This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: m/hVRXud6dJUUQu79jQDKsjVO3JTGojTRUoGxBDaKEA= Subject key identifier: 0B:BB:F6:7E:2E:D4:A8:E9:1F:F2:45:4D:FA:C3:00:46:36:7D:46:C9 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 7AE26DC67030256E2E6E230A05D3F245934E49ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: E7 Signing time: Mon 15 Dec 2025 23:51:30 +0000 Manifest this update: Mon 15 Dec 2025 23:46:30 +0000 Manifest next update: Fri 19 Dec 2025 07:40:30 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: SISj47pYBFvtSAnM8/j/mVzDBb6e98KC3kHIpCTl+SQ=) 2: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) 4: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e2:6d:c6:70:30:25:6e:2e:6e:23:0a:05:d3:f2:45:93:4e:49:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Dec 15 23:46:30 2025 GMT Not After : Dec 19 07:40:30 2025 GMT Subject: CN=0BBBF67E2ED4A8E91FF2454DFAC30046367D46C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:02:23:bb:91:12:4a:79:3b:5e:0a:63:a7: 8a:29:40:f8:03:25:84:65:d2:06:7f:c9:22:a0:c5: 05:53:60:45:6b:7e:c4:00:b7:ab:16:5e:30:bf:d9: 25:a4:10:bc:8b:30:aa:31:b2:ad:35:91:32:8f:e8: e8:26:56:42:d0:de:0e:46:e9:67:4f:f3:f8:b4:34: c2:ad:ce:08:19:68:01:1f:b3:16:ab:0a:28:2e:9c: ab:ed:db:bb:ab:6c:1b:62:f8:7e:13:7f:92:7a:3e: c6:8f:1a:f3:ef:44:42:04:b8:21:69:13:9a:24:36: 7f:13:b3:42:4b:9b:84:3c:0a:7b:76:b9:2e:82:0a: 58:cd:a4:70:88:8f:5c:53:6d:c1:2d:2f:66:0d:be: 09:9d:c4:5c:a6:09:16:22:6e:1d:12:6c:3b:08:dc: 88:b9:10:47:86:b7:ed:c0:6a:59:f0:50:0b:ff:1d: 02:41:48:e5:47:02:e6:1c:58:dd:14:96:f0:6f:b9: 19:74:13:e8:1f:e6:43:81:fc:25:da:ba:ee:39:9c: ca:a9:9b:13:97:2d:78:28:08:55:a2:1d:ef:8d:96: e1:a7:30:53:1f:03:06:00:24:62:a5:ae:df:bb:1c: c1:e2:3e:71:0b:8d:b6:0e:96:b7:ef:fc:8d:b1:b6: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:F6:7E:2E:D4:A8:E9:1F:F2:45:4D:FA:C3:00:46:36:7D:46:C9 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:8c:08:41:17:72:52:e0:c4:68:2f:03:6f:90:b1:6c:98: 20:dd:46:eb:b8:a3:1c:e3:5f:fc:cb:9e:ab:80:29:84:7c:83: 5c:92:02:3f:9d:54:5f:b4:32:6c:ae:ca:a0:cb:b4:20:47:91: ff:f7:9a:09:eb:2d:44:69:f0:df:11:f2:45:e9:d7:18:b7:e7: b2:0e:ad:93:2e:99:12:a8:d4:87:34:a0:1c:38:e8:cf:ac:84: 63:d8:d8:3b:12:33:d0:af:f0:b4:b1:05:c2:de:e5:e1:08:1b: b7:96:1e:a2:67:90:2a:37:b3:20:4e:71:ae:0d:a6:c5:94:48: a6:c1:57:49:f7:11:c6:1b:13:cc:dc:cd:ee:0d:90:75:2e:bc: 6d:3f:ed:e6:5c:9b:5b:cf:c8:fa:01:41:25:a6:84:d6:87:4a: 12:34:90:79:2c:69:a1:37:ca:1d:10:3c:8f:71:93:1d:33:a2: 8e:da:86:f3:99:91:1c:28:0a:49:2a:27:61:03:17:6f:e3:bd: 9e:a1:00:74:c2:87:99:bc:6f:ff:46:a4:73:a1:38:7a:e5:58: 02:a8:79:74:0f:c0:f3:7a:d4:3d:6f:cf:ee:6d:27:71:39:1b: 41:d0:7f:f3:09:5e:a8:2d:10:40:22:42:1e:cb:bf:d6:d0:90: b5:12:71:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuJtxnAwJW4ubiMKBdPyRZNOSe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTEyMTUyMzQ2MzBaFw0yNTEyMTkwNzQwMzBaMDMxMTAvBgNV BAMTKDBCQkJGNjdFMkVENEE4RTkxRkYyNDU0REZBQzMwMDQ2MzY3RDQ2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGAIju5ESSnk7Xgpjp4opQPgD JYRl0gZ/ySKgxQVTYEVrfsQAt6sWXjC/2SWkELyLMKoxsq01kTKP6OgmVkLQ3g5G 6WdP8/i0NMKtzggZaAEfsxarCigunKvt27urbBti+H4Tf5J6PsaPGvPvREIEuCFp E5okNn8Ts0JLm4Q8Cnt2uS6CCljNpHCIj1xTbcEtL2YNvgmdxFymCRYibh0SbDsI 3Ii5EEeGt+3AalnwUAv/HQJBSOVHAuYcWN0UlvBvuRl0E+gf5kOB/CXauu45nMqp mxOXLXgoCFWiHe+NluGnMFMfAwYAJGKlrt+7HMHiPnELjbYOlrfv/I2xts0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7v2fi7UqOkf8kVN+sMARjZ9RskwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2XjAhBF3JS4MRoLwNvkLFsmCDdRuu4oxzj X/zLnquAKYR8g1ySAj+dVF+0MmyuyqDLtCBHkf/3mgnrLURp8N8R8kXp1xi357IO rZMumRKo1Ic0oBw46M+shGPY2DsSM9Cv8LSxBcLe5eEIG7eWHqJnkCo3syBOca4N psWUSKbBV0n3EcYbE8zcze4NkHUuvG0/7eZcm1vPyPoBQSWmhNaHShI0kHksaaE3 yh0QPI9xkx0zoo7ahvOZkRwoCkkqJ2EDF2/jvZ6hAHTCh5m8b/9GpHOhOHrlWAKo eXQPwPN61D1vz+5tJ3E5G0HQf/MJXqgtEEAiQh7Lv9bQkLUScfw= -----END CERTIFICATE-----Generated at Thu Dec 18 05:22:44 2025 by rpki-client