This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: sGFXP1lpxErTh/arsqT4ihh5C9XUbJk4nBcBtdLC7UY= Subject key identifier: 6F:0A:24:2C:FF:D6:E0:AD:48:B3:67:F8:5C:0A:E0:E8:BA:77:65:65 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 51C2C6B2A28A582E036A745F003632BDFAFD6C2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0535 Signing time: Thu 18 Dec 2025 04:22:04 +0000 Manifest this update: Thu 18 Dec 2025 04:17:04 +0000 Manifest next update: Sun 21 Dec 2025 05:16:04 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: zBJXQbFt+PUz2eTljSwrlyXLJu2iQIf4Zu6MxnN5FaI=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c2:c6:b2:a2:8a:58:2e:03:6a:74:5f:00:36:32:bd:fa:fd:6c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Dec 18 04:17:04 2025 GMT Not After : Dec 21 05:16:04 2025 GMT Subject: CN=6F0A242CFFD6E0AD48B367F85C0AE0E8BA776565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:60:0d:52:79:c2:53:db:4e:d9:6e:01:af: 7c:7e:c1:d8:37:65:5a:ba:f9:91:36:ad:5d:ed:80: 9e:f7:6b:6b:02:bc:8f:fb:76:06:9b:00:e9:4b:66: 82:53:aa:61:97:b0:8a:31:8a:e2:cc:af:2f:2b:ea: 4b:77:af:eb:e7:e5:0a:98:8e:c1:3c:cf:db:4d:cb: cf:cd:a1:d0:1b:2e:b3:21:84:b1:90:a8:26:6a:aa: 09:ae:c4:c8:22:52:6f:80:0e:da:89:77:2f:f6:39: 46:a9:22:bd:7d:0d:65:aa:f1:31:33:c9:d4:b2:e7: 3e:ce:61:9b:80:86:b2:22:f9:f7:45:06:b0:9b:58: f8:d7:0f:e4:7d:27:87:b2:d9:4f:7a:ae:bf:0a:ea: a9:e3:0d:e0:08:76:c3:5f:50:97:d7:f5:98:90:dc: ae:59:86:e8:5d:24:ba:90:df:72:ed:9d:f8:cd:df: 2a:2d:3c:66:b8:70:96:15:0f:ef:f2:ee:bb:ac:b8: 80:9c:d0:26:d0:4a:53:2e:46:d1:05:87:a7:eb:13: 63:f7:2d:99:5d:52:35:d1:80:58:87:d6:13:a1:f2: 4e:0f:f8:3e:12:8b:98:bf:49:23:36:b9:05:20:33: b4:dd:18:96:dd:07:79:99:a3:f5:0f:14:2c:73:11: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0A:24:2C:FF:D6:E0:AD:48:B3:67:F8:5C:0A:E0:E8:BA:77:65:65 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:74:36:37:7d:99:1b:ee:04:af:c9:4d:e9:7b:ba:08:b7: 8c:c1:f9:5c:46:50:4c:87:97:90:14:02:a0:e9:1f:73:da:4d: f3:af:2f:ff:a9:63:c5:d1:86:30:1b:eb:86:37:2f:8f:c0:a2: aa:f2:db:22:c2:cf:13:5d:f5:89:78:f3:9f:d4:ce:9b:e0:31: f2:e5:87:41:32:fa:1f:a1:d5:18:ad:b6:04:a2:61:ef:01:3c: 17:6a:d7:6f:9b:fe:43:fc:66:6d:99:4a:e0:42:dd:b3:7b:fa: 4e:ca:27:1a:6f:a3:a5:02:4d:6c:70:34:35:97:27:ad:78:f4: 5d:f0:aa:1b:a6:2d:4f:94:0b:1d:42:37:eb:53:14:fc:36:c2: da:19:34:e1:8b:88:a2:94:e0:a5:4e:6e:51:89:16:e6:f7:1e: 54:28:e7:d6:50:99:38:ec:ee:26:3f:fc:93:0c:1b:3c:04:92: a3:15:1f:b4:06:38:14:ff:a0:14:da:f0:5f:e2:5c:cb:d7:89: 09:f0:57:99:6f:a2:df:1f:4b:1d:16:e2:e9:79:ae:ac:ef:97: 0a:10:e2:61:84:bd:19:10:54:23:25:12:c4:a6:f4:62:84:ab: 98:eb:18:9f:3d:a2:83:fb:25:50:b1:61:45:58:08:b6:ca:45: 3f:b5:75:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcLGsqKKWC4DanRfADYyvfr9bC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTEyMTgwNDE3MDRaFw0yNTEyMjEwNTE2MDRaMDMxMTAvBgNV BAMTKDZGMEEyNDJDRkZENkUwQUQ0OEIzNjdGODVDMEFFMEU4QkE3NzY1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1mANUnnCU9tO2W4Br3x+wdg3 ZVq6+ZE2rV3tgJ73a2sCvI/7dgabAOlLZoJTqmGXsIoxiuLMry8r6kt3r+vn5QqY jsE8z9tNy8/NodAbLrMhhLGQqCZqqgmuxMgiUm+ADtqJdy/2OUapIr19DWWq8TEz ydSy5z7OYZuAhrIi+fdFBrCbWPjXD+R9J4ey2U96rr8K6qnjDeAIdsNfUJfX9ZiQ 3K5ZhuhdJLqQ33LtnfjN3yotPGa4cJYVD+/y7rusuICc0CbQSlMuRtEFh6frE2P3 LZldUjXRgFiH1hOh8k4P+D4Si5i/SSM2uQUgM7TdGJbdB3mZo/UPFCxzEaHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwokLP/W4K1Is2f4XArg6Lp3ZWUwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmudDY3fZkb7gSvyU3pe7oIt4zB+VxGUEyH l5AUAqDpH3PaTfOvL/+pY8XRhjAb64Y3L4/Aoqry2yLCzxNd9Yl485/UzpvgMfLl h0Ey+h+h1RittgSiYe8BPBdq12+b/kP8Zm2ZSuBC3bN7+k7KJxpvo6UCTWxwNDWX J6149F3wqhumLU+UCx1CN+tTFPw2wtoZNOGLiKKU4KVOblGJFub3HlQo59ZQmTjs 7iY//JMMGzwEkqMVH7QGOBT/oBTa8F/iXMvXiQnwV5lvot8fSx0W4ul5rqzvlwoQ 4mGEvRkQVCMlEsSm9GKEq5jrGJ89ooP7JVCxYUVYCLbKRT+1daI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:53 2025 by rpki-client