This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: nToYti8HboKjx8N/xtoB4Yd5Po9S9szdBnCfyx/F0y4= Subject key identifier: 36:68:9D:14:05:D6:A3:51:9C:F2:12:B0:A8:EF:C9:DE:8C:53:25:94 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 648811E804A5EFBF5A1AD48BA6C239A55FCE62BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03D2 Signing time: Sat 20 Dec 2025 13:42:36 +0000 Manifest this update: Sat 20 Dec 2025 13:37:36 +0000 Manifest next update: Tue 23 Dec 2025 20:30:36 +0000 Files and hashes: 1: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=) 2: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) 3: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=) 4: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: 754B+v6sjOxwxq/XNF7AsszrwMvcy8gX/acpdpwLa+g=) 5: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:88:11:e8:04:a5:ef:bf:5a:1a:d4:8b:a6:c2:39:a5:5f:ce:62:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Dec 20 13:37:36 2025 GMT Not After : Dec 23 20:30:36 2025 GMT Subject: CN=36689D1405D6A3519CF212B0A8EFC9DE8C532594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:f4:84:92:60:f5:d8:32:16:52:aa:d6:d0: 5b:60:58:b5:9e:35:5f:23:13:07:59:c7:64:ca:24: 2e:b9:4c:7c:21:38:2a:ca:26:ef:1d:17:da:c4:dc: bf:de:34:72:0a:60:ca:5b:cd:51:73:23:1c:80:eb: 3e:a6:17:4b:9d:79:2c:69:90:c4:33:23:4b:04:c3: 89:9c:5d:55:c7:6d:5e:5c:52:62:a5:59:22:60:dc: e2:3c:0c:f4:10:55:43:b7:d0:f6:c9:1a:2c:38:58: c0:ce:a8:3b:c9:4c:08:3c:b4:76:1f:e1:5d:9b:44: 21:c6:2b:59:1e:90:70:ef:4f:bd:24:de:aa:ca:2a: 7a:26:8f:93:0c:ff:6a:62:4f:63:bc:2f:ea:09:ee: fd:6e:da:36:00:15:e5:a6:14:71:01:30:12:19:ec: e4:05:82:4b:3b:ee:e4:f3:d8:80:5c:39:da:ac:e4: 62:14:15:00:ff:6b:72:21:9b:9e:a7:b0:6d:c4:a4: 51:9d:3a:a5:33:33:b3:73:b4:41:05:04:7f:f1:c5: a4:ae:fd:02:5e:47:aa:d6:17:ae:bc:f4:dc:fa:e3: 7c:06:91:ff:22:a7:6b:47:2b:49:0a:e4:5c:61:35: f9:9b:72:06:09:c1:88:17:4d:0a:66:f0:dc:e1:fb: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:68:9D:14:05:D6:A3:51:9C:F2:12:B0:A8:EF:C9:DE:8C:53:25:94 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b7:1a:c0:02:5c:f8:f7:29:62:87:f0:0a:59:6c:f0:e1:4c: cf:8e:65:f9:8c:5e:dd:8e:6a:6a:c3:97:a5:b4:33:b4:a5:dd: b3:fe:34:94:fa:bd:3d:c3:71:57:40:e1:56:41:ca:fc:ec:d5: 8e:f8:55:6d:e6:f5:77:8c:91:62:9c:a5:88:df:a1:6c:13:49: 97:98:f7:3b:7c:52:21:82:4c:1f:bf:d8:dc:14:24:23:43:9d: 70:2e:38:9c:4d:fb:b3:b8:84:7f:07:3f:d8:56:91:71:c4:89: ac:76:5b:f1:a6:c3:c5:90:af:0b:75:1c:25:29:45:e7:62:2c: 00:ea:2c:52:3f:67:b6:f0:e6:20:8d:c0:6a:03:5e:14:d5:51: 60:67:c7:18:04:96:e7:94:c0:bd:c3:61:5d:fd:dd:05:4f:b8: fe:6d:c3:ff:f6:0e:7e:a2:77:04:29:95:31:86:92:35:0d:2e: 23:a4:ce:03:c4:74:20:18:12:c1:5f:06:f0:64:89:aa:ac:e7: be:33:73:fe:3f:ea:7e:80:cc:a0:f8:b5:d8:5e:53:5c:fc:b2: 9b:ce:48:ea:b2:e3:e8:89:98:d8:01:60:cb:26:97:7d:09:f6: ea:2e:88:5d:dd:db:73:a9:82:fe:bc:78:4a:c5:08:bf:ac:b3: 33:1c:2f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIgR6ASl779aGtSLpsI5pV/OYr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTEyMjAxMzM3MzZaFw0yNTEyMjMyMDMwMzZaMDMxMTAvBgNV BAMTKDM2Njg5RDE0MDVENkEzNTE5Q0YyMTJCMEE4RUZDOURFOEM1MzI1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6PSEkmD12DIWUqrW0FtgWLWe NV8jEwdZx2TKJC65THwhOCrKJu8dF9rE3L/eNHIKYMpbzVFzIxyA6z6mF0udeSxp kMQzI0sEw4mcXVXHbV5cUmKlWSJg3OI8DPQQVUO30PbJGiw4WMDOqDvJTAg8tHYf 4V2bRCHGK1kekHDvT70k3qrKKnomj5MM/2piT2O8L+oJ7v1u2jYAFeWmFHEBMBIZ 7OQFgks77uTz2IBcOdqs5GIUFQD/a3Ihm56nsG3EpFGdOqUzM7NztEEFBH/xxaSu /QJeR6rWF6689Nz643wGkf8ip2tHK0kK5FxhNfmbcgYJwYgXTQpm8Nzh+37BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmidFAXWo1Gc8hKwqO/J3oxTJZQwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACS3GsACXPj3KWKH8ApZbPDhTM+OZfmMXt2O amrDl6W0M7Sl3bP+NJT6vT3DcVdA4VZByvzs1Y74VW3m9XeMkWKcpYjfoWwTSZeY 9zt8UiGCTB+/2NwUJCNDnXAuOJxN+7O4hH8HP9hWkXHEiax2W/Gmw8WQrwt1HCUp RediLADqLFI/Z7bw5iCNwGoDXhTVUWBnxxgElueUwL3DYV393QVPuP5tw//2Dn6i dwQplTGGkjUNLiOkzgPEdCAYEsFfBvBkiaqs574zc/4/6n6AzKD4tdheU1z8spvO SOqy4+iJmNgBYMsml30J9uouiF3d23Opgv68eErFCL+sszMcL30= -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:14 2025 by rpki-client