This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: cEBaN+aUZmuypgAzEma49QpnYTQeBXzTqwKdSSKBtYI= Subject key identifier: F9:84:A3:78:86:E8:A7:1C:EA:61:8C:70:9C:F0:52:FA:20:F4:91:52 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 7B770CDA4CA35E71337A4604F0B56C761522A0B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 0143 Signing time: Fri 19 Dec 2025 19:52:21 +0000 Manifest this update: Fri 19 Dec 2025 19:47:21 +0000 Manifest next update: Tue 23 Dec 2025 02:19:21 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) 3: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) 4: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: pjlDZSIRWPYyhW8ZlwzzrX3Z5gVpF0mC3LA7a9WWapQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:77:0c:da:4c:a3:5e:71:33:7a:46:04:f0:b5:6c:76:15:22:a0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Dec 19 19:47:21 2025 GMT Not After : Dec 23 02:19:21 2025 GMT Subject: CN=F984A37886E8A71CEA618C709CF052FA20F49152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:05:a8:4f:5d:c1:18:58:84:78:8d:66:3e: ed:65:4b:3e:a2:3f:0d:67:4f:63:c2:71:ce:49:f2: 77:21:ac:91:7e:01:e9:2f:ba:db:2c:69:a5:09:1a: 1e:87:d7:64:36:1d:5b:77:5a:18:4c:0c:fa:a0:c2: 17:e4:89:61:c9:e8:a0:be:27:1a:4c:e3:d7:33:47: e8:fe:ea:94:16:a9:77:e3:e2:91:f7:18:16:d7:59: 5c:01:cf:64:56:37:18:d6:9b:2a:0f:1d:cb:0e:2e: 58:a8:37:d2:33:05:a9:ee:ba:c7:5a:39:b8:7b:d2: fc:bc:17:4e:08:73:17:10:fa:d2:31:8c:fc:df:ff: f1:cb:b2:50:31:c3:46:3d:62:63:aa:62:8e:77:26: 88:e8:8a:bc:01:61:3d:ec:8f:4b:62:8c:41:5e:94: fa:07:43:c2:55:24:59:27:60:fd:1b:45:c5:0a:4a: 91:6e:5e:16:c7:1c:64:bc:fc:0d:b6:c1:c9:94:56: f5:82:e9:d3:cf:2a:d3:8f:ac:16:98:47:da:fa:85: 56:21:5c:ac:9e:c3:89:38:eb:17:b1:58:2e:6e:8b: 62:89:6f:5d:4e:64:b2:12:e1:7b:56:e0:c3:0e:73: a2:18:25:6d:3c:ce:8a:e9:10:ab:27:70:10:09:a3: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:A3:78:86:E8:A7:1C:EA:61:8C:70:9C:F0:52:FA:20:F4:91:52 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a2:15:b8:ab:d0:25:d5:5c:d4:23:93:35:98:c7:4b:d4:f6: 4a:c5:8f:65:57:bb:2b:6f:66:d1:d0:0d:63:b0:78:f0:6e:99: 05:74:ea:31:2e:15:4f:3c:de:df:9f:f9:af:0b:25:00:44:b8: 1b:8b:59:bf:54:07:11:e4:8e:36:ca:10:4f:f5:ff:77:88:7e: da:91:c7:f7:d5:69:16:b3:a3:5a:69:3d:ab:4d:d1:f2:45:65: 00:ba:8a:5d:74:39:2e:9d:45:27:e6:0a:c8:fb:66:6b:2c:65: 9d:59:c4:a2:98:22:fa:b8:e3:ed:b6:5b:09:a8:e0:ba:92:e1: 41:83:2c:52:31:d5:81:10:89:69:de:f1:3a:f7:13:6a:a5:f1: ed:6f:9f:4e:40:4b:61:28:ff:e1:56:6c:5a:c5:77:04:f8:c0: 06:f5:bc:66:21:f7:17:4a:12:33:bf:ab:c9:48:b2:8d:bf:f9: 2d:f0:1f:2a:90:d2:e0:b3:3f:af:a1:eb:d3:38:60:40:92:b0: 58:28:26:d1:c5:a0:46:2c:e5:6b:de:3a:8f:cb:fe:df:e4:46: 99:a1:33:cd:72:22:47:11:e0:25:b3:fb:bc:71:29:26:d3:9d: 4c:6d:ec:37:3e:55:b7:d4:c7:c6:d6:99:d9:74:40:71:dc:7e: a1:e0:fa:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3cM2kyjXnEzekYE8LVsdhUioLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTEyMTkxOTQ3MjFaFw0yNTEyMjMwMjE5MjFaMDMxMTAvBgNV BAMTKEY5ODRBMzc4ODZFOEE3MUNFQTYxOEM3MDlDRjA1MkZBMjBGNDkxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5QWoT13BGFiEeI1mPu1lSz6i Pw1nT2PCcc5J8nchrJF+AekvutssaaUJGh6H12Q2HVt3WhhMDPqgwhfkiWHJ6KC+ JxpM49czR+j+6pQWqXfj4pH3GBbXWVwBz2RWNxjWmyoPHcsOLlioN9IzBanuusda Obh70vy8F04IcxcQ+tIxjPzf//HLslAxw0Y9YmOqYo53JojoirwBYT3sj0tijEFe lPoHQ8JVJFknYP0bRcUKSpFuXhbHHGS8/A22wcmUVvWC6dPPKtOPrBaYR9r6hVYh XKyew4k46xexWC5ui2KJb11OZLIS4XtW4MMOc6IYJW08zorpEKsncBAJo6idAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YSjeIbopxzqYYxwnPBS+iD0kVIwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOiFbir0CXVXNQjkzWYx0vU9krFj2VXuytv ZtHQDWOwePBumQV06jEuFU883t+f+a8LJQBEuBuLWb9UBxHkjjbKEE/1/3eIftqR x/fVaRazo1ppPatN0fJFZQC6il10OS6dRSfmCsj7ZmssZZ1ZxKKYIvq44+22Wwmo 4LqS4UGDLFIx1YEQiWne8Tr3E2ql8e1vn05AS2Eo/+FWbFrFdwT4wAb1vGYh9xdK EjO/q8lIso2/+S3wHyqQ0uCzP6+h69M4YECSsFgoJtHFoEYs5WveOo/L/t/kRpmh M81yIkcR4CWz+7xxKSbTnUxt7Dc+VbfUx8bWmdl0QHHcfqHg+ic= -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:39 2025 by rpki-client