This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: U9eZKLs71NZeg4Ba/S+x2Gs47oZfUmklJ4CnU5T6FmE= Subject key identifier: 14:7B:C2:F5:AE:F8:7B:5B:A1:91:2B:6E:57:62:F3:9B:7F:DB:AB:86 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 25B9D5A7344F7D65B4F5C55815B0D6E3DE14224E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 0305 Signing time: Wed 17 Dec 2025 07:02:24 +0000 Manifest this update: Wed 17 Dec 2025 06:57:24 +0000 Manifest next update: Sat 20 Dec 2025 14:02:24 +0000 Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=) 2: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: x1QSCdCkTGoAYGl3p3uUHOmIvnj0US0HEC8XFXezLzg=) 3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b9:d5:a7:34:4f:7d:65:b4:f5:c5:58:15:b0:d6:e3:de:14:22:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Dec 17 06:57:24 2025 GMT Not After : Dec 20 14:02:24 2025 GMT Subject: CN=147BC2F5AEF87B5BA1912B6E5762F39B7FDBAB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:52:0b:0c:d4:e5:e9:e9:c6:2d:75:d0:af: 98:f6:bd:8b:a5:55:92:06:49:87:f1:17:0b:cb:55: f5:32:cc:5a:cb:b4:c6:e4:dd:36:e3:d0:d3:28:77: 19:b6:ab:2c:5e:54:f7:7d:fc:67:ed:14:2e:f5:be: d4:85:b7:4e:55:ce:c4:27:cc:89:42:39:90:0c:bc: d7:8c:24:08:d5:b1:ea:a0:b2:1c:70:34:d7:fb:2e: 7b:99:c7:3c:f8:02:33:f7:84:47:8e:0f:4d:a7:ad: d0:b6:af:de:49:f0:00:3c:45:5e:03:d3:cd:8e:8d: e6:65:4c:98:3e:29:72:df:19:9a:15:f0:c4:6e:2a: ee:2a:b3:c7:5a:04:00:c3:ed:fc:51:b9:3d:ba:5b: b4:b3:d0:d0:93:49:e0:f0:b2:07:8c:61:bd:c1:de: b5:de:52:d3:c1:66:ab:f5:32:07:bf:31:d6:14:6a: b8:5e:45:9e:6d:16:53:5e:34:11:e2:37:c9:38:cb: 9b:02:57:70:66:a1:d8:32:86:86:7c:5a:bd:fb:db: db:c2:94:b4:2d:b7:da:32:66:74:64:29:ac:6f:74: 96:ff:43:5f:7f:7e:59:5f:02:cd:ec:70:1f:91:3b: 19:48:91:a9:fb:5d:97:10:41:4b:4f:d4:a9:ea:c0: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7B:C2:F5:AE:F8:7B:5B:A1:91:2B:6E:57:62:F3:9B:7F:DB:AB:86 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:10:dc:23:86:49:75:16:8e:78:52:2e:68:72:8c:16:e1:39: 07:66:ee:ba:15:4d:c8:bf:5a:65:bd:b8:f7:f7:4b:bd:34:1f: ae:53:5b:c5:54:75:8f:19:a4:cc:ce:0e:96:40:cf:08:06:d5: 30:b0:69:42:38:e1:c3:2d:c6:1a:53:6c:b5:67:a3:fa:4b:cd: 20:0a:e4:e0:20:d2:fa:53:5d:35:2c:e2:d4:f5:9a:2d:dc:8e: ab:99:db:00:2e:2f:0b:7e:6b:85:26:f1:15:ce:8c:19:c7:fa: e2:dd:2b:73:0d:df:b4:54:b3:c4:d0:dc:a0:58:da:4a:23:51: ca:99:ce:8c:64:e7:b8:bf:c6:be:27:e4:89:e9:19:7f:a2:7f: b4:8f:8d:33:bb:5b:76:e2:cf:19:6b:70:1d:b9:37:b1:30:8f: ae:0a:dc:3a:d7:3d:41:56:06:a1:1f:d4:0b:91:f3:b2:94:01: 83:eb:f3:ef:7a:48:c2:2f:53:45:85:ce:05:86:ea:6e:e1:90: 1a:a5:eb:e2:57:d8:f8:7f:5a:9e:7e:66:7c:64:27:03:85:fc: f5:50:dc:e9:08:ff:5d:9e:d3:f9:d0:74:a8:86:a7:90:8a:1d: 12:1c:57:4c:08:ce:dd:19:2b:37:8f:3d:0e:15:8e:bd:25:83: 24:72:22:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbnVpzRPfWW09cVYFbDW494UIk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTEyMTcwNjU3MjRaFw0yNTEyMjAxNDAyMjRaMDMxMTAvBgNV BAMTKDE0N0JDMkY1QUVGODdCNUJBMTkxMkI2RTU3NjJGMzlCN0ZEQkFCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+u1ILDNTl6enGLXXQr5j2vYul VZIGSYfxFwvLVfUyzFrLtMbk3Tbj0NModxm2qyxeVPd9/GftFC71vtSFt05VzsQn zIlCOZAMvNeMJAjVseqgshxwNNf7LnuZxzz4AjP3hEeOD02nrdC2r95J8AA8RV4D 082OjeZlTJg+KXLfGZoV8MRuKu4qs8daBADD7fxRuT26W7Sz0NCTSeDwsgeMYb3B 3rXeUtPBZqv1Mge/MdYUarheRZ5tFlNeNBHiN8k4y5sCV3BmodgyhoZ8Wr3729vC lLQtt9oyZnRkKaxvdJb/Q19/fllfAs3scB+ROxlIkan7XZcQQUtP1KnqwOirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHvC9a74e1uhkStuV2Lzm3/bq4YwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgQ3COGSXUWjnhSLmhyjBbhOQdm7roVTci/ WmW9uPf3S700H65TW8VUdY8ZpMzODpZAzwgG1TCwaUI44cMtxhpTbLVno/pLzSAK 5OAg0vpTXTUs4tT1mi3cjquZ2wAuLwt+a4Um8RXOjBnH+uLdK3MN37RUs8TQ3KBY 2kojUcqZzoxk57i/xr4n5InpGX+if7SPjTO7W3bizxlrcB25N7Ewj64K3DrXPUFW BqEf1AuR87KUAYPr8+96SMIvU0WFzgWG6m7hkBql6+JX2Ph/Wp5+ZnxkJwOF/PVQ 3OkI/12e0/nQdKiGp5CKHRIcV0wIzt0ZKzePPQ4Vjr0lgyRyIk8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:56 2025 by rpki-client