This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: ARUvbZYsBEFz1rEj/5SNpxKjFm3yiv5IaiHe/i4PWrs= Subject key identifier: 1A:A9:5C:CD:24:7E:5D:71:83:64:D2:E9:88:0A:55:94:87:C3:88:2B Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 71B5B1D02DF88AC4D750762FB9FD4E6B8ACA5C7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 01ED Signing time: Wed 17 Dec 2025 06:12:14 +0000 Manifest this update: Wed 17 Dec 2025 06:07:14 +0000 Manifest next update: Sat 20 Dec 2025 15:36:14 +0000 Files and hashes: 1: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: jiJzCD3vm68yvo6PmMkNTu2NUcbP1asT5F5vfAlJq1U=) 2: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 4: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b5:b1:d0:2d:f8:8a:c4:d7:50:76:2f:b9:fd:4e:6b:8a:ca:5c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Dec 17 06:07:14 2025 GMT Not After : Dec 20 15:36:14 2025 GMT Subject: CN=1AA95CCD247E5D718364D2E9880A559487C3882B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:08:ac:b4:db:22:ba:31:d4:e5:d9:fe:25: 04:7e:da:b1:c4:57:93:6d:02:6c:bf:2a:63:e2:9b: 72:42:d0:e5:61:63:a0:01:c4:96:bd:85:8c:a3:8a: c0:7c:18:45:89:18:cc:0a:c0:c0:92:15:a8:81:d7: 6d:cf:c6:51:36:aa:3c:75:68:a2:f2:8a:4e:64:12: a4:2b:62:6b:04:4e:0d:9c:82:82:44:32:5b:f5:17: f3:01:ea:4b:6b:37:6f:4e:1e:57:a3:43:bc:46:4f: 81:33:8c:82:1a:3f:e4:e5:4d:c0:1f:bf:80:83:c3: 0b:c1:6e:cb:bf:17:da:2e:d1:74:5d:36:9d:95:f3: 93:82:e0:06:bd:f3:b8:fb:e1:74:4a:70:40:05:f5: d9:dc:05:b4:57:64:18:5c:5a:f8:d8:f4:db:c2:d2: 43:04:fe:b2:1f:3b:76:ff:88:18:89:9d:ec:f0:b6: 0f:76:83:ef:cc:f3:25:58:08:98:bf:c1:ac:ae:7f: a3:49:0e:03:8d:d2:80:e8:84:84:84:92:82:7a:dc: 2b:5f:bb:35:d0:85:89:1c:6f:a3:5d:43:a9:7b:25: 3d:ab:ba:9e:dc:83:29:0d:7e:d3:0f:77:d4:c0:d4: 4c:75:f4:56:2b:df:07:79:40:39:ec:fc:b8:a1:2b: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:5C:CD:24:7E:5D:71:83:64:D2:E9:88:0A:55:94:87:C3:88:2B X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:89:3d:28:61:27:fc:38:af:e7:4f:3b:18:3a:78:0d:03:d3: 70:b0:6a:2a:1a:39:dc:9d:a5:05:ab:fe:10:01:17:e5:e1:84: 27:28:d1:c0:30:e8:b3:7a:d5:c7:56:08:96:92:bd:b3:9b:6c: a9:25:e0:f0:30:69:3f:7f:4c:85:c8:19:6a:54:be:66:59:4d: f9:4c:9e:7c:32:85:57:34:6f:ae:b7:e2:a7:8e:40:e2:c0:0a: 47:73:09:12:6f:0d:d4:d8:20:fa:6c:01:bc:0f:bd:7a:d0:2e: b8:dd:b3:c9:13:17:f9:9c:84:15:7d:35:3d:44:65:fe:83:0a: 94:9b:09:97:7c:a8:43:da:18:df:63:16:55:2d:2f:26:8b:41: 6d:a1:e8:3b:e8:7d:ae:8b:6b:5d:b4:f3:b4:0b:3d:7c:b0:b2: d5:83:4a:88:98:3a:20:d0:c8:af:2d:81:9a:20:fe:9a:17:42: 27:56:4f:da:fc:c6:f1:d2:3f:c3:5a:57:bf:6e:d6:51:89:f1: 28:c5:41:2c:61:ba:06:28:f3:fc:e9:86:38:53:a7:c5:22:ab: 6e:12:e0:18:4e:c6:93:b0:f9:50:c2:a1:8b:48:b2:6b:89:fe: ee:d4:4f:5a:66:2d:92:02:d4:26:48:e6:e7:83:25:6d:97:84: 0e:83:2c:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbWx0C34isTXUHYvuf1Oa4rKXHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTEyMTcwNjA3MTRaFw0yNTEyMjAxNTM2MTRaMDMxMTAvBgNV BAMTKDFBQTk1Q0NEMjQ3RTVENzE4MzY0RDJFOTg4MEE1NTk0ODdDMzg4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLAistNsiujHU5dn+JQR+2rHE V5NtAmy/KmPim3JC0OVhY6ABxJa9hYyjisB8GEWJGMwKwMCSFaiB123PxlE2qjx1 aKLyik5kEqQrYmsETg2cgoJEMlv1F/MB6ktrN29OHlejQ7xGT4EzjIIaP+TlTcAf v4CDwwvBbsu/F9ou0XRdNp2V85OC4Aa987j74XRKcEAF9dncBbRXZBhcWvjY9NvC 0kME/rIfO3b/iBiJnezwtg92g+/M8yVYCJi/wayuf6NJDgON0oDohISEkoJ63Ctf uzXQhYkcb6NdQ6l7JT2rup7cgykNftMPd9TA1Ex19FYr3wd5QDns/LihK24FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqlczSR+XXGDZNLpiApVlIfDiCswHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuJPShhJ/w4r+dPOxg6eA0D03CwaioaOdyd pQWr/hABF+XhhCco0cAw6LN61cdWCJaSvbObbKkl4PAwaT9/TIXIGWpUvmZZTflM nnwyhVc0b6634qeOQOLACkdzCRJvDdTYIPpsAbwPvXrQLrjds8kTF/mchBV9NT1E Zf6DCpSbCZd8qEPaGN9jFlUtLyaLQW2h6Dvofa6La12087QLPXywstWDSoiYOiDQ yK8tgZog/poXQidWT9r8xvHSP8NaV79u1lGJ8SjFQSxhugYo8/zphjhTp8Uiq24S 4BhOxpOw+VDCoYtIsmuJ/u7UT1pmLZIC1CZI5ueDJW2XhA6DLIg= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:18 2025 by rpki-client