This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: 1GlWRR4XCw39/r3HPH+JHi7SPIkpKqJoJtzBJY1N2Xc= Subject key identifier: 59:12:58:3B:7C:83:5A:EA:81:49:DA:A3:2B:E5:30:66:9D:63:11:36 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 47C717BF9A177A85C0991F653357A0B11AD6CC86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0399 Signing time: Wed 24 Dec 2025 12:42:52 +0000 Manifest this update: Wed 24 Dec 2025 12:37:52 +0000 Manifest next update: Sat 27 Dec 2025 14:28:52 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: 6SHj4tvY33Pq/wyLoMHIK02pMQWZwJDOnYzT8BCtAjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c7:17:bf:9a:17:7a:85:c0:99:1f:65:33:57:a0:b1:1a:d6:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Dec 24 12:37:52 2025 GMT Not After : Dec 27 14:28:52 2025 GMT Subject: CN=5912583B7C835AEA8149DAA32BE530669D631136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:01:30:8b:4d:95:a1:61:bd:ca:f0:d0:91: ff:3f:a8:0a:9e:cf:2f:bc:64:aa:f0:77:2c:0b:55: 68:7d:2f:70:e0:eb:dd:25:87:5a:31:2a:07:3b:40: 3b:ab:d1:78:6f:f0:1d:3a:11:9b:25:f3:c5:9c:93: cf:e9:7e:2f:ee:92:94:b6:9b:53:54:65:ea:3e:84: 69:a0:fd:ec:48:b9:de:5e:6e:e9:94:93:68:1c:e4: 22:88:1c:af:ac:7c:d7:d1:15:29:62:4b:1d:67:f2: e8:76:f1:77:84:07:15:7f:71:84:27:23:e7:4a:63: 9f:a1:8d:36:3a:87:59:e1:01:b0:8e:04:5d:1e:8b: 94:1f:f5:56:22:3b:3b:69:81:ea:38:4a:16:8e:a4: 80:72:ee:3f:39:92:ee:b0:c4:01:b1:f3:fb:f4:d7: fe:a6:86:57:e9:38:9e:fe:aa:93:29:6e:07:cc:8c: 82:26:1b:81:b0:a1:a0:87:69:79:d1:62:92:00:84: 47:ab:9f:37:5a:a9:59:bd:87:19:81:81:91:40:8d: af:03:fb:b5:8c:ba:ac:81:57:3d:ec:c1:09:2a:c4: d4:60:06:5e:df:f8:94:56:11:a4:ca:5c:ae:12:40: 89:f0:17:5f:2a:16:34:92:cc:68:af:35:3c:04:42: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:12:58:3B:7C:83:5A:EA:81:49:DA:A3:2B:E5:30:66:9D:63:11:36 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:68:c3:11:ef:82:68:c9:d0:31:c6:3d:16:db:1f:59:a1:e5: 6b:94:d1:0e:b2:8b:6d:02:34:f3:82:c0:5c:29:42:3b:d2:ed: 2c:32:18:d4:19:f5:40:f9:55:c6:74:9e:19:17:5d:50:79:75: fd:12:88:40:66:7e:01:14:4e:ef:63:90:f8:98:cc:12:8e:5f: 49:55:d9:11:12:50:a4:fe:0a:63:0e:bb:37:c7:66:52:ff:30: c0:6c:77:84:19:00:6a:06:3c:ef:34:0a:78:2b:f2:48:39:0b: 99:a4:5e:68:cd:65:0b:13:c1:50:9f:8b:72:5d:ab:b1:f2:31: e9:49:20:bc:8d:f8:2f:3a:0d:4e:dc:15:31:2d:6a:9d:d1:0f: 91:e4:2d:82:ad:2f:82:3c:f3:8d:d9:6b:b7:9a:2c:d7:b2:e8: eb:57:3d:a0:34:89:de:ac:61:cb:79:bd:f0:5f:be:d2:b9:f3: 31:59:77:c6:8b:11:62:d4:2b:a4:31:eb:21:db:0e:87:fe:b8: 69:f2:47:6d:40:b6:5e:fe:3b:6e:34:6a:85:35:e1:48:61:f5: 8d:60:d5:e9:1a:40:d8:51:f9:6a:39:de:f2:96:64:fe:f4:79: 94:22:93:20:ee:54:1e:4a:aa:8e:a0:da:65:3e:ad:50:b9:35: 69:55:c7:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8cXv5oXeoXAmR9lM1egsRrWzIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTEyMjQxMjM3NTJaFw0yNTEyMjcxNDI4NTJaMDMxMTAvBgNV BAMTKDU5MTI1ODNCN0M4MzVBRUE4MTQ5REFBMzJCRTUzMDY2OUQ2MzExMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdQEwi02VoWG9yvDQkf8/qAqe zy+8ZKrwdywLVWh9L3Dg690lh1oxKgc7QDur0Xhv8B06EZsl88Wck8/pfi/ukpS2 m1NUZeo+hGmg/exIud5ebumUk2gc5CKIHK+sfNfRFSliSx1n8uh28XeEBxV/cYQn I+dKY5+hjTY6h1nhAbCOBF0ei5Qf9VYiOztpgeo4ShaOpIBy7j85ku6wxAGx8/v0 1/6mhlfpOJ7+qpMpbgfMjIImG4GwoaCHaXnRYpIAhEernzdaqVm9hxmBgZFAja8D +7WMuqyBVz3swQkqxNRgBl7f+JRWEaTKXK4SQInwF18qFjSSzGivNTwEQtDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRJYO3yDWuqBSdqjK+UwZp1jETYwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxowxHvgmjJ0DHGPRbbH1mh5WuU0Q6yi20C NPOCwFwpQjvS7SwyGNQZ9UD5VcZ0nhkXXVB5df0SiEBmfgEUTu9jkPiYzBKOX0lV 2RESUKT+CmMOuzfHZlL/MMBsd4QZAGoGPO80Cngr8kg5C5mkXmjNZQsTwVCfi3Jd q7HyMelJILyN+C86DU7cFTEtap3RD5HkLYKtL4I8843Za7eaLNey6OtXPaA0id6s Yct5vfBfvtK58zFZd8aLEWLUK6Qx6yHbDof+uGnyR21Atl7+O240aoU14Uhh9Y1g 1ekaQNhR+Wo53vKWZP70eZQikyDuVB5Kqo6g2mU+rVC5NWlVx8k= -----END CERTIFICATE-----Generated at Wed Dec 24 20:24:55 2025 by rpki-client