This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: lYjlPIq+plR89K6iBW20VuwHDbBA2jqyi1lvF9b9m5Y= Subject key identifier: 24:AB:ED:AE:2E:2B:6B:5E:E2:C5:47:62:FB:57:96:19:19:DF:AF:3C Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 5E09DD93A30D3B3A3C6E262418DBCA0E1B17865C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 02A3 Signing time: Sun 21 Dec 2025 17:30:04 +0000 Manifest this update: Sun 21 Dec 2025 17:25:04 +0000 Manifest next update: Wed 24 Dec 2025 21:09:04 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: DDHUwsZ1ASaXYPlVpOyfDxZ+9aDHjZ7NKw5JJNoipbg=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 21:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:09:dd:93:a3:0d:3b:3a:3c:6e:26:24:18:db:ca:0e:1b:17:86:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Dec 21 17:25:04 2025 GMT Not After : Dec 24 21:09:04 2025 GMT Subject: CN=24ABEDAE2E2B6B5EE2C54762FB57961919DFAF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:bd:da:25:34:9a:99:fb:51:72:83:32:8c: 88:bc:4f:58:0e:73:e0:5d:cd:47:4f:e8:a2:e7:6d: 17:6e:55:09:1a:c7:e5:ae:46:16:e5:90:ba:43:7b: e3:b6:01:85:0d:79:f2:d4:5c:76:ed:31:4a:b2:f1: 34:04:0c:82:06:13:44:b1:e0:21:4a:5f:35:e2:1e: 5b:48:67:5f:25:09:30:93:a3:f2:80:4a:a1:66:92: e2:2a:b9:da:50:69:e9:26:c1:cb:b6:28:a1:9c:3b: 0c:7f:a5:8e:cb:ed:1c:0c:a3:60:63:2b:6d:e3:ca: 12:fa:72:95:ab:c2:32:a1:a0:b6:c0:b9:c1:a1:89: d5:55:21:e0:b4:5a:2b:18:9b:e6:8e:d4:07:4d:f9: 10:7c:03:37:ec:c9:1a:57:51:0d:60:c0:6e:7b:95: 43:36:d6:c5:cf:15:1c:60:2e:b4:a3:03:7e:6b:23: 39:06:3c:af:cf:75:b8:1b:86:04:55:48:09:b2:e2: de:09:ba:73:53:1e:e7:81:b4:bc:df:80:67:ea:89: 59:2b:5b:c7:2f:a9:84:76:aa:05:8b:29:de:ed:1b: 62:6c:f9:37:4e:8f:87:49:42:56:22:a8:e4:1c:89: 6a:e6:a7:6a:5c:b4:be:9e:e8:ed:e6:a2:9b:81:4b: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AB:ED:AE:2E:2B:6B:5E:E2:C5:47:62:FB:57:96:19:19:DF:AF:3C X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:52:3c:bf:15:44:80:74:60:7c:b3:24:7c:b4:af:32:16:5e: 02:0f:aa:82:83:52:f0:01:2b:e0:25:d1:5f:5d:69:f3:da:9b: 18:b1:29:01:ce:7b:bb:0f:84:77:70:b7:73:7e:64:48:41:58: 32:32:5b:9a:dc:5c:d6:5b:6f:05:4d:30:4b:e3:73:d4:49:7e: 2c:35:8e:1c:e9:6e:42:fd:97:bf:4b:80:03:37:fd:84:14:1e: 53:bf:b5:c8:b5:de:89:30:d0:b5:b9:0c:1b:7d:72:b9:99:3a: 6d:58:0c:36:c0:d8:29:73:a8:7b:17:75:d2:9b:06:86:42:56: 24:51:8e:bc:34:0c:91:88:67:74:82:3e:3b:15:03:53:37:a3: 34:62:e3:1c:8f:66:f2:f7:5d:c3:ba:8e:0e:bf:38:bc:3c:d7: f1:f3:58:41:0b:ca:7e:c6:4f:71:81:b1:b9:05:9f:1c:36:a6: 7c:14:9b:f4:83:48:df:60:1b:c5:4d:c0:c1:72:da:68:33:98: c0:ac:2d:b8:e6:66:e8:63:be:17:ac:91:6f:35:e2:b6:cd:08: 9f:02:a8:e0:a8:d2:07:bb:0a:25:9c:37:25:84:d6:3d:9c:3f: b1:e2:68:ea:2a:85:58:70:22:bb:34:f2:a7:5d:a1:43:4a:14: c3:08:fc:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgndk6MNOzo8biYkGNvKDhsXhlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTEyMjExNzI1MDRaFw0yNTEyMjQyMTA5MDRaMDMxMTAvBgNV BAMTKDI0QUJFREFFMkUyQjZCNUVFMkM1NDc2MkZCNTc5NjE5MTlERkFGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/L3aJTSamftRcoMyjIi8T1gO c+BdzUdP6KLnbRduVQkax+WuRhblkLpDe+O2AYUNefLUXHbtMUqy8TQEDIIGE0Sx 4CFKXzXiHltIZ18lCTCTo/KASqFmkuIqudpQaekmwcu2KKGcOwx/pY7L7RwMo2Bj K23jyhL6cpWrwjKhoLbAucGhidVVIeC0WisYm+aO1AdN+RB8AzfsyRpXUQ1gwG57 lUM21sXPFRxgLrSjA35rIzkGPK/PdbgbhgRVSAmy4t4JunNTHueBtLzfgGfqiVkr W8cvqYR2qgWLKd7tG2Js+TdOj4dJQlYiqOQciWrmp2pctL6e6O3mopuBSxI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJKvtri4ra17ixUdi+1eWGRnfrzwwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1SPL8VRIB0YHyzJHy0rzIWXgIPqoKDUvAB K+Al0V9dafPamxixKQHOe7sPhHdwt3N+ZEhBWDIyW5rcXNZbbwVNMEvjc9RJfiw1 jhzpbkL9l79LgAM3/YQUHlO/tci13okw0LW5DBt9crmZOm1YDDbA2ClzqHsXddKb BoZCViRRjrw0DJGIZ3SCPjsVA1M3ozRi4xyPZvL3XcO6jg6/OLw81/HzWEELyn7G T3GBsbkFnxw2pnwUm/SDSN9gG8VNwMFy2mgzmMCsLbjmZuhjvheskW814rbNCJ8C qOCo0ge7CiWcNyWE1j2cP7HiaOoqhVhwIrs08qddoUNKFMMI/Nk= -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:34 2025 by rpki-client