This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: JwJUu831OYrGqE339A6Xgh7tTPYpAA+C0W9NjPIPip4= Subject key identifier: 93:DC:7B:A8:2A:40:36:4D:AC:09:29:C3:76:FE:61:24:7E:21:1A:39 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 698248E6B58BEAB338947D7B0E5DEE435C337E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 21:31:43 +0000 Manifest this update: Thu 18 Dec 2025 21:26:43 +0000 Manifest next update: Mon 22 Dec 2025 04:33:43 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 2: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: YtElx+ses2+GJDg7bxAV+KP6Mv7D3ffH2mJqdo3+6aA=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:48:e6:b5:8b:ea:b3:38:94:7d:7b:0e:5d:ee:43:5c:33:7e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Dec 18 21:26:43 2025 GMT Not After : Dec 22 04:33:43 2025 GMT Subject: CN=93DC7BA82A40364DAC0929C376FE61247E211A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:d0:11:73:2d:5a:e8:63:bd:c7:4d:e9:f3: 4d:ee:1b:d4:fd:cd:72:f2:0b:cd:16:5c:51:42:99: 3d:89:a8:9d:ec:d3:56:2a:26:15:ed:85:d9:06:27: d8:f4:7f:90:38:e8:17:82:53:8c:e6:d1:d7:88:54: 48:3f:0b:65:03:fe:12:4c:dd:4f:9d:1c:59:6c:50: 28:94:5e:4c:cd:69:d0:e9:26:c2:4e:7f:58:3b:8d: e1:fc:fa:5d:2f:26:c3:6e:ab:81:34:92:4c:dc:3b: fe:80:3c:32:80:39:10:53:8d:f5:3f:dd:74:34:29: 45:a7:b0:b3:07:c5:7c:67:50:6c:6e:ea:d3:9b:6b: 6d:eb:90:67:2a:fa:f4:cf:5b:7d:b7:49:12:99:87: c9:ab:71:03:9d:cd:af:68:34:da:6a:33:71:dc:5b: cd:b7:e4:8e:3b:e6:03:5c:1c:14:ea:d5:ad:b0:91: fb:8d:1b:b1:25:d2:9b:1b:a5:f9:ef:15:74:83:96: c1:01:6a:b7:e7:d2:f9:f0:36:76:c5:00:d9:23:8c: 5d:d5:47:bb:65:20:b2:bc:ed:85:ce:9f:5a:47:fd: 02:64:14:d7:ee:dd:97:0f:40:dc:32:bc:e1:cc:cf: 62:f1:c2:c2:f4:31:c2:cc:35:59:c1:82:56:36:3c: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DC:7B:A8:2A:40:36:4D:AC:09:29:C3:76:FE:61:24:7E:21:1A:39 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a5:d3:f7:5c:43:39:5b:d1:52:c0:0a:7b:b5:5d:96:55:a6: e7:52:8b:33:55:fc:b2:4e:2e:8f:52:c4:11:ab:c7:b4:1b:21: 59:1f:97:4e:3c:e5:25:db:09:cd:45:36:4a:bc:01:82:d5:4f: 5c:1d:af:63:33:82:71:1f:16:f8:bd:45:f3:c3:b8:ff:2b:27: 4d:be:08:4b:d3:1f:c1:42:eb:f2:30:03:fc:cd:35:65:70:81: 14:cc:75:42:2b:41:89:ef:a1:55:92:e8:90:e3:44:98:a0:6a: ce:c8:55:24:d8:1d:41:ed:d8:fd:ce:bf:3f:ae:3f:38:6b:6d: 7d:6c:51:6f:db:c4:a6:64:1b:3d:c8:1e:06:a1:81:35:15:f2: 87:a3:6b:17:f6:ef:ed:05:76:2b:8b:4b:21:3d:b5:98:b2:d7: 08:76:50:ae:82:e1:a8:fe:a6:44:a1:c6:e8:7b:68:a7:96:06: e9:6a:0a:42:95:8c:06:85:b1:bf:22:d6:71:7a:92:67:c1:5d: 7e:52:96:47:cc:a3:bc:6d:4c:92:6f:06:8f:b4:81:28:f6:19: 3f:cb:ed:25:a2:08:25:4e:55:2e:34:43:78:5d:39:d5:9d:d3: 60:70:3e:59:aa:73:56:3d:f5:03:c9:54:f3:ef:38:1e:62:06: ad:ee:06:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYJI5rWL6rM4lH17Dl3uQ1wzfgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTEyMTgyMTI2NDNaFw0yNTEyMjIwNDMzNDNaMDMxMTAvBgNV BAMTKDkzREM3QkE4MkE0MDM2NERBQzA5MjlDMzc2RkU2MTI0N0UyMTFBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNG9ARcy1a6GO9x03p803uG9T9 zXLyC80WXFFCmT2JqJ3s01YqJhXthdkGJ9j0f5A46BeCU4zm0deIVEg/C2UD/hJM 3U+dHFlsUCiUXkzNadDpJsJOf1g7jeH8+l0vJsNuq4E0kkzcO/6APDKAORBTjfU/ 3XQ0KUWnsLMHxXxnUGxu6tOba23rkGcq+vTPW323SRKZh8mrcQOdza9oNNpqM3Hc W8235I475gNcHBTq1a2wkfuNG7El0psbpfnvFXSDlsEBarfn0vnwNnbFANkjjF3V R7tlILK87YXOn1pH/QJkFNfu3ZcPQNwyvOHMz2LxwsL0McLMNVnBglY2PJvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9x7qCpANk2sCSnDdv5hJH4hGjkwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGl0/dcQzlb0VLACnu1XZZVpudSizNV/LJO Lo9SxBGrx7QbIVkfl0485SXbCc1FNkq8AYLVT1wdr2MzgnEfFvi9RfPDuP8rJ02+ CEvTH8FC6/IwA/zNNWVwgRTMdUIrQYnvoVWS6JDjRJigas7IVSTYHUHt2P3Ovz+u PzhrbX1sUW/bxKZkGz3IHgahgTUV8oejaxf27+0FdiuLSyE9tZiy1wh2UK6C4aj+ pkShxuh7aKeWBulqCkKVjAaFsb8i1nF6kmfBXX5SlkfMo7xtTJJvBo+0gSj2GT/L 7SWiCCVOVS40Q3hdOdWd02BwPlmqc1Y99QPJVPPvOB5iBq3uBm4= -----END CERTIFICATE-----Generated at Fri Dec 19 08:40:46 2025 by rpki-client