This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: f34frZFtTpyuKlW+1sDTeV7w24Qtv35QStg0RHJg2Ic= Subject key identifier: 49:E1:3E:2D:75:82:09:96:F4:F6:D8:25:2F:BA:8D:2F:BF:EA:D3:C7 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 4B1E98CD4690582E102FD7A4D17A9756E6DA1901 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 0161 Signing time: Thu 18 Dec 2025 10:50:43 +0000 Manifest this update: Thu 18 Dec 2025 10:45:43 +0000 Manifest next update: Sun 21 Dec 2025 15:10:43 +0000 Files and hashes: 1: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZVb3WlbYtAPVgA3DWuKwaDFEplKAh/dflThhxwfEt9M=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: IlM5viJ/kwlD09UoPL6q/T0DgofJtyAwTqUcF330EeY=) 3: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: 02vqR83R1SteqwmE9egRcxjhVzX6Wp0RvqobYNGRNrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1e:98:cd:46:90:58:2e:10:2f:d7:a4:d1:7a:97:56:e6:da:19:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Dec 18 10:45:43 2025 GMT Not After : Dec 21 15:10:43 2025 GMT Subject: CN=49E13E2D75820996F4F6D8252FBA8D2FBFEAD3C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:10:9a:cf:bf:86:9a:c4:86:7f:5a:b8:52: 99:13:d8:87:a7:de:db:30:10:29:c6:98:45:7b:2a: be:93:17:40:7e:f0:51:b2:f8:36:c8:a6:be:5f:55: bf:17:aa:1e:2a:a7:b8:89:32:f8:e8:a0:60:e4:99: b0:9e:31:ea:fa:90:83:fb:de:4f:c6:b2:1b:76:35: 38:04:f5:41:e0:ff:d3:ab:ba:1b:74:9a:79:8b:54: 29:cb:7f:cf:58:0a:eb:0b:be:c2:71:78:f7:88:c6: 7f:17:ad:6d:8f:32:8d:0c:90:aa:75:05:6c:18:39: 48:a3:79:97:d7:09:f7:27:3d:1a:5b:2d:d3:d4:7e: 6d:81:b1:f5:d9:c6:9e:20:0d:13:78:1c:14:22:8a: 79:7c:95:fd:5d:a0:fa:11:64:dc:e5:34:6c:9d:0a: 96:d9:ae:1f:f0:cb:dc:88:8e:c1:f6:37:54:e0:b1: e1:50:14:d4:87:9f:59:6d:60:3c:b9:1a:8f:5e:07: 71:a7:73:80:0a:8f:13:bd:ba:b5:f1:99:82:95:1b: 81:0b:3c:54:d7:7c:c2:d1:e0:bf:6f:18:cb:5d:34: 11:5c:ec:25:4b:c8:d9:97:cc:6d:14:1c:58:ba:29: 7b:4a:02:af:f6:36:bf:3d:55:ac:9e:ae:8d:5c:2e: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:3E:2D:75:82:09:96:F4:F6:D8:25:2F:BA:8D:2F:BF:EA:D3:C7 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8c:86:8e:60:6f:cb:64:e3:2d:f2:3a:46:63:39:bc:0c:e0: d9:ba:88:c1:ab:8c:49:0b:c3:df:60:c6:39:f5:5c:69:37:fc: 4d:39:79:f0:33:c7:3a:35:6e:2b:cb:e7:33:e5:e6:3a:64:3b: 84:17:cf:08:6a:11:1b:f8:4c:1f:1d:72:e1:a4:92:ef:09:b8: c6:a2:cd:f3:69:0b:a2:0d:0c:d2:11:c7:2e:d5:1e:f4:d9:b1: 27:71:5b:28:6e:a8:b2:b5:1f:eb:c0:80:21:92:2e:a3:5e:a8: 74:aa:03:7e:b2:14:23:15:7c:7a:06:c9:c9:93:48:b2:8c:ab: fd:e7:58:4f:a5:49:ac:ec:e8:25:b6:2d:d4:f1:48:35:47:d7: 59:d8:07:6d:ae:91:9b:9b:29:5a:73:e9:21:6e:a8:15:d2:0a: 86:29:56:a1:92:48:07:d8:44:23:d0:1f:d6:4f:da:2c:33:dd: 0c:b5:30:c3:38:78:27:9e:6d:22:53:e5:5c:0d:b0:32:c5:43: 3f:55:d9:06:72:91:5a:85:3e:1f:b0:3e:f1:d2:42:68:61:ae: 0a:36:76:29:f0:f8:bc:07:ac:ce:dd:9c:ea:21:4d:01:13:e9: e3:12:78:dc:65:41:f0:62:c1:c1:b4:8b:43:3f:6f:74:cb:12: ed:e6:be:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx6YzUaQWC4QL9ek0XqXVubaGQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTEyMTgxMDQ1NDNaFw0yNTEyMjExNTEwNDNaMDMxMTAvBgNV BAMTKDQ5RTEzRTJENzU4MjA5OTZGNEY2RDgyNTJGQkE4RDJGQkZFQUQzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuRCaz7+GmsSGf1q4UpkT2Ien 3tswECnGmEV7Kr6TF0B+8FGy+DbIpr5fVb8Xqh4qp7iJMvjooGDkmbCeMer6kIP7 3k/Gsht2NTgE9UHg/9Oruht0mnmLVCnLf89YCusLvsJxePeIxn8XrW2PMo0MkKp1 BWwYOUijeZfXCfcnPRpbLdPUfm2BsfXZxp4gDRN4HBQiinl8lf1doPoRZNzlNGyd CpbZrh/wy9yIjsH2N1TgseFQFNSHn1ltYDy5Go9eB3Gnc4AKjxO9urXxmYKVG4EL PFTXfMLR4L9vGMtdNBFc7CVLyNmXzG0UHFi6KXtKAq/2Nr89Vayero1cLgMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeE+LXWCCZb09tglL7qNL7/q08cwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2Mho5gb8tk4y3yOkZjObwM4Nm6iMGrjEkL w99gxjn1XGk3/E05efAzxzo1bivL5zPl5jpkO4QXzwhqERv4TB8dcuGkku8JuMai zfNpC6INDNIRxy7VHvTZsSdxWyhuqLK1H+vAgCGSLqNeqHSqA36yFCMVfHoGycmT SLKMq/3nWE+lSazs6CW2LdTxSDVH11nYB22ukZubKVpz6SFuqBXSCoYpVqGSSAfY RCPQH9ZP2iwz3Qy1MMM4eCeebSJT5VwNsDLFQz9V2QZykVqFPh+wPvHSQmhhrgo2 dinw+LwHrM7dnOohTQET6eMSeNxlQfBiwcG0i0M/b3TLEu3mvjo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:29 2025 by rpki-client