This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: CBa9UEv/G2VN+s4angWasHybzVx2YzSLCleX4Q7ypS8= Subject key identifier: 0A:CA:1E:4F:4D:F1:4C:12:33:CE:4D:D1:FC:0D:B7:D6:EE:49:EB:32 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 0DC8B7FBB96F85DE3A2351FB8714291EC9658F8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0195 Signing time: Tue 23 Dec 2025 10:10:39 +0000 Manifest this update: Tue 23 Dec 2025 10:05:39 +0000 Manifest next update: Fri 26 Dec 2025 13:48:39 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: pGrCcnUO+LFbufMPAeYnYNuPTQo5UIt0HdtCEm6OhCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c8:b7:fb:b9:6f:85:de:3a:23:51:fb:87:14:29:1e:c9:65:8f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Dec 23 10:05:39 2025 GMT Not After : Dec 26 13:48:39 2025 GMT Subject: CN=0ACA1E4F4DF14C1233CE4DD1FC0DB7D6EE49EB32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:da:70:93:ee:8e:d0:fb:2e:7e:a8:56:02: ca:4f:e2:a3:a6:9e:b7:9b:a9:6e:13:5d:17:02:b5: 4c:b3:6a:ac:fe:34:f4:54:42:57:02:02:55:d0:48: d8:3b:b3:91:55:2c:08:52:71:10:54:c3:7e:54:88: 16:93:91:50:af:f6:36:6d:ab:b7:58:8f:73:09:e4: 26:64:2c:04:9b:df:b3:a9:00:08:cc:06:46:8e:46: 56:bb:d1:7e:fc:e4:93:01:3f:3a:3d:59:51:fe:10: 9e:25:44:c1:87:27:45:19:b7:0f:f6:44:7d:59:69: bc:ed:f5:5b:9c:4f:08:36:70:36:5c:75:fc:49:04: d0:26:19:5a:e6:14:5b:df:4f:9b:d6:9c:6d:71:47: 76:d3:f1:ba:f5:ae:12:9d:0e:92:99:cc:31:c9:f1: a4:49:46:cf:40:94:11:27:f9:27:d8:a8:7b:7c:69: e7:32:00:6b:59:ba:2f:fa:17:73:7a:56:d7:63:ec: 22:e2:85:36:d3:be:a2:da:9c:db:85:fa:a0:cf:7d: f2:62:b3:9a:cd:de:e1:03:35:9a:2b:c6:24:6f:2f: 97:fb:1f:6f:04:b5:6d:d8:5c:9f:0f:5e:bb:3a:84: 78:fa:f5:3c:98:5e:a0:4b:89:20:57:86:67:2c:26: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:1E:4F:4D:F1:4C:12:33:CE:4D:D1:FC:0D:B7:D6:EE:49:EB:32 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bd:c4:71:06:b1:82:de:c0:1d:a2:3f:17:b4:40:86:2b:50: 3d:99:78:02:7e:e3:41:bd:89:b6:97:19:5c:44:6f:25:d9:6c: 9d:ee:74:94:52:42:c9:5d:fc:0d:7b:f1:8e:cb:b1:c5:03:0e: 1b:ea:9d:a8:04:a1:14:77:9b:79:a2:f7:18:99:6b:10:bc:26: ba:5e:3c:c6:06:fa:bb:bd:1f:55:5a:52:18:45:d4:89:e1:1d: 7e:76:40:51:15:23:56:41:39:5a:be:f8:3a:08:d2:de:95:5b: 0d:76:46:06:be:93:aa:11:6c:fe:7e:d8:e0:da:74:1c:34:5d: 53:dc:b0:2b:07:ec:69:c6:c2:fa:b4:fd:0d:10:d6:01:e8:c6: 95:4d:5e:65:d3:e1:d9:ec:dc:fa:10:21:cd:73:50:c8:05:3b: f2:e7:a4:18:03:07:a6:53:42:a9:70:b6:ae:80:f6:dc:7f:af: b7:35:c0:bc:91:d4:e8:43:cb:9c:05:6c:5a:fa:64:a6:c3:5c: af:ec:d1:5e:a1:ed:ae:e1:e1:7d:cf:3e:63:0e:02:be:05:dd: ee:e3:bb:58:aa:c0:e3:e4:0d:8c:ac:cd:bd:15:9b:9e:ea:67: 49:bb:a4:7b:7d:8e:98:b0:31:b1:a8:21:33:6e:59:b7:11:66: 16:ef:46:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDci3+7lvhd46I1H7hxQpHsllj4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTEyMjMxMDA1MzlaFw0yNTEyMjYxMzQ4MzlaMDMxMTAvBgNV BAMTKDBBQ0ExRTRGNERGMTRDMTIzM0NFNEREMUZDMERCN0Q2RUU0OUVCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1tpwk+6O0PsufqhWAspP4qOm nrebqW4TXRcCtUyzaqz+NPRUQlcCAlXQSNg7s5FVLAhScRBUw35UiBaTkVCv9jZt q7dYj3MJ5CZkLASb37OpAAjMBkaORla70X785JMBPzo9WVH+EJ4lRMGHJ0UZtw/2 RH1Zabzt9VucTwg2cDZcdfxJBNAmGVrmFFvfT5vWnG1xR3bT8br1rhKdDpKZzDHJ 8aRJRs9AlBEn+SfYqHt8aecyAGtZui/6F3N6Vtdj7CLihTbTvqLanNuF+qDPffJi s5rN3uEDNZorxiRvL5f7H28EtW3YXJ8PXrs6hHj69TyYXqBLiSBXhmcsJuJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsoeT03xTBIzzk3R/A231u5J6zIwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO9xHEGsYLewB2iPxe0QIYrUD2ZeAJ+40G9 ibaXGVxEbyXZbJ3udJRSQsld/A178Y7LscUDDhvqnagEoRR3m3mi9xiZaxC8Jrpe PMYG+ru9H1VaUhhF1InhHX52QFEVI1ZBOVq++DoI0t6VWw12Rga+k6oRbP5+2ODa dBw0XVPcsCsH7GnGwvq0/Q0Q1gHoxpVNXmXT4dns3PoQIc1zUMgFO/LnpBgDB6ZT Qqlwtq6A9tx/r7c1wLyR1OhDy5wFbFr6ZKbDXK/s0V6h7a7h4X3PPmMOAr4F3e7j u1iqwOPkDYyszb0Vm57qZ0m7pHt9jpiwMbGoITNuWbcRZhbvRpM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:01 2025 by rpki-client