This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: N2ld5IplSAMxDQIyznw91hslWj+NSR71lZU0/oh/jvg= Subject key identifier: ED:EC:64:8C:AB:6F:BF:58:B4:9E:E3:63:3D:3A:1C:84:66:B5:1B:7C Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 5DB6C5F48423004A6336C70E10016BBF2BDE4572 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0152 Signing time: Fri 05 Dec 2025 14:42:22 +0000 Manifest this update: Fri 05 Dec 2025 14:37:22 +0000 Manifest next update: Tue 09 Dec 2025 01:16:22 +0000 Files and hashes: 1: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=) 2: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: DYNP1pkQZXlnNBDUWLT0o/w7WroozE34gPyP6ZNIwTM=) 3: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) 4: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: u3mcWwijy2WAnDFiZo13YX4s8ug+hePgyeOc2R0e13c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b6:c5:f4:84:23:00:4a:63:36:c7:0e:10:01:6b:bf:2b:de:45:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Dec 5 14:37:22 2025 GMT Not After : Dec 9 01:16:22 2025 GMT Subject: CN=EDEC648CAB6FBF58B49EE3633D3A1C8466B51B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:be:45:ea:ee:4a:a2:88:c2:fb:f7:24:1a: 4c:fb:ab:87:25:62:a0:7f:7e:c7:1a:16:8c:d8:60: 52:7e:65:73:0f:77:45:2d:7a:10:53:70:3f:22:18: 85:4a:98:4c:ec:bd:80:8c:f2:dd:5f:ab:24:a9:c6: 56:9d:f7:e3:a0:9e:b6:aa:c5:8c:88:17:d7:34:35: 2f:51:31:e7:e4:33:4f:8b:d0:a0:a7:20:bf:fc:c5: 0c:1e:77:85:b9:6f:bd:09:cb:1b:13:69:64:e4:0a: 4c:d5:28:a7:dc:72:87:8b:05:a3:9f:2b:6b:3e:cd: 2d:e9:5b:e0:98:2c:a5:ff:77:2c:a9:1b:2f:6c:42: 49:64:f7:63:54:99:b2:8a:9d:90:b1:77:4c:8c:83: 2c:04:b1:0a:47:9a:7a:e9:c6:2b:d5:df:e1:9a:f5: a0:54:5a:19:20:24:53:ab:ff:cc:f5:e5:ea:72:20: 4e:6f:df:5d:1b:98:48:af:9a:fe:cf:a4:91:25:72: 4c:8f:1b:49:9e:93:4e:14:91:b9:00:40:9f:af:4e: f6:94:1f:34:fb:5f:05:e1:79:9a:a1:eb:fa:fa:5a: 00:91:83:8d:de:01:de:13:7b:e7:d6:d9:7c:a9:83: d0:2d:ba:e1:eb:b1:e0:3a:bb:95:bb:2b:3d:53:41: ad:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EC:64:8C:AB:6F:BF:58:B4:9E:E3:63:3D:3A:1C:84:66:B5:1B:7C X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:28:5b:bf:42:8c:be:da:d8:f5:44:d4:6a:06:45:e8:08:db: c6:38:6e:9f:3a:42:2d:47:4f:e6:5d:30:c7:01:bb:06:cd:06: f2:53:b1:57:e7:28:e6:97:00:c9:e6:a7:96:02:4f:e3:f4:98: fe:38:fc:3c:8c:bc:1b:3f:74:87:80:56:b0:2e:6c:fb:fc:2c: 2b:65:d2:3f:a6:d9:60:d0:58:b3:80:53:e3:da:9f:f2:52:84: 98:50:a2:a6:c7:81:48:9f:8d:93:92:b4:3f:76:bf:0c:d1:91: e1:e9:92:f4:84:9f:3e:92:45:06:68:44:6a:b6:24:d7:c0:33: 21:58:16:3a:ba:d5:b0:53:54:fa:9b:47:e4:09:a4:6c:02:48: c7:f7:cc:da:5c:a1:05:ec:6c:07:2c:68:81:10:c4:86:70:60: b1:7e:09:ab:2a:45:2e:1e:c1:86:18:14:71:3c:66:2a:7a:be: 71:4d:07:28:2d:d9:81:f6:1d:11:7d:01:fc:79:81:96:35:71: de:1b:cb:b4:15:13:e0:e8:3c:79:17:26:48:14:86:17:c4:37: b1:43:7d:4c:8e:43:b2:5b:fd:a8:bb:f1:85:3e:0e:72:3f:00: 85:f4:31:3c:4d:a5:2e:97:0d:7d:66:f6:96:9c:1f:ae:f9:97: ca:3a:12:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbbF9IQjAEpjNscOEAFrvyveRXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNTEyMDUxNDM3MjJaFw0yNTEyMDkwMTE2MjJaMDMxMTAvBgNV BAMTKEVERUM2NDhDQUI2RkJGNThCNDlFRTM2MzNEM0ExQzg0NjZCNTFCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgb5F6u5KoojC+/ckGkz7q4cl YqB/fscaFozYYFJ+ZXMPd0UtehBTcD8iGIVKmEzsvYCM8t1fqySpxlad9+Ognraq xYyIF9c0NS9RMefkM0+L0KCnIL/8xQwed4W5b70JyxsTaWTkCkzVKKfccoeLBaOf K2s+zS3pW+CYLKX/dyypGy9sQklk92NUmbKKnZCxd0yMgywEsQpHmnrpxivV3+Ga 9aBUWhkgJFOr/8z15epyIE5v310bmEivmv7PpJElckyPG0mek04UkbkAQJ+vTvaU HzT7XwXheZqh6/r6WgCRg43eAd4Te+fW2Xypg9AtuuHrseA6u5W7Kz1TQa2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7exkjKtvv1i0nuNjPTochGa1G3wwHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYoW79CjL7a2PVE1GoGRegI28Y4bp86Qi1H T+ZdMMcBuwbNBvJTsVfnKOaXAMnmp5YCT+P0mP44/DyMvBs/dIeAVrAubPv8LCtl 0j+m2WDQWLOAU+Pan/JShJhQoqbHgUifjZOStD92vwzRkeHpkvSEnz6SRQZoRGq2 JNfAMyFYFjq61bBTVPqbR+QJpGwCSMf3zNpcoQXsbAcsaIEQxIZwYLF+CasqRS4e wYYYFHE8Zip6vnFNBygt2YH2HRF9Afx5gZY1cd4by7QVE+DoPHkXJkgUhhfEN7FD fUyOQ7Jb/ai78YU+DnI/AIX0MTxNpS6XDX1m9pacH675l8o6Erw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:55 2025 by rpki-client