This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: Ozl+/mkLFNwkjRwBy+6g62nOwtUeZk2HViF7ll7iuoE= Subject key identifier: 50:2A:4E:B2:69:E9:3B:26:F2:2B:30:7F:E1:4F:2E:58:40:AB:FB:C6 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 5D4BAA343E3B83EE51FBD8234E89AC82BB4CE2AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01F8 Signing time: Thu 04 Dec 2025 10:42:31 +0000 Manifest this update: Thu 04 Dec 2025 10:37:31 +0000 Manifest next update: Sun 07 Dec 2025 16:50:31 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 2: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: voT8uli1g0cV9ggKdv9IEmW7njQj4DKZz4c0y3lqqG0=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 16:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:aa:34:3e:3b:83:ee:51:fb:d8:23:4e:89:ac:82:bb:4c:e2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Dec 4 10:37:31 2025 GMT Not After : Dec 7 16:50:31 2025 GMT Subject: CN=502A4EB269E93B26F22B307FE14F2E5840ABFBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:31:ed:9b:77:ab:41:3a:f2:b7:8d:2f:33: 45:04:58:bc:53:9a:82:1e:d9:21:d0:ea:a2:b1:4a: 50:c2:be:01:ca:1b:43:0d:96:a9:9d:6b:53:32:36: 61:ab:b3:b7:a9:7e:08:02:7e:43:53:b1:ac:f7:05: 7e:e6:4a:6e:1c:ff:c2:f8:d6:a0:62:52:7a:96:02: 77:10:37:3d:ed:e7:bc:95:ab:c2:78:87:77:8a:f5: 9b:f0:a2:a7:c5:62:e3:10:98:19:04:da:8a:74:92: 31:b8:9b:ff:bc:fe:7b:96:fc:ba:1e:20:0d:aa:ac: 97:91:23:79:d5:49:25:7a:5c:e1:3f:c0:9c:a7:a8: 4a:2a:c3:ee:87:c0:e0:39:21:0b:d9:06:a6:63:06: 81:6e:25:97:3f:f4:13:4d:16:44:78:9d:3b:a3:f8: 63:ff:7d:ca:f2:cf:14:45:48:09:ea:e6:85:e8:70: 2c:ef:46:ba:19:73:63:b3:23:ee:d5:bf:56:59:e3: 8f:7c:98:60:43:8d:8b:f6:8f:a0:c2:78:d9:fd:74: 68:f4:1a:a8:9d:2d:b7:e0:5e:9e:bf:fd:ab:c3:ba: 04:eb:c3:af:eb:b1:c9:2c:45:5c:a1:6b:e0:69:1c: be:ab:b4:bb:69:8e:36:c2:03:10:43:2c:2e:2c:6a: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2A:4E:B2:69:E9:3B:26:F2:2B:30:7F:E1:4F:2E:58:40:AB:FB:C6 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f0:7e:5c:35:f6:1f:e1:6c:7f:4a:e7:d3:6e:a9:91:38:a1: d7:24:56:2c:f8:9e:51:28:5c:45:eb:6c:83:89:e3:0d:2f:66: 06:3b:b9:76:29:4f:89:f6:c0:8c:ac:b5:55:c5:17:51:e7:c3: dc:21:f0:3c:db:b1:1a:1f:fc:42:a9:10:3f:84:ff:50:ea:3b: f3:38:db:42:d4:91:75:88:82:99:90:f8:dd:40:84:2f:8d:f5: b8:c8:cd:06:cb:ef:03:32:dd:a2:1c:27:94:6b:d1:be:00:29: f5:94:d7:0e:70:cf:97:79:9b:97:6b:ce:80:fb:20:90:ad:47: a8:10:cc:72:8e:8c:e6:7b:32:3d:33:eb:56:9e:28:ff:9e:48: f2:de:69:10:88:85:06:9a:0e:50:4b:20:a2:e6:4e:ec:bf:00: 6a:c8:3b:de:71:66:fc:3b:b5:cb:0b:23:c2:e9:eb:39:fb:9b: ee:40:17:16:69:55:d9:45:4c:3d:83:54:d9:f5:a1:26:13:4e: 29:d3:28:53:61:64:d9:51:63:75:08:36:0a:07:8f:6c:f8:f0: 99:e6:f9:05:66:d2:0e:8c:89:63:3a:f3:3b:c0:7b:6b:0f:d3: a9:88:43:7f:3c:33:cc:2f:c2:f0:cc:f5:af:70:a6:56:b9:ef: 8b:66:fc:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUuqND47g+5R+9gjTomsgrtM4q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTEyMDQxMDM3MzFaFw0yNTEyMDcxNjUwMzFaMDMxMTAvBgNV BAMTKDUwMkE0RUIyNjlFOTNCMjZGMjJCMzA3RkUxNEYyRTU4NDBBQkZCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtzHtm3erQTryt40vM0UEWLxT moIe2SHQ6qKxSlDCvgHKG0MNlqmda1MyNmGrs7epfggCfkNTsaz3BX7mSm4c/8L4 1qBiUnqWAncQNz3t57yVq8J4h3eK9ZvwoqfFYuMQmBkE2op0kjG4m/+8/nuW/Loe IA2qrJeRI3nVSSV6XOE/wJynqEoqw+6HwOA5IQvZBqZjBoFuJZc/9BNNFkR4nTuj +GP/fcryzxRFSAnq5oXocCzvRroZc2OzI+7Vv1ZZ4498mGBDjYv2j6DCeNn9dGj0 GqidLbfgXp6//avDugTrw6/rscksRVyha+BpHL6rtLtpjjbCAxBDLC4salfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUCpOsmnpOybyKzB/4U8uWECr+8YwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrwflw19h/hbH9K59NuqZE4odckViz4nlEo XEXrbIOJ4w0vZgY7uXYpT4n2wIystVXFF1Hnw9wh8DzbsRof/EKpED+E/1DqO/M4 20LUkXWIgpmQ+N1AhC+N9bjIzQbL7wMy3aIcJ5Rr0b4AKfWU1w5wz5d5m5drzoD7 IJCtR6gQzHKOjOZ7Mj0z61aeKP+eSPLeaRCIhQaaDlBLIKLmTuy/AGrIO95xZvw7 tcsLI8Lp6zn7m+5AFxZpVdlFTD2DVNn1oSYTTinTKFNhZNlRY3UINgoHj2z48Jnm +QVm0g6MiWM68zvAe2sP06mIQ388M8wvwvDM9a9wpla574tm/PE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:42 2025 by rpki-client