This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: BK1xecXWibPlQUNFGRq/v0ebuST/O+UZams3lb8Pz7c= Subject key identifier: 47:60:D2:B7:01:78:D9:51:1C:F3:45:D1:85:AC:33:7A:FA:8B:D1:E2 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 5581BDCEE1426BCB434CEC6B40D8C7A0D7A633CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 022E Signing time: Fri 05 Dec 2025 18:22:05 +0000 Manifest this update: Fri 05 Dec 2025 18:17:05 +0000 Manifest next update: Tue 09 Dec 2025 01:01:05 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: oCBatWPKOw0693LYwXg0WVKK77lPfyGT0e3X+GZPLWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:81:bd:ce:e1:42:6b:cb:43:4c:ec:6b:40:d8:c7:a0:d7:a6:33:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Dec 5 18:17:05 2025 GMT Not After : Dec 9 01:01:05 2025 GMT Subject: CN=4760D2B70178D9511CF345D185AC337AFA8BD1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:cf:5c:f5:27:32:9c:67:9b:4d:79:55:e6: dd:75:6f:b5:bc:a7:14:3b:b5:1a:03:4c:18:d3:80: 67:69:30:9f:d9:67:c9:e2:0f:76:32:43:95:bc:96: 3c:19:27:2b:e5:46:60:d3:db:d8:68:c3:14:75:77: f4:8e:d4:d2:d3:8c:e3:4f:fa:41:f6:ab:aa:15:6c: ca:41:51:d2:2c:3b:ac:9c:da:ec:d0:15:6c:a6:1a: 39:c2:3f:cb:3d:15:cc:25:0f:c2:ee:a2:60:6c:bd: 37:5e:35:48:f6:57:b4:d9:b7:a0:ed:e9:06:3d:35: 64:21:f5:3f:11:52:83:87:9e:0f:a1:db:4a:d2:0e: ac:af:31:87:4f:4b:03:34:52:61:98:e6:0a:c6:a1: c7:c2:fe:5a:08:f6:6e:6d:23:04:e9:0b:83:62:f8: 06:a7:f3:65:f1:fc:f3:14:ad:bd:06:29:99:75:2e: 1f:73:2c:2d:fc:12:a4:10:cb:f4:32:4c:b4:01:0a: c9:ee:1e:25:69:9c:28:de:30:b0:1e:56:a7:b3:ba: b9:ab:a5:c3:74:a6:3f:f7:3d:ed:81:de:e8:42:2e: 25:28:4c:e0:44:f5:59:f2:b8:be:0d:cb:24:ee:49: b3:a8:53:4e:c0:6d:2a:e7:ff:af:b9:4d:7d:71:e8: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:60:D2:B7:01:78:D9:51:1C:F3:45:D1:85:AC:33:7A:FA:8B:D1:E2 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:c2:31:ed:48:99:06:3d:8d:1f:2b:89:7b:fc:61:7b:99: 05:40:4e:73:f6:8f:ae:da:ed:b8:e5:d6:7f:e1:ce:37:f4:db: 67:55:fc:7e:f2:5b:ff:0b:41:65:5c:21:4c:eb:99:5a:86:0c: 65:47:03:f9:fc:63:43:7e:27:0c:01:ae:4f:04:67:2b:37:b4: bd:e8:2f:d1:b0:14:f1:09:cb:ff:38:96:da:a3:31:61:1b:af: 95:9d:d3:a3:bd:c3:3f:74:ce:ba:45:8c:00:e6:9f:30:a0:8b: 86:d9:30:28:a2:15:0a:aa:6e:cc:e3:e8:5a:e0:90:ef:54:2a: 8e:6f:80:48:9e:5d:c8:33:11:93:ce:e7:79:21:61:33:c4:91: 24:c9:48:ff:1e:ae:4b:75:64:07:a7:fa:dc:ec:3f:4a:26:2e: 15:b8:0c:3c:85:38:e7:19:6a:27:9d:e8:95:1e:c2:c3:79:20: a6:9d:1d:bf:e9:0c:0a:86:8c:3f:03:fe:54:9c:cf:10:d5:7f: 18:bb:fc:32:37:e6:80:41:3c:b9:61:6e:d0:b5:79:fd:47:e6: 9c:46:a8:68:98:d9:43:bc:e9:8b:cd:07:cf:15:c5:3f:80:f8: 9f:27:5e:17:c3:ca:ab:ad:10:de:ce:be:32:2c:92:8e:e4:ff: 75:69:4c:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYG9zuFCa8tDTOxrQNjHoNemM84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTEyMDUxODE3MDVaFw0yNTEyMDkwMTAxMDVaMDMxMTAvBgNV BAMTKDQ3NjBEMkI3MDE3OEQ5NTExQ0YzNDVEMTg1QUMzMzdBRkE4QkQxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+c9c9ScynGebTXlV5t11b7W8 pxQ7tRoDTBjTgGdpMJ/ZZ8niD3YyQ5W8ljwZJyvlRmDT29howxR1d/SO1NLTjONP +kH2q6oVbMpBUdIsO6yc2uzQFWymGjnCP8s9FcwlD8LuomBsvTdeNUj2V7TZt6Dt 6QY9NWQh9T8RUoOHng+h20rSDqyvMYdPSwM0UmGY5grGocfC/loI9m5tIwTpC4Ni +Aan82Xx/PMUrb0GKZl1Lh9zLC38EqQQy/QyTLQBCsnuHiVpnCjeMLAeVqezurmr pcN0pj/3Pe2B3uhCLiUoTOBE9VnyuL4NyyTuSbOoU07AbSrn/6+5TX1x6Pl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2DStwF42VEc80XRhawzevqL0eIwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEawjHtSJkGPY0fK4l7/GF7mQVATnP2j67a 7bjl1n/hzjf022dV/H7yW/8LQWVcIUzrmVqGDGVHA/n8Y0N+JwwBrk8EZys3tL3o L9GwFPEJy/84ltqjMWEbr5Wd06O9wz90zrpFjADmnzCgi4bZMCiiFQqqbszj6Frg kO9UKo5vgEieXcgzEZPO53khYTPEkSTJSP8erkt1ZAen+tzsP0omLhW4DDyFOOcZ aied6JUewsN5IKadHb/pDAqGjD8D/lSczxDVfxi7/DI35oBBPLlhbtC1ef1H5pxG qGiY2UO86YvNB88VxT+A+J8nXhfDyqutEN7OvjIsko7k/3VpTEk= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:54 2025 by rpki-client