkovOwTpgj95d3cp64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTEyMjQxMzI2MzlaFw0yNTEyMjcyMjMzMzlaMDMxMTAvBgNV BAMTKEQ3NDlFMzVDQTY0QTI1NzY3NDdGRTI4MjVCNTA0Njk4QkE0QjQ2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzyyA4u15z7LJhV+6aZn/1jsP hFmHyHj2wDm/O51MJGQrKCkwzkk5roHqezZJQRHvvTTn2lnFmFHtzbqXSNTJDfYZ jjVXrkE7YMuoFXUO00WtYZiTSN2eviY2azUSsXtmr8h3sCrtWezRmUhaI+8k7mWR OHWfP+lyer60hk1/hO5VMRTMQAaUMwSFpIZLbg5fw89eyuVuRhEup9q6f/zs83E/ rbl+he40Txpt0suo3nDpNywDP0NM6KOYwT/zS/w7tMTgDSBekYP+Lg6gJB6QLTLA mRnOMED9owzhk5ooCqYWZZPgzCBLoEZFiNfPMydqki3XaZ0hG8cju/noITLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU10njXKZKJXZ0f+KCW1BGmLpLRnkwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA24cAgeMBYRT8aW2UrTnD6q1ZCicIBdWpFz zFb55Y6y9CkrsiJ5YKxg4CgM432IS6VVtfGxbtjrSxJsBjQQ4RlKpnHvpufxatlz Fda7ICcE8QbSAJeFPTanwIbErxEWMKmphN508PK9Ok0JKIMasAlR6qUN+q8372Ry tcwSnpgo8pMJk/+CxJei3Nb9SXmJt3zG1LQFkqWuJ7Strq1u8QIaKfiaybpg0PKt NidXxtbGIi7GQvTpHpGnHkKVHso/YaoLk/UCaf7/7veX7sfPcOjHFbBnGWBtlzDD CFhC8RbjT6qscjmKIX1dwWUh48Lfl8tFBh3uu3vWGQsUXa7I65U= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:15 2025 by rpki-client