This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: z/vCeWZiXxMX9R5WAKRdPCPDrYekoC6O6fQsGYT8ew0= Subject key identifier: 7C:12:47:EF:AE:BF:41:5B:B8:30:F5:3D:35:37:5C:89:AD:AE:7A:91 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 392D85AB39FB51CBE74D29064B04E385859734C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03A4 Signing time: Sat 06 Dec 2025 21:32:03 +0000 Manifest this update: Sat 06 Dec 2025 21:27:03 +0000 Manifest next update: Tue 09 Dec 2025 23:27:03 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: fW9Afk6couC3JzB4IuEZSpvwTWOX1AlCfx13nlmwWE8=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2d:85:ab:39:fb:51:cb:e7:4d:29:06:4b:04:e3:85:85:97:34:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Dec 6 21:27:03 2025 GMT Not After : Dec 9 23:27:03 2025 GMT Subject: CN=7C1247EFAEBF415BB830F53D35375C89ADAE7A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9a:42:87:c6:31:3a:75:69:89:98:e7:f2:a7: c1:b7:14:d4:83:92:d0:3a:ae:1f:67:27:db:9c:09: 27:7b:35:c8:1a:3e:c3:1c:8c:35:29:ff:0b:df:26: 2d:97:cf:5f:0c:9b:6c:82:41:b0:ab:a8:48:ef:1b: c1:d6:49:2e:4d:0f:e2:2b:1e:e4:05:67:63:11:20: 4d:e0:4a:16:61:15:d3:c6:36:50:a6:70:9e:47:23: 37:12:7e:16:18:28:12:2a:5e:80:38:52:65:7f:e7: e5:72:88:65:a7:c1:03:5c:89:1f:5b:06:a7:92:34: 54:49:e8:03:47:f7:9c:3d:b9:0c:4a:1a:57:99:8e: d7:ff:22:30:45:21:3a:6f:5a:d7:15:04:3f:89:29: e0:28:46:5d:04:d6:db:f9:68:e5:c1:4a:62:27:94: ec:34:bd:00:1e:a1:a9:a5:97:98:36:21:2b:47:9a: 33:93:ec:a5:6f:7d:f3:73:0d:7e:a8:f2:37:19:73: 97:ed:41:44:09:62:e8:00:23:04:d0:fd:e4:f8:af: f9:8d:a8:0b:c6:e1:bb:ff:29:4a:dd:53:9d:fb:66: b1:51:68:f5:3f:e9:b8:16:b4:d8:47:68:d0:c0:eb: 3b:5f:a9:3f:b9:69:fe:97:e5:ce:61:a3:54:0e:b8: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:47:EF:AE:BF:41:5B:B8:30:F5:3D:35:37:5C:89:AD:AE:7A:91 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a1:cc:5b:6c:5d:64:e9:5a:28:ba:61:ca:3a:1b:8f:15:2e: b5:5d:7e:77:f5:ab:bf:50:ad:18:37:c2:b3:d5:dd:83:a9:91: a1:b0:6f:f6:11:f9:97:c9:5c:d4:24:2a:d4:16:4f:e4:17:dd: 19:74:a5:d0:6b:99:fb:d7:cb:53:66:28:3d:3b:97:33:f0:20: d8:ed:2e:08:0f:f6:f3:b1:20:b0:82:ee:4f:b7:1b:82:f1:99: ae:ef:fb:79:94:8c:3c:36:25:f2:27:d1:3e:79:14:71:7a:96: b1:76:82:4a:d0:e4:b3:eb:32:fb:62:8e:54:1c:6e:28:e5:3d: 28:b9:41:e1:25:99:32:4e:5d:34:c4:ef:e9:fc:70:64:3d:32: 3e:73:a1:42:59:79:d9:11:d9:23:7d:ba:d1:41:65:20:5e:0f: 02:ed:a2:16:60:bd:45:a7:a9:4b:92:7b:aa:8a:22:26:a0:c1: 76:77:9d:a9:45:bf:85:47:0e:94:15:f9:e1:c8:89:92:68:7d: fa:79:e9:90:5e:74:c2:00:dc:94:69:3c:a6:1a:9d:ee:c0:a8: c1:b9:f0:1d:97:17:29:33:c1:27:bd:c9:e7:b2:c1:d2:9b:3a: d1:4d:cd:a8:3e:96:92:34:5c:0b:33:d4:e4:b5:7b:9a:3c:c4: 99:36:73:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS2Fqzn7UcvnTSkGSwTjhYWXNMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTEyMDYyMTI3MDNaFw0yNTEyMDkyMzI3MDNaMDMxMTAvBgNV BAMTKDdDMTI0N0VGQUVCRjQxNUJCODMwRjUzRDM1Mzc1Qzg5QURBRTdBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmkKHxjE6dWmJmOfyp8G3FNSD ktA6rh9nJ9ucCSd7NcgaPsMcjDUp/wvfJi2Xz18Mm2yCQbCrqEjvG8HWSS5ND+Ir HuQFZ2MRIE3gShZhFdPGNlCmcJ5HIzcSfhYYKBIqXoA4UmV/5+VyiGWnwQNciR9b BqeSNFRJ6ANH95w9uQxKGleZjtf/IjBFITpvWtcVBD+JKeAoRl0E1tv5aOXBSmIn lOw0vQAeoamll5g2IStHmjOT7KVvffNzDX6o8jcZc5ftQUQJYugAIwTQ/eT4r/mN qAvG4bv/KUrdU537ZrFRaPU/6bgWtNhHaNDA6ztfqT+5af6X5c5ho1QOuCnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfBJH766/QVu4MPU9NTdcia2uepEwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuhzFtsXWTpWii6Yco6G48VLrVdfnf1q79Q rRg3wrPV3YOpkaGwb/YR+ZfJXNQkKtQWT+QX3Rl0pdBrmfvXy1NmKD07lzPwINjt LggP9vOxILCC7k+3G4Lxma7v+3mUjDw2JfIn0T55FHF6lrF2gkrQ5LPrMvtijlQc bijlPSi5QeElmTJOXTTE7+n8cGQ9Mj5zoUJZedkR2SN9utFBZSBeDwLtohZgvUWn qUuSe6qKIiagwXZ3nalFv4VHDpQV+eHIiZJoffp56ZBedMIA3JRpPKYane7AqMG5 8B2XFykzwSe9yeeywdKbOtFNzag+lpI0XAsz1OS1e5o8xJk2c98= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:43 2025 by rpki-client