This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: 9Jokcrm6y8sb8bA5D5yG9XwBnyn9TKat7RiSAMZEeg8= Subject key identifier: 1D:FB:1D:4F:25:0D:12:1C:5A:88:17:7A:7C:7A:D7:37:CF:78:8C:18 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 7F4AB51074C7FAABB7F8EF25A0D4F5AB61445589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: DF Signing time: Sat 20 Dec 2025 18:31:45 +0000 Manifest this update: Sat 20 Dec 2025 18:26:45 +0000 Manifest next update: Wed 24 Dec 2025 06:19:45 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: Sv7c9X19iVOZGFlAM1i3QLgIPv0m23TDPrU0E/MzjhA=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4a:b5:10:74:c7:fa:ab:b7:f8:ef:25:a0:d4:f5:ab:61:44:55:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Dec 20 18:26:45 2025 GMT Not After : Dec 24 06:19:45 2025 GMT Subject: CN=1DFB1D4F250D121C5A88177A7C7AD737CF788C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:02:85:0d:c2:4b:a4:ef:57:c7:e1:78:67: 36:4d:16:fc:37:51:6a:32:22:51:94:b5:38:6e:6f: 3f:04:06:60:15:88:10:bf:92:70:13:64:6d:74:d3: c2:4d:e7:da:2a:8c:cb:bd:da:16:5d:6e:e1:62:c3: 3e:7f:0d:43:72:bd:a1:b4:a8:a4:d6:a6:6f:86:65: 07:17:71:0c:af:3f:c8:b8:18:73:36:45:44:bc:33: 0d:89:2e:f4:22:81:6a:7f:2c:71:51:ef:14:c3:6a: 64:7c:6a:be:19:bc:78:8c:c1:7a:0b:2d:b6:43:35: e1:bb:87:8b:52:95:63:7c:51:90:e6:96:87:03:e7: b6:2c:80:e8:a5:51:61:f3:7b:82:42:f5:a3:a0:0d: a9:a9:b6:a9:e4:50:b1:e7:50:5f:ce:ff:ed:69:92: 2e:88:62:4a:99:d6:96:e2:57:96:83:93:80:dc:19: 00:b5:6e:12:28:99:3d:aa:01:3e:04:e9:c6:94:8d: 1c:1f:03:1f:02:48:ad:76:4f:5b:89:d1:2a:42:cd: 8d:82:92:a6:67:7b:bf:40:8f:11:ba:0f:69:0d:b3: 8c:bb:3f:4c:b6:cd:8c:86:1c:75:35:10:df:53:10: 99:3a:cf:6b:87:53:62:bf:1e:47:93:b1:c2:c5:a0: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FB:1D:4F:25:0D:12:1C:5A:88:17:7A:7C:7A:D7:37:CF:78:8C:18 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:98:2a:17:48:31:26:cb:3a:5c:53:ae:82:0b:a7:9e:92:61: 6c:9e:ed:71:85:74:a8:c5:05:95:bb:56:47:c2:6c:89:8d:c1: 0a:69:dd:1d:96:6d:95:b6:84:b4:59:d7:2c:99:85:6d:e1:5a: ce:df:ac:af:68:c9:44:48:5c:f6:4d:c3:6d:ae:41:e4:8b:a7: 72:fd:a1:d2:c1:39:96:20:43:da:2b:93:70:3f:56:c7:41:64: ef:7d:e9:19:cd:b5:68:b1:77:3f:e8:90:8f:31:0d:41:28:34: a5:f7:af:e2:fc:fa:bc:1b:e9:e0:b4:cf:65:75:60:21:48:75: d6:78:20:1b:fe:db:90:78:91:de:cb:1a:23:67:65:e5:20:46: 27:08:d8:80:a0:08:ec:7b:80:7a:2c:8e:e1:3d:2d:21:30:e2: a5:b4:da:ad:89:d8:67:77:cd:bb:a6:4a:88:7e:84:7f:ef:e3: 11:56:2b:43:f8:a1:9e:59:75:1d:54:80:53:97:1f:a0:7b:3c: 3f:e9:d8:f7:67:c3:eb:91:9a:11:42:3e:e1:0c:2a:27:63:b5: 3e:26:af:33:c5:d5:88:9c:c6:28:54:4a:79:c8:f1:68:78:42: 49:9e:86:cc:cd:c9:2f:1a:f6:e4:bd:09:a8:4b:dc:80:11:99: e5:81:b3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0q1EHTH+qu3+O8loNT1q2FEVYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTEyMjAxODI2NDVaFw0yNTEyMjQwNjE5NDVaMDMxMTAvBgNV BAMTKDFERkIxRDRGMjUwRDEyMUM1QTg4MTc3QTdDN0FENzM3Q0Y3ODhDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7QKFDcJLpO9Xx+F4ZzZNFvw3 UWoyIlGUtThubz8EBmAViBC/knATZG1008JN59oqjMu92hZdbuFiwz5/DUNyvaG0 qKTWpm+GZQcXcQyvP8i4GHM2RUS8Mw2JLvQigWp/LHFR7xTDamR8ar4ZvHiMwXoL LbZDNeG7h4tSlWN8UZDmlocD57YsgOilUWHze4JC9aOgDamptqnkULHnUF/O/+1p ki6IYkqZ1pbiV5aDk4DcGQC1bhIomT2qAT4E6caUjRwfAx8CSK12T1uJ0SpCzY2C kqZne79AjxG6D2kNs4y7P0y2zYyGHHU1EN9TEJk6z2uHU2K/HkeTscLFoD8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHfsdTyUNEhxaiBd6fHrXN894jBgwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyYKhdIMSbLOlxTroILp56SYWye7XGFdKjF BZW7VkfCbImNwQpp3R2WbZW2hLRZ1yyZhW3hWs7frK9oyURIXPZNw22uQeSLp3L9 odLBOZYgQ9ork3A/VsdBZO996RnNtWixdz/okI8xDUEoNKX3r+L8+rwb6eC0z2V1 YCFIddZ4IBv+25B4kd7LGiNnZeUgRicI2ICgCOx7gHosjuE9LSEw4qW02q2J2Gd3 zbumSoh+hH/v4xFWK0P4oZ5ZdR1UgFOXH6B7PD/p2Pdnw+uRmhFCPuEMKidjtT4m rzPF1YicxihUSnnI8Wh4QkmehszNyS8a9uS9CahL3IARmeWBsyM= -----END CERTIFICATE-----Generated at Tue Dec 23 00:44:50 2025 by rpki-client