This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: mMc9b9FSL8CdlouKjUWSsENlYCgd14eX5Vw2hu2pPNU= Subject key identifier: C7:35:79:CC:22:9C:70:24:0D:AF:D3:9D:C2:6B:0B:F6:53:33:F9:50 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 3D2F72D036E72541B60BC2B202A67346BB19F8C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: D0 Signing time: Sat 06 Dec 2025 22:02:19 +0000 Manifest this update: Sat 06 Dec 2025 21:57:19 +0000 Manifest next update: Wed 10 Dec 2025 07:58:19 +0000 Files and hashes: 1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) 2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: 6LdGZ0JU+Z8yF7DGL981KP6EQrnJkc2d7kp1c6sVsmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2f:72:d0:36:e7:25:41:b6:0b:c2:b2:02:a6:73:46:bb:19:f8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Dec 6 21:57:19 2025 GMT Not After : Dec 10 07:58:19 2025 GMT Subject: CN=C73579CC229C70240DAFD39DC26B0BF65333F950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:f2:18:f6:4a:60:cc:29:35:3d:68:41:a2: 23:28:04:8e:1d:84:7c:1a:0f:93:83:cb:09:13:62: 49:63:b4:bc:38:1d:4d:c1:b8:e6:a6:70:d0:84:85: a1:dd:15:48:e2:58:ea:59:54:c8:99:99:5a:d0:82: 79:e7:cc:1e:df:bb:ed:e2:2f:ca:5f:bb:53:74:58: 33:1d:e4:25:ef:cd:7a:7c:c8:5d:39:4a:ee:ba:1c: 13:16:cc:16:f4:bd:60:88:f8:72:18:cb:5e:03:a2: 3b:6c:95:63:81:1c:55:19:ae:52:8c:b5:b0:91:77: 4d:99:b6:a9:31:b7:c9:c0:ea:65:08:f4:f0:7a:8a: a8:6b:b9:dd:10:99:90:3e:9e:50:6a:a5:7a:6b:27: d5:4a:4d:08:3d:2f:01:b7:2e:35:ab:d1:a2:a0:eb: b0:34:be:56:e0:b8:47:de:1d:3a:d0:29:fa:04:12: 11:86:07:26:61:55:3e:23:64:56:a5:21:f2:db:cc: 6a:fe:7c:0b:10:3d:f8:d1:af:df:d5:e0:79:ee:11: 3c:94:b3:38:bd:ed:94:da:d5:fd:92:48:86:d0:95: ba:e5:e3:60:d5:4a:8e:7f:f4:27:bf:c5:46:30:08: 64:17:0f:71:9b:7f:4a:2b:7b:22:5d:01:49:14:b5: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:79:CC:22:9C:70:24:0D:AF:D3:9D:C2:6B:0B:F6:53:33:F9:50 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:dd:b5:59:d4:c6:24:d4:46:fa:ed:82:eb:77:ac:7f:b7: b6:ef:a9:2b:d9:50:f8:4e:de:1e:e0:8f:cb:b6:03:d2:b9:f9: c8:8a:57:a6:29:f6:7a:d5:3e:99:bf:0b:1f:ce:0b:76:8c:4f: 26:d4:bb:f6:06:8a:60:8b:a7:ec:e4:4c:48:89:74:ee:d8:3f: 8a:7d:61:01:70:d4:c5:6a:a1:4c:15:77:d0:88:2f:27:be:9f: be:9a:be:70:c7:2c:69:b4:b0:b0:0e:50:e9:79:c0:ec:40:1a: f6:7f:79:b9:d8:ed:d2:a3:d6:35:4e:4b:ec:ff:71:25:03:11: 1c:52:85:f6:a1:0a:9e:8c:76:9f:d5:8d:a2:37:be:b3:8d:fb: 51:c0:ca:e2:42:c9:08:c6:b2:83:d5:45:18:98:0f:fb:b0:02: 3b:14:20:75:33:3c:c4:c8:88:59:52:7a:1b:07:2d:52:5d:40: 8e:71:d3:2d:65:d9:a9:5e:95:87:30:0b:8e:93:8e:16:4e:fe: 62:bd:ed:c1:1b:20:3f:d8:8a:b5:23:4c:74:a7:ce:08:a6:4e: 4e:f6:3b:f0:92:eb:9f:b3:f8:91:21:91:d4:bb:ac:6d:e6:1b: 0a:ea:f2:c2:b4:b1:26:69:6f:04:9a:e8:4b:cf:57:13:be:cb: 14:a2:01:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPS9y0DbnJUG2C8KyAqZzRrsZ+MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTEyMDYyMTU3MTlaFw0yNTEyMTAwNzU4MTlaMDMxMTAvBgNV BAMTKEM3MzU3OUNDMjI5QzcwMjQwREFGRDM5REMyNkIwQkY2NTMzM0Y5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0/IY9kpgzCk1PWhBoiMoBI4d hHwaD5ODywkTYkljtLw4HU3BuOamcNCEhaHdFUjiWOpZVMiZmVrQgnnnzB7fu+3i L8pfu1N0WDMd5CXvzXp8yF05Su66HBMWzBb0vWCI+HIYy14DojtslWOBHFUZrlKM tbCRd02Ztqkxt8nA6mUI9PB6iqhrud0QmZA+nlBqpXprJ9VKTQg9LwG3LjWr0aKg 67A0vlbguEfeHTrQKfoEEhGGByZhVT4jZFalIfLbzGr+fAsQPfjRr9/V4HnuETyU szi97ZTa1f2SSIbQlbrl42DVSo5/9Ce/xUYwCGQXD3Gbf0oreyJdAUkUtTrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxzV5zCKccCQNr9OdwmsL9lMz+VAwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIT3bVZ1MYk1Eb67YLrd6x/t7bvqSvZUPhO 3h7gj8u2A9K5+ciKV6Yp9nrVPpm/Cx/OC3aMTybUu/YGimCLp+zkTEiJdO7YP4p9 YQFw1MVqoUwVd9CILye+n76avnDHLGm0sLAOUOl5wOxAGvZ/ebnY7dKj1jVOS+z/ cSUDERxShfahCp6Mdp/VjaI3vrON+1HAyuJCyQjGsoPVRRiYD/uwAjsUIHUzPMTI iFlSehsHLVJdQI5x0y1l2alelYcwC46TjhZO/mK97cEbID/YirUjTHSnzgimTk72 O/CS65+z+JEhkdS7rG3mGwrq8sK0sSZpbwSa6EvPVxO+yxSiAVI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:58 2025 by rpki-client