This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: krNbNnCyl7ZenH+6JVRDZ6jxWoVatfVngqqnVeZks2g= Subject key identifier: A7:A7:49:F7:8F:38:99:E7:93:9E:37:4E:F5:17:85:DF:FA:D5:43:05 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 6AC411E3E4EC2F9A59F4E77C86CB4B23199096B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0193 Signing time: Sat 06 Dec 2025 21:51:40 +0000 Manifest this update: Sat 06 Dec 2025 21:46:40 +0000 Manifest next update: Wed 10 Dec 2025 07:05:40 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: 8N2tIxpv4ENhAFutk92qyq9jLFVpcyEjWpvTWGMnh5E=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c4:11:e3:e4:ec:2f:9a:59:f4:e7:7c:86:cb:4b:23:19:90:96:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Dec 6 21:46:40 2025 GMT Not After : Dec 10 07:05:40 2025 GMT Subject: CN=A7A749F78F3899E7939E374EF51785DFFAD54305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:21:46:f1:d7:0f:ba:43:d2:f0:67:ad:49: d1:f3:97:95:85:fa:7a:e4:a9:e2:b1:07:9d:f3:1c: 96:41:00:65:c2:eb:cc:04:39:44:59:83:3d:4f:e8: 71:68:6b:68:93:58:60:c1:fa:77:3a:86:25:df:1b: bf:aa:9f:62:8a:a4:88:9e:21:0c:b3:a7:41:54:27: c4:37:6c:a2:f3:43:4a:62:db:c3:9d:05:7d:a8:b8: 39:53:71:af:b5:d5:8a:39:28:9e:bd:56:fa:7a:42: a3:c7:90:93:d9:fb:b6:eb:2c:79:dc:53:14:43:9b: ac:75:82:8e:7b:d3:d5:ed:1a:50:61:03:7c:a2:17: 6e:12:e9:20:34:bb:e1:f8:30:45:54:6b:51:3a:7d: ec:11:72:78:22:f4:d3:1c:e9:c7:29:34:e3:bc:15: b6:5e:f5:69:a0:7a:21:2a:65:75:5f:71:f6:4f:6d: e3:20:cc:28:eb:ce:fc:d9:46:33:9b:e6:c3:61:45: b4:b3:e8:5c:19:df:7c:91:10:ec:eb:08:df:1e:e0: bc:d9:db:4d:57:50:2e:89:f3:0c:0a:e4:6d:b6:b8: fc:7a:7c:11:ce:30:2d:8a:99:72:fd:ba:da:17:b7: ad:6f:79:22:ec:6e:24:5c:ec:07:03:6d:3e:f5:e3: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:49:F7:8F:38:99:E7:93:9E:37:4E:F5:17:85:DF:FA:D5:43:05 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3e:c6:9a:62:51:44:ba:f4:3d:ef:32:63:75:3d:7b:b5:66: 94:99:0b:54:20:4c:b5:7a:10:35:b4:e6:cc:6d:d0:a7:05:42: 25:bc:00:ae:9c:d8:99:82:78:99:87:2f:21:2d:6d:7e:f0:ff: 86:33:7d:0e:a2:0c:8d:69:5a:be:b8:57:3e:01:b8:68:7e:84: ca:97:d1:82:07:ef:4a:11:4a:a1:c8:38:66:ad:48:3d:f0:2a: 14:1e:16:1f:96:1f:d7:09:25:66:bb:08:94:80:93:c7:1d:46: 79:79:45:6a:fb:49:3e:5e:a0:00:40:ad:60:25:70:18:68:98: 6e:ca:24:d3:80:ff:02:91:c1:aa:b6:ff:10:f4:25:3a:f9:59: cf:f0:6b:40:86:ca:45:c5:3b:be:ea:fe:ae:e8:5b:2e:f4:6f: 09:2a:fd:61:19:a8:e3:00:1a:05:ea:62:06:16:ab:54:4c:c7: d1:2a:af:39:c4:20:1b:ab:be:2d:5c:fe:ec:81:4b:5e:12:4c: 02:cb:f3:19:f1:c2:b5:df:6d:7f:c2:9b:f7:e6:0d:a5:7b:61: 58:3c:a5:05:91:0f:4f:5c:ef:0d:a6:34:7e:04:73:27:ca:0c: d6:06:25:e4:41:ab:00:8e:bd:47:22:d1:24:fa:ba:56:80:7d: e8:f4:fb:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasQR4+TsL5pZ9Od8hstLIxmQlrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTEyMDYyMTQ2NDBaFw0yNTEyMTAwNzA1NDBaMDMxMTAvBgNV BAMTKEE3QTc0OUY3OEYzODk5RTc5MzlFMzc0RUY1MTc4NURGRkFENTQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nCFG8dcPukPS8GetSdHzl5WF +nrkqeKxB53zHJZBAGXC68wEOURZgz1P6HFoa2iTWGDB+nc6hiXfG7+qn2KKpIie IQyzp0FUJ8Q3bKLzQ0pi28OdBX2ouDlTca+11Yo5KJ69Vvp6QqPHkJPZ+7brLHnc UxRDm6x1go5709XtGlBhA3yiF24S6SA0u+H4MEVUa1E6fewRcngi9NMc6ccpNOO8 FbZe9WmgeiEqZXVfcfZPbeMgzCjrzvzZRjOb5sNhRbSz6FwZ33yREOzrCN8e4LzZ 201XUC6J8wwK5G22uPx6fBHOMC2KmXL9utoXt61veSLsbiRc7AcDbT714ys5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6dJ9484meeTnjdO9ReF3/rVQwUwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALM+xppiUUS69D3vMmN1PXu1ZpSZC1QgTLV6 EDW05sxt0KcFQiW8AK6c2JmCeJmHLyEtbX7w/4YzfQ6iDI1pWr64Vz4BuGh+hMqX 0YIH70oRSqHIOGatSD3wKhQeFh+WH9cJJWa7CJSAk8cdRnl5RWr7ST5eoABArWAl cBhomG7KJNOA/wKRwaq2/xD0JTr5Wc/wa0CGykXFO77q/q7oWy70bwkq/WEZqOMA GgXqYgYWq1RMx9EqrznEIBurvi1c/uyBS14STALL8xnxwrXfbX/Cm/fmDaV7YVg8 pQWRD09c7w2mNH4EcyfKDNYGJeRBqwCOvUci0ST6ulaAfej0+28= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:10 2025 by rpki-client