This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: arKGHn3wV1bFCJLz6y4SmFwUCg3NjY2y5uaXAEyIp9g= Subject key identifier: EF:46:77:90:AF:B0:C4:33:6B:B6:1A:2B:76:04:89:30:69:88:DA:5F Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 6B4CFB5FFF607325C71B52324CB699A0A66230BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01BE Signing time: Sat 06 Dec 2025 20:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:56:46 +0000 Manifest next update: Wed 10 Dec 2025 02:56:46 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: 0aOqykGsSNwT04SDDUwOpx1XYp31urYGgJrhHy2OpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4c:fb:5f:ff:60:73:25:c7:1b:52:32:4c:b6:99:a0:a6:62:30:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Dec 6 19:56:46 2025 GMT Not After : Dec 10 02:56:46 2025 GMT Subject: CN=EF467790AFB0C4336BB61A2B760489306988DA5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:ae:6c:90:16:3f:3d:ce:f8:c4:fe:67:6b: e2:13:c9:ad:ad:ae:df:dd:62:b8:6b:57:24:67:b8: 9e:f5:67:ed:7f:99:6d:4a:eb:b4:27:f5:86:f9:27: 9b:61:5e:5f:18:6e:03:6f:20:49:48:59:54:8a:de: 14:45:76:22:06:4e:44:c6:8f:5e:26:41:4c:10:68: ad:85:c9:bb:cc:a4:c2:fe:1f:20:7e:58:1f:9b:21: b9:48:cb:1c:b9:78:5d:98:56:df:27:00:67:35:ec: a4:df:0f:97:b5:41:d1:42:d3:7c:82:74:36:d8:86: 20:2f:fa:5a:fc:22:a4:a7:8b:a8:4c:5b:08:46:8c: 8c:e1:e6:14:3e:9c:39:0a:dc:65:06:fc:af:16:77: 5a:a6:85:12:f4:bf:2d:4e:9b:39:e4:a7:34:75:14: a6:24:c9:7f:d8:0f:34:51:20:77:c8:70:e5:4e:03: 86:a0:cf:ca:25:45:2a:bd:bf:43:76:97:9b:f0:d9: 9c:c1:7f:c9:62:e0:f8:42:6c:f3:ff:c6:60:4c:e6: 0e:52:2b:4e:e8:63:38:d2:43:f3:f6:77:df:d8:1c: a6:ab:47:93:11:87:f5:1f:d4:8d:1b:f7:48:31:c2: 71:56:c9:92:28:96:43:77:91:e6:e3:8d:79:3e:ac: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:77:90:AF:B0:C4:33:6B:B6:1A:2B:76:04:89:30:69:88:DA:5F X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b3:d3:f2:6c:f5:ac:43:ea:96:e3:71:84:3f:e7:e5:1d:0d: d9:46:0c:a9:22:90:bd:81:c0:e3:af:e4:bc:45:74:44:57:90: 28:4c:37:de:bd:60:25:14:9c:f1:3b:05:71:c2:7c:01:a4:c8: 63:dd:7a:ca:ba:c9:2a:fa:10:d6:77:a3:8b:80:f2:36:ed:ef: 5b:d4:83:84:e0:eb:6b:75:2b:c6:77:10:93:d4:fa:bf:f5:75: e5:3a:fc:46:46:08:24:c1:af:6d:8a:61:44:35:3a:cc:8f:f9: ea:c8:1b:1e:06:89:eb:67:4f:ca:41:62:3f:7d:7d:9e:f5:76: d4:aa:34:79:1b:52:03:8c:c5:fb:8f:28:3b:92:91:28:44:fd: f2:1f:fa:f3:73:3b:0b:5e:c3:05:15:58:13:75:d4:43:24:22: 11:ce:e3:30:65:a8:8c:e3:5f:a9:95:46:de:68:d1:8f:70:5f: 12:92:bc:7c:9e:ee:cc:be:e7:74:3f:39:c7:85:60:8a:73:1d: 19:40:62:a0:61:14:57:e3:21:80:a6:41:1e:c3:af:a5:81:01: 16:36:9b:76:d9:95:6b:96:c4:1a:0d:4d:b9:3c:6e:dd:56:df: c1:74:42:8f:77:3e:cf:12:1c:99:9c:57:16:b0:a5:68:ed:91: 26:34:0f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0z7X/9gcyXHG1IyTLaZoKZiMLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTEyMDYxOTU2NDZaFw0yNTEyMTAwMjU2NDZaMDMxMTAvBgNV BAMTKEVGNDY3NzkwQUZCMEM0MzM2QkI2MUEyQjc2MDQ4OTMwNjk4OERBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTma5skBY/Pc74xP5na+ITya2t rt/dYrhrVyRnuJ71Z+1/mW1K67Qn9Yb5J5thXl8YbgNvIElIWVSK3hRFdiIGTkTG j14mQUwQaK2FybvMpML+HyB+WB+bIblIyxy5eF2YVt8nAGc17KTfD5e1QdFC03yC dDbYhiAv+lr8IqSni6hMWwhGjIzh5hQ+nDkK3GUG/K8Wd1qmhRL0vy1OmznkpzR1 FKYkyX/YDzRRIHfIcOVOA4agz8olRSq9v0N2l5vw2ZzBf8li4PhCbPP/xmBM5g5S K07oYzjSQ/P2d9/YHKarR5MRh/Uf1I0b90gxwnFWyZIolkN3kebjjXk+rNERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70Z3kK+wxDNrthordgSJMGmI2l8wHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGz0/Js9axD6pbjcYQ/5+UdDdlGDKkikL2B wOOv5LxFdERXkChMN969YCUUnPE7BXHCfAGkyGPdesq6ySr6ENZ3o4uA8jbt71vU g4Tg62t1K8Z3EJPU+r/1deU6/EZGCCTBr22KYUQ1OsyP+erIGx4GietnT8pBYj99 fZ71dtSqNHkbUgOMxfuPKDuSkShE/fIf+vNzOwtewwUVWBN11EMkIhHO4zBlqIzj X6mVRt5o0Y9wXxKSvHye7sy+53Q/OceFYIpzHRlAYqBhFFfjIYCmQR7Dr6WBARY2 m3bZlWuWxBoNTbk8bt1W38F0Qo93Ps8SHJmcVxawpWjtkSY0D2g= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:46 2025 by rpki-client