This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: huEpdx8Gi7oAR7oOBCU5R1ZRqHsdSYo3/TptmCgf9tA= Subject key identifier: C5:C3:A2:49:19:55:B1:89:3A:99:DC:15:0E:47:FC:E9:20:0B:1B:AA Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 3B13D1235853E109230899BCAC89261B5C269530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: F4 Signing time: Wed 24 Dec 2025 04:23:31 +0000 Manifest this update: Wed 24 Dec 2025 04:18:31 +0000 Manifest next update: Sat 27 Dec 2025 07:45:31 +0000 Files and hashes: 1: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: h3KTKMHL2qbOY/Dc1QSh2S9iqStZaDQ8/Rfc9E7ewBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:13:d1:23:58:53:e1:09:23:08:99:bc:ac:89:26:1b:5c:26:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Dec 24 04:18:31 2025 GMT Not After : Dec 27 07:45:31 2025 GMT Subject: CN=C5C3A2491955B1893A99DC150E47FCE9200B1BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:37:b9:03:bc:33:9f:46:39:77:4b:ae:5e: b0:0f:29:e7:28:73:74:79:9c:18:e2:3f:cf:6b:c5: de:16:3d:5c:9e:73:2c:35:49:f2:34:b0:a3:de:74: ab:cb:01:7a:e9:5b:50:5f:a8:76:cc:75:65:0a:7b: 83:a8:77:a9:8a:d9:10:de:56:24:20:9b:39:63:7c: 27:4f:12:89:f2:ea:c7:38:6e:8d:1a:e5:4a:5c:dc: 1d:d9:32:de:86:38:2e:9b:fe:51:74:80:5b:6c:62: 1a:a3:8f:c8:d1:1c:f7:ee:b7:a3:fc:17:d5:9c:ae: 09:cd:1f:73:93:4d:a1:3a:71:44:e1:9a:10:c7:fe: e8:aa:80:5b:95:f9:7f:d4:6c:7a:72:8f:de:9d:23: ed:3c:15:2f:60:9a:f7:61:c3:fa:f5:04:18:34:fe: 05:8c:62:31:35:90:91:4c:46:2f:7c:de:5e:bb:f1: 9e:9a:a3:73:06:fc:24:8f:68:d5:b6:6b:a8:90:aa: 9a:f7:ff:ef:26:b2:37:60:78:dc:77:89:c0:be:d0: c9:66:1b:76:b1:38:4d:8e:94:da:12:b8:76:21:b4: 17:c6:03:94:fc:ba:42:25:89:af:b0:f6:62:2b:c9: da:19:39:fb:73:cc:16:45:ae:d1:37:25:d5:a5:c9: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:A2:49:19:55:B1:89:3A:99:DC:15:0E:47:FC:E9:20:0B:1B:AA X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d3:7c:59:13:1f:4b:06:64:89:b8:e0:39:17:f8:80:f8:e3: 26:90:cd:20:8d:a8:58:83:f2:95:8a:d8:d1:63:9d:50:db:e1: 06:1f:df:2a:50:34:2f:00:5a:9c:b3:53:4d:b1:b2:fd:80:9b: 39:70:21:0d:92:ab:ad:d8:1c:44:0a:eb:9a:97:91:da:24:ff: 26:27:89:76:da:ce:9c:9c:e1:7e:78:0f:29:ba:2b:41:25:ed: cc:e8:48:a4:ff:be:f4:5d:8a:eb:36:91:d1:20:80:89:12:6f: aa:5a:5b:74:16:c1:64:4e:c9:ac:8c:ce:aa:27:32:30:ad:53: 83:56:72:1b:85:19:44:c7:ff:5e:23:54:ab:f2:d7:70:c0:15: 92:f7:bd:60:41:d7:02:36:b8:a2:0e:c5:ff:de:c6:c1:a0:37: 56:df:50:3f:b6:d0:f9:84:1f:2a:93:a6:f6:50:38:46:82:89: e7:05:ed:80:cc:88:42:f6:2d:be:ad:f3:10:7c:69:40:6a:dd: 35:c9:07:86:90:5a:11:82:c2:ea:c6:9c:ab:21:51:4e:8b:d3: ff:f5:cb:ac:22:f4:d0:dd:c1:89:39:ec:cd:91:06:8b:11:81: 28:52:0e:f8:f3:64:42:fd:03:1e:36:93:b7:60:be:6b:48:73: c9:f5:54:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxPRI1hT4QkjCJm8rIkmG1wmlTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTEyMjQwNDE4MzFaFw0yNTEyMjcwNzQ1MzFaMDMxMTAvBgNV BAMTKEM1QzNBMjQ5MTk1NUIxODkzQTk5REMxNTBFNDdGQ0U5MjAwQjFCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1De5A7wzn0Y5d0uuXrAPKeco c3R5nBjiP89rxd4WPVyecyw1SfI0sKPedKvLAXrpW1BfqHbMdWUKe4Ood6mK2RDe ViQgmzljfCdPEony6sc4bo0a5Upc3B3ZMt6GOC6b/lF0gFtsYhqjj8jRHPfut6P8 F9WcrgnNH3OTTaE6cUThmhDH/uiqgFuV+X/UbHpyj96dI+08FS9gmvdhw/r1BBg0 /gWMYjE1kJFMRi983l678Z6ao3MG/CSPaNW2a6iQqpr3/+8msjdgeNx3icC+0Mlm G3axOE2OlNoSuHYhtBfGA5T8ukIlia+w9mIrydoZOftzzBZFrtE3JdWlyf45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcOiSRlVsYk6mdwVDkf86SALG6owHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbTfFkTH0sGZIm44DkX+ID44yaQzSCNqFiD 8pWK2NFjnVDb4QYf3ypQNC8AWpyzU02xsv2AmzlwIQ2Sq63YHEQK65qXkdok/yYn iXbazpyc4X54Dym6K0El7czoSKT/vvRdius2kdEggIkSb6paW3QWwWROyayMzqon MjCtU4NWchuFGUTH/14jVKvy13DAFZL3vWBB1wI2uKIOxf/exsGgN1bfUD+20PmE HyqTpvZQOEaCiecF7YDMiEL2Lb6t8xB8aUBq3TXJB4aQWhGCwurGnKshUU6L0//1 y6wi9NDdwYk57M2RBosRgShSDvjzZEL9Ax42k7dgvmtIc8n1VAQ= -----END CERTIFICATE-----Generated at Wed Dec 24 12:23:18 2025 by rpki-client