This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: t8h80l+R1/1H/PKLmJJxPydOlRvr/O+DAmB2qkkP2Uc= Subject key identifier: C4:44:A0:F5:7C:95:A2:66:9A:F8:CA:6D:48:E8:12:DA:00:7E:D5:A8 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 11EFA87B4A3AB766CD0A978590CC8DFB960CBBEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 015B Signing time: Wed 17 Dec 2025 08:21:22 +0000 Manifest this update: Wed 17 Dec 2025 08:16:22 +0000 Manifest next update: Sat 20 Dec 2025 15:16:22 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) 2: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: 3gIemm8zMKqFCQeXw5Zy7NCp4FX7zZWB8KCqAzgp/Z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ef:a8:7b:4a:3a:b7:66:cd:0a:97:85:90:cc:8d:fb:96:0c:bb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Dec 17 08:16:22 2025 GMT Not After : Dec 20 15:16:22 2025 GMT Subject: CN=C444A0F57C95A2669AF8CA6D48E812DA007ED5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:a2:28:eb:a0:8d:d4:56:ab:aa:76:f1:42: c9:50:d1:6e:6d:f2:76:c1:5e:4d:af:aa:66:6f:21: ea:d3:6f:ec:30:4d:14:0e:cf:bb:af:61:23:d3:68: 97:30:50:56:d0:4d:fb:c3:43:c3:96:71:1a:c7:ec: 9d:16:a2:9b:ef:c4:57:23:d0:ce:d5:d6:11:bb:b3: 72:cf:35:ce:cb:85:44:e1:09:68:58:96:69:07:1e: 79:8c:28:5e:e7:c7:25:2c:ce:70:eb:e6:26:7f:94: 01:fa:40:1b:77:41:7a:2d:37:eb:75:ad:c4:49:42: d9:a4:35:62:71:61:74:90:b0:41:e1:b6:16:7a:b2: 9a:f8:8f:8b:b5:61:f5:0e:96:4a:79:62:58:11:bf: ed:df:69:70:67:69:9d:60:28:cb:c7:af:1c:88:13: 13:db:b7:d1:6c:7e:e0:19:ef:b7:da:29:a3:52:2e: c9:d5:a4:1b:ef:21:9c:7d:62:21:6c:58:18:ff:b7: 82:56:9e:74:f2:30:26:d5:c5:98:f4:99:b4:2e:e7: 24:9a:7a:d6:36:f5:b8:e5:a9:f5:27:f4:92:f4:c4: 7b:0e:28:2f:b6:e0:97:c7:f8:56:b6:41:b2:8b:21: 7e:b4:b6:a2:93:f3:f7:22:e6:f2:81:ed:ca:bb:6c: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:A0:F5:7C:95:A2:66:9A:F8:CA:6D:48:E8:12:DA:00:7E:D5:A8 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:f7:0c:cd:b6:06:a9:fc:d9:35:c7:31:db:89:6e:56:67: 34:9a:8a:92:6f:70:83:c7:f3:95:fe:f1:e1:90:d0:5d:92:ea: 84:59:b2:75:43:73:c3:c1:7f:a4:48:0e:6d:07:4f:c4:f9:90: 34:8a:aa:21:ab:1e:05:2a:2f:fa:1f:94:53:b2:bd:75:71:56: 91:e8:bc:eb:00:3a:fe:0a:41:56:d3:2e:36:8f:84:d0:d2:2b: 9d:71:db:9e:a3:1c:32:0f:e3:ae:a6:0e:50:6b:bd:0a:12:7e: a3:04:07:91:12:df:aa:ad:55:8d:5b:41:58:0a:c0:6d:f3:0c: 3b:ae:a0:92:cf:81:73:07:3a:c6:36:a8:1d:e8:4f:35:58:38: 6d:f1:35:04:2d:9c:dd:d2:7a:46:ec:3b:e1:b4:14:7c:cb:f8: dd:13:e0:b7:11:d7:c8:d1:69:32:5e:85:2d:99:ae:a2:e7:95: 43:d1:ce:cc:ed:ea:35:85:93:f1:e3:61:95:82:84:4f:d4:55: 4a:37:0a:93:b0:c9:77:c0:f0:fe:70:7c:0d:23:b2:71:10:cd: 0e:fb:78:dd:d4:6c:ab:07:94:80:45:eb:ed:2c:32:f6:69:ad: 24:61:96:87:da:27:0c:99:6b:d8:05:47:c1:1d:f5:2d:0d:c4: 02:f3:0f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEe+oe0o6t2bNCpeFkMyN+5YMu+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTEyMTcwODE2MjJaFw0yNTEyMjAxNTE2MjJaMDMxMTAvBgNV BAMTKEM0NDRBMEY1N0M5NUEyNjY5QUY4Q0E2RDQ4RTgxMkRBMDA3RUQ1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcaIo66CN1FarqnbxQslQ0W5t 8nbBXk2vqmZvIerTb+wwTRQOz7uvYSPTaJcwUFbQTfvDQ8OWcRrH7J0WopvvxFcj 0M7V1hG7s3LPNc7LhUThCWhYlmkHHnmMKF7nxyUsznDr5iZ/lAH6QBt3QXotN+t1 rcRJQtmkNWJxYXSQsEHhthZ6spr4j4u1YfUOlkp5YlgRv+3faXBnaZ1gKMvHrxyI ExPbt9FsfuAZ77faKaNSLsnVpBvvIZx9YiFsWBj/t4JWnnTyMCbVxZj0mbQu5ySa etY29bjlqfUn9JL0xHsOKC+24JfH+Fa2QbKLIX60tqKT8/ci5vKB7cq7bEgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxESg9XyVomaa+MptSOgS2gB+1agwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ19wzNtgap/Nk1xzHbiW5WZzSaipJvcIPH 85X+8eGQ0F2S6oRZsnVDc8PBf6RIDm0HT8T5kDSKqiGrHgUqL/oflFOyvXVxVpHo vOsAOv4KQVbTLjaPhNDSK51x256jHDIP466mDlBrvQoSfqMEB5ES36qtVY1bQVgK wG3zDDuuoJLPgXMHOsY2qB3oTzVYOG3xNQQtnN3SekbsO+G0FHzL+N0T4LcR18jR aTJehS2ZrqLnlUPRzszt6jWFk/HjYZWChE/UVUo3CpOwyXfA8P5wfA0jsnEQzQ77 eN3UbKsHlIBF6+0sMvZprSRhlofaJwyZa9gFR8Ed9S0NxALzD2g= -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:44 2025 by rpki-client