This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: EgaSRwJ/W22T1gDsOOAP2YquPhydaEorNkmEJoW+e7o= Subject key identifier: 9C:69:E3:14:24:EC:48:3D:95:C5:A0:75:38:E9:3C:EE:E9:50:07:8D Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 73A806473BF0B4BE15EE45BD45CC83ACB6645F9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 022E Signing time: Tue 23 Dec 2025 02:42:01 +0000 Manifest this update: Tue 23 Dec 2025 02:37:01 +0000 Manifest next update: Fri 26 Dec 2025 08:39:01 +0000 Files and hashes: 1: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 2: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 3: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 4: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 5: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 7: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 8: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 9: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 10: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 11: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 12: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 13: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 14: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: uktG+Q2kIqCSQ40CeYgTAk4lELBGdB1pCyUsCHlJZwo=) 15: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 16: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 17: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a8:06:47:3b:f0:b4:be:15:ee:45:bd:45:cc:83:ac:b6:64:5f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Dec 23 02:37:01 2025 GMT Not After : Dec 26 08:39:01 2025 GMT Subject: CN=9C69E31424EC483D95C5A07538E93CEEE950078D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:8d:c7:2d:69:8c:80:ca:c1:b2:e9:38:4c: ed:94:eb:fc:94:75:12:fb:26:3d:a0:d5:39:94:c1: 50:21:d6:1c:5d:b9:94:fe:56:b2:fc:f9:2c:d1:87: f2:06:7f:d0:bc:62:e0:c4:42:12:39:ea:10:24:c3: 6e:1c:86:94:24:95:0b:a8:41:52:eb:e1:fe:2f:41: 4a:83:cf:05:56:18:4a:a7:df:92:ab:7d:f1:ab:da: 41:11:8d:7a:25:bb:97:aa:24:85:6a:d5:d7:7a:4f: 77:7e:cf:86:4f:80:10:bf:42:82:b4:0e:26:c6:9a: f5:f4:2f:6c:cb:35:f1:dc:fc:d9:e6:20:d9:9c:08: 5b:c5:54:f9:61:48:2b:93:a1:92:09:15:d8:98:93: 28:40:11:b6:00:c1:46:9d:6d:54:05:83:5e:77:e1: ad:fb:8c:84:c9:e8:24:78:73:56:45:8b:95:7a:ea: a3:5a:9f:ab:be:d0:c6:74:49:e2:94:20:dd:de:9f: a4:e7:d1:47:4a:6a:37:2b:c4:f0:fb:29:8f:ce:a7: 8a:35:30:31:9e:c6:45:a9:23:7f:03:97:33:3d:b9: 1c:f0:0a:a6:93:08:d0:c8:35:9f:5d:d6:04:47:f8: 3a:98:2a:05:c0:32:8c:59:3c:ac:81:a5:f6:2d:03: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:E3:14:24:EC:48:3D:95:C5:A0:75:38:E9:3C:EE:E9:50:07:8D X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:25:55:8d:bc:c9:56:c5:5d:85:7c:c4:a3:b7:44:16:9e:36: bd:0c:ef:f4:0a:0b:44:89:58:ed:53:99:80:43:68:63:e2:44: 0d:5b:f2:35:82:3e:de:d4:c3:ca:7c:97:a9:8b:62:b4:b0:de: f1:53:24:af:62:42:b1:82:8e:3a:6f:92:71:69:72:5c:b6:17: 9a:64:3a:0d:84:72:5b:8d:a8:8f:61:d0:9a:f3:ca:4c:0b:5d: f0:e4:5b:b0:b2:2a:5b:6f:f9:99:80:83:9f:59:e4:2e:44:77: 6c:3c:d0:15:dc:a4:cd:47:89:ac:64:43:ef:f4:ad:0d:d1:7a: fb:a2:29:64:f2:bb:50:be:41:8b:c8:b5:fe:bf:31:b1:db:2b: 6b:85:58:b4:04:dc:ee:9a:e3:25:3d:8b:88:27:3d:d7:a1:1b: 22:cf:41:1d:59:73:d8:5b:97:c8:14:ed:6f:94:10:ff:e5:a3: b5:37:61:19:61:59:4d:f1:f7:dc:19:b7:4d:4c:4b:03:b4:1b: 7f:3e:10:78:2a:7e:c0:f3:dd:58:db:75:99:51:e8:59:3a:36: d0:45:67:08:71:3f:64:17:be:48:74:b4:e6:d0:8e:0c:46:91: c9:df:dd:a3:d0:9f:b9:1e:43:bb:1e:4c:7a:e1:61:ec:6b:aa: 6f:64:d3:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6gGRzvwtL4V7kW9RcyDrLZkX50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTEyMjMwMjM3MDFaFw0yNTEyMjYwODM5MDFaMDMxMTAvBgNV BAMTKDlDNjlFMzE0MjRFQzQ4M0Q5NUM1QTA3NTM4RTkzQ0VFRTk1MDA3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkI3HLWmMgMrBsuk4TO2U6/yU dRL7Jj2g1TmUwVAh1hxduZT+VrL8+SzRh/IGf9C8YuDEQhI56hAkw24chpQklQuo QVLr4f4vQUqDzwVWGEqn35KrffGr2kERjXolu5eqJIVq1dd6T3d+z4ZPgBC/QoK0 DibGmvX0L2zLNfHc/NnmINmcCFvFVPlhSCuToZIJFdiYkyhAEbYAwUadbVQFg153 4a37jITJ6CR4c1ZFi5V66qNan6u+0MZ0SeKUIN3en6Tn0UdKajcrxPD7KY/Op4o1 MDGexkWpI38DlzM9uRzwCqaTCNDINZ9d1gRH+DqYKgXAMoxZPKyBpfYtAw+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGnjFCTsSD2VxaB1OOk87ulQB40wHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHolVY28yVbFXYV8xKO3RBaeNr0M7/QKC0SJ WO1TmYBDaGPiRA1b8jWCPt7Uw8p8l6mLYrSw3vFTJK9iQrGCjjpvknFpcly2F5pk Og2EcluNqI9h0JrzykwLXfDkW7CyKltv+ZmAg59Z5C5Ed2w80BXcpM1HiaxkQ+/0 rQ3RevuiKWTyu1C+QYvItf6/MbHbK2uFWLQE3O6a4yU9i4gnPdehGyLPQR1Zc9hb l8gU7W+UEP/lo7U3YRlhWU3x99wZt01MSwO0G38+EHgqfsDz3VjbdZlR6Fk6NtBF ZwhxP2QXvkh0tObQjgxGkcnf3aPQn7keQ7seTHrhYexrqm9k01E= -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:44 2025 by rpki-client