This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: BoqrbVfy5V++5r7MTZgjhcMft8JDMYWwwiepvEAOVVg= Subject key identifier: 37:BC:70:40:47:D4:30:46:C9:3A:26:08:0F:89:A0:A7:C6:CD:91:8F Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 282B0279068BCBB8FE4505768CC868B3A3D40D10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0427 Signing time: Tue 23 Dec 2025 19:43:00 +0000 Manifest this update: Tue 23 Dec 2025 19:38:00 +0000 Manifest next update: Fri 26 Dec 2025 23:29:00 +0000 Files and hashes: 1: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: zqpJXJIOBhnwLUMtiPQXOx2KMC9Zw7fPIh3iuLnJlNg=) 3: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: JehqGhNWzQlXKijMz99RAS/OeNPqyfMKhbh0qUQD5X4=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: wYE1H9Wr7TBPEnivLA+AmwtO90AzuAp/OA0G1iMo88I=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2b:02:79:06:8b:cb:b8:fe:45:05:76:8c:c8:68:b3:a3:d4:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Dec 23 19:38:00 2025 GMT Not After : Dec 26 23:29:00 2025 GMT Subject: CN=37BC704047D43046C93A26080F89A0A7C6CD918F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:3a:5f:77:51:4c:12:be:27:55:37:19:0a: 6f:5d:f9:1f:34:db:6a:1a:9c:9c:f9:bd:2f:26:01: 64:8e:14:1c:7d:c9:f4:cd:09:e0:2a:fd:81:88:e2: 70:f1:51:30:4a:c4:47:ce:bf:7f:8e:ba:1b:bf:2a: 55:99:92:0b:55:1f:d0:df:ca:ee:ad:cc:f3:93:f3: b6:7b:93:fb:3f:41:85:65:a7:41:8d:71:41:11:12: 19:16:45:4b:5a:5e:2b:52:51:41:0c:73:36:d2:90: 9c:cd:c4:fc:06:d3:fc:d9:8d:79:d2:aa:44:82:dd: d4:d2:a5:dd:b6:1e:aa:fd:a2:c8:4d:99:c6:0f:d6: a5:77:88:f8:8e:cf:ab:67:1e:7b:07:05:e7:58:23: be:ea:30:37:1f:27:0c:73:70:3a:d4:98:0b:7f:45: 77:e0:d3:5e:fc:d2:e7:18:c0:32:df:ce:1f:7c:d1: 29:de:0d:97:0e:39:3f:a6:0c:86:da:de:3b:92:d3: 06:fa:c3:87:aa:eb:b1:3a:58:60:d8:7d:39:4c:88: 63:9d:75:59:fd:d3:82:5b:f8:24:f6:59:82:90:3b: 9e:db:b6:f2:aa:05:e6:dd:c2:94:49:9c:64:95:cd: a6:f5:84:25:72:d7:c1:c4:7d:28:31:ac:c0:13:ba: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:70:40:47:D4:30:46:C9:3A:26:08:0F:89:A0:A7:C6:CD:91:8F X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:50:ee:2f:28:8a:83:5e:cc:e8:ed:8d:89:c9:c7:01:d2: 89:75:44:f3:0f:f6:81:cc:f9:d0:c7:72:e8:f0:ab:86:5c:3b: c5:35:f1:1a:97:30:ae:3b:ba:aa:09:33:d0:6b:fe:64:9d:a1: 77:2b:40:b0:b5:35:75:1a:ca:58:93:d7:c5:8f:7a:cf:c1:76: 2f:18:2a:9f:aa:da:e9:cf:53:70:75:4c:1a:b7:c0:82:1e:8b: e6:1f:f3:f1:ed:fa:b0:24:44:e9:99:ab:6a:53:6b:b9:60:d4: fa:12:06:14:8c:5d:82:67:1e:78:0b:91:71:7f:6e:cf:91:83: 58:dd:6b:e5:3e:1d:ac:20:e6:1f:4f:e8:79:55:50:ad:69:1f: 7f:69:49:61:39:b7:95:0e:9f:00:dc:31:b0:25:c8:85:4a:ae: 28:e6:db:71:20:69:c5:30:1a:c6:fc:ab:68:11:38:c0:45:00: 45:00:3b:f2:b7:ce:f8:ce:ab:a9:e7:0c:c0:ad:1c:5f:ae:de: d2:13:e4:11:bf:31:5c:fa:29:2d:6b:78:9b:32:0a:1f:2b:1b: b7:1c:93:c1:2f:95:77:a8:b7:27:ec:93:c4:9e:d7:d2:be:3a: ba:46:97:86:82:12:7c:0a:f0:71:01:ea:d3:d9:8f:3e:ba:b6: bb:06:0a:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCsCeQaLy7j+RQV2jMhos6PUDRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTEyMjMxOTM4MDBaFw0yNTEyMjYyMzI5MDBaMDMxMTAvBgNV BAMTKDM3QkM3MDQwNDdENDMwNDZDOTNBMjYwODBGODlBMEE3QzZDRDkxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeTpfd1FMEr4nVTcZCm9d+R80 22oanJz5vS8mAWSOFBx9yfTNCeAq/YGI4nDxUTBKxEfOv3+Ouhu/KlWZkgtVH9Df yu6tzPOT87Z7k/s/QYVlp0GNcUEREhkWRUtaXitSUUEMczbSkJzNxPwG0/zZjXnS qkSC3dTSpd22Hqr9oshNmcYP1qV3iPiOz6tnHnsHBedYI77qMDcfJwxzcDrUmAt/ RXfg01780ucYwDLfzh980SneDZcOOT+mDIba3juS0wb6w4eq67E6WGDYfTlMiGOd dVn904Jb+CT2WYKQO57btvKqBebdwpRJnGSVzab1hCVy18HEfSgxrMATuokPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7xwQEfUMEbJOiYID4mgp8bNkY8wHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDPUO4vKIqDXszo7Y2JyccB0ol1RPMP9oHM +dDHcujwq4ZcO8U18RqXMK47uqoJM9Br/mSdoXcrQLC1NXUayliT18WPes/Bdi8Y Kp+q2unPU3B1TBq3wIIei+Yf8/Ht+rAkROmZq2pTa7lg1PoSBhSMXYJnHngLkXF/ bs+Rg1jda+U+Hawg5h9P6HlVUK1pH39pSWE5t5UOnwDcMbAlyIVKrijm23EgacUw Gsb8q2gROMBFAEUAO/K3zvjOq6nnDMCtHF+u3tIT5BG/MVz6KS1reJsyCh8rG7cc k8EvlXeotyfsk8Se19K+OrpGl4aCEnwK8HEB6tPZjz66trsGCno= -----END CERTIFICATE-----Generated at Thu Dec 25 00:38:57 2025 by rpki-client