This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: Ullbc9y97w8AQRf8x47TAGVwUROJ9BvBWSrm+4ItoD0= Subject key identifier: 93:FA:6F:0A:AF:DD:17:FF:2D:71:E6:61:97:88:A0:0D:A4:E3:86:E1 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 2071F20C25BD19B504640B1E4F15D21DE3479A95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 030A Signing time: Sat 06 Dec 2025 17:20:00 +0000 Manifest this update: Sat 06 Dec 2025 17:15:00 +0000 Manifest next update: Tue 09 Dec 2025 20:24:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: yhm4qGN2ehGdSf2XIrPTSzfKDgbxKBCJ6+4MINtcGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:71:f2:0c:25:bd:19:b5:04:64:0b:1e:4f:15:d2:1d:e3:47:9a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Dec 6 17:15:00 2025 GMT Not After : Dec 9 20:24:00 2025 GMT Subject: CN=93FA6F0AAFDD17FF2D71E6619788A00DA4E386E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:c3:a7:b8:92:ae:aa:f6:7d:a1:9b:dc:9e: 9b:35:c6:56:7c:ec:cd:fa:d1:9b:ab:0e:f4:a1:61: ba:19:4d:ad:be:6f:13:d1:a2:69:8d:2a:02:d5:3a: a0:2d:17:f7:b1:c4:a4:71:48:70:1f:0f:5c:38:9e: a9:df:0b:5f:7e:99:01:61:53:b5:7b:e2:79:2c:53: 1c:38:1d:78:5e:0b:a9:07:62:c2:c9:6b:88:65:1c: e0:4d:98:c9:bb:33:5f:9e:24:f3:a0:26:53:b7:e5: 52:1f:6e:9e:78:f4:b4:96:ff:e2:be:f3:7d:af:85: 04:6a:73:ca:6d:32:23:39:5a:c6:8b:88:e6:13:38: 7d:3b:ab:ac:34:d8:d8:56:94:85:53:1f:a8:28:80: 02:ae:f6:ef:b4:e7:b4:bb:49:be:12:2e:84:69:eb: 5c:a8:53:78:51:7e:ec:a8:f3:6d:be:e5:1d:ca:dd: f1:05:80:fc:74:75:50:f1:1a:19:01:9d:a1:96:e1: e9:54:81:df:7a:59:41:ef:0e:f7:d9:64:64:e3:b1: 94:0e:d4:70:aa:85:4e:dc:41:3e:be:f2:3e:c3:52: 92:72:36:a5:b4:36:81:c1:29:e7:42:58:a8:6d:56: 3d:83:db:9f:0c:15:a3:1c:99:e2:01:c2:9f:2b:90: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:6F:0A:AF:DD:17:FF:2D:71:E6:61:97:88:A0:0D:A4:E3:86:E1 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:61:99:c4:07:70:0a:4d:39:00:fa:22:62:4c:e6:9a:d8: c2:9d:40:48:39:b1:7a:c9:55:ad:e2:6a:ff:e6:9e:bc:8a:72: e7:56:e9:f0:fe:7a:e6:a6:0e:33:7c:13:8a:d7:74:09:b1:17: 45:e0:c5:10:8e:b8:b9:d3:2d:86:ad:18:62:ab:30:c5:da:e1: cd:91:60:76:c8:f6:c7:68:3f:9a:b5:f5:cf:8b:7d:b1:8b:41: 1f:37:43:a6:36:37:8d:a5:0e:98:c8:94:f4:ff:11:af:14:9b: 02:33:8b:c0:d1:78:c2:11:e9:72:af:8b:2a:6a:d3:d3:57:93: ed:a6:53:d3:ce:01:de:de:e2:1a:0e:7b:3a:da:13:5d:dc:4f: 42:26:74:ba:8d:9b:8a:af:92:3f:d7:b2:72:84:03:30:8b:b7: 11:fe:2a:f7:50:d5:6f:0b:1a:36:64:92:32:d7:49:08:cb:c4: 41:4b:0b:3f:51:ee:7f:e0:4f:61:71:62:9a:e5:bd:57:34:f2: 37:ba:ff:55:1d:6d:b0:86:9a:c4:7f:7e:cd:89:54:df:10:23: 37:6b:35:33:78:6b:1b:55:25:38:61:a9:a8:64:0c:5b:8b:41: 8b:f7:24:b9:4c:f6:64:f6:b2:e8:60:ee:d7:3c:5e:f4:35:c7: 9a:ef:95:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHHyDCW9GbUEZAseTxXSHeNHmpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTEyMDYxNzE1MDBaFw0yNTEyMDkyMDI0MDBaMDMxMTAvBgNV BAMTKDkzRkE2RjBBQUZERDE3RkYyRDcxRTY2MTk3ODhBMDBEQTRFMzg2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJ8OnuJKuqvZ9oZvcnps1xlZ8 7M360ZurDvShYboZTa2+bxPRommNKgLVOqAtF/exxKRxSHAfD1w4nqnfC19+mQFh U7V74nksUxw4HXheC6kHYsLJa4hlHOBNmMm7M1+eJPOgJlO35VIfbp549LSW/+K+ 832vhQRqc8ptMiM5WsaLiOYTOH07q6w02NhWlIVTH6gogAKu9u+057S7Sb4SLoRp 61yoU3hRfuyo822+5R3K3fEFgPx0dVDxGhkBnaGW4elUgd96WUHvDvfZZGTjsZQO 1HCqhU7cQT6+8j7DUpJyNqW0NoHBKedCWKhtVj2D258MFaMcmeIBwp8rkK5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/pvCq/dF/8tceZhl4igDaTjhuEwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbMYZnEB3AKTTkA+iJiTOaa2MKdQEg5sXrJ Va3iav/mnryKcudW6fD+euamDjN8E4rXdAmxF0XgxRCOuLnTLYatGGKrMMXa4c2R YHbI9sdoP5q19c+LfbGLQR83Q6Y2N42lDpjIlPT/Ea8UmwIzi8DReMIR6XKviypq 09NXk+2mU9POAd7e4hoOezraE13cT0ImdLqNm4qvkj/XsnKEAzCLtxH+KvdQ1W8L GjZkkjLXSQjLxEFLCz9R7n/gT2FxYprlvVc08je6/1UdbbCGmsR/fs2JVN8QIzdr NTN4axtVJThhqahkDFuLQYv3JLlM9mT2suhg7tc8XvQ1x5rvlU8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:31 2025 by rpki-client