This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: 8nDF+FkF2iG4o5Y0bBcePcvXwzdLvA/ys+IVyjXI8EA= Subject key identifier: 2E:58:D6:A6:FB:20:1C:8A:7F:98:87:6C:89:35:D6:FB:98:06:D9:8A Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 7FF419F7D27B80727BF8496A7E0D09DE17BE22D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: EA Signing time: Fri 05 Dec 2025 20:31:44 +0000 Manifest this update: Fri 05 Dec 2025 20:26:44 +0000 Manifest next update: Tue 09 Dec 2025 01:18:44 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: lJG0pAa641OdFSPl7+9b8ytmzPn+GUrxvDehVlwl9IQ=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f4:19:f7:d2:7b:80:72:7b:f8:49:6a:7e:0d:09:de:17:be:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Dec 5 20:26:44 2025 GMT Not After : Dec 9 01:18:44 2025 GMT Subject: CN=2E58D6A6FB201C8A7F98876C8935D6FB9806D98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:93:1a:42:fd:19:b8:39:89:28:df:6a:4b:21: 42:52:ee:d0:92:63:1a:9c:b8:a1:97:70:d7:c5:e1: d5:8d:69:73:25:33:7a:f1:75:d9:b2:ae:4e:dd:03: 7f:14:42:e3:7f:2e:a6:c0:06:40:37:10:45:4b:7a: de:8a:ed:55:5e:47:bc:07:d1:2e:8f:c1:8e:10:10: 99:39:9c:08:93:c6:18:bc:04:a9:c0:06:dc:c8:5b: 54:3f:2b:f6:68:24:76:ed:dc:b0:76:88:d7:16:84: 67:f4:65:ca:ac:37:d3:87:0f:aa:22:5b:c6:59:45: 6a:87:31:43:d7:a9:d9:c8:b1:d6:fe:48:d1:6f:3b: 58:cb:c8:ed:4a:51:40:28:3f:87:9d:37:84:a6:22: cb:36:90:01:e7:ba:18:4b:ab:f1:99:04:39:b1:22: ea:21:72:d6:54:81:fe:64:2c:ba:4e:84:88:6c:a5: 72:d4:27:17:b5:00:e0:5d:75:ed:d7:95:51:64:2e: a5:fa:a1:d6:3c:4b:ce:42:88:84:7e:d1:68:61:d7: e3:f9:a3:db:bf:d4:77:d3:2d:ae:ab:c3:da:94:57: e9:6a:92:8b:41:aa:55:f1:f1:44:cd:a9:91:be:ef: 74:2a:5a:87:fb:f8:87:b6:61:34:fe:e8:12:2a:84: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:58:D6:A6:FB:20:1C:8A:7F:98:87:6C:89:35:D6:FB:98:06:D9:8A X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:82:5c:fe:48:05:f0:2d:17:f2:14:db:ee:a6:8d:21:7e:e3: cf:47:72:e0:a1:e2:27:50:d6:5c:52:24:85:d1:51:0e:ef:ba: 53:47:bd:2d:df:64:cd:68:0b:18:56:dd:15:cd:4f:89:38:1e: 21:15:42:da:5d:01:4b:8d:8d:74:e9:da:95:94:4f:3a:19:b1: ad:5b:f5:36:5f:72:40:8a:ca:01:02:cc:aa:76:18:3e:06:1f: f0:9f:fc:da:4c:24:b3:2b:62:c3:b8:dc:f0:b3:2f:22:fd:b5: 75:1a:f8:8a:97:a1:f9:35:50:af:ba:e7:71:27:62:36:96:4b: 6c:0a:5f:40:e0:e0:d5:86:f5:23:81:be:8d:55:34:f3:3c:72: 12:d5:d1:cc:d7:89:95:1c:67:f6:92:aa:df:b6:19:76:7b:be: 34:b8:81:fd:bc:6c:78:80:06:19:5e:38:33:ab:38:bc:06:40: c5:8d:7e:7c:e5:d6:93:b7:21:be:36:00:89:de:ea:29:1d:d5: 56:3c:9e:91:98:0d:ca:9b:12:ff:29:32:d2:79:b1:9f:58:26: c5:d2:f5:d4:4b:cf:f9:bf:ad:f2:cd:e4:77:f0:80:9d:9f:48: f2:0e:96:ab:10:4a:58:ce:9c:79:8f:1a:16:e6:de:06:91:6c: 4b:e5:bd:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/QZ99J7gHJ7+Elqfg0J3he+ItgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTEyMDUyMDI2NDRaFw0yNTEyMDkwMTE4NDRaMDMxMTAvBgNV BAMTKDJFNThENkE2RkIyMDFDOEE3Rjk4ODc2Qzg5MzVENkZCOTgwNkQ5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkxpC/Rm4OYko32pLIUJS7tCS YxqcuKGXcNfF4dWNaXMlM3rxddmyrk7dA38UQuN/LqbABkA3EEVLet6K7VVeR7wH 0S6PwY4QEJk5nAiTxhi8BKnABtzIW1Q/K/ZoJHbt3LB2iNcWhGf0ZcqsN9OHD6oi W8ZZRWqHMUPXqdnIsdb+SNFvO1jLyO1KUUAoP4edN4SmIss2kAHnuhhLq/GZBDmx IuohctZUgf5kLLpOhIhspXLUJxe1AOBdde3XlVFkLqX6odY8S85CiIR+0Whh1+P5 o9u/1HfTLa6rw9qUV+lqkotBqlXx8UTNqZG+73QqWof7+Ie2YTT+6BIqhHLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULljWpvsgHIp/mIdsiTXW+5gG2YowHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeCXP5IBfAtF/IU2+6mjSF+489HcuCh4idQ 1lxSJIXRUQ7vulNHvS3fZM1oCxhW3RXNT4k4HiEVQtpdAUuNjXTp2pWUTzoZsa1b 9TZfckCKygECzKp2GD4GH/Cf/NpMJLMrYsO43PCzLyL9tXUa+IqXofk1UK+653En YjaWS2wKX0Dg4NWG9SOBvo1VNPM8chLV0czXiZUcZ/aSqt+2GXZ7vjS4gf28bHiA BhleODOrOLwGQMWNfnzl1pO3Ib42AIne6ikd1VY8npGYDcqbEv8pMtJ5sZ9YJsXS 9dRLz/m/rfLN5HfwgJ2fSPIOlqsQSljOnHmPGhbm3gaRbEvlvXo= -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:50 2025 by rpki-client