This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: wKBrs8HoDq+R5bkatUPT9uuKvnA5PC7oPCE/SEPxXtM= Subject key identifier: 4C:97:94:D4:A5:0A:10:8D:5D:61:0C:26:AF:08:8E:41:11:25:5B:1B Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 657693B905C954B41494556AF31D4D7E3FF3EA31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 019E Signing time: Fri 05 Dec 2025 15:50:49 +0000 Manifest this update: Fri 05 Dec 2025 15:45:49 +0000 Manifest next update: Mon 08 Dec 2025 23:25:49 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: 9kQ8E2cUE8XtQtu35F/pEhOvYvATFyJZThOTuyYD8KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:76:93:b9:05:c9:54:b4:14:94:55:6a:f3:1d:4d:7e:3f:f3:ea:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Dec 5 15:45:49 2025 GMT Not After : Dec 8 23:25:49 2025 GMT Subject: CN=4C9794D4A50A108D5D610C26AF088E4111255B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:a4:3e:80:46:2b:b6:b9:da:d8:26:5f:3e: ae:4d:cd:8e:cf:c8:e7:6f:b3:d9:e8:19:4a:2f:3d: 03:c2:23:83:db:96:22:cb:03:ad:da:dd:da:74:dc: 28:26:59:7a:21:7c:f2:fe:bd:07:a7:dc:ea:9f:e8: 67:de:bc:db:47:27:d8:a2:a4:41:89:44:82:34:47: 19:d8:e0:a8:8c:01:8f:44:eb:21:0a:f1:e5:c3:8d: 8a:34:6e:ec:49:80:7b:2e:48:02:88:16:aa:20:af: c8:01:25:fc:7b:95:93:d6:a2:f8:4b:57:67:00:e2: b6:19:97:d7:8d:a1:df:41:06:9e:9a:9f:20:08:52: b3:9b:62:c0:ba:c7:69:51:bd:32:46:d8:70:d7:d3: ca:e6:ae:6e:5c:95:54:3b:d9:0d:00:94:a8:e7:4f: 8e:cd:6c:fa:bf:22:f4:66:a6:a8:1b:1d:4f:36:0e: f5:15:f8:2f:13:9f:08:cc:93:3d:62:e9:a2:7c:8f: e0:0a:81:12:1a:16:fd:29:2e:fc:3e:f0:e4:5b:2e: 93:14:19:35:b6:73:1f:db:6c:07:33:60:ae:85:d8: d2:92:56:85:2a:0c:98:85:4a:52:70:92:37:30:1c: f9:df:64:02:29:f3:8f:fc:4b:8c:8b:f6:23:12:31: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:97:94:D4:A5:0A:10:8D:5D:61:0C:26:AF:08:8E:41:11:25:5B:1B X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:f2:88:80:7e:6f:aa:06:fc:7e:98:b1:20:1e:e2:1d:e7: 52:27:d8:25:e1:9c:2d:62:14:42:29:b7:23:4e:58:41:d5:e7: 45:ce:0a:59:77:54:5b:56:ae:f8:84:ef:ff:c8:ad:86:86:9d: fa:74:11:3f:96:2e:6c:f7:4c:ad:1f:ab:bb:9c:ad:ae:58:b6: d9:81:9b:ec:50:ed:f0:08:6f:05:00:c4:7c:74:bd:74:b8:0f: 64:c5:a6:00:11:16:88:32:66:87:19:13:4d:f1:51:15:90:6c: 39:b8:21:e6:05:20:d9:b7:02:bc:88:13:1e:8f:4e:82:31:ad: eb:31:9a:e6:91:df:2c:0a:40:6e:5e:cb:f1:bb:c9:1f:35:6f: b4:9e:12:b3:87:0c:9c:3a:b1:95:fb:3a:aa:41:98:cd:35:73: fa:f6:0d:7e:09:13:7d:5f:ba:f6:1d:dc:53:25:17:9e:c6:0f: 55:72:30:09:f9:33:25:f5:4e:04:d5:5f:1f:c2:ed:e5:53:18: 0f:aa:01:51:82:02:8a:d0:45:f0:7b:1d:e5:76:19:4b:73:9c: f4:05:86:24:a2:fd:56:91:b5:84:56:f4:64:3d:0e:1e:15:ed: ce:a6:20:77:56:23:49:ef:16:bc:f3:80:29:29:de:22:33:17: 82:86:24:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXaTuQXJVLQUlFVq8x1Nfj/z6jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTEyMDUxNTQ1NDlaFw0yNTEyMDgyMzI1NDlaMDMxMTAvBgNV BAMTKDRDOTc5NEQ0QTUwQTEwOEQ1RDYxMEMyNkFGMDg4RTQxMTEyNTVCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZ6Q+gEYrtrna2CZfPq5NzY7P yOdvs9noGUovPQPCI4PbliLLA63a3dp03CgmWXohfPL+vQen3Oqf6GfevNtHJ9ii pEGJRII0RxnY4KiMAY9E6yEK8eXDjYo0buxJgHsuSAKIFqogr8gBJfx7lZPWovhL V2cA4rYZl9eNod9BBp6anyAIUrObYsC6x2lRvTJG2HDX08rmrm5clVQ72Q0AlKjn T47NbPq/IvRmpqgbHU82DvUV+C8TnwjMkz1i6aJ8j+AKgRIaFv0pLvw+8ORbLpMU GTW2cx/bbAczYK6F2NKSVoUqDJiFSlJwkjcwHPnfZAIp84/8S4yL9iMSMYzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJeU1KUKEI1dYQwmrwiOQRElWxswHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ78oiAfm+qBvx+mLEgHuId51In2CXhnC1i FEIptyNOWEHV50XOCll3VFtWrviE7//IrYaGnfp0ET+WLmz3TK0fq7ucra5YttmB m+xQ7fAIbwUAxHx0vXS4D2TFpgARFogyZocZE03xURWQbDm4IeYFINm3AryIEx6P ToIxresxmuaR3ywKQG5ey/G7yR81b7SeErOHDJw6sZX7OqpBmM01c/r2DX4JE31f uvYd3FMlF57GD1VyMAn5MyX1TgTVXx/C7eVTGA+qAVGCAorQRfB7HeV2GUtznPQF hiSi/VaRtYRW9GQ9Dh4V7c6mIHdWI0nvFrzzgCkp3iIzF4KGJDs= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:44 2025 by rpki-client