This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: sMHOFpdSzmY1ydXqnb4LoCn5kw3BPGk9P1K/HpIG/Fg= Subject key identifier: BB:40:1C:CA:0D:2D:5D:4F:4E:DE:6E:21:92:63:21:82:23:88:59:BD Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 11EBAFF9600865FD1F3225EA4E6320284AB4B750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04F7 Signing time: Tue 23 Dec 2025 04:52:03 +0000 Manifest this update: Tue 23 Dec 2025 04:47:03 +0000 Manifest next update: Fri 26 Dec 2025 07:21:03 +0000 Files and hashes: 1: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 2: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: 2m6qkiP2X8eKpZBWT2vEw0br5ILiWemvhry9i1XZtco=) 3: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 4: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 5: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:eb:af:f9:60:08:65:fd:1f:32:25:ea:4e:63:20:28:4a:b4:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Dec 23 04:47:03 2025 GMT Not After : Dec 26 07:21:03 2025 GMT Subject: CN=BB401CCA0D2D5D4F4EDE6E2192632182238859BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:74:b7:e9:f4:aa:74:d7:c1:93:5d:5c:b7: 6f:94:d8:09:67:60:f7:87:42:32:d3:ab:89:89:cc: fb:69:28:8e:4b:c0:65:55:9c:cf:fd:59:68:ec:3a: 7f:34:73:6b:7d:3b:30:46:01:91:23:ad:8f:ce:31: 7a:4d:50:3c:84:4c:a9:02:10:5c:5a:c7:22:a2:9b: e6:21:d4:a0:21:47:79:70:2b:a6:97:81:73:c8:d3: b8:b7:4b:45:72:27:5a:e2:70:ee:ec:49:bd:8c:bd: 81:ff:e0:e0:6a:13:1c:48:e6:8a:af:57:04:e4:15: 7f:17:6f:4f:c3:0d:36:e1:65:cf:af:bd:cf:a7:39: ec:05:f1:83:39:68:c9:28:36:7f:52:24:49:63:32: 37:1b:c7:f8:b3:b1:a0:80:bb:4a:03:28:1f:4e:9f: cb:e0:bf:d5:a6:fb:66:e0:88:a7:09:40:b8:37:09: b4:ba:99:a3:67:9a:6a:e6:20:f3:6d:1b:41:03:0c: c1:75:fa:6a:36:40:1b:b8:1c:ca:2a:77:b7:b7:2c: 8d:95:80:a7:37:e2:6c:85:6c:ab:d4:9a:91:b2:be: 19:d3:79:7a:43:db:20:97:5c:66:8c:c7:4c:5e:9c: 97:97:b5:c1:22:cb:8c:8c:41:22:7b:c6:8b:ea:4c: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:1C:CA:0D:2D:5D:4F:4E:DE:6E:21:92:63:21:82:23:88:59:BD X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:62:aa:88:a4:08:b3:9d:eb:f4:95:f9:e2:0c:03:74:36:c5: 7d:ae:1e:5f:8e:97:7e:98:04:81:32:97:44:11:05:6f:3a:c8: 7e:c7:83:a2:c5:d5:4b:5b:31:dc:f2:bc:19:6a:5c:bb:9d:79: 3c:bb:ea:28:d4:ad:34:4b:7a:c0:a8:11:19:55:3e:57:cc:7e: c2:8e:a9:05:c7:18:a0:07:3d:49:c9:6e:72:ca:67:6e:b2:24: 42:51:1d:9a:41:14:72:bd:d5:a1:d8:8c:13:52:73:fe:49:3e: b6:f6:7e:36:50:50:41:35:1d:b1:d7:00:58:f9:66:27:62:be: 2d:bc:07:f7:31:8d:eb:fe:9c:14:8b:9e:94:47:57:0a:6e:90: 48:cf:7a:80:97:e5:7c:db:66:15:00:4d:6f:d2:7f:75:b5:c0: 8a:9a:3e:dd:26:c9:5f:47:ed:d8:23:71:54:d6:76:2a:8e:3f: bc:56:ba:94:a8:c5:e7:90:a9:e2:cb:72:88:b1:97:77:fe:f1: da:db:55:5b:3f:da:22:5e:d3:29:54:80:39:72:2c:95:84:03: 88:ee:85:45:9d:90:ed:41:bc:ee:ea:6b:ee:31:80:74:3f:a2: cf:c1:2d:93:e1:71:b0:53:ac:82:0d:34:27:f2:e5:10:d1:7c: 4f:91:05:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeuv+WAIZf0fMiXqTmMgKEq0t1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEyMjMwNDQ3MDNaFw0yNTEyMjYwNzIxMDNaMDMxMTAvBgNV BAMTKEJCNDAxQ0NBMEQyRDVENEY0RURFNkUyMTkyNjMyMTgyMjM4ODU5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdD3S36fSqdNfBk11ct2+U2Aln YPeHQjLTq4mJzPtpKI5LwGVVnM/9WWjsOn80c2t9OzBGAZEjrY/OMXpNUDyETKkC EFxaxyKim+Yh1KAhR3lwK6aXgXPI07i3S0VyJ1ricO7sSb2MvYH/4OBqExxI5oqv VwTkFX8Xb0/DDTbhZc+vvc+nOewF8YM5aMkoNn9SJEljMjcbx/izsaCAu0oDKB9O n8vgv9Wm+2bgiKcJQLg3CbS6maNnmmrmIPNtG0EDDMF1+mo2QBu4HMoqd7e3LI2V gKc34myFbKvUmpGyvhnTeXpD2yCXXGaMx0xenJeXtcEiy4yMQSJ7xovqTH3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu0Acyg0tXU9O3m4hkmMhgiOIWb0wHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9iqoikCLOd6/SV+eIMA3Q2xX2uHl+Ol36Y BIEyl0QRBW86yH7Hg6LF1UtbMdzyvBlqXLudeTy76ijUrTRLesCoERlVPlfMfsKO qQXHGKAHPUnJbnLKZ26yJEJRHZpBFHK91aHYjBNSc/5JPrb2fjZQUEE1HbHXAFj5 Zidivi28B/cxjev+nBSLnpRHVwpukEjPeoCX5XzbZhUATW/Sf3W1wIqaPt0myV9H 7dgjcVTWdiqOP7xWupSoxeeQqeLLcoixl3f+8drbVVs/2iJe0ylUgDlyLJWEA4ju hUWdkO1BvO7qa+4xgHQ/os/BLZPhcbBTrIINNCfy5RDRfE+RBa4= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:40 2025 by rpki-client