This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: BIuRwqCXROlNPcy0YufnDhAsHbxiRMDxp3ZnvnLOn20= Subject key identifier: 92:3F:70:C2:5A:76:0B:6F:72:26:B9:82:5D:05:A5:EF:53:0E:58:A6 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 67955FE4D450086636694368D67BD82A7DEAC809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04FA Signing time: Mon 29 Dec 2025 19:02:03 +0000 Manifest this update: Mon 29 Dec 2025 18:57:03 +0000 Manifest next update: Fri 02 Jan 2026 02:46:03 +0000 Files and hashes: 1: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 3: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: XB1mjE+k6umlAjRlal/KU+nMIFYf5qhInskoJBuT8Mk=) 4: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 5: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 02:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:5f:e4:d4:50:08:66:36:69:43:68:d6:7b:d8:2a:7d:ea:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Dec 29 18:57:03 2025 GMT Not After : Jan 2 02:46:03 2026 GMT Subject: CN=923F70C25A760B6F7226B9825D05A5EF530E58A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:bd:a7:a6:ac:3c:ba:d2:a3:25:25:9f:23: 0d:07:5e:c2:df:11:14:c4:f8:c3:39:76:a6:91:e7: 4b:89:14:67:79:b4:03:02:9a:30:9d:9f:0f:d4:52: d3:48:f6:4e:01:e6:2a:ef:28:c6:7b:f3:11:9f:d5: ef:b7:fb:81:78:c8:fa:39:be:7c:7c:6d:a1:2b:0b: e5:d4:aa:59:3b:61:fd:05:ac:ff:4b:25:3b:05:12: d7:8e:fc:6d:65:ab:a2:75:aa:a4:d0:b8:af:7e:43: ec:f8:97:b2:f9:20:cd:45:61:8f:ee:62:45:d8:4a: cd:2e:d0:31:b3:7d:84:93:a4:32:19:58:e3:ce:b8: c3:52:c4:7f:46:f5:86:40:bc:af:06:44:04:ae:f4: 00:2b:42:9f:e4:34:14:ca:88:50:6c:36:29:7f:dc: b8:fe:a9:9a:9f:04:16:d6:3e:c9:33:dc:70:33:47: 25:d8:10:0d:bb:c5:e1:4a:75:31:92:c7:66:47:93: 35:08:e1:60:a7:c6:77:90:9b:0e:13:ee:1c:e5:26: 91:f2:c5:e2:35:9e:f2:59:c5:14:8f:d0:1f:3c:1e: 13:9e:6b:fb:6a:c3:93:88:ff:f3:b6:e7:fd:a3:1a: 19:f1:fd:22:4b:48:fa:d1:82:16:45:6f:19:c8:6c: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:70:C2:5A:76:0B:6F:72:26:B9:82:5D:05:A5:EF:53:0E:58:A6 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:21:6c:bb:54:aa:f2:97:28:c3:c3:b3:da:4a:16:49:7f:20: df:62:91:c9:7c:24:08:cd:f0:66:86:e0:16:e6:36:0f:82:bc: 5f:b0:96:65:d2:5e:69:1a:86:26:1f:0f:3f:1e:27:2a:da:15: 9f:5a:8d:83:da:d1:f3:00:ce:4b:02:95:84:43:c5:d9:61:53: 5c:7a:54:6e:a0:8f:5b:ec:30:d0:e6:d9:bb:a2:29:18:4f:79: 7a:9a:2b:c8:02:85:22:03:02:40:d7:93:43:99:c0:57:90:72: a4:ef:cc:09:2a:fa:47:13:2d:54:c3:7c:3c:45:3d:79:f6:81: 22:61:1d:e5:6e:e5:6d:a9:1b:74:75:6e:d0:29:ff:24:1f:4b: 1a:4c:51:b6:a7:93:2f:84:25:2d:03:fe:01:3c:3c:f3:55:83: 1d:45:cf:fb:c2:28:04:6f:d1:b7:4c:eb:3f:ae:13:e3:5a:d0: 89:69:03:e9:36:d3:97:9e:3c:7b:6c:16:af:0c:a3:36:14:44: 96:b9:7b:47:bd:b5:a4:c4:e9:b4:28:c0:54:f5:53:f2:11:a0: 65:02:ed:42:e5:9c:b1:36:ab:98:bb:fb:92:ff:f0:54:6b:fc: 06:88:46:ee:ee:a3:db:33:70:c4:38:fc:bc:49:24:95:68:1d: e4:7e:b5:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5Vf5NRQCGY2aUNo1nvYKn3qyAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEyMjkxODU3MDNaFw0yNjAxMDIwMjQ2MDNaMDMxMTAvBgNV BAMTKDkyM0Y3MEMyNUE3NjBCNkY3MjI2Qjk4MjVEMDVBNUVGNTMwRTU4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCr2npqw8utKjJSWfIw0HXsLf ERTE+MM5dqaR50uJFGd5tAMCmjCdnw/UUtNI9k4B5irvKMZ78xGf1e+3+4F4yPo5 vnx8baErC+XUqlk7Yf0FrP9LJTsFEteO/G1lq6J1qqTQuK9+Q+z4l7L5IM1FYY/u YkXYSs0u0DGzfYSTpDIZWOPOuMNSxH9G9YZAvK8GRASu9AArQp/kNBTKiFBsNil/ 3Lj+qZqfBBbWPskz3HAzRyXYEA27xeFKdTGSx2ZHkzUI4WCnxneQmw4T7hzlJpHy xeI1nvJZxRSP0B88HhOea/tqw5OI//O25/2jGhnx/SJLSPrRghZFbxnIbMbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkj9wwlp2C29yJrmCXQWl71MOWKYwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwhbLtUqvKXKMPDs9pKFkl/IN9ikcl8JAjN 8GaG4BbmNg+CvF+wlmXSXmkahiYfDz8eJyraFZ9ajYPa0fMAzksClYRDxdlhU1x6 VG6gj1vsMNDm2buiKRhPeXqaK8gChSIDAkDXk0OZwFeQcqTvzAkq+kcTLVTDfDxF PXn2gSJhHeVu5W2pG3R1btAp/yQfSxpMUbanky+EJS0D/gE8PPNVgx1Fz/vCKARv 0bdM6z+uE+Na0IlpA+k205eePHtsFq8MozYURJa5e0e9taTE6bQowFT1U/IRoGUC 7ULlnLE2q5i7+5L/8FRr/AaIRu7uo9szcMQ4/LxJJJVoHeR+tTg= -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:54 2025 by rpki-client