This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: 6HCw6Uyl44EyH6VO52XHoDgUrJ5AdVsHzUz2V5MoQJ4= Subject key identifier: CD:24:6D:4D:F1:78:EC:07:6F:2D:9B:AD:8A:B7:23:1C:D8:1C:21:6F Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 2E0FCE8E317F7FB642BF4F1DBE677A2312B0B574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 023E Signing time: Wed 17 Dec 2025 03:10:00 +0000 Manifest this update: Wed 17 Dec 2025 03:05:00 +0000 Manifest next update: Sat 20 Dec 2025 13:00:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: ek2wq2wNPVwBZrPQYSDO6Pte58q/D1YtH4RHND7EcX4=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0f:ce:8e:31:7f:7f:b6:42:bf:4f:1d:be:67:7a:23:12:b0:b5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Dec 17 03:05:00 2025 GMT Not After : Dec 20 13:00:00 2025 GMT Subject: CN=CD246D4DF178EC076F2D9BAD8AB7231CD81C216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:c7:3c:32:9b:61:9a:92:75:05:4f:69:e8: 61:10:ae:d7:4e:08:6a:8a:ec:ae:d7:b3:ce:7d:69: 3b:43:89:fa:ae:fe:de:c9:4e:fb:e2:6e:af:94:71: 17:fa:b4:60:c3:20:83:4b:88:0d:ee:3a:93:56:46: c5:93:44:f4:36:c3:0a:60:65:c6:09:ad:b7:61:e5: cb:67:60:f5:f4:4c:54:ea:d3:05:c0:5d:71:a3:67: 40:de:6d:b5:70:20:93:39:43:aa:5b:94:1c:2d:9e: 1a:90:55:73:e6:70:c1:3b:ef:76:47:ba:d1:e3:6e: 9a:43:c9:d2:44:19:66:fb:73:3f:d6:a9:93:b8:53: 09:a1:f4:dd:da:f1:7e:19:fb:88:8c:85:ef:0b:b0: 5d:09:1f:46:bc:1c:61:32:af:4a:7f:0d:30:c8:eb: 3c:5a:6b:0d:27:1d:cd:cb:c1:0d:e2:6e:c3:ff:72: 0f:a6:f8:13:5a:07:9a:a2:11:6d:a5:b8:e1:d1:3d: 02:a1:61:40:a8:a7:91:2b:f1:5f:75:55:cf:ee:99: d9:7f:85:0d:72:fb:6c:03:37:b6:91:9b:16:3c:22: f0:6c:12:34:54:5e:10:7b:28:17:6c:ea:95:f8:74: 94:6a:b1:60:32:19:20:9a:53:1c:b8:af:b5:2c:76: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:6D:4D:F1:78:EC:07:6F:2D:9B:AD:8A:B7:23:1C:D8:1C:21:6F X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a9:75:72:7e:52:d7:61:30:81:0a:ee:9e:a2:20:90:b4:14: c7:2b:eb:62:a1:a5:d8:47:f9:53:ac:48:87:80:d5:f3:37:cf: 27:65:5c:26:b9:e7:a9:25:b8:4e:6e:9f:e4:52:75:f2:d3:a2: 0c:4e:50:76:e2:e7:34:79:b1:2b:0f:88:31:8f:ae:33:f1:21: a0:7b:d0:9a:89:28:0f:e8:0d:c4:ee:2e:ae:9d:87:0f:79:30: 47:fd:62:27:e1:01:de:bc:27:0f:e0:2c:17:b9:a4:d0:af:be: d1:97:76:f6:ac:e1:44:5e:3e:e2:0b:44:65:d5:ef:6d:18:1f: 9f:e2:fb:ff:a3:af:ba:ab:dc:ea:7e:3b:8e:e6:e2:6f:1e:08: b6:4e:9e:b1:15:00:4e:0b:fe:86:e2:41:74:62:66:08:cd:85: fe:e9:b3:b8:a2:97:dc:20:b5:a7:3b:e0:fa:14:00:46:27:4c: ff:da:1e:8c:c8:c1:cf:17:b6:2c:5d:2a:8f:c1:59:65:18:69: 09:bb:8f:a0:21:cd:4f:6e:b2:79:e7:e3:0a:53:0c:76:19:62: 43:6c:f7:ed:8b:02:1f:66:09:0b:0a:1d:36:f8:d8:bd:b6:32: 1f:18:1e:b0:13:4a:ae:a0:35:6e:6e:e3:dc:4b:f9:07:29:eb: 87:fc:09:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULg/OjjF/f7ZCv08dvmd6IxKwtXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTEyMTcwMzA1MDBaFw0yNTEyMjAxMzAwMDBaMDMxMTAvBgNV BAMTKENEMjQ2RDRERjE3OEVDMDc2RjJEOUJBRDhBQjcyMzFDRDgxQzIxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFMc8MpthmpJ1BU9p6GEQrtdO CGqK7K7Xs859aTtDifqu/t7JTvvibq+UcRf6tGDDIINLiA3uOpNWRsWTRPQ2wwpg ZcYJrbdh5ctnYPX0TFTq0wXAXXGjZ0DebbVwIJM5Q6pblBwtnhqQVXPmcME773ZH utHjbppDydJEGWb7cz/WqZO4Uwmh9N3a8X4Z+4iMhe8LsF0JH0a8HGEyr0p/DTDI 6zxaaw0nHc3LwQ3ibsP/cg+m+BNaB5qiEW2luOHRPQKhYUCop5Er8V91Vc/umdl/ hQ1y+2wDN7aRmxY8IvBsEjRUXhB7KBds6pX4dJRqsWAyGSCaUxy4r7UsdnJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSRtTfF47AdvLZutircjHNgcIW8wHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWpdXJ+UtdhMIEK7p6iIJC0FMcr62KhpdhH +VOsSIeA1fM3zydlXCa556kluE5un+RSdfLTogxOUHbi5zR5sSsPiDGPrjPxIaB7 0JqJKA/oDcTuLq6dhw95MEf9YifhAd68Jw/gLBe5pNCvvtGXdvas4URePuILRGXV 720YH5/i+/+jr7qr3Op+O47m4m8eCLZOnrEVAE4L/obiQXRiZgjNhf7ps7iil9wg tac74PoUAEYnTP/aHozIwc8XtixdKo/BWWUYaQm7j6AhzU9usnnn4wpTDHYZYkNs 9+2LAh9mCQsKHTb42L22Mh8YHrATSq6gNW5u49xL+Qcp64f8CTA= -----END CERTIFICATE-----Generated at Fri Dec 19 16:57:29 2025 by rpki-client