This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: QlhRjNaH4tM+Ql/TrplUEkGCrK6YMqVz3HCfm9hXmXU= Subject key identifier: 33:C8:54:00:C0:79:A6:5C:14:07:2C:11:86:74:60:E0:3F:91:D9:E6 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 77C9AE905678894F033C531671ACC9C16C6737C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 01B1 Signing time: Sat 06 Dec 2025 19:01:50 +0000 Manifest this update: Sat 06 Dec 2025 18:56:50 +0000 Manifest next update: Tue 09 Dec 2025 22:32:50 +0000 Files and hashes: 1: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: aOwNjZU838Rt2hOKZl7vnG00yRT4HAsXMoZ/gTOp+Vc=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c9:ae:90:56:78:89:4f:03:3c:53:16:71:ac:c9:c1:6c:67:37:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Dec 6 18:56:50 2025 GMT Not After : Dec 9 22:32:50 2025 GMT Subject: CN=33C85400C079A65C14072C11867460E03F91D9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:1b:ae:ec:96:94:06:b2:36:aa:19:83:5d: 99:40:65:8d:2d:05:d7:01:30:2d:29:0c:9b:ab:09: 66:eb:ca:1a:52:8e:65:c9:28:0c:62:c2:1b:a7:61: b5:02:f3:8b:1d:0a:50:ae:b4:76:55:da:45:75:74: 09:ba:a1:eb:b6:9d:35:d0:ab:8f:7d:73:d4:cd:b0: 15:f0:e4:d9:a8:6e:38:f2:42:11:34:4b:b5:11:77: 27:10:50:e8:33:48:71:88:ba:70:21:81:7f:93:b3: 52:4c:e8:8a:38:0a:fa:3d:2f:85:eb:db:a7:06:fb: 20:49:c6:c9:05:0d:df:8b:00:d7:12:ab:25:87:45: 45:1b:57:da:b5:27:17:0b:87:e4:5b:7f:1b:57:33: 92:f6:31:c6:19:5f:cf:0a:0a:fa:34:b6:ec:71:5b: e4:ea:f2:3d:65:38:11:09:a4:7f:75:0f:b8:a8:72: 98:1a:68:58:1b:06:3d:2a:2f:c1:c1:cb:99:80:7a: c2:25:ab:da:e0:ea:5f:13:a4:90:9a:a2:8f:8f:e8: 56:b5:83:15:d1:8f:56:ae:9f:50:60:6f:33:cf:b9: 4a:9a:6c:4d:52:94:62:f7:fe:9c:04:d1:9b:7d:df: 8f:31:8e:ba:1f:cf:3d:97:a1:81:18:6f:a3:6a:e2: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:54:00:C0:79:A6:5C:14:07:2C:11:86:74:60:E0:3F:91:D9:E6 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:80:60:98:2f:5a:1b:bb:4a:64:67:2c:78:ba:42:4a:0e:3f: d7:2b:c1:65:01:05:f2:3a:4c:0a:b6:8d:c5:34:a7:22:16:6e: 3e:18:ba:f9:d3:94:ec:60:e9:9c:3c:8c:70:fb:df:f0:3e:67: e0:59:cb:c4:9d:fa:cd:5c:de:78:8d:22:0d:8c:45:fd:99:6e: 4a:7f:6d:3c:ab:28:05:16:86:1f:7d:64:d3:53:00:c1:6a:5c: bc:51:48:ae:e7:db:f3:66:be:de:94:1a:ca:97:24:21:7c:06: 9c:9f:6e:8a:0e:1d:75:02:71:77:79:89:a5:57:c5:ea:f7:b2: 69:c7:3f:e3:c8:43:ff:6f:c1:b9:2d:ee:0b:5f:f2:b8:da:de: 1d:71:55:19:ab:3d:d0:8b:b9:3d:fe:c9:49:da:1f:32:95:44: 3e:c4:62:9e:1a:fc:bb:3a:76:5b:96:1f:8b:37:25:a2:a9:55: d3:de:e4:49:3c:54:e0:cd:9d:cb:e9:ea:8b:74:51:8a:17:bf: 46:95:65:39:b6:86:04:e1:68:05:6f:f4:2f:a2:6c:8c:72:cc: 80:36:cd:7b:37:a5:13:c0:61:26:6f:3d:f8:9a:12:0d:42:11: ff:a8:8f:10:08:0e:65:2a:40:7c:b0:53:f8:7b:52:28:c1:5f: c0:06:c7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8mukFZ4iU8DPFMWcazJwWxnN8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTEyMDYxODU2NTBaFw0yNTEyMDkyMjMyNTBaMDMxMTAvBgNV BAMTKDMzQzg1NDAwQzA3OUE2NUMxNDA3MkMxMTg2NzQ2MEUwM0Y5MUQ5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtRuu7JaUBrI2qhmDXZlAZY0t BdcBMC0pDJurCWbryhpSjmXJKAxiwhunYbUC84sdClCutHZV2kV1dAm6oeu2nTXQ q499c9TNsBXw5NmobjjyQhE0S7URdycQUOgzSHGIunAhgX+Ts1JM6Io4Cvo9L4Xr 26cG+yBJxskFDd+LANcSqyWHRUUbV9q1JxcLh+RbfxtXM5L2McYZX88KCvo0tuxx W+Tq8j1lOBEJpH91D7iocpgaaFgbBj0qL8HBy5mAesIlq9rg6l8TpJCaoo+P6Fa1 gxXRj1aun1BgbzPPuUqabE1SlGL3/pwE0Zt9348xjrofzz2XoYEYb6Nq4klPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8hUAMB5plwUBywRhnRg4D+R2eYwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmAYJgvWhu7SmRnLHi6QkoOP9crwWUBBfI6 TAq2jcU0pyIWbj4YuvnTlOxg6Zw8jHD73/A+Z+BZy8Sd+s1c3niNIg2MRf2Zbkp/ bTyrKAUWhh99ZNNTAMFqXLxRSK7n2/Nmvt6UGsqXJCF8BpyfbooOHXUCcXd5iaVX xer3smnHP+PIQ/9vwbkt7gtf8rja3h1xVRmrPdCLuT3+yUnaHzKVRD7EYp4a/Ls6 dluWH4s3JaKpVdPe5Ek8VODNncvp6ot0UYoXv0aVZTm2hgThaAVv9C+ibIxyzIA2 zXs3pRPAYSZvPfiaEg1CEf+ojxAIDmUqQHywU/h7UijBX8AGx/8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:13 2025 by rpki-client