This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: fzNhu5JHIQx2Qx/cOidzeyFMZqYTyf6ZXiuP81hPOt4= Subject key identifier: 4B:F2:F9:26:D3:B9:50:9D:A2:0C:8E:44:D0:41:95:B3:A1:65:5F:4A Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 1BD62B652C20BB1AAFD83E0D884E584F0DAA8E25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: F3 Signing time: Fri 05 Dec 2025 15:32:30 +0000 Manifest this update: Fri 05 Dec 2025 15:27:30 +0000 Manifest next update: Tue 09 Dec 2025 00:31:30 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: xW0izAgr+TKCdmsfdaKFAI1FdqRCWsRNUNEZ9bxYsck=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d6:2b:65:2c:20:bb:1a:af:d8:3e:0d:88:4e:58:4f:0d:aa:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Dec 5 15:27:30 2025 GMT Not After : Dec 9 00:31:30 2025 GMT Subject: CN=4BF2F926D3B9509DA20C8E44D04195B3A1655F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:03:66:86:c4:19:eb:53:ef:77:1b:88:5b: a8:d9:29:7c:df:03:f4:08:bc:1a:32:3f:f9:03:97: 81:96:d3:f3:d4:f0:8a:c0:34:e1:43:c7:83:83:0a: ba:4e:b6:eb:45:63:6d:8c:2d:8f:a6:aa:91:bc:7a: 3f:f3:fb:86:2c:4a:74:3c:76:c8:a3:ba:53:ea:50: 21:8a:40:eb:04:40:05:77:3a:01:cd:ad:d0:09:b9: 1e:be:08:b0:e8:46:86:64:68:aa:12:e7:69:b1:3c: 37:dc:6d:d0:bc:2d:21:a0:3f:04:55:fc:4e:5b:a3: d3:9f:56:f8:59:dd:29:3b:c8:55:c0:cc:1a:42:42: 4d:ba:48:28:04:26:cc:f0:85:70:14:67:49:0e:b0: 5f:17:d7:13:14:50:59:93:fc:e9:54:db:32:0b:93: 14:fe:e4:db:e9:ba:91:7d:12:ff:0d:e7:5e:b7:da: 15:a9:0b:e1:5c:d2:c9:6c:ed:4c:c1:94:44:de:00: b2:f2:7f:db:d6:dd:0c:a3:a9:1b:05:fd:50:3f:33: 20:02:cd:3e:62:51:0a:d5:55:b7:25:91:f8:83:02: df:8e:21:6b:38:38:65:63:58:d8:a0:e5:87:34:d5: ea:4b:d6:60:f6:32:9a:48:20:90:90:a3:44:9f:0d: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:F9:26:D3:B9:50:9D:A2:0C:8E:44:D0:41:95:B3:A1:65:5F:4A X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:20:28:0f:04:bd:a4:b0:2c:6b:40:61:cb:c4:19:8a:55: 6b:7c:cd:13:c8:08:7c:91:a6:7b:f5:ad:c2:69:6c:72:13:cc: 99:c9:1c:1a:e7:42:da:23:a2:71:3a:51:2d:ae:ae:da:a4:6e: fe:26:d9:fd:5a:98:07:fd:05:d0:47:10:0c:6d:eb:14:9d:1a: 44:d9:28:ab:8d:d2:a4:58:a0:59:7f:7c:49:74:2d:fe:0d:f5: f5:ab:a9:8c:aa:4f:82:1c:e5:b3:87:eb:f2:66:b1:ab:6d:6a: 99:d0:fa:7d:96:af:05:db:89:4b:1e:ea:f9:78:6f:a7:40:2f: df:80:8d:67:a4:8f:3f:c3:39:51:70:0a:7e:25:3e:b7:d9:36: 1e:14:7b:f4:21:62:37:fc:33:ef:3b:d0:4f:8c:92:6c:04:6c: 63:30:5e:60:be:f1:d2:9c:ec:30:01:49:70:17:2c:ce:06:09: 9c:db:dc:ca:9c:aa:dd:0a:4b:06:84:cb:ca:f7:21:15:b5:06: 72:d5:3b:fa:1c:b4:b1:42:e2:f0:bf:98:4a:ba:00:06:e6:03: ec:02:29:aa:0a:6a:09:be:57:7c:ff:20:cb:40:68:ab:a4:c9: 21:4c:fa:9a:16:fe:84:1e:d7:4d:8c:4d:56:a2:15:38:a0:35: 8c:40:50:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9YrZSwguxqv2D4NiE5YTw2qjiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTEyMDUxNTI3MzBaFw0yNTEyMDkwMDMxMzBaMDMxMTAvBgNV BAMTKDRCRjJGOTI2RDNCOTUwOURBMjBDOEU0NEQwNDE5NUIzQTE2NTVGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAQNmhsQZ61PvdxuIW6jZKXzf A/QIvBoyP/kDl4GW0/PU8IrANOFDx4ODCrpOtutFY22MLY+mqpG8ej/z+4YsSnQ8 dsijulPqUCGKQOsEQAV3OgHNrdAJuR6+CLDoRoZkaKoS52mxPDfcbdC8LSGgPwRV /E5bo9OfVvhZ3Sk7yFXAzBpCQk26SCgEJszwhXAUZ0kOsF8X1xMUUFmT/OlU2zIL kxT+5NvpupF9Ev8N51632hWpC+Fc0sls7UzBlETeALLyf9vW3QyjqRsF/VA/MyAC zT5iUQrVVbclkfiDAt+OIWs4OGVjWNig5Yc01epL1mD2MppIIJCQo0SfDXMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS/L5JtO5UJ2iDI5E0EGVs6FlX0owHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKfICgPBL2ksCxrQGHLxBmKVWt8zRPICHyR pnv1rcJpbHITzJnJHBrnQtojonE6US2urtqkbv4m2f1amAf9BdBHEAxt6xSdGkTZ KKuN0qRYoFl/fEl0Lf4N9fWrqYyqT4Ic5bOH6/JmsattapnQ+n2WrwXbiUse6vl4 b6dAL9+AjWekjz/DOVFwCn4lPrfZNh4Ue/QhYjf8M+870E+MkmwEbGMwXmC+8dKc 7DABSXAXLM4GCZzb3Mqcqt0KSwaEy8r3IRW1BnLVO/octLFC4vC/mEq6AAbmA+wC KaoKagm+V3z/IMtAaKukySFM+poW/oQe102MTVaiFTigNYxAULw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:35 2025 by rpki-client