This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: 83RP56NROqzqV/IIvhGqvsVf+Yx/E2D8LBb7y7otuf0= Subject key identifier: F6:F7:C5:3E:EC:63:E1:40:22:08:56:6C:E6:D2:D2:72:17:E2:1D:7D Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 383BE31634E392C754F545423D5CC139CD3CA8DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: D3 Signing time: Wed 24 Dec 2025 02:11:39 +0000 Manifest this update: Wed 24 Dec 2025 02:06:39 +0000 Manifest next update: Sat 27 Dec 2025 13:40:39 +0000 Files and hashes: 1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: mTCUQcW8gGH/dhXMgsV5E3TxHijkRLdEx3vNrwxdMKs=) 2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) 3: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) 5: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3b:e3:16:34:e3:92:c7:54:f5:45:42:3d:5c:c1:39:cd:3c:a8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Dec 24 02:06:39 2025 GMT Not After : Dec 27 13:40:39 2025 GMT Subject: CN=F6F7C53EEC63E1402208566CE6D2D27217E21D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:92:a7:f4:f6:2b:61:c8:00:e0:b7:a9:af: 1e:da:2c:2b:ae:e9:0f:90:7d:67:fc:64:2c:27:5e: 8e:51:83:d3:8a:ff:57:cd:e2:2c:08:23:66:d3:34: 61:ea:8c:5e:02:dc:da:b8:7e:95:97:78:66:b8:7e: 60:00:4f:6c:1c:11:b6:fb:84:61:78:07:fb:b9:6e: e8:76:e1:09:45:43:8a:87:a0:dd:cb:e9:69:e3:a9: 99:41:af:cd:d3:03:07:f6:41:d6:65:b8:bd:36:fb: 3d:8a:18:a3:97:dc:47:a5:6c:3a:cf:6f:92:19:6a: d2:c5:20:db:6b:47:e4:9a:fb:4b:31:6b:af:0e:09: e5:4e:b4:ad:19:f8:be:ee:3d:23:0c:0e:26:46:4c: 92:ae:db:03:6d:39:73:46:3b:ec:d6:a0:4b:f0:9c: e9:d2:c0:58:80:11:e0:fe:5d:7b:82:4e:8a:59:e7: 28:04:c0:33:2e:8f:5f:71:88:b0:49:15:5c:9d:98: 2e:d3:01:7b:5a:44:af:e3:36:16:80:5d:88:42:96: b7:a2:49:e0:cb:80:87:3f:c1:3c:aa:7b:d5:6a:0c: c5:ff:b7:ce:02:a2:c8:6f:06:a5:a0:d2:fd:1c:1e: 0b:46:b5:fb:97:3c:d9:d2:0f:de:69:f0:d9:66:b4: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F7:C5:3E:EC:63:E1:40:22:08:56:6C:E6:D2:D2:72:17:E2:1D:7D X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3d:6d:06:b1:ac:a5:b4:65:99:3a:8c:f0:19:ed:e0:c7:5b: 46:41:84:7e:df:8a:22:15:bf:96:bc:57:1c:7f:23:27:d1:0e: 6a:e9:9c:72:65:5d:70:8e:58:a3:67:fe:9a:9f:2c:31:25:12: 79:24:b2:9c:cf:a6:74:b7:5b:91:ac:30:78:13:dc:03:68:dc: 1c:83:72:29:0d:3d:6c:67:ce:1b:d6:59:d6:97:d5:08:33:6e: 90:f2:75:23:3e:59:59:52:ac:4c:bc:44:3e:cb:b9:e3:e7:b7: 27:ef:6e:92:ba:68:6a:46:b3:e6:00:39:06:5f:d3:b4:38:96: 15:f6:63:74:10:ec:e6:9e:33:8a:7c:c8:bc:1c:66:74:64:2c: 6b:c8:a6:b2:78:f5:59:ed:6b:5e:5e:e3:a6:74:ea:99:4f:54: dc:21:00:bb:6e:83:a2:04:d8:c9:32:e4:94:3b:da:3d:87:bc: 6c:d3:7b:8e:c6:42:2b:fb:e0:e5:e6:5e:b8:12:e0:60:ce:e3: ae:b4:f2:22:58:a2:96:f1:21:7b:4c:fc:de:ca:6c:9b:35:64: f1:d9:26:be:c1:27:38:85:72:7e:f0:3b:de:de:40:46:4f:b3: de:11:8f:c3:59:e7:8a:5e:03:ea:06:14:cf:8b:2a:62:83:58: 6a:09:e5:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODvjFjTjksdU9UVCPVzBOc08qNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTEyMjQwMjA2MzlaFw0yNTEyMjcxMzQwMzlaMDMxMTAvBgNV BAMTKEY2RjdDNTNFRUM2M0UxNDAyMjA4NTY2Q0U2RDJEMjcyMTdFMjFEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+pKn9PYrYcgA4Leprx7aLCuu 6Q+QfWf8ZCwnXo5Rg9OK/1fN4iwII2bTNGHqjF4C3Nq4fpWXeGa4fmAAT2wcEbb7 hGF4B/u5buh24QlFQ4qHoN3L6WnjqZlBr83TAwf2QdZluL02+z2KGKOX3EelbDrP b5IZatLFINtrR+Sa+0sxa68OCeVOtK0Z+L7uPSMMDiZGTJKu2wNtOXNGO+zWoEvw nOnSwFiAEeD+XXuCTopZ5ygEwDMuj19xiLBJFVydmC7TAXtaRK/jNhaAXYhClrei SeDLgIc/wTyqe9VqDMX/t84CoshvBqWg0v0cHgtGtfuXPNnSD95p8NlmtKl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9vfFPuxj4UAiCFZs5tLSchfiHX0wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw9bQaxrKW0ZZk6jPAZ7eDHW0ZBhH7fiiIV v5a8Vxx/IyfRDmrpnHJlXXCOWKNn/pqfLDElEnkkspzPpnS3W5GsMHgT3ANo3ByD cikNPWxnzhvWWdaX1QgzbpDydSM+WVlSrEy8RD7LuePntyfvbpK6aGpGs+YAOQZf 07Q4lhX2Y3QQ7OaeM4p8yLwcZnRkLGvIprJ49Vnta15e46Z06plPVNwhALtug6IE 2Mky5JQ72j2HvGzTe47GQiv74OXmXrgS4GDO46608iJYopbxIXtM/N7KbJs1ZPHZ Jr7BJziFcn7wO97eQEZPs94Rj8NZ54peA+oGFM+LKmKDWGoJ5fo= -----END CERTIFICATE-----Generated at Wed Dec 24 13:25:09 2025 by rpki-client