This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft (raw, json) Hash identifier: gpouWDBkC1+Wb+1RdEMfp8W/LGwrwwtlQnbDWIZlfHw= Subject key identifier: D1:C1:76:A5:99:A8:65:9D:B8:4A:FB:3A:B0:A9:A0:9D:5D:08:E4:4B Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Certificate serial: 73485769670D95D4E553CB68FDB9556F6A369F26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft Manifest number: 92 Signing time: Sat 20 Dec 2025 03:22:13 +0000 Manifest this update: Sat 20 Dec 2025 03:17:13 +0000 Manifest next update: Tue 23 Dec 2025 14:01:13 +0000 Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: T1bNMqpFqTtICxGhMHAhYrL0Kp4CT+jehuuEyOzBKtM=) 2: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl (hash: FgpUufCYXBdPe4mHmGX+wuD7EFb5dFWNFaBkH+0zZDo=) 3: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: 2lqHIcW8uza9u4jtUcnwE3CjODtgM8N4fzaUyg/1vks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:48:57:69:67:0d:95:d4:e5:53:cb:68:fd:b9:55:6f:6a:36:9f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Validity Not Before: Dec 20 03:17:13 2025 GMT Not After : Dec 23 14:01:13 2025 GMT Subject: CN=D1C176A599A8659DB84AFB3AB0A9A09D5D08E44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:09:60:20:46:9c:8b:68:d7:7d:17:7f:c9: 81:54:f7:10:d7:5c:84:1f:d6:70:f2:69:2f:1f:06: 41:66:7e:b0:df:78:63:62:49:b3:0c:ee:99:b5:cc: 6c:3f:37:03:b2:0e:6c:2b:3e:3c:ba:e9:ac:16:4e: a6:a8:0f:12:74:a3:6f:8d:10:cd:91:1a:c4:3c:24: a7:5c:a2:6e:53:68:3f:ae:2d:15:2c:7e:e6:6f:b4: c9:37:8b:8f:ff:1f:09:e5:b4:33:dc:71:3c:bf:a2: d1:2a:67:41:2d:b1:71:25:3e:4c:74:8c:43:cd:fa: 93:44:8d:9a:c2:6f:17:bf:0d:76:7d:3e:01:46:4a: 64:73:2e:b9:fb:c6:22:e3:ba:c5:f7:f0:ca:3b:f2: 68:a0:f3:b3:f8:d6:15:e9:52:fb:3f:a8:06:e2:ae: 1d:a1:38:97:85:21:61:ec:d1:38:07:fd:76:72:2a: 11:fd:bb:44:f9:4f:dc:65:72:a8:58:a3:ee:7c:cc: 8c:74:ad:fe:df:97:42:7a:7f:1a:92:72:2f:cb:4c: 24:ca:b2:17:9b:1f:cf:0b:6c:cd:f3:fc:ab:e0:1b: 60:85:e8:bd:cc:0a:44:e2:cd:1b:dc:3b:a2:1e:51: 6d:2b:f9:12:d1:ad:95:a3:e1:a2:78:4b:fe:56:21: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:76:A5:99:A8:65:9D:B8:4A:FB:3A:B0:A9:A0:9D:5D:08:E4:4B X509v3 Authority Key Identifier: keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:c4:2a:0f:20:2f:f6:96:0f:a0:a9:9c:e9:64:7d:8f:fb: cc:63:3f:f1:55:29:fe:21:ff:7f:d5:14:28:e9:b9:9e:ca:e2: 32:63:ae:de:c7:f9:19:56:7a:4b:af:16:db:23:99:33:a5:a5: 0b:6c:9b:fe:af:8b:77:b8:3c:4a:85:34:7d:6d:9c:9f:80:94: 62:55:b4:90:cd:ba:d4:9b:67:b0:91:b0:31:d1:7f:3a:d9:04: c7:9c:43:46:90:43:b2:14:34:86:52:4f:46:e4:cd:7f:43:bd: c3:ae:e0:dc:a0:23:c0:17:44:a8:41:01:ff:fb:43:6b:d3:d4: c1:09:b4:4f:cc:ca:0a:7a:51:42:5e:e7:88:d1:dc:f0:6d:9f: 11:03:84:7d:f8:e2:da:af:e1:43:b4:b7:ba:8f:df:d7:75:a1: 7c:12:05:11:45:c8:36:72:c9:36:e9:e5:4c:3c:9b:9d:49:1e: aa:7a:8f:38:8a:20:40:48:4c:11:f6:f5:cd:1b:e9:07:d4:6b: 79:45:68:69:b6:67:f1:4c:b5:9a:f6:e4:4b:f9:21:45:57:1c: bc:2a:ae:0a:52:67:c5:8d:8b:94:4b:e2:62:bf:54:5e:13:01: 8a:18:34:ad:42:68:5e:87:c1:19:55:2c:64:05:5d:df:bb:8e: f0:36:0d:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0hXaWcNldTlU8to/blVb2o2nyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkz NzJENTVBNTAeFw0yNTEyMjAwMzE3MTNaFw0yNTEyMjMxNDAxMTNaMDMxMTAvBgNV BAMTKEQxQzE3NkE1OTlBODY1OURCODRBRkIzQUIwQTlBMDlENUQwOEU0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbAlgIEaci2jXfRd/yYFU9xDX XIQf1nDyaS8fBkFmfrDfeGNiSbMM7pm1zGw/NwOyDmwrPjy66awWTqaoDxJ0o2+N EM2RGsQ8JKdcom5TaD+uLRUsfuZvtMk3i4//HwnltDPccTy/otEqZ0EtsXElPkx0 jEPN+pNEjZrCbxe/DXZ9PgFGSmRzLrn7xiLjusX38Mo78mig87P41hXpUvs/qAbi rh2hOJeFIWHs0TgH/XZyKhH9u0T5T9xlcqhYo+58zIx0rf7fl0J6fxqSci/LTCTK shebH88LbM3z/KvgG2CF6L3MCkTizRvcO6IeUW0r+RLRrZWj4aJ4S/5WIbytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cF2pZmoZZ24Svs6sKmgnV0I5EswHwYDVR0j BBgwFoAUkxDEc+wSGd3JkRgn8rituTctVaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODE5Y2RkZi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMC85MzEwQzQ3M0VD MTIxOUREQzk5MTE4MjdGMkI4QURCOTM3MkQ1NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkzNzJE NTVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFE QjkzNzJENTVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg4xCoPIC/2lg+gqZzpZH2P+8xjP/FVKf4h /3/VFCjpuZ7K4jJjrt7H+RlWekuvFtsjmTOlpQtsm/6vi3e4PEqFNH1tnJ+AlGJV tJDNutSbZ7CRsDHRfzrZBMecQ0aQQ7IUNIZST0bkzX9DvcOu4NygI8AXRKhBAf/7 Q2vT1MEJtE/Mygp6UUJe54jR3PBtnxEDhH344tqv4UO0t7qP39d1oXwSBRFFyDZy yTbp5Uw8m51JHqp6jziKIEBITBH29c0b6QfUa3lFaGm2Z/FMtZr25Ev5IUVXHLwq rgpSZ8WNi5RL4mK/VF4TAYoYNK1CaF6HwRlVLGQFXd+7jvA2Da8= -----END CERTIFICATE-----Generated at Sun Dec 21 16:55:05 2025 by rpki-client