This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: q+/MwszD7UbdhXfBRuO9Q92iklXoXhGi+COwhPZeNBM= Subject key identifier: 67:FA:4E:9F:9F:9D:CD:F4:C0:B5:E7:26:A8:CD:60:B8:DC:D4:2B:79 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 292687FC0016528A89D3B91F6F1D38929E139CE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 0152 Signing time: Wed 17 Dec 2025 23:10:45 +0000 Manifest this update: Wed 17 Dec 2025 23:05:45 +0000 Manifest next update: Sun 21 Dec 2025 09:28:45 +0000 Files and hashes: 1: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: qqWSkoteDsFPSy94pyeYjAzSUP9Ynr2j2aE8DeLFfsU=) 2: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=) 3: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=) 4: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: KaOT9B7IZgKLVN11NWS3hYchsn9fcq0SM6nfFKCQd3c=) 5: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=) 6: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=) 7: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 09:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:26:87:fc:00:16:52:8a:89:d3:b9:1f:6f:1d:38:92:9e:13:9c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Dec 17 23:05:45 2025 GMT Not After : Dec 21 09:28:45 2025 GMT Subject: CN=67FA4E9F9F9DCDF4C0B5E726A8CD60B8DCD42B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:9c:5d:4f:7f:c1:fd:1b:17:e7:4b:4b:97: b6:26:6b:6a:4b:95:08:47:fe:12:de:1c:88:58:3e: b8:28:7b:25:9d:2b:93:c9:14:2b:3d:aa:5a:ce:30: 6a:62:14:76:68:86:8b:b4:f0:8c:39:21:ae:c5:7c: 34:ed:65:14:23:74:b6:e0:b4:40:2e:be:ce:af:1e: 40:dc:4d:c8:0b:8b:38:4e:e8:82:5e:e8:e2:19:a1: 99:be:9c:71:f5:a6:b8:2d:a3:47:e3:1d:d4:7a:42: 3c:7f:df:dc:3a:05:44:c6:c8:97:f2:9c:3a:b7:f9: 6e:05:2e:5b:2a:7d:4d:29:ee:33:f8:89:37:b5:a8: 3c:69:2f:db:cc:ba:60:e4:50:60:0e:bd:bf:49:fc: 8d:82:d6:8a:67:3a:97:96:1f:c9:df:c2:01:13:60: 69:4d:87:b2:2b:1c:b6:76:c3:6f:e6:e9:de:c2:20: 48:f5:4f:ad:e5:b8:68:6b:7d:b8:96:6d:20:ca:e8: 9b:74:15:7a:7a:14:6e:82:78:a6:98:86:53:f3:5c: e4:11:0d:6f:3e:07:d3:16:c2:98:98:a9:7a:36:d9: 29:82:52:43:85:02:f2:d4:b5:96:3e:b6:dd:c4:b6: 02:bb:62:56:5d:24:00:21:19:f3:0f:e8:bd:66:1a: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FA:4E:9F:9F:9D:CD:F4:C0:B5:E7:26:A8:CD:60:B8:DC:D4:2B:79 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:31:fd:a8:3f:47:a1:3e:64:67:a3:ea:89:19:5b:d0:3c:f5: e0:9b:93:ef:b3:35:d7:94:cf:79:3b:6d:c7:0b:69:55:c4:91: 8e:67:9b:40:0e:3e:e1:56:02:6b:f8:9f:30:ff:a0:91:07:cf: f0:9c:f6:4c:74:e1:65:3a:2e:33:ac:49:0a:b1:21:05:63:9e: 13:fc:0d:76:2e:a2:53:42:11:da:f1:34:58:d0:9d:0c:ae:cd: ed:dc:85:dd:6f:17:83:59:bd:50:a9:62:58:9b:b2:21:1e:85: d3:44:4d:2b:94:68:05:d9:7c:72:75:9d:d0:4a:22:9d:b1:2d: 7c:6a:57:44:d0:8f:b5:60:ae:d3:9e:63:9a:60:fc:ef:b6:cc: e5:1d:74:77:96:c5:85:f2:1b:25:34:e8:93:cb:bd:58:8a:b4: 28:1b:65:1e:bd:66:8c:4a:8f:a3:6a:ac:de:15:d4:86:f4:ab: 29:de:2d:5c:f0:7b:0d:4d:a5:a0:b0:31:fc:80:f1:7a:1f:26: 14:55:12:a0:50:25:1f:9a:5f:22:93:9c:38:a8:63:54:8c:e2: 5c:64:3d:ef:9e:9c:b2:14:a8:96:78:41:19:e3:cc:a4:7b:ed: a7:76:af:28:32:5b:c6:2b:95:35:16:dc:7c:f8:37:e5:f6:a8: dd:01:10:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSaH/AAWUoqJ07kfbx04kp4TnOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTEyMTcyMzA1NDVaFw0yNTEyMjEwOTI4NDVaMDMxMTAvBgNV BAMTKDY3RkE0RTlGOUY5RENERjRDMEI1RTcyNkE4Q0Q2MEI4RENENDJCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZJxdT3/B/RsX50tLl7Yma2pL lQhH/hLeHIhYPrgoeyWdK5PJFCs9qlrOMGpiFHZohou08Iw5Ia7FfDTtZRQjdLbg tEAuvs6vHkDcTcgLizhO6IJe6OIZoZm+nHH1prgto0fjHdR6Qjx/39w6BUTGyJfy nDq3+W4FLlsqfU0p7jP4iTe1qDxpL9vMumDkUGAOvb9J/I2C1opnOpeWH8nfwgET YGlNh7IrHLZ2w2/m6d7CIEj1T63luGhrfbiWbSDK6Jt0FXp6FG6CeKaYhlPzXOQR DW8+B9MWwpiYqXo22SmCUkOFAvLUtZY+tt3EtgK7YlZdJAAhGfMP6L1mGgUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/pOn5+dzfTAtecmqM1guNzUK3kwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIx/ag/R6E+ZGej6okZW9A89eCbk++zNdeU z3k7bccLaVXEkY5nm0AOPuFWAmv4nzD/oJEHz/Cc9kx04WU6LjOsSQqxIQVjnhP8 DXYuolNCEdrxNFjQnQyuze3chd1vF4NZvVCpYlibsiEehdNETSuUaAXZfHJ1ndBK Ip2xLXxqV0TQj7VgrtOeY5pg/O+2zOUddHeWxYXyGyU06JPLvViKtCgbZR69ZoxK j6NqrN4V1Ib0qyneLVzwew1NpaCwMfyA8XofJhRVEqBQJR+aXyKTnDioY1SM4lxk Pe+enLIUqJZ4QRnjzKR77ad2rygyW8YrlTUW3Hz4N+X2qN0BEO8= -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:05 2025 by rpki-client