This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: brH9hKWSDfC9Q2XLk4aqQbYDb8Ci4S/RjAqZV3l1J60= Subject key identifier: 37:9A:2D:46:12:D7:D4:70:B5:92:35:AF:B7:9D:09:B0:ED:BA:CA:F1 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 4A733C8933D4483E8DA6AE70515DD2F96E5FE194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 022D Signing time: Sat 20 Dec 2025 15:32:25 +0000 Manifest this update: Sat 20 Dec 2025 15:27:25 +0000 Manifest next update: Wed 24 Dec 2025 02:40:25 +0000 Files and hashes: 1: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 2: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 3: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 4: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 5: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 6: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 7: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 8: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 9: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 10: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 11: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 12: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 13: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 14: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 15: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 16: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 17: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: ICFV6AlsemAIqeaw7oN97EXa2USUrreAUIBOyQdRfcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 02:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:73:3c:89:33:d4:48:3e:8d:a6:ae:70:51:5d:d2:f9:6e:5f:e1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Dec 20 15:27:25 2025 GMT Not After : Dec 24 02:40:25 2025 GMT Subject: CN=379A2D4612D7D470B59235AFB79D09B0EDBACAF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:7f:90:05:65:49:4d:80:46:e9:47:c8:a9: bf:70:34:d0:4d:fe:10:cb:ad:e5:e0:71:06:72:93: 1c:26:10:cc:74:4a:5d:76:8b:c2:62:ab:b8:31:13: a7:f3:04:54:86:f0:f8:d7:1b:e9:ef:53:6d:c2:b8: 26:a2:08:bd:26:ac:69:bf:31:a9:8e:fb:03:a6:e1: 2a:c6:2e:eb:fb:22:0b:0a:d7:9a:9b:21:db:7c:58: 46:c8:a5:d7:c9:8d:57:d6:36:40:bf:2f:8d:f4:ab: 26:bc:1b:3d:77:8e:19:7e:8a:a3:06:53:12:4a:4a: ec:76:ba:58:61:ea:06:35:18:81:db:d9:ef:89:a3: 2b:e1:67:1d:0a:fe:1f:a8:08:1a:03:88:c2:a7:db: da:fb:78:16:22:2a:bf:35:e9:bb:2b:1c:68:26:1c: 75:28:67:d4:bb:3c:c8:61:ae:b6:d8:ef:7a:d4:80: 72:4a:d6:6c:a8:cb:fe:ed:37:58:e4:7a:5e:3f:a4: 68:b3:ed:ad:54:26:67:52:55:4f:af:8d:f1:93:aa: 6b:c8:ae:2b:a1:e1:df:37:bd:c1:f4:40:ea:ff:ea: 18:19:a9:29:87:92:43:49:d6:aa:79:6c:48:90:92: c3:91:e1:45:ac:85:da:36:1a:dd:40:9d:02:26:52: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9A:2D:46:12:D7:D4:70:B5:92:35:AF:B7:9D:09:B0:ED:BA:CA:F1 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:13:c5:67:9b:bc:d5:7a:3a:9f:bd:d9:c5:75:90:e1:6e:65: 39:df:df:59:23:d8:f6:f1:b2:cd:53:3b:78:c0:6f:ad:9f:6c: 31:cb:09:82:40:24:54:9b:16:df:d8:5f:1e:59:df:92:94:81: 47:48:d8:b1:8a:cf:34:8e:29:3e:c0:3e:66:ff:c4:58:5d:0e: fd:7c:b5:22:9b:88:d6:ac:1c:80:86:43:b7:04:b8:66:08:fa: cc:0c:ea:09:a9:9f:f8:87:74:3f:b2:fe:d5:8c:18:f7:60:c7: cb:a1:a0:35:2f:44:aa:ae:ef:08:23:ca:30:4c:54:34:0a:a7: 59:5d:7d:bf:6a:26:f2:b4:b2:53:e5:54:22:de:01:c0:04:8e: f9:b1:da:30:be:18:cb:5d:e5:47:85:d7:9b:50:a3:0c:7b:73: f2:3f:2b:e7:77:2c:4c:85:97:f5:7e:fc:d6:3d:13:0f:38:e7: a0:f9:15:18:ba:d1:c5:f0:55:47:d0:a8:e5:09:bc:b1:96:a7: 28:5d:aa:16:1d:54:47:08:95:13:20:30:90:07:52:34:07:8b: b0:ce:ed:fa:84:0d:06:95:8b:92:f7:f3:be:03:ad:59:81:75: b4:e7:5c:06:dc:9d:43:fe:53:f5:e7:38:61:b7:c8:85:61:98: 67:9a:2e:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnM8iTPUSD6Npq5wUV3S+W5f4ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTEyMjAxNTI3MjVaFw0yNTEyMjQwMjQwMjVaMDMxMTAvBgNV BAMTKDM3OUEyRDQ2MTJEN0Q0NzBCNTkyMzVBRkI3OUQwOUIwRURCQUNBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIq3+QBWVJTYBG6UfIqb9wNNBN /hDLreXgcQZykxwmEMx0Sl12i8Jiq7gxE6fzBFSG8PjXG+nvU23CuCaiCL0mrGm/ MamO+wOm4SrGLuv7IgsK15qbIdt8WEbIpdfJjVfWNkC/L430qya8Gz13jhl+iqMG UxJKSux2ulhh6gY1GIHb2e+JoyvhZx0K/h+oCBoDiMKn29r7eBYiKr816bsrHGgm HHUoZ9S7PMhhrrbY73rUgHJK1myoy/7tN1jkel4/pGiz7a1UJmdSVU+vjfGTqmvI riuh4d83vcH0QOr/6hgZqSmHkkNJ1qp5bEiQksOR4UWshdo2Gt1AnQImUppXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5otRhLX1HC1kjWvt50JsO26yvEwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUTxWebvNV6Op+92cV1kOFuZTnf31kj2Pbx ss1TO3jAb62fbDHLCYJAJFSbFt/YXx5Z35KUgUdI2LGKzzSOKT7APmb/xFhdDv18 tSKbiNasHICGQ7cEuGYI+swM6gmpn/iHdD+y/tWMGPdgx8uhoDUvRKqu7wgjyjBM VDQKp1ldfb9qJvK0slPlVCLeAcAEjvmx2jC+GMtd5UeF15tQowx7c/I/K+d3LEyF l/V+/NY9Ew8456D5FRi60cXwVUfQqOUJvLGWpyhdqhYdVEcIlRMgMJAHUjQHi7DO 7fqEDQaVi5L3874DrVmBdbTnXAbcnUP+U/XnOGG3yIVhmGeaLuU= -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:40 2025 by rpki-client