This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: +KnWQhF3HtnVhqISWw/mNiQEq0GoYx6Bh4pdjiT7qnA= Subject key identifier: 0D:4D:B2:5C:E2:B7:6A:AB:5E:02:31:BF:D1:8A:82:6B:42:38:F0:8E Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 765736B18C170A68CF1D18B4C7DBC7F07EBC6784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 052B Signing time: Sat 06 Dec 2025 05:40:53 +0000 Manifest this update: Sat 06 Dec 2025 05:35:53 +0000 Manifest next update: Tue 09 Dec 2025 08:33:53 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: 9L0ZKgih0mpxs79YzkTlvJFefWFaU6wr9PqfnIpBGuw=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:57:36:b1:8c:17:0a:68:cf:1d:18:b4:c7:db:c7:f0:7e:bc:67:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Dec 6 05:35:53 2025 GMT Not After : Dec 9 08:33:53 2025 GMT Subject: CN=0D4DB25CE2B76AAB5E0231BFD18A826B4238F08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:11:92:e6:a6:0f:ee:dc:38:c2:d9:d0:bb: 22:e5:9f:dd:b7:ca:9c:4b:08:52:eb:11:63:60:8a: ff:ae:f9:14:62:58:7f:fe:94:f8:0b:49:df:b6:b9: b6:57:c0:a2:a0:56:32:fe:66:b9:74:11:4d:ff:71: b6:25:54:25:54:d2:3a:a5:4f:d7:1c:05:2c:ba:11: 99:38:16:c9:0f:7d:85:b7:66:5d:1f:bd:5b:89:13: 50:9b:6d:3a:fe:61:4b:ae:7e:0b:ea:cd:27:2f:72: 24:62:77:b7:ea:0f:fd:0f:41:b4:1e:01:5d:40:20: 89:dd:d6:ad:4e:85:c3:02:06:e7:90:a4:b6:19:35: 69:79:f8:20:fa:f4:21:60:db:66:58:58:5d:a4:4f: 33:c0:cd:c6:e8:a2:95:93:d5:59:31:74:bf:0d:1e: de:99:2f:a5:a7:5c:10:e5:cb:b3:f2:cb:cd:76:94: 34:0c:6e:bd:f3:22:cc:48:c1:65:a7:2f:37:c4:6c: f9:89:02:eb:26:0f:a7:99:07:96:60:91:fb:22:c7: e4:ef:a6:b8:92:be:80:b7:b9:34:0d:1e:74:05:6a: a2:89:47:f4:bc:91:ee:04:2f:65:9f:81:8c:34:26: e6:29:17:89:87:0b:1c:fa:72:85:b6:3d:65:ee:ee: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:B2:5C:E2:B7:6A:AB:5E:02:31:BF:D1:8A:82:6B:42:38:F0:8E X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:26:56:08:ed:5f:77:5a:d6:5a:17:7c:f5:71:0b:8d:b6:7d: bc:06:ea:cd:b8:10:2d:b1:42:a7:aa:8d:ea:5c:0d:2f:62:ec: d1:d6:6e:1d:56:f7:12:a2:03:ef:99:ab:fb:e9:6f:9e:9c:05: ca:89:45:8a:f5:c9:92:8a:dc:cf:bb:88:af:ca:d3:ae:7e:d6: 76:9c:73:25:bf:2f:97:cc:a2:d2:f5:72:4f:6c:07:07:97:bd: 0f:f9:56:d6:92:e3:ca:f5:77:09:8e:37:ae:e6:d3:fa:70:ac: 7b:13:09:8d:b3:a7:1e:02:73:fa:40:f2:2c:98:e6:bd:ee:74: 5f:29:5a:3c:71:5c:25:44:be:27:e4:94:0c:cc:87:c9:ea:2e: 91:bd:f7:47:c9:aa:fd:dc:74:b7:dc:ed:2b:b0:63:0f:f1:fa: 75:61:43:d8:ff:1d:ef:b8:68:a6:9d:25:d4:0f:f2:a8:ae:f4: 33:14:10:f5:53:de:b2:0e:7b:e1:3c:9f:75:52:a5:b7:cb:a2: 3e:67:c6:dc:0f:d2:a3:c0:27:c9:ba:af:e6:3c:0f:50:34:2e: 61:ac:88:4e:fe:04:c5:24:51:94:4f:ee:c0:85:15:52:23:df: 3a:f3:48:96:29:d3:4d:31:d8:25:e4:9a:9f:3d:5f:b9:28:dd: 87:82:9e:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlc2sYwXCmjPHRi0x9vH8H68Z4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNTEyMDYwNTM1NTNaFw0yNTEyMDkwODMzNTNaMDMxMTAvBgNV BAMTKDBENERCMjVDRTJCNzZBQUI1RTAyMzFCRkQxOEE4MjZCNDIzOEYwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRRGS5qYP7tw4wtnQuyLln923 ypxLCFLrEWNgiv+u+RRiWH/+lPgLSd+2ubZXwKKgVjL+Zrl0EU3/cbYlVCVU0jql T9ccBSy6EZk4FskPfYW3Zl0fvVuJE1CbbTr+YUuufgvqzScvciRid7fqD/0PQbQe AV1AIInd1q1OhcMCBueQpLYZNWl5+CD69CFg22ZYWF2kTzPAzcboopWT1VkxdL8N Ht6ZL6WnXBDly7Pyy812lDQMbr3zIsxIwWWnLzfEbPmJAusmD6eZB5Zgkfsix+Tv priSvoC3uTQNHnQFaqKJR/S8ke4EL2WfgYw0JuYpF4mHCxz6coW2PWXu7lwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDU2yXOK3aqteAjG/0YqCa0I48I4wHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQmVgjtX3da1loXfPVxC422fbwG6s24EC2x QqeqjepcDS9i7NHWbh1W9xKiA++Zq/vpb56cBcqJRYr1yZKK3M+7iK/K065+1nac cyW/L5fMotL1ck9sBweXvQ/5VtaS48r1dwmON67m0/pwrHsTCY2zpx4Cc/pA8iyY 5r3udF8pWjxxXCVEvifklAzMh8nqLpG990fJqv3cdLfc7SuwYw/x+nVhQ9j/He+4 aKadJdQP8qiu9DMUEPVT3rIOe+E8n3VSpbfLoj5nxtwP0qPAJ8m6r+Y8D1A0LmGs iE7+BMUkUZRP7sCFFVIj3zrzSJYp000x2CXkmp89X7ko3YeCni4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:47 2025 by rpki-client