This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft File: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json) Hash identifier: VSBRZp5+7BaS4IH7qaO/kPD/zRQ+UWh5P21tkarNDgo= Subject key identifier: 6E:6D:7D:3E:2C:21:CC:82:F6:F6:84:29:4A:F5:C3:B9:10:F8:B9:65 Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 Certificate issuer: /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Certificate serial: 270967CC1AF9833A5451265D5D6AC0AE75E763B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 17:12:30 +0000 Manifest this update: Thu 18 Dec 2025 17:07:30 +0000 Manifest next update: Mon 22 Dec 2025 03:30:30 +0000 Files and hashes: 1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: chFS1aH+HaxreOMwp8eJRLfpqYcwzIElwAkSIVpHZxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:09:67:cc:1a:f9:83:3a:54:51:26:5d:5d:6a:c0:ae:75:e7:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7 Validity Not Before: Dec 18 17:07:30 2025 GMT Not After : Dec 22 03:30:30 2025 GMT Subject: CN=6E6D7D3E2C21CC82F6F684294AF5C3B910F8B965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:93:18:0e:f1:2f:90:86:3c:ad:4d:fd:76: 83:36:88:61:79:79:8a:ef:f0:31:be:1b:f9:d1:52: 5c:a2:d1:17:54:e0:a4:e7:7d:77:42:25:04:c2:9a: 2f:ff:c2:6d:43:b7:80:00:0f:65:06:96:62:f8:af: 85:13:22:21:49:7e:24:17:32:40:26:ab:df:be:ee: b0:4c:fd:32:ec:2a:f7:34:19:2f:74:3c:b7:48:72: 52:37:89:1e:af:2d:c7:17:24:7b:2c:2e:ed:67:20: bc:b7:7a:89:e8:d0:06:ca:40:2c:07:b3:4f:40:af: 8b:09:47:9a:1a:1e:12:8f:62:58:50:f6:66:24:bb: 95:49:d5:56:2f:5e:d3:90:5e:87:18:40:06:cd:ff: 1f:c3:11:12:1f:fe:cd:ba:42:bc:d5:05:66:3f:6f: 19:84:4f:47:3d:34:49:90:f5:34:e1:f7:6f:80:53: ae:c8:3d:e6:11:af:66:37:59:d0:f4:b0:0a:b9:3d: 59:f6:e1:5f:c3:6c:ea:99:a4:cc:de:f2:cd:e8:9f: a0:7c:86:da:16:8e:88:db:de:7b:6a:66:89:4c:19: 08:20:d1:ca:87:b0:56:46:67:8d:1d:3f:6d:e9:ba: 8f:23:95:00:27:e3:91:e9:9c:41:f6:95:d2:0b:ce: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6D:7D:3E:2C:21:CC:82:F6:F6:84:29:4A:F5:C3:B9:10:F8:B9:65 X509v3 Authority Key Identifier: keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:81:d2:09:70:be:ef:be:78:96:21:dc:12:e3:1a:ce:53:24: 52:99:ff:54:16:21:6e:3a:92:a8:00:87:fe:33:a2:ac:0e:32: dc:16:a2:e6:46:af:96:8b:fe:6e:b6:dd:aa:2a:b2:b5:88:c4: d7:71:7a:1d:1e:9c:ad:74:6d:71:05:92:a3:f3:a0:f1:7c:b9: 70:aa:d8:77:01:a7:fe:49:36:35:13:2e:1b:dd:66:1c:ab:00: e8:74:90:5b:3c:0c:e1:5c:44:50:a5:b9:0e:ae:e4:4d:bd:c1: 9d:79:d6:a6:ea:84:54:2e:65:a5:90:e5:da:43:fb:da:23:dc: ae:71:72:27:d8:73:83:01:fe:db:56:53:03:c7:bb:76:c5:fa: 55:39:25:82:eb:f9:4f:20:06:ba:16:4b:0f:33:5c:a9:78:54: e3:7a:c6:d6:ed:32:22:9f:e0:53:02:c1:0a:21:90:1a:c3:40: 3b:85:a7:4e:da:a7:66:0e:54:96:18:37:bb:30:f9:53:ac:d0: 05:d0:ef:23:0d:69:c3:9d:8e:a3:51:10:ca:0b:75:5a:72:8c: 0a:00:8e:88:23:8d:1d:d4:1c:07:29:c4:ef:8a:90:0f:5f:ba: 63:fb:ea:82:8e:3b:12:13:de:90:76:3c:02:54:95:49:01:16: b9:77:23:ea -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUJwlnzBr5gzpUUSZdXWrArnXnY7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC QjZBMjRBNzAeFw0yNTEyMTgxNzA3MzBaFw0yNTEyMjIwMzMwMzBaMDMxMTAvBgNV BAMTKDZFNkQ3RDNFMkMyMUNDODJGNkY2ODQyOTRBRjVDM0I5MTBGOEI5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUpMYDvEvkIY8rU39doM2iGF5 eYrv8DG+G/nRUlyi0RdU4KTnfXdCJQTCmi//wm1Dt4AAD2UGlmL4r4UTIiFJfiQX MkAmq9++7rBM/TLsKvc0GS90PLdIclI3iR6vLccXJHssLu1nILy3eono0AbKQCwH s09Ar4sJR5oaHhKPYlhQ9mYku5VJ1VYvXtOQXocYQAbN/x/DERIf/s26QrzVBWY/ bxmET0c9NEmQ9TTh92+AU67IPeYRr2Y3WdD0sAq5PVn24V/DbOqZpMze8s3on6B8 htoWjojb3ntqZolMGQgg0cqHsFZGZ40dP23puo8jlQAn45HpnEH2ldILzgZLAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQUbm19PiwhzIL29oQpSvXDuRD4uWUwHwYDVR0j BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B AQsFAAOCAQEAkoHSCXC+7754liHcEuMazlMkUpn/VBYhbjqSqACH/jOirA4y3Bai 5kavlov+brbdqiqytYjE13F6HR6crXRtcQWSo/Og8Xy5cKrYdwGn/kk2NRMuG91m HKsA6HSQWzwM4VxEUKW5Dq7kTb3BnXnWpuqEVC5lpZDl2kP72iPcrnFyJ9hzgwH+ 21ZTA8e7dsX6VTklguv5TyAGuhZLDzNcqXhU43rG1u0yIp/gUwLBCiGQGsNAO4Wn TtqnZg5Ulhg3uzD5U6zQBdDvIw1pw52Oo1EQygt1WnKMCgCOiCONHdQcBynE74qQ D1+6Y/vqgo47EhPekHY8AlSVSQEWuXcj6g== -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:08 2025 by rpki-client