This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: p4Xt1bPB+X37mNw4Nywmeys+D9gON4M04lyRzd4pc2A= Subject key identifier: AB:61:E2:11:13:07:90:0F:B9:17:3D:46:C0:26:64:75:EF:40:8E:7B Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 58044CE9A36130DAEF67BEFCBBAFB39B3DB19C48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 0222 Signing time: Fri 19 Dec 2025 08:02:46 +0000 Manifest this update: Fri 19 Dec 2025 07:57:46 +0000 Manifest next update: Mon 22 Dec 2025 16:44:46 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: XRnOf1MWrxt+A/qLcnS/KZvUgG7VTbbuZMYW2Y94tUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 16:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:04:4c:e9:a3:61:30:da:ef:67:be:fc:bb:af:b3:9b:3d:b1:9c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Dec 19 07:57:46 2025 GMT Not After : Dec 22 16:44:46 2025 GMT Subject: CN=AB61E2111307900FB9173D46C0266475EF408E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:9c:75:72:5d:e8:99:4a:bf:19:5d:75:5c: cf:c7:27:34:10:8f:6e:92:76:94:2e:6c:a3:b5:d2: b1:fa:05:77:12:ba:15:68:24:63:02:80:4b:4d:53: f2:ed:72:2c:ed:4d:af:2a:f5:2e:28:38:43:66:01: c9:e9:6b:1f:f5:8c:8f:1c:30:94:98:f1:de:43:e2: d2:7c:d3:72:7a:f5:01:0d:05:e3:6b:25:2c:94:0a: 52:b3:43:67:b9:39:2e:15:b4:54:3d:78:4b:ee:8d: da:9d:89:7c:b9:54:44:26:f4:95:bd:c5:c5:21:0f: 81:33:2f:cc:9f:0d:6a:ca:ea:31:e7:e7:27:cf:48: ff:63:25:5a:f8:68:06:5f:10:99:51:66:91:46:da: a4:3a:d1:ce:98:05:68:9b:90:c8:54:17:61:0a:ab: 42:fc:24:d6:d0:ab:2c:e4:95:44:b6:16:0b:0f:8c: d1:9a:75:18:ad:e0:81:3b:d6:16:34:1f:8d:cf:4b: e4:92:24:39:1d:64:72:2d:d6:3c:6e:90:2d:74:1c: f7:17:64:10:fc:2d:f6:dd:f8:38:65:d5:36:25:4e: b6:6a:b4:b3:f7:0d:58:83:ec:47:cd:4c:8a:9d:f1: 77:b3:a5:0e:1b:27:9e:fb:8c:74:2d:51:71:4b:47: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:E2:11:13:07:90:0F:B9:17:3D:46:C0:26:64:75:EF:40:8E:7B X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fe:ee:ab:46:94:03:bb:f1:71:de:43:4b:05:85:6d:a8:32: 8c:13:f4:f9:1d:88:9a:7c:f3:df:17:ac:8d:1e:5d:e3:c0:a6: c9:43:ad:1a:4a:36:e9:87:61:90:78:18:4a:d9:72:de:27:6b: 9b:c4:10:b9:03:0b:18:ed:73:af:0f:48:3f:a6:96:ae:91:f4: bb:af:a1:6c:6e:24:0d:41:ba:17:52:12:8e:bf:0e:25:42:2f: e4:79:8c:02:73:67:18:7c:b1:35:10:d6:f6:00:c9:d4:1c:16: 09:b3:55:a2:de:7f:3c:64:20:55:80:14:3f:2c:34:72:ec:d3: ea:f1:4f:e6:48:35:c2:b0:4e:7d:3b:75:01:6e:ae:ac:df:2c: 18:c2:64:bf:6e:21:42:d2:d3:41:95:2c:e7:10:85:5f:8b:32: c0:1d:f2:20:4a:88:67:b9:4d:b9:87:74:b2:3b:9e:37:ab:f7: 19:af:9c:6b:be:72:dd:24:19:6c:88:80:58:50:61:af:1d:51: 32:70:ce:70:27:5c:52:f1:ad:e2:6f:21:ba:f5:1c:41:05:77: b5:35:bd:d0:05:eb:0b:ae:60:eb:43:3e:46:ee:67:e0:39:ac: 6b:1d:01:f7:14:57:aa:5d:e5:40:7a:99:3f:d2:27:a3:bc:9e: b0:e4:79:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWARM6aNhMNrvZ778u6+zmz2xnEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTEyMTkwNzU3NDZaFw0yNTEyMjIxNjQ0NDZaMDMxMTAvBgNV BAMTKEFCNjFFMjExMTMwNzkwMEZCOTE3M0Q0NkMwMjY2NDc1RUY0MDhFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXZx1cl3omUq/GV11XM/HJzQQ j26SdpQubKO10rH6BXcSuhVoJGMCgEtNU/LtciztTa8q9S4oOENmAcnpax/1jI8c MJSY8d5D4tJ803J69QENBeNrJSyUClKzQ2e5OS4VtFQ9eEvujdqdiXy5VEQm9JW9 xcUhD4EzL8yfDWrK6jHn5yfPSP9jJVr4aAZfEJlRZpFG2qQ60c6YBWibkMhUF2EK q0L8JNbQqyzklUS2FgsPjNGadRit4IE71hY0H43PS+SSJDkdZHIt1jxukC10HPcX ZBD8Lfbd+Dhl1TYlTrZqtLP3DViD7EfNTIqd8XezpQ4bJ577jHQtUXFLR1SfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2HiERMHkA+5Fz1GwCZkde9AjnswHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf+7qtGlAO78XHeQ0sFhW2oMowT9PkdiJp8 898XrI0eXePApslDrRpKNumHYZB4GErZct4na5vEELkDCxjtc68PSD+mlq6R9Luv oWxuJA1BuhdSEo6/DiVCL+R5jAJzZxh8sTUQ1vYAydQcFgmzVaLefzxkIFWAFD8s NHLs0+rxT+ZINcKwTn07dQFurqzfLBjCZL9uIULS00GVLOcQhV+LMsAd8iBKiGe5 TbmHdLI7njer9xmvnGu+ct0kGWyIgFhQYa8dUTJwznAnXFLxreJvIbr1HEEFd7U1 vdAF6wuuYOtDPkbuZ+A5rGsdAfcUV6pd5UB6mT/SJ6O8nrDkeSc= -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:00 2025 by rpki-client