This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: KC/fuem3cSSqi8uWLXtVu/QoAwvWpS31KcPSt+hCVP0= Subject key identifier: FF:1E:96:40:4F:2E:71:4F:E3:75:87:B7:A1:57:B7:03:8B:F3:4E:41 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 1822589064EA7B878088B77B831A30375DCBD19E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0531 Signing time: Wed 17 Dec 2025 18:22:17 +0000 Manifest this update: Wed 17 Dec 2025 18:17:17 +0000 Manifest next update: Sun 21 Dec 2025 00:37:17 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: XNbjz3bF9zQEFSZpf/7n/VQA/A/17vk022RUUN4vPGo=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 3: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:22:58:90:64:ea:7b:87:80:88:b7:7b:83:1a:30:37:5d:cb:d1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Dec 17 18:17:17 2025 GMT Not After : Dec 21 00:37:17 2025 GMT Subject: CN=FF1E96404F2E714FE37587B7A157B7038BF34E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:85:99:5b:56:b0:8c:df:ab:9e:28:18:e7: b3:68:19:b6:78:a5:41:35:98:1d:4c:fb:60:08:f6: 29:99:c1:ff:ec:6c:eb:15:a4:0c:a5:45:ec:9b:a9: bd:f0:03:19:b0:8f:6c:97:d6:59:0c:f6:d6:b7:c5: be:8d:28:4f:41:3b:d4:9d:a6:0a:20:16:f5:e5:1e: ee:88:9d:f2:37:ca:da:93:8d:a4:46:23:18:26:fc: ff:70:85:41:69:10:37:b7:a7:fa:5e:1f:05:a9:ea: fa:36:3a:2e:12:15:ee:91:56:a6:82:e8:93:0e:c9: 29:d7:5f:8d:20:64:94:26:92:22:6f:91:2d:b1:62: 49:66:f7:c1:d5:18:e2:a4:1f:d6:fa:93:8b:45:a3: 81:57:0c:53:bf:00:32:0a:5c:25:5d:a4:c6:db:4a: 25:c8:d3:8f:27:e2:58:04:76:a1:1e:0e:64:79:95: 48:12:4e:fe:c2:03:2b:eb:cc:f7:fa:6f:02:5e:0d: f7:e5:de:7b:26:b5:1f:cc:d5:a1:c6:67:8f:11:a3: d8:91:39:8d:27:28:6b:13:33:8f:ad:46:10:55:09: 84:9d:1a:a5:80:3a:3f:23:b5:d4:93:96:f1:c9:c5: e5:14:7a:6c:5f:a1:6f:b9:12:22:95:1e:4a:1a:a7: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1E:96:40:4F:2E:71:4F:E3:75:87:B7:A1:57:B7:03:8B:F3:4E:41 X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f7:0f:22:92:48:bc:6c:c1:dc:02:88:97:24:6e:9e:15:b6: 64:ed:44:b9:77:c6:14:dc:ae:e3:0e:d0:7e:21:93:1c:a1:0c: 1d:e2:86:7c:fd:76:8c:21:78:0d:34:17:d0:15:e2:a7:74:55: e4:f5:7c:ff:2c:ed:5a:4d:08:bd:af:fa:16:18:fc:35:9a:b1: 48:c6:a5:b0:4b:7b:62:cb:12:f7:ce:23:25:ff:0e:36:00:13: 99:1d:80:77:39:cf:a2:f3:05:c6:21:10:bc:a5:11:ed:67:23: f9:8b:47:ec:5e:bf:ab:e6:5d:09:4e:37:6e:bc:fd:d5:ef:8e: 80:c7:58:16:5b:e7:27:ac:22:51:06:15:a8:37:1e:01:09:c3: 88:ed:1b:a8:0a:9a:ad:81:ee:76:af:c3:af:fd:64:30:75:2c: d4:f4:7b:ea:20:f4:aa:1a:b0:5a:f5:ed:8b:69:a6:36:ea:0c: c0:d8:37:1f:c2:8a:cb:a3:11:67:76:5c:01:06:4d:d1:8e:5f: df:90:5a:3b:60:cc:88:24:83:e9:02:1f:f9:f0:9b:f4:97:b0: 9b:12:dc:85:3c:61:8c:fd:f6:12:0e:c9:0e:52:c2:4c:78:6c: bf:86:5e:63:e3:51:e0:51:8d:9d:43:ec:7c:31:ee:ef:cc:b8: 47:b1:eb:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCJYkGTqe4eAiLd7gxowN13L0Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTEyMTcxODE3MTdaFw0yNTEyMjEwMDM3MTdaMDMxMTAvBgNV BAMTKEZGMUU5NjQwNEYyRTcxNEZFMzc1ODdCN0ExNTdCNzAzOEJGMzRFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/toWZW1awjN+rnigY57NoGbZ4 pUE1mB1M+2AI9imZwf/sbOsVpAylReybqb3wAxmwj2yX1lkM9ta3xb6NKE9BO9Sd pgogFvXlHu6InfI3ytqTjaRGIxgm/P9whUFpEDe3p/peHwWp6vo2Oi4SFe6RVqaC 6JMOySnXX40gZJQmkiJvkS2xYklm98HVGOKkH9b6k4tFo4FXDFO/ADIKXCVdpMbb SiXI048n4lgEdqEeDmR5lUgSTv7CAyvrzPf6bwJeDffl3nsmtR/M1aHGZ48Ro9iR OY0nKGsTM4+tRhBVCYSdGqWAOj8jtdSTlvHJxeUUemxfoW+5EiKVHkoapxqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/x6WQE8ucU/jdYe3oVe3A4vzTkEwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf3DyKSSLxswdwCiJckbp4VtmTtRLl3xhTc ruMO0H4hkxyhDB3ihnz9dowheA00F9AV4qd0VeT1fP8s7VpNCL2v+hYY/DWasUjG pbBLe2LLEvfOIyX/DjYAE5kdgHc5z6LzBcYhELylEe1nI/mLR+xev6vmXQlON268 /dXvjoDHWBZb5yesIlEGFag3HgEJw4jtG6gKmq2B7navw6/9ZDB1LNT0e+og9Koa sFr17YtppjbqDMDYNx/CisujEWd2XAEGTdGOX9+QWjtgzIgkg+kCH/nwm/SXsJsS 3IU8YYz99hIOyQ5Swkx4bL+GXmPjUeBRjZ1D7Hwx7u/MuEex61c= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:36 2025 by rpki-client