This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: 4ruFyPmTrC1pVDgg10kszuKVWqR/uwJS3uDw9xOpFK4= Subject key identifier: 40:0D:91:08:DE:2F:13:7A:21:1B:58:8D:71:C3:5C:56:CE:34:4C:07 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 766D3096683C35BA35DB4EBEA3FA6FF063824D11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: A9 Signing time: Sat 20 Dec 2025 21:23:09 +0000 Manifest this update: Sat 20 Dec 2025 21:18:09 +0000 Manifest next update: Wed 24 Dec 2025 00:20:09 +0000 Files and hashes: 1: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34=) 2: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: 38zjsCVYHy7STHwuAdqaaUKuP5f+uV1D7WhGrdPhfCc=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k=) 4: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:30:96:68:3c:35:ba:35:db:4e:be:a3:fa:6f:f0:63:82:4d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Dec 20 21:18:09 2025 GMT Not After : Dec 24 00:20:09 2025 GMT Subject: CN=400D9108DE2F137A211B588D71C35C56CE344C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:61:ba:9f:2a:8d:cd:76:a0:8c:bb:41:be: ba:ce:65:ed:e5:96:d2:20:ab:61:e4:42:60:d1:83: 2e:41:eb:bc:f3:db:f2:7a:5d:ad:97:8f:30:89:d3: bc:5d:2d:c6:dc:93:30:ca:aa:8a:f1:7e:b9:a3:fc: e2:a7:2d:94:91:4c:31:af:b2:6a:b8:cc:fb:f2:cf: fc:08:3a:b4:ae:46:22:63:9d:21:19:c9:ff:75:98: 85:dc:3c:59:42:d8:27:c2:fd:d4:ee:da:f5:26:8f: 7c:9e:4f:c3:0e:46:51:9d:e9:3c:af:8f:a9:9e:db: 34:d4:35:32:7e:36:51:6e:1e:59:a8:68:65:ef:ad: 47:b2:b1:10:c5:1b:75:fc:7d:58:16:db:51:44:7f: 62:e4:b1:2d:19:b7:bd:32:5a:ab:49:87:7f:74:fb: 2d:9f:f6:b4:69:a2:c4:ff:4d:e4:67:89:2c:dc:c9: 29:61:a1:4f:a6:23:b8:91:01:ee:3c:cc:69:bc:a0: 7b:0b:d6:d3:36:1b:6f:1d:77:3d:07:10:c6:36:32: 1c:a0:c2:27:d4:e8:7d:a8:87:a7:e0:3b:98:33:e4: 1b:d7:cd:12:ee:6b:e2:38:41:17:4b:30:f7:ed:24: ed:2e:08:dd:bc:4b:31:f3:57:a2:ee:52:14:fa:ad: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:91:08:DE:2F:13:7A:21:1B:58:8D:71:C3:5C:56:CE:34:4C:07 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d2:a4:fe:ff:f9:fb:56:03:df:43:44:0f:40:f1:2e:db:54: 78:ed:d2:fe:f3:c8:16:ab:4b:a2:67:e3:c7:e1:9f:b5:0d:ad: 33:e7:83:bc:a9:fa:17:5d:ac:68:3d:1f:c4:86:de:a2:3f:15: 7d:6e:e8:38:6d:7d:35:b1:01:3e:ec:26:03:9c:42:2e:6e:64: 12:ee:17:7b:70:7b:0c:ee:a3:89:5c:24:cc:fe:dc:bd:29:79: 83:f2:fe:93:37:4d:28:1c:bb:4b:16:0d:e0:8d:4f:65:f7:9e: 41:ed:2e:8a:01:8c:8d:a9:bd:6d:f8:70:43:40:ed:03:c7:13: 43:89:2c:9d:d3:11:90:af:f5:04:85:25:e7:c2:78:f6:e2:b8: ff:5d:90:ca:a4:6d:3e:16:64:ae:06:24:ff:f0:70:8f:59:0e: d0:1c:47:dc:6f:a5:3f:be:49:63:96:30:b8:48:f6:73:55:37: 5a:f9:67:b9:d9:38:3d:97:b4:5e:63:fb:34:a9:37:8d:ce:1a: cf:68:87:52:53:71:4a:58:a3:b4:b4:90:cc:df:92:84:e8:9b: 43:e9:b9:d5:ce:c6:56:25:f0:81:8c:9d:9a:ea:46:7a:07:97: e2:df:b0:83:b4:95:ce:6d:17:b2:93:55:12:98:ee:5c:66:43: dc:f1:38:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm0wlmg8Nbo1206+o/pv8GOCTREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTEyMjAyMTE4MDlaFw0yNTEyMjQwMDIwMDlaMDMxMTAvBgNV BAMTKDQwMEQ5MTA4REUyRjEzN0EyMTFCNTg4RDcxQzM1QzU2Q0UzNDRDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVGG6nyqNzXagjLtBvrrOZe3l ltIgq2HkQmDRgy5B67zz2/J6Xa2XjzCJ07xdLcbckzDKqorxfrmj/OKnLZSRTDGv smq4zPvyz/wIOrSuRiJjnSEZyf91mIXcPFlC2CfC/dTu2vUmj3yeT8MORlGd6Tyv j6me2zTUNTJ+NlFuHlmoaGXvrUeysRDFG3X8fVgW21FEf2LksS0Zt70yWqtJh390 +y2f9rRposT/TeRniSzcySlhoU+mI7iRAe48zGm8oHsL1tM2G28ddz0HEMY2Mhyg wifU6H2oh6fgO5gz5BvXzRLua+I4QRdLMPftJO0uCN28SzHzV6LuUhT6rfu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQA2RCN4vE3ohG1iNccNcVs40TAcwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7SpP7/+ftWA99DRA9A8S7bVHjt0v7zyBar S6Jn48fhn7UNrTPng7yp+hddrGg9H8SG3qI/FX1u6DhtfTWxAT7sJgOcQi5uZBLu F3twewzuo4lcJMz+3L0peYPy/pM3TSgcu0sWDeCNT2X3nkHtLooBjI2pvW34cENA 7QPHE0OJLJ3TEZCv9QSFJefCePbiuP9dkMqkbT4WZK4GJP/wcI9ZDtAcR9xvpT++ SWOWMLhI9nNVN1r5Z7nZOD2XtF5j+zSpN43OGs9oh1JTcUpYo7S0kMzfkoTom0Pp udXOxlYl8IGMnZrqRnoHl+LfsIO0lc5tF7KTVRKY7lxmQ9zxOGw= -----END CERTIFICATE-----Generated at Mon Dec 22 03:45:58 2025 by rpki-client