This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: CqHcWicVGgxSW7r1Vh83TAkL5sqUQD8iAKcn47Nnz9w= Subject key identifier: 0D:F3:FE:97:C8:9B:B5:38:95:C1:02:2B:22:89:7C:0A:E0:06:B0:F8 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 1A2458E856EBDA64B73D51234407E652B3953A21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: F5 Signing time: Tue 23 Dec 2025 17:50:41 +0000 Manifest this update: Tue 23 Dec 2025 17:45:41 +0000 Manifest next update: Fri 26 Dec 2025 20:45:41 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: KGHiVTTndUCGoUxwyBJEiNEwE2awPKmqbdWC9dcQbyk=) 4: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:24:58:e8:56:eb:da:64:b7:3d:51:23:44:07:e6:52:b3:95:3a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Dec 23 17:45:41 2025 GMT Not After : Dec 26 20:45:41 2025 GMT Subject: CN=0DF3FE97C89BB53895C1022B22897C0AE006B0F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:02:d4:64:78:a9:06:a3:c4:68:14:d1:2a: a7:04:3b:b6:c8:97:48:75:af:14:6d:b1:94:bc:ce: aa:af:6a:fd:77:6b:6c:e2:0a:64:d3:2d:48:ef:17: fd:b4:00:bb:fa:fb:aa:47:90:bf:0f:1d:4b:6c:3d: 34:b8:7f:af:a3:1f:61:71:89:8c:94:95:84:3d:29: e6:f0:a9:df:a4:4d:74:a6:c3:9a:a3:0a:f9:ec:5d: b0:eb:3d:7d:30:63:6b:6b:37:0b:9e:bc:b5:47:0d: bb:f5:dc:14:de:b8:e7:7f:cc:37:a3:ff:5a:74:d4: c1:bc:e4:30:a3:e3:dc:80:a7:72:1a:54:9d:64:40: 8a:6b:87:49:ed:20:c0:ba:b6:ce:48:13:2b:a4:50: d9:b9:25:2b:29:e5:0e:62:ac:0b:22:c2:c9:98:92: 2e:de:8f:f9:69:6f:21:c5:7f:68:8f:8f:dd:db:33: 1a:d4:64:a4:76:fb:bf:1b:59:64:10:45:32:97:f8: 29:09:cf:7b:fc:ef:10:32:87:48:be:fd:40:14:56: 22:6d:0f:72:e7:9a:ad:1e:f2:92:f8:2b:bf:fc:5e: 95:0b:26:23:d4:22:89:71:08:8e:34:c3:39:8f:86: 0f:26:92:7c:4c:43:d7:52:d8:8d:c8:46:38:6c:d4: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F3:FE:97:C8:9B:B5:38:95:C1:02:2B:22:89:7C:0A:E0:06:B0:F8 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:9d:a2:f0:97:4b:20:48:b9:45:3e:2c:74:cf:ca:59:02: 6e:48:49:77:df:cd:a7:cc:64:98:53:65:56:fa:f3:9e:5c:0f: 18:7f:78:e9:bb:3a:d6:3e:15:8d:3f:62:40:f6:c9:2a:01:94: 67:2c:5a:7e:13:99:9b:49:ab:f7:7e:bd:01:2c:51:c8:4b:d1: 84:91:f2:4e:69:8c:de:bb:ef:b9:4e:f2:fc:a1:3a:c3:d9:41: 63:3a:89:f0:e3:00:cf:4b:73:b9:ad:01:32:a7:61:17:09:65: a8:a1:07:89:df:03:10:6c:f5:59:c7:be:93:ed:b6:23:9a:0e: 8c:50:92:78:b6:4f:61:e5:f5:18:cd:1a:0e:37:24:9f:74:1e: 02:d0:55:18:ed:43:a1:d6:61:d4:2b:3c:38:6e:13:91:49:35: dc:74:f9:69:6e:64:97:f4:8e:a0:8d:1f:a7:c0:15:a8:c9:00: dc:b5:29:2c:3e:f7:05:e9:45:b0:00:15:77:77:c0:c9:52:d5: 3a:74:59:c8:31:38:b1:aa:bb:11:d7:e7:d4:99:87:51:0a:a0: 41:2b:93:df:52:c5:7c:f5:5d:db:b3:a5:7b:57:38:35:ea:be: c9:79:6a:75:80:c8:f6:c1:15:37:6f:73:a6:b8:64:b9:24:d0: 75:4c:41:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiRY6Fbr2mS3PVEjRAfmUrOVOiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTEyMjMxNzQ1NDFaFw0yNTEyMjYyMDQ1NDFaMDMxMTAvBgNV BAMTKDBERjNGRTk3Qzg5QkI1Mzg5NUMxMDIyQjIyODk3QzBBRTAwNkIwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+wLUZHipBqPEaBTRKqcEO7bI l0h1rxRtsZS8zqqvav13a2ziCmTTLUjvF/20ALv6+6pHkL8PHUtsPTS4f6+jH2Fx iYyUlYQ9Kebwqd+kTXSmw5qjCvnsXbDrPX0wY2trNwuevLVHDbv13BTeuOd/zDej /1p01MG85DCj49yAp3IaVJ1kQIprh0ntIMC6ts5IEyukUNm5JSsp5Q5irAsiwsmY ki7ej/lpbyHFf2iPj93bMxrUZKR2+78bWWQQRTKX+CkJz3v87xAyh0i+/UAUViJt D3Lnmq0e8pL4K7/8XpULJiPUIolxCI40wzmPhg8mknxMQ9dS2I3IRjhs1G/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfP+l8ibtTiVwQIrIol8CuAGsPgwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISwnaLwl0sgSLlFPix0z8pZAm5ISXffzafM ZJhTZVb6855cDxh/eOm7OtY+FY0/YkD2ySoBlGcsWn4TmZtJq/d+vQEsUchL0YSR 8k5pjN6777lO8vyhOsPZQWM6ifDjAM9Lc7mtATKnYRcJZaihB4nfAxBs9VnHvpPt tiOaDoxQkni2T2Hl9RjNGg43JJ90HgLQVRjtQ6HWYdQrPDhuE5FJNdx0+WluZJf0 jqCNH6fAFajJANy1KSw+9wXpRbAAFXd3wMlS1Tp0WcgxOLGquxHX59SZh1EKoEEr k99SxXz1XduzpXtXODXqvsl5anWAyPbBFTdvc6a4ZLkk0HVMQWk= -----END CERTIFICATE-----Generated at Wed Dec 24 15:05:36 2025 by rpki-client