This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: /sZgmXx40XuRNLuwjgQcOSqX7aldU4RgfHiEVww8gY8= Subject key identifier: 1A:28:E8:C9:A9:97:F8:31:77:4B:32:09:EB:C4:D3:BF:DC:ED:E6:9E Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 4931959B579E3346F261A4F8D3E73D3729AED3F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01C1 Signing time: Sat 06 Dec 2025 07:50:46 +0000 Manifest this update: Sat 06 Dec 2025 07:45:46 +0000 Manifest next update: Tue 09 Dec 2025 17:20:46 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 3bPZBXi4bz8qpPOP+Al/vQSCbiBk+FpCCDj+On0SFzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:31:95:9b:57:9e:33:46:f2:61:a4:f8:d3:e7:3d:37:29:ae:d3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Dec 6 07:45:46 2025 GMT Not After : Dec 9 17:20:46 2025 GMT Subject: CN=1A28E8C9A997F831774B3209EBC4D3BFDCEDE69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:03:ef:58:d7:c2:41:fc:1f:86:07:b2:45: d0:e8:1b:c0:17:f7:43:14:73:b5:1d:79:40:58:fb: 15:c9:87:3c:77:71:66:df:cf:00:4c:e5:23:f1:da: dd:d3:78:38:05:99:b2:64:0b:cf:e4:30:83:8f:bd: fd:f6:7f:4f:ab:66:07:ab:4d:5a:3a:94:8d:2e:3d: 71:d0:34:ed:65:8f:ab:5a:b7:0a:f9:91:5b:61:e0: bd:51:40:34:ab:e5:41:69:3c:51:ac:35:d5:c5:db: 47:e7:4b:83:4d:94:9f:d4:66:ca:19:40:32:35:c6: ca:8c:9a:93:b3:de:11:e8:8b:9d:03:4d:99:bd:9f: da:a4:41:6a:03:ed:29:b9:94:af:53:83:b1:8f:fb: 54:3a:7a:9c:fe:eb:ee:2b:ab:29:15:cc:b7:7b:37: 16:19:3c:fe:4c:19:70:3b:4e:d1:a8:59:4e:d1:04: 70:7b:8d:92:df:ab:85:7a:9d:58:10:78:e8:dd:7d: 50:a8:bc:b0:39:48:2d:50:61:ad:67:75:6f:11:26: b8:91:bf:07:db:51:5c:df:8f:40:7a:91:95:b9:74: aa:f2:70:60:77:35:aa:c6:f5:86:18:bd:ea:90:56: 67:b5:57:ba:5d:1f:79:ae:4d:5c:33:dc:fb:99:9a: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:E8:C9:A9:97:F8:31:77:4B:32:09:EB:C4:D3:BF:DC:ED:E6:9E X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:f0:33:3f:1b:c3:45:84:28:8a:01:f0:b6:7c:f9:c4:37: 84:83:a8:97:2b:79:fb:c3:29:17:fb:2f:ff:19:da:62:b0:37: df:87:76:42:2c:42:fc:ae:ea:fa:01:53:9d:f6:cc:26:16:50: 61:50:68:c7:4d:af:24:c5:73:3d:0f:98:77:ff:87:b4:46:c7: 82:34:e8:7f:ae:a6:ed:13:f7:59:c1:7c:94:3e:3c:45:06:8b: b0:07:26:c2:25:76:b3:4d:10:00:03:c8:51:42:6a:45:be:9c: bb:0a:1a:1a:34:bc:1c:66:28:c6:54:21:04:a2:1e:e3:62:b6: 9e:eb:5e:fa:8b:47:45:e8:ea:5e:1d:e6:4d:5c:49:d1:6c:98: ee:57:35:ee:23:49:05:b5:68:da:b0:2f:f4:36:97:a7:bb:8c: 2a:7b:7e:79:7c:09:a4:48:b0:bc:66:39:a3:16:9c:bd:16:c0: c6:52:01:4b:6a:52:fc:a0:f5:56:fe:4f:b9:56:e3:fc:45:50: eb:c9:6c:cf:65:03:21:54:f1:6f:32:b0:d7:54:87:2f:0f:ed: 12:7e:35:3a:7f:5f:9a:75:71:74:a0:20:6c:fc:d4:90:60:91: 77:79:59:f9:4e:44:46:c7:90:c0:db:39:cd:dd:5e:93:59:34: 2d:3e:a0:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTGVm1eeM0byYaT40+c9Nymu0/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTEyMDYwNzQ1NDZaFw0yNTEyMDkxNzIwNDZaMDMxMTAvBgNV BAMTKDFBMjhFOEM5QTk5N0Y4MzE3NzRCMzIwOUVCQzREM0JGRENFREU2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczQPvWNfCQfwfhgeyRdDoG8AX 90MUc7UdeUBY+xXJhzx3cWbfzwBM5SPx2t3TeDgFmbJkC8/kMIOPvf32f0+rZger TVo6lI0uPXHQNO1lj6tatwr5kVth4L1RQDSr5UFpPFGsNdXF20fnS4NNlJ/UZsoZ QDI1xsqMmpOz3hHoi50DTZm9n9qkQWoD7Sm5lK9Tg7GP+1Q6epz+6+4rqykVzLd7 NxYZPP5MGXA7TtGoWU7RBHB7jZLfq4V6nVgQeOjdfVCovLA5SC1QYa1ndW8RJriR vwfbUVzfj0B6kZW5dKrycGB3NarG9YYYveqQVme1V7pdH3muTVwz3PuZmtm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGijoyamX+DF3SzIJ68TTv9zt5p4wHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0y8DM/G8NFhCiKAfC2fPnEN4SDqJcrefvD KRf7L/8Z2mKwN9+HdkIsQvyu6voBU532zCYWUGFQaMdNryTFcz0PmHf/h7RGx4I0 6H+upu0T91nBfJQ+PEUGi7AHJsIldrNNEAADyFFCakW+nLsKGho0vBxmKMZUIQSi HuNitp7rXvqLR0Xo6l4d5k1cSdFsmO5XNe4jSQW1aNqwL/Q2l6e7jCp7fnl8CaRI sLxmOaMWnL0WwMZSAUtqUvyg9Vb+T7lW4/xFUOvJbM9lAyFU8W8ysNdUhy8P7RJ+ NTp/X5p1cXSgIGz81JBgkXd5WflOREbHkMDbOc3dXpNZNC0+oEw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:19 2025 by rpki-client