This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: JwL6Y5yW2BOiMJvvg/eFLoN/xtZDADSizc9c+v9Cb18= Subject key identifier: 45:DB:9F:72:53:CF:82:7A:91:B5:73:C1:F3:9A:AE:1C:10:8E:C5:54 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 32446BD7779DBA4C436C549DCA2EE66CDE6BA850 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0169 Signing time: Wed 17 Dec 2025 23:51:20 +0000 Manifest this update: Wed 17 Dec 2025 23:46:20 +0000 Manifest next update: Sun 21 Dec 2025 06:50:20 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: Ew2PhhSGcjKscinuUjHZN7J6sSR355AqszeL6mksYN8=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:44:6b:d7:77:9d:ba:4c:43:6c:54:9d:ca:2e:e6:6c:de:6b:a8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Dec 17 23:46:20 2025 GMT Not After : Dec 21 06:50:20 2025 GMT Subject: CN=45DB9F7253CF827A91B573C1F39AAE1C108EC554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:ca:93:9a:74:f3:32:12:47:f7:a4:c4:31: 80:7c:bd:0e:2a:c4:79:92:bc:d1:cf:d0:91:6e:d9: 4c:55:d0:57:01:5c:84:62:0b:03:d4:b5:77:18:ee: 72:66:68:dc:03:68:53:89:ad:a2:3f:0d:4f:dd:91: 7d:a9:3f:cd:ac:1f:05:a3:5e:94:71:c5:cf:a1:9a: 72:42:16:29:8a:f6:0a:0d:fc:a5:40:25:fc:ed:b0: 17:bc:67:b9:dc:8b:19:45:09:71:0f:6d:d5:2a:10: 72:9e:a1:c8:f4:46:85:6e:a4:dc:ae:4a:af:15:35: b8:c0:4e:71:66:89:4a:49:6a:8f:54:6b:50:da:28: 5a:3e:67:90:ab:3a:5d:0a:ad:da:12:39:60:b7:80: c1:f4:8c:0d:fc:58:11:46:2a:b9:24:14:6a:82:78: ec:22:32:c8:81:18:19:b4:a1:0f:7e:15:f9:cb:46: 2f:3b:ba:a9:96:bb:c0:69:60:3a:9c:f8:9d:16:a2: 1e:e2:2c:e6:48:7f:f6:a9:c2:88:7b:47:29:1d:32: d0:b0:f9:99:2b:63:4c:e4:4d:e2:c2:f5:78:10:6b: dd:ed:de:a1:f6:3d:39:ab:51:8b:ce:e8:fc:dc:6f: e2:e6:d4:d7:66:af:31:57:a5:39:ef:93:70:c9:c2: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:9F:72:53:CF:82:7A:91:B5:73:C1:F3:9A:AE:1C:10:8E:C5:54 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:69:dc:74:2e:ca:78:02:97:0a:97:80:91:4b:12:20:5a:c1: 42:d5:1c:fe:73:41:f4:48:26:ec:bf:70:17:72:3f:7a:a4:19: e4:af:4c:82:5a:29:57:34:74:ac:c5:2a:1a:cf:c7:d0:da:17: 84:62:3d:07:e2:c6:6f:10:8a:e8:d2:03:48:54:62:f3:de:a8: cf:d4:a6:9a:34:48:51:85:0d:22:e5:ec:f5:94:ec:53:87:1c: b6:a3:c1:a9:07:9b:f4:ad:6d:dd:0f:c3:3e:53:b3:57:d0:87: 60:7e:07:bd:ed:e3:8d:21:5c:f3:9b:14:27:a9:0b:d2:49:62: a0:69:d5:25:0b:cd:61:11:dc:be:16:e1:f3:39:76:d2:09:a7: 6c:80:50:88:67:df:0c:b9:26:b9:f3:26:0d:1d:92:24:8a:f1: 99:33:7a:c9:c5:b4:f4:85:41:36:f1:7d:87:6d:65:b8:64:07: aa:0b:f2:64:4c:7d:6b:73:c7:a7:3d:23:f0:6a:18:37:24:31: a4:4f:8e:23:d9:f8:62:a0:67:db:42:53:80:b9:a6:f2:81:22: 7f:ce:3a:83:6e:f9:78:24:6a:6e:de:b9:d2:cf:c5:9f:d7:a4: b1:34:a7:f6:2d:31:cd:7b:e9:8e:46:e6:04:6f:ef:b1:c4:a6: c8:d3:44:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkRr13edukxDbFSdyi7mbN5rqFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTEyMTcyMzQ2MjBaFw0yNTEyMjEwNjUwMjBaMDMxMTAvBgNV BAMTKDQ1REI5RjcyNTNDRjgyN0E5MUI1NzNDMUYzOUFBRTFDMTA4RUM1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzMqTmnTzMhJH96TEMYB8vQ4q xHmSvNHP0JFu2UxV0FcBXIRiCwPUtXcY7nJmaNwDaFOJraI/DU/dkX2pP82sHwWj XpRxxc+hmnJCFimK9goN/KVAJfztsBe8Z7ncixlFCXEPbdUqEHKeocj0RoVupNyu Sq8VNbjATnFmiUpJao9Ua1DaKFo+Z5CrOl0KrdoSOWC3gMH0jA38WBFGKrkkFGqC eOwiMsiBGBm0oQ9+FfnLRi87uqmWu8BpYDqc+J0Woh7iLOZIf/apwoh7RykdMtCw +ZkrY0zkTeLC9XgQa93t3qH2PTmrUYvO6Pzcb+Lm1NdmrzFXpTnvk3DJwm7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdufclPPgnqRtXPB85quHBCOxVQwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlp3HQuyngClwqXgJFLEiBawULVHP5zQfRI Juy/cBdyP3qkGeSvTIJaKVc0dKzFKhrPx9DaF4RiPQfixm8QiujSA0hUYvPeqM/U ppo0SFGFDSLl7PWU7FOHHLajwakHm/Stbd0Pwz5Ts1fQh2B+B73t440hXPObFCep C9JJYqBp1SULzWER3L4W4fM5dtIJp2yAUIhn3wy5JrnzJg0dkiSK8ZkzesnFtPSF QTbxfYdtZbhkB6oL8mRMfWtzx6c9I/BqGDckMaRPjiPZ+GKgZ9tCU4C5pvKBIn/O OoNu+Xgkam7eudLPxZ/XpLE0p/YtMc176Y5G5gRv77HEpsjTRGU= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:51 2025 by rpki-client