This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: kYB6P2jHDz80BWgycysSIE0NV8WR/xJFtlP7KBOZXDk= Subject key identifier: 85:89:81:85:1B:01:C3:2F:11:CF:29:4D:78:E3:FB:78:17:40:22:2B Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 60A6A37BBDD7E3319789DF5B235BF5E23E3EFFF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01F1 Signing time: Tue 23 Dec 2025 08:54:16 +0000 Manifest this update: Tue 23 Dec 2025 08:49:16 +0000 Manifest next update: Fri 26 Dec 2025 17:50:16 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: ET4KAmoy9cy1CrlJ4hNvOKmHANLwYUeuWp7dhAStE/g=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a6:a3:7b:bd:d7:e3:31:97:89:df:5b:23:5b:f5:e2:3e:3e:ff:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Dec 23 08:49:16 2025 GMT Not After : Dec 26 17:50:16 2025 GMT Subject: CN=858981851B01C32F11CF294D78E3FB781740222B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:b3:72:d6:66:a2:f4:16:19:ed:cd:8c:a5: 0e:ec:48:95:6f:43:85:bc:1a:31:b9:9b:d5:34:33: 74:d2:92:56:42:d2:04:ad:3b:17:25:91:fc:26:a3: 25:c1:29:2f:df:76:f8:ff:79:5f:92:1c:35:ca:70: f8:a0:4a:95:92:be:47:52:a7:2b:b7:e6:e4:5c:30: 7b:ed:1d:f5:3a:de:a6:01:e8:5e:cd:c0:91:67:16: 6b:c1:c9:09:41:8d:f7:1c:be:9f:ba:30:14:d1:84: d7:9d:18:bd:3d:3f:56:6d:8e:68:28:fb:03:31:17: 8e:02:08:b2:ea:75:6c:7e:1f:1a:e7:63:f0:d1:9d: 7e:26:29:87:93:69:4e:86:23:6e:f3:0c:0e:b1:2c: f4:d6:7e:97:51:f5:98:8a:b4:1f:bc:e6:4c:7b:57: e9:39:df:86:e7:d2:c6:b5:de:90:1a:58:a5:c1:e1: d9:fc:cf:f0:67:6f:15:0a:4f:10:cc:6b:45:f0:57: d5:8d:94:6f:eb:3d:28:33:bb:75:f5:43:a6:f3:22: 9e:cb:50:7b:67:78:ae:78:8d:22:c6:b3:b2:80:22: 4c:34:c1:fc:50:30:25:fd:71:2f:36:85:58:80:ad: bd:63:26:17:53:d3:5f:59:c6:42:da:a8:85:bc:86: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:81:85:1B:01:C3:2F:11:CF:29:4D:78:E3:FB:78:17:40:22:2B X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c8:f9:53:5f:fd:43:6a:34:f3:ad:a8:01:0f:d6:50:21:11: 93:4a:ca:34:a0:51:20:fd:b4:d6:05:4c:e5:1b:d3:6d:67:de: 5f:19:1b:cf:a6:b2:fa:9c:75:b5:ff:2f:26:42:c1:13:49:3b: 79:a4:14:5c:51:8a:59:27:23:13:61:85:31:43:ff:20:6c:79: 18:87:d4:c2:2b:11:0a:84:5f:51:37:ab:6e:43:a3:d5:5e:84: 82:36:8c:66:d9:d1:58:eb:63:be:15:f4:e9:74:df:7a:bb:bf: a8:82:4d:68:32:b2:7a:fb:23:33:68:2e:d8:3a:d8:42:1d:63: cd:82:87:e3:9d:7d:aa:09:6a:f8:18:6e:ce:bf:0b:ce:93:55: b0:15:ba:7a:ea:63:8e:35:be:5c:23:fb:8c:67:4e:0b:7f:22: 9c:f6:b5:b2:fa:89:a7:61:6a:a7:ea:b5:6b:9a:20:16:95:5d: a5:87:cf:94:77:7b:ba:ff:39:5e:e1:2b:20:c2:f3:45:aa:bb: 95:53:78:68:e6:72:e9:c1:9d:09:5c:bf:a3:4a:77:99:2a:7b: 78:34:16:08:9c:74:fa:1d:55:ec:3c:16:5c:ad:20:77:21:30: 66:2c:3a:3b:2a:b6:65:cf:d8:14:69:cf:43:55:2e:a7:79:80: a2:56:3b:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKaje73X4zGXid9bI1v14j4+//gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTEyMjMwODQ5MTZaFw0yNTEyMjYxNzUwMTZaMDMxMTAvBgNV BAMTKDg1ODk4MTg1MUIwMUMzMkYxMUNGMjk0RDc4RTNGQjc4MTc0MDIyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4LNy1mai9BYZ7c2MpQ7sSJVv Q4W8GjG5m9U0M3TSklZC0gStOxclkfwmoyXBKS/fdvj/eV+SHDXKcPigSpWSvkdS pyu35uRcMHvtHfU63qYB6F7NwJFnFmvByQlBjfccvp+6MBTRhNedGL09P1Ztjmgo +wMxF44CCLLqdWx+HxrnY/DRnX4mKYeTaU6GI27zDA6xLPTWfpdR9ZiKtB+85kx7 V+k534bn0sa13pAaWKXB4dn8z/BnbxUKTxDMa0XwV9WNlG/rPSgzu3X1Q6bzIp7L UHtneK54jSLGs7KAIkw0wfxQMCX9cS82hViArb1jJhdT019ZxkLaqIW8hk81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYmBhRsBwy8RzylNeOP7eBdAIiswHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbI+VNf/UNqNPOtqAEP1lAhEZNKyjSgUSD9 tNYFTOUb021n3l8ZG8+msvqcdbX/LyZCwRNJO3mkFFxRilknIxNhhTFD/yBseRiH 1MIrEQqEX1E3q25Do9VehII2jGbZ0VjrY74V9Ol033q7v6iCTWgysnr7IzNoLtg6 2EIdY82Ch+OdfaoJavgYbs6/C86TVbAVunrqY441vlwj+4xnTgt/Ipz2tbL6iadh aqfqtWuaIBaVXaWHz5R3e7r/OV7hKyDC80Wqu5VTeGjmcunBnQlcv6NKd5kqe3g0 FgicdPodVew8FlytIHchMGYsOjsqtmXP2BRpz0NVLqd5gKJWO1w= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:50 2025 by rpki-client