This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: Bs6VPAaoiW3Drbnpl+YKrJQdaEd0CnAHaW23iw+XgzA= Subject key identifier: 16:C5:51:9C:21:7E:CA:58:22:74:1D:5F:E7:C7:3C:41:64:92:3B:7C Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 123249F1965A7617C56CB7969BD7B20CA93836D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: 0114 Signing time: Fri 05 Dec 2025 01:42:23 +0000 Manifest this update: Fri 05 Dec 2025 01:37:23 +0000 Manifest next update: Mon 08 Dec 2025 08:54:23 +0000 Files and hashes: 1: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: pWKTizu1P9J5Glo5ySrn6WLPGVu3rIG2VDgT1sG0jwU=) 2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:32:49:f1:96:5a:76:17:c5:6c:b7:96:9b:d7:b2:0c:a9:38:36:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Dec 5 01:37:23 2025 GMT Not After : Dec 8 08:54:23 2025 GMT Subject: CN=16C5519C217ECA5822741D5FE7C73C4164923B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:37:2f:3a:d9:0f:04:72:ab:aa:f4:5c:5a: 45:7a:fb:4b:8f:5c:2f:81:66:f5:7c:ef:7e:64:dd: e3:10:f8:fc:0b:a4:43:d2:d4:84:76:92:c1:00:04: 74:a7:0c:bb:e2:99:09:6b:62:42:fa:26:34:94:7d: 19:04:87:b5:63:f7:88:a2:7d:e5:59:77:11:68:dd: 7c:d1:88:bf:2d:65:fa:19:28:d5:c1:0f:9e:9c:f3: d5:b1:42:77:bc:94:99:f1:6c:01:4e:c1:f7:85:12: 39:44:60:db:fe:17:93:b9:e7:e0:19:0e:db:c9:f7: 82:1b:87:10:07:21:53:de:ec:af:03:82:70:0b:00: 3f:cb:da:fc:c5:74:7c:fe:d7:af:da:9d:ec:50:9d: c1:2b:09:c6:ad:b0:bb:45:33:e3:3a:b9:a1:fd:c0: 00:4e:53:4b:f5:65:bc:ba:c3:62:1a:b8:90:5a:e4: 0c:08:d7:76:e0:e1:e2:7d:42:71:41:33:8a:ea:6d: 42:98:0e:ab:a5:8e:09:4a:bf:d7:54:88:68:79:8e: 91:0a:aa:04:be:7f:ba:bd:2e:f9:9a:b8:09:3b:7d: e7:b9:2e:ec:02:d7:85:43:22:20:59:a4:5f:95:f9: 9a:be:61:0f:67:3f:bd:e3:e0:7f:4b:0e:16:f2:90: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C5:51:9C:21:7E:CA:58:22:74:1D:5F:E7:C7:3C:41:64:92:3B:7C X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5c:29:ac:81:78:c5:48:a4:50:27:67:cf:d3:7b:93:52:ef: 0a:06:2b:7c:94:0e:cf:d2:ba:e5:66:9e:9b:ca:40:3e:8e:81: 1b:46:58:60:1a:da:61:b2:7c:00:35:6e:68:76:59:49:a7:e2: e7:e1:09:f9:0b:36:8b:ec:7e:94:10:24:03:5d:a9:66:c2:dd: ca:a9:71:93:2f:18:db:b6:99:69:7c:f6:0d:54:7f:3d:74:fd: e2:80:09:11:c1:9f:1a:c5:f4:01:b4:cb:c7:f6:8d:84:80:57: a7:0c:7e:b7:41:44:58:2b:9a:87:05:c8:9d:aa:68:2e:f9:86: bc:76:56:d8:a4:10:ca:bc:09:43:46:e8:da:96:14:dd:3f:9d: 90:7a:65:12:23:41:22:f5:a6:6f:6f:fd:93:dd:84:4f:fc:43: 74:62:cd:bc:30:60:c8:e3:b1:d3:52:0d:06:42:11:9c:d4:ea: c1:c2:d8:86:a0:cd:1c:85:cd:fa:4a:f8:f6:bd:4e:e4:1d:9a: 83:4e:99:71:9f:7f:19:1b:56:d4:36:c5:c9:da:29:77:e5:ce: 7c:2c:a4:d8:dd:ef:30:d1:46:ca:d0:9c:a1:d2:61:8e:94:75: 1c:5f:72:c0:6f:88:ea:96:36:96:aa:89:03:30:b1:63:aa:4b: 79:52:9e:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjJJ8ZZadhfFbLeWm9eyDKk4NtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTEyMDUwMTM3MjNaFw0yNTEyMDgwODU0MjNaMDMxMTAvBgNV BAMTKDE2QzU1MTlDMjE3RUNBNTgyMjc0MUQ1RkU3QzczQzQxNjQ5MjNCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGDcvOtkPBHKrqvRcWkV6+0uP XC+BZvV8735k3eMQ+PwLpEPS1IR2ksEABHSnDLvimQlrYkL6JjSUfRkEh7Vj94ii feVZdxFo3XzRiL8tZfoZKNXBD56c89WxQne8lJnxbAFOwfeFEjlEYNv+F5O55+AZ DtvJ94IbhxAHIVPe7K8DgnALAD/L2vzFdHz+16/anexQncErCcatsLtFM+M6uaH9 wABOU0v1Zby6w2IauJBa5AwI13bg4eJ9QnFBM4rqbUKYDquljglKv9dUiGh5jpEK qgS+f7q9LvmauAk7fee5LuwC14VDIiBZpF+V+Zq+YQ9nP73j4H9LDhbykMrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsVRnCF+ylgidB1f58c8QWSSO3wwHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpcKayBeMVIpFAnZ8/Te5NS7woGK3yUDs/S uuVmnpvKQD6OgRtGWGAa2mGyfAA1bmh2WUmn4ufhCfkLNovsfpQQJANdqWbC3cqp cZMvGNu2mWl89g1Ufz10/eKACRHBnxrF9AG0y8f2jYSAV6cMfrdBRFgrmocFyJ2q aC75hrx2VtikEMq8CUNG6NqWFN0/nZB6ZRIjQSL1pm9v/ZPdhE/8Q3RizbwwYMjj sdNSDQZCEZzU6sHC2IagzRyFzfpK+Pa9TuQdmoNOmXGffxkbVtQ2xcnaKXflznws pNjd7zDRRsrQnKHSYY6UdRxfcsBviOqWNpaqiQMwsWOqS3lSnq4= -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:25 2025 by rpki-client