This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: T+SoAsR4hya8Gaziqo66NoNqWb34zWOa8NIcKeQxSEU= Subject key identifier: 08:BB:12:D0:50:F1:72:DE:F3:69:E0:62:BF:1B:E5:D7:AE:90:6D:B0 Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 2F5DBE8945F3C740BDBBF51F85A46ADD5904B4D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 01B3 Signing time: Sat 06 Dec 2025 13:21:38 +0000 Manifest this update: Sat 06 Dec 2025 13:16:38 +0000 Manifest next update: Tue 09 Dec 2025 22:22:38 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) 2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: 4CA2HF921nFPv0M5eZAEbtSQzX/RTP/GWipEDSBY9RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5d:be:89:45:f3:c7:40:bd:bb:f5:1f:85:a4:6a:dd:59:04:b4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Dec 6 13:16:38 2025 GMT Not After : Dec 9 22:22:38 2025 GMT Subject: CN=08BB12D050F172DEF369E062BF1BE5D7AE906DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:32:b6:a8:7d:86:1a:e4:69:cc:d9:d2:de: 2c:6f:f9:30:0b:7c:af:29:30:8f:39:fd:5d:8c:ec: c9:48:96:76:48:89:bf:f3:28:5a:57:07:17:05:5c: ba:f7:cb:9c:56:ee:b5:fd:c1:b9:f1:10:41:3a:a1: 09:a7:a9:4c:90:fe:5b:9a:ab:ea:8f:0b:08:63:0b: 79:5a:91:04:ae:26:9f:96:52:64:50:b0:34:aa:6d: 19:8d:b9:13:8c:d3:c2:08:37:ad:02:91:5a:6d:bc: fb:f5:b9:a4:18:e4:ab:20:64:89:60:d1:34:31:8d: 40:81:b8:a5:96:b5:c6:ff:88:4c:e5:e6:5d:5b:52: db:1f:ff:5a:09:5c:e0:34:aa:c2:3c:cd:d3:ed:a6: 50:a2:6b:f9:cc:d7:7c:9c:e6:5e:84:b1:b0:cb:07: ec:06:9c:ee:f3:88:c7:7f:8e:80:52:d4:e2:a7:90: 4f:a9:24:d1:85:15:80:cf:2f:1e:a3:ec:5e:b1:87: 36:32:92:b8:9e:c6:e2:dd:49:06:7a:37:48:95:9f: 62:b7:3e:8c:58:cb:bc:ab:29:df:2d:02:3b:78:1e: 6a:93:cd:b2:97:20:dc:02:f5:8c:74:c6:90:5c:35: b1:56:c8:8a:99:6e:6f:10:02:a1:4d:c0:53:53:13: e6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:12:D0:50:F1:72:DE:F3:69:E0:62:BF:1B:E5:D7:AE:90:6D:B0 X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6b:3d:17:86:ea:f7:31:3d:b6:2e:f4:f3:ee:38:97:9c:3c: 39:3e:27:a1:3e:09:74:ad:65:d2:1a:e8:05:67:96:1e:38:e5: 5c:76:f3:cb:4f:e5:7e:80:eb:a0:95:9c:ac:29:2d:4a:0b:f9: 21:20:0b:6b:7d:7b:ef:28:52:a3:ad:cb:6a:43:53:69:40:e1: aa:e2:6a:1c:7c:ea:c4:de:bb:18:e8:35:8f:b5:7f:a2:00:fa: 25:81:e8:11:b8:1a:e4:79:8e:e8:03:8e:72:96:f4:60:da:53: 6e:8d:75:9d:31:14:8e:e9:9e:fb:07:4c:4b:aa:80:65:c1:44: f7:46:38:97:c5:30:ff:fd:df:c7:28:85:3a:11:f8:fe:c7:e9: ea:d7:fc:af:06:6e:62:c7:0e:0c:a4:8a:a2:93:3e:20:7c:75: 4d:8d:dd:d2:1a:51:34:c6:34:e5:6d:77:92:a0:24:50:35:ed: 6f:0d:d0:cd:a5:56:c2:23:9e:b4:41:4a:48:f6:a1:cf:83:0a: c2:cf:1e:56:f0:70:30:16:f0:1a:c7:6b:45:3f:00:ee:e1:3a: 4e:2a:2c:eb:e3:69:8e:e6:50:cd:a5:a9:06:67:72:bd:13:c9: 8c:47:d7:95:ad:a6:d1:30:25:df:e9:e9:8a:b4:6b:ae:fe:34: 40:79:64:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL12+iUXzx0C9u/UfhaRq3VkEtNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTEyMDYxMzE2MzhaFw0yNTEyMDkyMjIyMzhaMDMxMTAvBgNV BAMTKDA4QkIxMkQwNTBGMTcyREVGMzY5RTA2MkJGMUJFNUQ3QUU5MDZEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwDK2qH2GGuRpzNnS3ixv+TAL fK8pMI85/V2M7MlIlnZIib/zKFpXBxcFXLr3y5xW7rX9wbnxEEE6oQmnqUyQ/lua q+qPCwhjC3lakQSuJp+WUmRQsDSqbRmNuROM08IIN60CkVptvPv1uaQY5KsgZIlg 0TQxjUCBuKWWtcb/iEzl5l1bUtsf/1oJXOA0qsI8zdPtplCia/nM13yc5l6EsbDL B+wGnO7ziMd/joBS1OKnkE+pJNGFFYDPLx6j7F6xhzYykriexuLdSQZ6N0iVn2K3 PoxYy7yrKd8tAjt4HmqTzbKXINwC9Yx0xpBcNbFWyIqZbm8QAqFNwFNTE+bpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLsS0FDxct7zaeBivxvl166QbbAwHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9rPReG6vcxPbYu9PPuOJecPDk+J6E+CXSt ZdIa6AVnlh445Vx288tP5X6A66CVnKwpLUoL+SEgC2t9e+8oUqOty2pDU2lA4ari ahx86sTeuxjoNY+1f6IA+iWB6BG4GuR5jugDjnKW9GDaU26NdZ0xFI7pnvsHTEuq gGXBRPdGOJfFMP/938cohToR+P7H6erX/K8GbmLHDgykiqKTPiB8dU2N3dIaUTTG NOVtd5KgJFA17W8N0M2lVsIjnrRBSkj2oc+DCsLPHlbwcDAW8BrHa0U/AO7hOk4q LOvjaY7mUM2lqQZncr0TyYxH15WtptEwJd/p6Yq0a67+NEB5ZOI= -----END CERTIFICATE-----Generated at Sun Dec 7 06:24:13 2025 by rpki-client