This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: otwYNx4lCXQMxg9DcG0b3iVEPcoABG277a8MPnWZzMo= Subject key identifier: A3:3A:F1:69:E0:DE:56:EE:F3:F0:15:B5:6E:11:B7:2B:1A:4D:54:58 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 6E46BB1DF421B250FC7768614E0A353EBE65A1F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0343 Signing time: Mon 22 Dec 2025 11:01:52 +0000 Manifest this update: Mon 22 Dec 2025 10:56:52 +0000 Manifest next update: Thu 25 Dec 2025 21:03:52 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: uIASOyPCVyOq2jY0Z9uKgukGjxOCNHmb0WiKE+a4Lns=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:46:bb:1d:f4:21:b2:50:fc:77:68:61:4e:0a:35:3e:be:65:a1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Dec 22 10:56:52 2025 GMT Not After : Dec 25 21:03:52 2025 GMT Subject: CN=A33AF169E0DE56EEF3F015B56E11B72B1A4D5458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:9b:86:b6:e5:5b:9b:23:ef:dd:9d:cc:b5: e8:47:0c:26:46:a1:21:b6:99:33:29:c0:ca:70:4d: 7b:d9:2a:f5:4d:48:35:d5:7c:71:21:c4:8e:d1:7d: e2:43:38:95:90:4f:5a:30:4c:58:67:a1:cc:5e:7f: eb:68:64:3e:ab:ec:9f:36:32:41:82:f2:20:d2:d3: d9:9b:cb:2b:9f:81:0f:38:b8:05:a5:bb:29:92:f6: 19:cb:ce:49:08:8b:1c:5f:47:9c:c7:49:f8:27:76: 91:53:7c:c6:a4:a8:6c:86:da:97:5a:c1:be:90:5c: 5d:4b:5c:e2:64:3d:9e:53:6f:ae:d3:1f:88:45:7b: 95:ca:ed:37:54:80:6b:04:75:c9:98:63:bf:ee:fd: 64:65:f9:f8:e7:f6:2a:f5:e9:00:dc:ae:58:47:a2: 66:56:c7:68:be:e6:e5:a3:93:62:6b:73:36:76:d2: c0:05:31:a3:54:0c:52:3d:db:aa:3d:78:52:88:24: fd:8c:67:89:1d:ae:76:4d:ad:36:1e:86:18:7c:98: fb:0b:f5:d3:5e:37:07:a6:73:01:7c:80:13:c1:e1: 59:b6:b0:b8:30:6c:e7:3d:99:91:3d:16:4a:32:04: 7b:06:08:a8:49:3b:35:26:cc:2d:96:31:09:76:42: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3A:F1:69:E0:DE:56:EE:F3:F0:15:B5:6E:11:B7:2B:1A:4D:54:58 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:48:0b:b8:50:75:a2:dd:c5:8f:cd:ad:23:79:ff:a1:5f:51: 43:60:96:b2:ae:6f:05:53:aa:49:13:06:55:c9:9c:e1:13:61: 5b:b9:7a:40:e9:4d:fb:f7:23:51:d6:17:89:08:27:0b:6a:e4: 38:5a:07:b2:46:22:14:0d:1f:cc:a2:bf:b6:24:a8:93:79:98: ce:39:6f:91:1a:a6:31:ad:ab:43:a7:9d:27:4f:99:ca:6e:ac: 57:8d:34:ff:9c:07:6e:3a:bc:75:f1:8f:ab:68:b5:b6:2e:fe: de:b3:97:67:24:8f:2b:e7:48:88:96:d3:ee:9f:18:e3:ea:65: 39:62:5d:b6:24:6a:58:33:49:2f:fa:a2:22:28:45:0d:d0:e3: 33:6c:65:f5:bf:1d:89:c8:43:0d:34:06:69:b1:d1:c3:2b:83: 59:be:9d:52:90:81:95:8a:c4:85:60:75:75:f7:23:53:91:11: 46:6c:94:95:bd:46:94:b4:5b:49:03:10:a9:27:74:d4:e5:d8: 0f:a8:cf:7d:b8:36:1b:04:eb:1f:18:c8:34:f4:95:c4:9f:78: 84:bd:c4:b6:1c:bb:5b:0b:ac:b2:e3:a7:8c:55:8c:a8:b7:8a: cf:c4:e9:d3:e7:25:8c:f1:37:db:b3:e6:9a:19:7e:88:fa:f4: 4f:29:7f:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbka7HfQhslD8d2hhTgo1Pr5lofUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTEyMjIxMDU2NTJaFw0yNTEyMjUyMTAzNTJaMDMxMTAvBgNV BAMTKEEzM0FGMTY5RTBERTU2RUVGM0YwMTVCNTZFMTFCNzJCMUE0RDU0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZJuGtuVbmyPv3Z3MtehHDCZG oSG2mTMpwMpwTXvZKvVNSDXVfHEhxI7RfeJDOJWQT1owTFhnocxef+toZD6r7J82 MkGC8iDS09mbyyufgQ84uAWluymS9hnLzkkIixxfR5zHSfgndpFTfMakqGyG2pda wb6QXF1LXOJkPZ5Tb67TH4hFe5XK7TdUgGsEdcmYY7/u/WRl+fjn9ir16QDcrlhH omZWx2i+5uWjk2JrczZ20sAFMaNUDFI926o9eFKIJP2MZ4kdrnZNrTYehhh8mPsL 9dNeNwemcwF8gBPB4Vm2sLgwbOc9mZE9FkoyBHsGCKhJOzUmzC2WMQl2Qu4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUozrxaeDeVu7z8BW1bhG3KxpNVFgwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVIC7hQdaLdxY/NrSN5/6FfUUNglrKubwVT qkkTBlXJnOETYVu5ekDpTfv3I1HWF4kIJwtq5DhaB7JGIhQNH8yiv7YkqJN5mM45 b5EapjGtq0OnnSdPmcpurFeNNP+cB246vHXxj6totbYu/t6zl2ckjyvnSIiW0+6f GOPqZTliXbYkalgzSS/6oiIoRQ3Q4zNsZfW/HYnIQw00Bmmx0cMrg1m+nVKQgZWK xIVgdXX3I1OREUZslJW9RpS0W0kDEKkndNTl2A+oz324NhsE6x8YyDT0lcSfeIS9 xLYcu1sLrLLjp4xVjKi3is/E6dPnJYzxN9uz5poZfoj69E8pf08= -----END CERTIFICATE-----Generated at Tue Dec 23 09:17:44 2025 by rpki-client