This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: zLPpMjooPx6dHGNSN/NYAu9HUBtB+6hwEbDEh8LXhfk= Subject key identifier: 8F:B8:A5:EF:15:3C:7A:72:28:F2:62:EF:1C:55:D2:F7:6F:B9:30:85 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 4864F3D0AE3BA3131219816815638AC759310730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: E7 Signing time: Fri 05 Dec 2025 12:21:44 +0000 Manifest this update: Fri 05 Dec 2025 12:16:44 +0000 Manifest next update: Mon 08 Dec 2025 13:16:44 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: /eK7Vs/IN1Nr/l/2Drv+jPSOhz8C68DFMS8NDtaTeQM=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:64:f3:d0:ae:3b:a3:13:12:19:81:68:15:63:8a:c7:59:31:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Dec 5 12:16:44 2025 GMT Not After : Dec 8 13:16:44 2025 GMT Subject: CN=8FB8A5EF153C7A7228F262EF1C55D2F76FB93085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:0f:5f:2c:69:c7:3c:80:47:30:94:b8:7b: 85:71:db:b7:0b:c7:de:f5:de:7b:f4:13:4d:34:cf: 7b:30:03:0a:0b:9d:fd:70:88:84:b7:5e:87:cf:83: 4d:b3:7d:e3:b2:06:9d:53:ff:c9:bf:e0:38:5c:f2: 51:60:3d:75:2e:7c:aa:a2:3d:32:37:f4:97:70:53: b1:ae:92:b4:84:4d:4d:53:b3:b7:65:b2:29:9c:6b: e9:e8:75:81:da:ca:f8:c1:aa:d5:be:68:a3:ba:7d: 23:83:09:8d:33:a2:22:45:78:93:78:86:f7:88:8b: c9:d0:69:cb:bf:13:0e:01:d0:c1:fd:62:10:2e:9e: 94:15:e7:e0:e0:98:d0:b4:5d:e7:dd:3f:7b:86:99: 74:7f:db:04:c0:41:13:d4:cb:bf:71:65:d6:57:86: 16:93:58:53:d6:5c:c3:f4:38:bd:1a:3a:63:f3:b8: 80:a7:5c:63:dc:58:f3:66:3f:c7:3b:54:fb:5a:b9: 1b:a7:68:35:cc:d0:4d:28:86:78:1c:dc:a4:f2:1d: d2:e3:d5:b5:d1:c8:3f:d5:c5:36:f7:f0:fc:91:75: fd:f8:a9:3e:95:c6:92:18:28:72:d2:0d:f3:53:0b: 8d:c4:09:03:53:9d:90:ff:84:d9:51:f1:6d:66:64: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:A5:EF:15:3C:7A:72:28:F2:62:EF:1C:55:D2:F7:6F:B9:30:85 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:1c:7f:9c:c9:51:25:24:3c:9e:f7:e5:e0:4a:da:f0:1b: b2:99:3c:f0:48:36:d3:6f:85:c4:61:26:6e:6e:35:96:b2:b3: e8:4d:ae:07:9b:80:b3:a1:b5:34:b0:41:89:9b:6d:5d:c2:0a: 5a:a6:54:41:cc:5e:46:bc:6b:43:a1:66:20:d4:c8:0c:c5:7d: 2b:f7:58:98:30:72:84:8e:b5:34:9b:96:33:81:0a:a6:74:fa: 5a:00:0f:6b:8c:df:07:22:6c:f7:7a:fc:45:e0:87:5d:18:6c: 57:69:ce:15:7b:35:40:28:f6:ea:73:d8:9e:0e:ce:2a:fa:a8: 98:d4:00:92:50:c8:73:ae:61:a1:fa:11:63:5a:d8:05:ee:9b: 6d:2d:be:28:3f:5e:c8:df:6b:84:42:e4:74:f3:20:c7:63:83: fb:39:4c:68:ec:b0:ea:9a:11:ac:b1:00:4e:10:61:d0:2e:d5: f3:84:9f:e6:5d:2b:08:5f:18:1f:7f:58:60:50:06:83:4d:1b: 7a:71:0a:0e:23:80:b3:1f:64:e9:cb:2b:a3:d3:27:9d:1f:7e: 6d:a4:d9:fe:82:cc:0d:43:50:ea:27:54:b4:dc:8e:34:6a:4c: b5:4d:42:27:5d:73:92:f8:91:8c:5d:be:47:6d:d8:6a:6e:4a: c2:d7:b3:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGTz0K47oxMSGYFoFWOKx1kxBzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTEyMDUxMjE2NDRaFw0yNTEyMDgxMzE2NDRaMDMxMTAvBgNV BAMTKDhGQjhBNUVGMTUzQzdBNzIyOEYyNjJFRjFDNTVEMkY3NkZCOTMwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNw9fLGnHPIBHMJS4e4Vx27cL x9713nv0E000z3swAwoLnf1wiIS3XofPg02zfeOyBp1T/8m/4Dhc8lFgPXUufKqi PTI39JdwU7GukrSETU1Ts7dlsimca+nodYHayvjBqtW+aKO6fSODCY0zoiJFeJN4 hveIi8nQacu/Ew4B0MH9YhAunpQV5+DgmNC0XefdP3uGmXR/2wTAQRPUy79xZdZX hhaTWFPWXMP0OL0aOmPzuICnXGPcWPNmP8c7VPtauRunaDXM0E0ohngc3KTyHdLj 1bXRyD/VxTb38PyRdf34qT6VxpIYKHLSDfNTC43ECQNTnZD/hNlR8W1mZHldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7il7xU8enIo8mLvHFXS92+5MIUwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYFHH+cyVElJDye9+XgStrwG7KZPPBINtNv hcRhJm5uNZays+hNrgebgLOhtTSwQYmbbV3CClqmVEHMXka8a0OhZiDUyAzFfSv3 WJgwcoSOtTSbljOBCqZ0+loAD2uM3wcibPd6/EXgh10YbFdpzhV7NUAo9upz2J4O zir6qJjUAJJQyHOuYaH6EWNa2AXum20tvig/Xsjfa4RC5HTzIMdjg/s5TGjssOqa EayxAE4QYdAu1fOEn+ZdKwhfGB9/WGBQBoNNG3pxCg4jgLMfZOnLK6PTJ50ffm2k 2f6CzA1DUOonVLTcjjRqTLVNQiddc5L4kYxdvkdt2GpuSsLXs40= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:55 2025 by rpki-client