This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: 46CPYvrASLTpIZev9CNzjHlZnmYVRaR2vwJ063GVl4w= Subject key identifier: 46:F2:0E:50:7E:DC:3E:3B:82:50:F9:47:B9:6B:80:7D:E3:11:B2:A2 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 7C03689CD72D1A300D5840FDD87B599D004C4461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0341 Signing time: Thu 18 Dec 2025 01:01:43 +0000 Manifest this update: Thu 18 Dec 2025 00:56:43 +0000 Manifest next update: Sun 21 Dec 2025 06:22:43 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: RiQ6Ltpy/08TKOM0aob6Iocm2G6DfQQLx3FQjqQRRTA=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:03:68:9c:d7:2d:1a:30:0d:58:40:fd:d8:7b:59:9d:00:4c:44:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Dec 18 00:56:43 2025 GMT Not After : Dec 21 06:22:43 2025 GMT Subject: CN=46F20E507EDC3E3B8250F947B96B807DE311B2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:e5:40:90:9a:95:57:cb:0e:bd:e2:28:c1: f1:83:30:c9:61:09:3f:88:20:58:3a:8e:bc:79:5e: d5:3c:ee:a7:d6:f6:ec:c6:9e:cd:a8:c0:56:c6:46: 9f:3b:2c:1b:d4:90:0f:0b:86:16:1e:9f:dc:3b:b2: 4e:6e:ed:a6:6f:d6:7a:98:ab:60:db:03:fb:46:7d: 39:d1:e4:e2:43:d1:29:5a:08:ce:ac:b4:38:fa:92: a7:f5:a7:8f:d6:e1:ff:4c:16:f1:51:01:55:5c:33: 1e:ef:13:1f:7e:68:f1:84:9c:ca:8a:70:03:c3:2e: 89:f0:42:8f:d1:ea:98:6b:86:38:dc:c1:da:b8:10: ca:9b:54:60:b9:63:09:60:72:1f:ab:0a:35:b9:29: ff:cf:2a:55:72:cd:37:c0:21:da:88:72:16:ba:a7: ae:0e:2d:dd:88:0e:de:71:54:1e:71:5a:35:b6:1e: 31:98:83:0c:f2:7e:cd:96:6d:a4:01:6b:c4:39:0f: 96:79:02:ff:9a:62:55:47:68:d6:a0:88:9c:8f:50: d5:fc:da:7c:ad:e9:91:6f:06:df:9f:38:50:77:18: 6c:18:a4:5c:39:66:6a:97:b5:71:1a:d7:50:68:a7: 49:58:63:63:03:8a:5e:71:d4:e9:d8:9a:ae:f0:83: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F2:0E:50:7E:DC:3E:3B:82:50:F9:47:B9:6B:80:7D:E3:11:B2:A2 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:09:05:d8:56:18:17:17:c2:79:60:01:a4:26:b3:0e:6e:3b: f8:dd:56:e8:58:4d:35:d7:72:6c:ff:03:bb:35:b1:bf:62:e7: 57:f8:48:c2:88:f8:7d:93:06:08:89:57:90:9a:1e:80:06:94: 1f:52:33:4b:d8:41:05:15:64:d5:e9:bf:4b:d3:c6:9d:ad:39: 76:b2:2d:e2:f9:68:7b:4c:5f:80:d8:4b:6b:8f:d1:8f:b6:27: b5:c4:29:7b:83:fc:3c:89:04:00:7e:9c:33:54:d6:77:c1:f8: 31:3a:5f:ce:e6:ea:79:78:10:85:56:78:99:83:54:6a:51:b2: 17:3e:1b:bc:87:6e:8c:b3:68:59:bb:b9:e2:da:6c:65:ee:49: 32:2e:3f:29:8d:78:59:ce:94:4f:bf:b9:a1:37:bd:f6:12:c4: 9e:89:71:ce:d9:87:ee:4d:08:de:74:76:fe:1b:80:db:66:8e: 77:6b:21:47:01:9f:84:02:f2:5d:ac:4c:65:f5:0f:9a:19:c5: e8:cc:e3:1c:5e:a9:7a:de:f9:73:c8:9f:03:e1:f2:f2:51:60: b2:73:59:d0:a7:db:61:ce:5a:11:0b:0a:15:17:52:23:49:ed: 6c:11:ef:71:f0:51:b6:a3:27:c9:2f:3d:0a:97:29:0b:2b:37: 43:30:92:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfANonNctGjANWED92HtZnQBMRGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTEyMTgwMDU2NDNaFw0yNTEyMjEwNjIyNDNaMDMxMTAvBgNV BAMTKDQ2RjIwRTUwN0VEQzNFM0I4MjUwRjk0N0I5NkI4MDdERTMxMUIyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzueVAkJqVV8sOveIowfGDMMlh CT+IIFg6jrx5XtU87qfW9uzGns2owFbGRp87LBvUkA8LhhYen9w7sk5u7aZv1nqY q2DbA/tGfTnR5OJD0SlaCM6stDj6kqf1p4/W4f9MFvFRAVVcMx7vEx9+aPGEnMqK cAPDLonwQo/R6phrhjjcwdq4EMqbVGC5Ywlgch+rCjW5Kf/PKlVyzTfAIdqIcha6 p64OLd2IDt5xVB5xWjW2HjGYgwzyfs2WbaQBa8Q5D5Z5Av+aYlVHaNagiJyPUNX8 2nyt6ZFvBt+fOFB3GGwYpFw5ZmqXtXEa11Bop0lYY2MDil5x1OnYmq7wg+ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURvIOUH7cPjuCUPlHuWuAfeMRsqIwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAJBdhWGBcXwnlgAaQmsw5uO/jdVuhYTTXX cmz/A7s1sb9i51f4SMKI+H2TBgiJV5CaHoAGlB9SM0vYQQUVZNXpv0vTxp2tOXay LeL5aHtMX4DYS2uP0Y+2J7XEKXuD/DyJBAB+nDNU1nfB+DE6X87m6nl4EIVWeJmD VGpRshc+G7yHboyzaFm7ueLabGXuSTIuPymNeFnOlE+/uaE3vfYSxJ6Jcc7Zh+5N CN50dv4bgNtmjndrIUcBn4QC8l2sTGX1D5oZxejM4xxeqXre+XPInwPh8vJRYLJz WdCn22HOWhELChUXUiNJ7WwR73HwUbajJ8kvPQqXKQsrN0Mwkps= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:07 2025 by rpki-client