This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: KUUkU4mAjFmkd2hWQT/l5h4Lme6D3CYZbygH0D7q6dw= Subject key identifier: B7:B3:07:97:46:FD:9C:B1:1B:6C:3A:91:40:58:FF:F3:48:21:CC:E2 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 68E0AF542933150A4C021AE465B75BF3E531E238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04F9 Signing time: Sat 27 Dec 2025 14:41:59 +0000 Manifest this update: Sat 27 Dec 2025 14:36:59 +0000 Manifest next update: Tue 30 Dec 2025 19:00:59 +0000 Files and hashes: 1: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: s1L2Ru/BYBnOB9PhA5Q19ITI6HW1QtpVKvcQh3bm5Ec=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 3: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) 4: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 5: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e0:af:54:29:33:15:0a:4c:02:1a:e4:65:b7:5b:f3:e5:31:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Dec 27 14:36:59 2025 GMT Not After : Dec 30 19:00:59 2025 GMT Subject: CN=B7B3079746FD9CB11B6C3A914058FFF34821CCE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:53:dc:90:ef:81:71:83:79:45:dc:be:06: e6:56:2f:20:5a:1d:52:2a:81:e4:89:9c:a5:f7:66: cc:b9:0c:2c:d1:dc:d6:94:58:5a:97:79:e2:36:c3: 5e:50:b0:44:52:7b:b4:d8:f2:4c:58:69:34:9a:91: 4f:7a:38:86:d2:0d:77:f6:79:84:bb:30:e7:88:14: 1d:db:61:d6:a3:65:52:71:70:b3:38:61:9f:1c:8c: 88:f2:4c:06:af:9e:45:6b:97:8a:96:2a:61:54:3a: 4c:76:c4:fa:8b:7f:99:32:29:e0:ef:41:d1:41:60: ba:2d:a0:ad:7f:c7:c8:a2:c0:69:89:7f:3c:99:7e: 13:bd:64:4c:e5:71:7a:4e:37:ab:66:ea:1b:cb:c6: 60:d1:42:1c:1b:ca:c6:15:c6:61:28:ba:a0:b2:16: aa:77:dd:cb:c4:a2:5d:ab:69:ce:12:48:1c:9f:cf: 0a:6d:f1:50:1d:23:9e:0e:a6:9c:94:91:dc:1c:4e: 19:dd:06:ef:8c:c5:ff:1f:e9:52:f4:ad:0d:e6:4e: 4f:f0:40:22:23:7e:12:18:dc:eb:0a:44:6f:8a:97: ec:65:3b:9e:b7:77:6c:47:1a:32:4c:6d:9e:c8:52: f4:e6:e3:bc:fb:d6:95:bb:1a:da:da:7d:2f:47:42: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:07:97:46:FD:9C:B1:1B:6C:3A:91:40:58:FF:F3:48:21:CC:E2 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:c6:24:c0:cb:22:f5:7e:7f:98:15:07:98:72:1f:b6:95: 88:5f:6a:ea:8d:eb:b2:4e:0a:a9:b4:f1:a9:14:ad:47:bf:80: 89:2e:96:de:40:43:b4:ed:87:5d:bb:a6:d7:54:95:8b:29:84: 1b:57:76:63:98:d0:ee:6d:b0:7d:48:31:46:62:41:a8:cd:bd: d6:9e:de:49:15:7b:3f:3d:d2:d6:79:29:6d:a0:0d:b1:9f:01: cf:e6:45:cb:36:88:19:61:fe:68:29:a6:db:b5:56:36:83:94: d2:0c:c2:94:50:1c:0a:aa:66:9c:23:a4:7c:11:fb:02:3e:20: dd:2b:46:82:43:b8:77:ef:f5:23:6c:61:62:9c:ec:f3:b3:5a: 5a:7d:bd:7c:ec:c8:72:1b:74:e3:f9:69:a3:2b:5c:64:53:1d: ea:dc:28:3a:a9:58:50:64:35:bd:fc:97:36:b9:41:ed:29:a0: 1b:b6:26:b7:5e:2c:53:3f:cf:08:6a:43:03:68:43:c3:f4:ae: cd:15:0b:a7:5a:83:cf:07:80:af:41:8c:4a:43:7f:c3:55:e0: fa:2f:96:a3:23:3a:d2:d0:0d:90:79:f3:a1:cd:3b:61:3b:51: 84:a1:96:f6:2e:58:22:1e:12:88:f4:54:20:13:cc:eb:94:10: b0:0c:ce:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOCvVCkzFQpMAhrkZbdb8+Ux4jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTEyMjcxNDM2NTlaFw0yNTEyMzAxOTAwNTlaMDMxMTAvBgNV BAMTKEI3QjMwNzk3NDZGRDlDQjExQjZDM0E5MTQwNThGRkYzNDgyMUNDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtlPckO+BcYN5Rdy+BuZWLyBa HVIqgeSJnKX3Zsy5DCzR3NaUWFqXeeI2w15QsERSe7TY8kxYaTSakU96OIbSDXf2 eYS7MOeIFB3bYdajZVJxcLM4YZ8cjIjyTAavnkVrl4qWKmFUOkx2xPqLf5kyKeDv QdFBYLotoK1/x8iiwGmJfzyZfhO9ZEzlcXpON6tm6hvLxmDRQhwbysYVxmEouqCy Fqp33cvEol2rac4SSByfzwpt8VAdI54OppyUkdwcThndBu+Mxf8f6VL0rQ3mTk/w QCIjfhIY3OsKRG+Kl+xlO563d2xHGjJMbZ7IUvTm47z71pW7GtrafS9HQtTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt7MHl0b9nLEbbDqRQFj/80ghzOIwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3gxiTAyyL1fn+YFQeYch+2lYhfauqN67JO Cqm08akUrUe/gIkult5AQ7Tth127ptdUlYsphBtXdmOY0O5tsH1IMUZiQajNvdae 3kkVez890tZ5KW2gDbGfAc/mRcs2iBlh/mgpptu1VjaDlNIMwpRQHAqqZpwjpHwR +wI+IN0rRoJDuHfv9SNsYWKc7POzWlp9vXzsyHIbdOP5aaMrXGRTHercKDqpWFBk Nb38lza5Qe0poBu2JrdeLFM/zwhqQwNoQ8P0rs0VC6dag88HgK9BjEpDf8NV4Pov lqMjOtLQDZB586HNO2E7UYShlvYuWCIeEoj0VCATzOuUELAMzlk= -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:38 2025 by rpki-client