This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: e8ldMSl/2+/QGaacq2tDEnld1vFXvnBALeBXCM8X+FQ= Subject key identifier: 2E:00:B0:DB:2C:B9:DD:88:58:EE:70:4F:FB:3C:BB:CF:EE:8A:1D:5E Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 3DE7ADCCE9E827E626AB8D52BD8FDB4ED0B87E6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 0163 Signing time: Wed 24 Dec 2025 02:02:22 +0000 Manifest this update: Wed 24 Dec 2025 01:57:22 +0000 Manifest next update: Sat 27 Dec 2025 07:32:22 +0000 Files and hashes: 1: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=) 2: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=) 3: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=) 4: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=) 5: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=) 6: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=) 7: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: QQ3mrSGz1RKIYLQe+GRrm2W7Hf9Mb45WOpqWjc4uDzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 07:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e7:ad:cc:e9:e8:27:e6:26:ab:8d:52:bd:8f:db:4e:d0:b8:7e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Dec 24 01:57:22 2025 GMT Not After : Dec 27 07:32:22 2025 GMT Subject: CN=2E00B0DB2CB9DD8858EE704FFB3CBBCFEE8A1D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:e1:98:42:0c:e9:dc:9a:93:a1:76:e9:c3: f8:75:bb:e9:06:88:da:27:b2:22:fc:d1:39:29:b5: 85:65:ca:5f:d0:3e:f4:ce:5a:54:57:17:b1:5b:82: 20:a2:87:a2:67:14:20:a3:c3:4a:d4:51:68:1a:58: b2:7e:b1:a7:63:d6:46:2b:43:e5:92:5e:bb:68:e8: 0c:43:8f:68:31:bf:b8:0e:26:9a:35:27:b3:9e:a7: 91:bb:ef:3f:28:01:c9:6b:3e:3b:81:b3:99:7d:de: ad:25:ef:9a:10:02:38:1e:30:55:08:07:18:2d:41: 02:cb:fd:e9:71:83:b8:c5:5d:5a:94:f8:9f:11:1a: 99:a1:01:bb:59:b6:8b:fd:b0:fa:86:98:3d:7c:13: c7:80:8d:f8:c9:7d:56:96:83:21:00:e1:99:3c:ca: cd:d8:47:5a:80:c9:75:4a:c8:db:e3:72:81:98:8a: 4e:fd:96:ac:1c:74:1c:60:e8:11:74:76:aa:f3:cd: a9:35:e3:f9:7f:55:c7:8a:4b:37:7b:4b:2f:ec:fe: e4:2d:0f:bb:70:f3:cf:4a:51:5d:cd:34:61:db:79: 1e:82:d7:e9:1d:41:29:56:43:f3:2c:4f:e7:23:53: 53:74:08:88:fc:27:86:42:27:55:26:cf:42:6a:0b: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:B0:DB:2C:B9:DD:88:58:EE:70:4F:FB:3C:BB:CF:EE:8A:1D:5E X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:78:e3:78:13:fc:0e:4c:e9:90:8e:7c:a0:45:e7:42:b7:40: 89:e6:01:1d:f3:15:98:4e:2f:44:75:6f:c5:35:44:67:0d:d7: 6c:cc:5b:52:63:7d:43:33:59:dc:e0:35:0e:35:75:60:ad:5b: f8:00:4c:c7:f6:f9:ce:f4:6d:3e:9e:7b:d7:4e:8d:44:2a:74: 80:15:35:cd:ef:0c:c3:fe:3c:fc:cb:54:31:bd:d3:bb:5d:4c: 39:cb:99:72:2b:c0:2c:f7:4b:86:be:f4:93:fd:ef:48:28:e0: 83:94:c1:5d:ab:e3:1b:29:8c:8a:33:f8:f6:38:5c:1e:60:80: 0d:95:ca:ee:fa:0f:9e:c8:bb:d5:4c:d8:ac:5b:7c:52:86:d0: 90:73:53:e8:fa:be:ba:32:b9:9b:02:80:b6:44:fc:a4:f3:7e: 90:c3:27:05:6f:7c:99:c2:ed:95:2a:6d:18:0d:08:24:84:13: 16:f9:13:d7:04:b7:22:ff:a1:9e:b7:65:3e:d2:82:ac:8e:f3: 56:87:59:98:67:45:b8:52:98:22:cd:73:06:f6:93:9d:fa:ea: fc:0f:14:61:26:31:cc:fc:54:c3:b3:eb:b8:67:a6:2e:19:8f: 73:c1:60:e2:40:a8:5d:47:25:b6:c7:df:e8:38:01:69:66:84: 62:ed:6f:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeetzOnoJ+Ymq41SvY/bTtC4fmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTEyMjQwMTU3MjJaFw0yNTEyMjcwNzMyMjJaMDMxMTAvBgNV BAMTKDJFMDBCMERCMkNCOUREODg1OEVFNzA0RkZCM0NCQkNGRUU4QTFENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMeGYQgzp3JqToXbpw/h1u+kG iNonsiL80TkptYVlyl/QPvTOWlRXF7FbgiCih6JnFCCjw0rUUWgaWLJ+sadj1kYr Q+WSXrto6AxDj2gxv7gOJpo1J7Oep5G77z8oAclrPjuBs5l93q0l75oQAjgeMFUI BxgtQQLL/elxg7jFXVqU+J8RGpmhAbtZtov9sPqGmD18E8eAjfjJfVaWgyEA4Zk8 ys3YR1qAyXVKyNvjcoGYik79lqwcdBxg6BF0dqrzzak14/l/VceKSzd7Sy/s/uQt D7tw889KUV3NNGHbeR6C1+kdQSlWQ/MsT+cjU1N0CIj8J4ZCJ1Umz0JqC6ylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgCw2yy53YhY7nBP+zy7z+6KHV4wHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx443gT/A5M6ZCOfKBF50K3QInmAR3zFZhO L0R1b8U1RGcN12zMW1JjfUMzWdzgNQ41dWCtW/gATMf2+c70bT6ee9dOjUQqdIAV Nc3vDMP+PPzLVDG907tdTDnLmXIrwCz3S4a+9JP970go4IOUwV2r4xspjIoz+PY4 XB5ggA2Vyu76D57Iu9VM2KxbfFKG0JBzU+j6vroyuZsCgLZE/KTzfpDDJwVvfJnC 7ZUqbRgNCCSEExb5E9cEtyL/oZ63ZT7SgqyO81aHWZhnRbhSmCLNcwb2k5366vwP FGEmMcz8VMOz67hnpi4Zj3PBYOJAqF1HJbbH3+g4AWlmhGLtb3Q= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:37 2025 by rpki-client