This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: 0Wsgom5Nd/9M0cHd6g/nyEbAf583mfgD7og+Aj6Mma0= Subject key identifier: 03:C7:C1:E9:1D:48:A6:D6:8F:24:D3:6D:35:FA:FD:16:46:B4:D5:FA Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 142042A96AD29C4D4D8519DDDC0E1C29E7484D52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: C1 Signing time: Fri 05 Dec 2025 07:41:57 +0000 Manifest this update: Fri 05 Dec 2025 07:36:57 +0000 Manifest next update: Mon 08 Dec 2025 09:00:57 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 2: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: 9/G2b5MwsU9Tv/WB4FqdsZnlaLXClr1ed4KrECbbcsA=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:20:42:a9:6a:d2:9c:4d:4d:85:19:dd:dc:0e:1c:29:e7:48:4d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Dec 5 07:36:57 2025 GMT Not After : Dec 8 09:00:57 2025 GMT Subject: CN=03C7C1E91D48A6D68F24D36D35FAFD1646B4D5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:31:16:ea:fa:ee:fe:28:0d:79:88:28:eb: ce:19:09:b0:b0:92:ed:61:e3:0f:71:08:5a:c2:f4: 6d:40:9a:c8:bf:c6:a2:b9:22:70:1b:aa:31:f7:1d: 78:3b:5e:f3:32:56:0d:fa:a6:6d:b4:d6:d6:18:9c: 94:35:f9:70:3f:15:27:6a:b8:56:46:6b:ee:5b:1e: 70:14:97:1e:59:e9:a0:b3:65:cc:98:36:8f:d5:28: 4a:bc:ca:04:90:0f:6e:78:0c:14:78:65:d3:ae:8f: b7:3d:ba:ec:2f:33:63:06:1b:fe:b5:04:9b:0f:8c: e6:6d:74:58:7a:2f:e3:69:ec:f6:b0:f4:a0:8b:0c: 37:8a:80:f9:a9:1e:5d:e1:84:50:b3:4c:14:ad:1e: e0:1a:5b:40:19:38:3e:24:94:0f:07:dc:5a:bb:85: a4:b0:97:be:35:39:32:7e:99:61:bd:9b:c1:e4:50: ea:88:df:3d:80:40:bd:61:c5:6d:81:7a:78:06:a2: a7:75:f9:55:91:91:b2:ab:cc:da:86:f0:ed:d4:22: 1b:01:6d:64:f1:27:d1:3b:a0:64:82:7d:b5:6a:d4: 29:22:71:68:b7:24:97:5f:c0:e4:84:26:c8:7e:1b: f2:f1:cb:dd:53:47:d8:ac:b9:f2:80:dc:ab:ae:c4: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C7:C1:E9:1D:48:A6:D6:8F:24:D3:6D:35:FA:FD:16:46:B4:D5:FA X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:77:bd:27:3d:d0:37:1d:d7:bf:3c:7a:45:a2:55:cc:b6:86: fb:5a:d5:a3:78:f3:f2:3f:1a:d6:95:7b:83:a7:59:31:9a:67: 7d:ca:c6:37:08:ae:5c:f3:3e:f7:38:9d:fa:44:5c:3b:93:09: ec:5d:b8:87:71:f8:9e:cb:5c:58:00:4a:a9:ad:4d:c6:9a:e1: 66:d0:a8:bf:0b:10:70:61:a6:b9:ed:88:ff:2b:c4:8d:eb:3e: e5:87:cb:76:40:18:29:a3:14:d8:72:d9:28:bf:c8:f7:34:9b: da:96:57:87:06:c1:9a:4c:e3:dd:86:d7:81:c6:5c:36:48:e0: 5d:1a:bd:9a:93:7f:03:d8:44:65:91:67:9c:4a:3f:1a:7d:4f: f0:87:c5:71:f0:73:47:25:b5:09:f1:5b:fc:86:d2:04:fb:08: 81:c4:0d:bc:05:a0:62:52:30:7e:46:dd:1c:7f:3e:eb:c0:2f: 42:99:36:e6:56:4f:98:de:d1:8b:f5:fb:5d:5d:6b:f6:e5:64: 7a:30:8d:f5:00:25:aa:1b:d4:ab:b8:41:85:9d:7f:e2:c7:aa: 1a:90:86:ed:d0:bf:2b:ba:30:22:98:04:f9:56:80:f4:69:09: 62:71:f9:2b:cd:ce:7a:4f:cf:27:1e:88:77:33:6c:69:85:cf: fc:73:7e:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCBCqWrSnE1NhRnd3A4cKedITVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTEyMDUwNzM2NTdaFw0yNTEyMDgwOTAwNTdaMDMxMTAvBgNV BAMTKDAzQzdDMUU5MUQ0OEE2RDY4RjI0RDM2RDM1RkFGRDE2NDZCNEQ1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yDEW6vru/igNeYgo684ZCbCw ku1h4w9xCFrC9G1Amsi/xqK5InAbqjH3HXg7XvMyVg36pm201tYYnJQ1+XA/FSdq uFZGa+5bHnAUlx5Z6aCzZcyYNo/VKEq8ygSQD254DBR4ZdOuj7c9uuwvM2MGG/61 BJsPjOZtdFh6L+Np7Paw9KCLDDeKgPmpHl3hhFCzTBStHuAaW0AZOD4klA8H3Fq7 haSwl741OTJ+mWG9m8HkUOqI3z2AQL1hxW2BengGoqd1+VWRkbKrzNqG8O3UIhsB bWTxJ9E7oGSCfbVq1CkicWi3JJdfwOSEJsh+G/Lxy91TR9isufKA3KuuxGYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8fB6R1IptaPJNNtNfr9Fka01fowHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC13vSc90Dcd1788ekWiVcy2hvta1aN48/I/ GtaVe4OnWTGaZ33KxjcIrlzzPvc4nfpEXDuTCexduIdx+J7LXFgASqmtTcaa4WbQ qL8LEHBhprntiP8rxI3rPuWHy3ZAGCmjFNhy2Si/yPc0m9qWV4cGwZpM492G14HG XDZI4F0avZqTfwPYRGWRZ5xKPxp9T/CHxXHwc0cltQnxW/yG0gT7CIHEDbwFoGJS MH5G3Rx/PuvAL0KZNuZWT5je0Yv1+11da/blZHowjfUAJaob1Ku4QYWdf+LHqhqQ hu3Qvyu6MCKYBPlWgPRpCWJx+SvNznpPzyceiHczbGmFz/xzfoM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:52 2025 by rpki-client