This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: 3X1xwk8zdWtF2L/dkxKO7MXGrboCI/pUdPBP+5g6eIc= Subject key identifier: 19:FF:26:6C:71:84:8C:E9:56:8C:2D:A6:9A:43:C5:32:25:F7:94:E6 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 2EB53F0790392D2BCAF284D936499C284D8AB9D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01DA Signing time: Wed 24 Dec 2025 09:32:30 +0000 Manifest this update: Wed 24 Dec 2025 09:27:30 +0000 Manifest next update: Sat 27 Dec 2025 19:07:30 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: GWCC92UvVNxzAR+uo5tXXdqG3GTikXVnDGjPw4c1p6M=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: qMJCzEp1kB255KL4Lpk1hf3Sg7O/3XdgYccTkdZ5jPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b5:3f:07:90:39:2d:2b:ca:f2:84:d9:36:49:9c:28:4d:8a:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Dec 24 09:27:30 2025 GMT Not After : Dec 27 19:07:30 2025 GMT Subject: CN=19FF266C71848CE9568C2DA69A43C53225F794E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:a3:10:81:4c:e3:e1:88:e6:97:e4:ec:b6: b2:db:10:3b:be:3f:f9:46:21:09:7f:7f:20:8b:64: 84:2d:4c:79:0a:31:ee:87:ae:fd:05:f8:9a:cf:0b: 73:5f:3b:63:cc:6c:27:7d:b8:fb:80:1b:99:00:78: b9:5c:d1:3b:21:d6:81:74:d6:2c:60:1c:47:49:d6: b5:e5:6b:3e:77:ef:bc:3d:ed:7c:f4:cc:67:fe:e8: c9:7b:69:a7:d4:33:e4:04:fa:f7:63:2a:07:00:08: ac:59:ce:3d:e7:04:fd:21:7a:68:62:0c:65:c8:8a: fd:7d:d3:a0:8d:79:0b:b4:3b:80:fd:eb:48:9a:ee: ec:e0:2d:98:65:38:c1:63:8f:35:c9:d7:7c:0c:d3: 5f:e7:8f:2a:62:38:9d:75:9f:fd:bb:48:ad:8c:48: 77:25:a9:69:af:52:71:65:77:9a:a9:b0:a7:a9:fa: f5:57:ec:6c:40:8d:2d:7b:37:4f:25:6e:f7:40:f3: 0e:12:c9:df:fe:a1:18:54:df:7c:ef:48:38:d3:e6: e5:1b:a1:43:cd:8c:74:b9:14:84:16:43:ba:59:d1: 97:80:c3:7c:46:cc:8e:74:a4:45:01:92:03:4b:d5: 2d:40:ee:24:f3:91:1a:87:4c:34:61:0f:e2:9a:8f: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:26:6C:71:84:8C:E9:56:8C:2D:A6:9A:43:C5:32:25:F7:94:E6 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:eb:fd:77:a0:dd:69:da:41:a0:8d:cd:e7:8f:70:b8:57:eb: 9b:93:0b:89:fb:65:da:c9:03:79:75:39:b5:52:a1:09:7b:6d: 10:b0:15:23:9e:5c:e7:d2:01:43:ea:f3:f3:89:c9:ed:d8:21: 08:b2:43:84:54:79:36:72:79:d4:31:cc:fc:9a:73:1a:7a:f0: c8:c0:a4:a7:4c:a2:dc:e5:4d:c2:87:80:39:45:ce:dd:28:87: 5d:52:91:0b:72:41:8c:ca:36:60:b8:3c:19:9e:38:58:48:89: 76:37:5d:52:0a:a6:94:68:2d:b9:f7:60:35:2c:1c:6f:09:05: 67:69:00:f0:59:84:e9:1f:1d:61:b4:fc:4f:e1:11:32:86:75: 3f:9e:72:55:1a:f3:27:8b:ed:a6:e6:60:cf:69:a0:19:23:1e: 9c:fe:42:8e:32:b7:55:d9:df:85:67:62:fe:75:fd:f5:69:47: 45:a7:8e:1e:4f:e0:1a:36:1c:21:ea:2a:53:06:18:bd:25:b4: 26:3d:e7:6d:08:9b:35:0e:90:d4:28:09:2e:19:97:4a:e2:e5: c3:a4:eb:ac:4b:3b:4e:90:fa:c4:0c:7b:b6:4c:65:35:a1:ce: e4:0a:da:25:07:e8:45:80:c5:6a:f7:f5:2b:6b:cd:82:e7:30: 91:08:71:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrU/B5A5LSvK8oTZNkmcKE2KudgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTEyMjQwOTI3MzBaFw0yNTEyMjcxOTA3MzBaMDMxMTAvBgNV BAMTKDE5RkYyNjZDNzE4NDhDRTk1NjhDMkRBNjlBNDNDNTMyMjVGNzk0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVDKMQgUzj4Yjml+TstrLbEDu+ P/lGIQl/fyCLZIQtTHkKMe6Hrv0F+JrPC3NfO2PMbCd9uPuAG5kAeLlc0Tsh1oF0 1ixgHEdJ1rXlaz5377w97Xz0zGf+6Ml7aafUM+QE+vdjKgcACKxZzj3nBP0hemhi DGXIiv1906CNeQu0O4D960ia7uzgLZhlOMFjjzXJ13wM01/njypiOJ11n/27SK2M SHclqWmvUnFld5qpsKep+vVX7GxAjS17N08lbvdA8w4Syd/+oRhU33zvSDjT5uUb oUPNjHS5FIQWQ7pZ0ZeAw3xGzI50pEUBkgNL1S1A7iTzkRqHTDRhD+Kaj7KBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGf8mbHGEjOlWjC2mmkPFMiX3lOYwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXr/Xeg3WnaQaCNzeePcLhX65uTC4n7ZdrJ A3l1ObVSoQl7bRCwFSOeXOfSAUPq8/OJye3YIQiyQ4RUeTZyedQxzPyacxp68MjA pKdMotzlTcKHgDlFzt0oh11SkQtyQYzKNmC4PBmeOFhIiXY3XVIKppRoLbn3YDUs HG8JBWdpAPBZhOkfHWG0/E/hETKGdT+eclUa8yeL7abmYM9poBkjHpz+Qo4yt1XZ 34VnYv51/fVpR0Wnjh5P4Bo2HCHqKlMGGL0ltCY9520ImzUOkNQoCS4Zl0ri5cOk 66xLO06Q+sQMe7ZMZTWhzuQK2iUH6EWAxWr39StrzYLnMJEIccM= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:18 2025 by rpki-client