This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: xBmlBIliPAiRKwsvQp+C8u8ahMPA8i+8M2mblEb3esE= Subject key identifier: A1:9F:04:C3:BE:C8:AE:A9:05:F9:F8:33:91:4A:12:0A:6A:C4:44:E5 Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 6227515BD9FCC6BDE2EF6A848889EB4A8AACACFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 0114 Signing time: Fri 05 Dec 2025 21:11:59 +0000 Manifest this update: Fri 05 Dec 2025 21:06:59 +0000 Manifest next update: Tue 09 Dec 2025 07:54:59 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: G39I5p41Mj+qgeV9iXvH0QYVFmNishOp4nPEd+ZnBOI=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:27:51:5b:d9:fc:c6:bd:e2:ef:6a:84:88:89:eb:4a:8a:ac:ac:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Dec 5 21:06:59 2025 GMT Not After : Dec 9 07:54:59 2025 GMT Subject: CN=A19F04C3BEC8AEA905F9F833914A120A6AC444E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:10:63:83:13:cd:37:84:8b:15:ea:94:a3: ad:b8:46:09:1d:84:cc:d3:16:74:89:55:24:05:f6: 60:69:d2:3e:05:46:5d:65:a9:8f:65:e7:53:83:ab: 78:10:71:92:99:54:8c:01:71:b2:75:81:74:ac:9f: f4:1e:e2:d6:61:47:38:52:7b:b2:e9:8c:ca:bd:56: 59:c1:bf:7e:9c:93:ae:9b:8d:04:a9:ff:e9:03:ef: 1e:91:10:76:73:8c:66:4d:4b:95:3c:cc:a8:73:d6: 77:40:fb:74:b8:fb:b0:76:05:91:82:40:43:e4:7f: f5:d9:45:60:b5:fd:c7:8e:d5:34:1f:e1:ad:f5:a2: 1a:62:c0:9d:ca:fa:07:9c:93:a9:d2:a8:d1:55:10: 5f:80:d7:f9:f0:e9:76:20:56:3c:9b:df:29:57:4f: 11:5d:f5:5e:0e:08:ac:92:b6:8a:71:1c:e6:8c:53: 62:ee:42:d3:5e:05:ac:83:86:3e:be:86:90:ae:59: bd:b6:96:a4:28:0e:20:9e:00:4b:5c:7f:65:5e:c9: 16:28:73:e4:57:3e:03:dc:19:36:34:db:fd:e5:7b: 8a:5d:6c:31:27:56:7a:e7:16:ef:da:34:f5:76:a5: 71:2b:ed:7d:51:37:de:5b:ea:64:a8:a2:28:e8:d8: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:04:C3:BE:C8:AE:A9:05:F9:F8:33:91:4A:12:0A:6A:C4:44:E5 X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8e:7e:fe:45:d3:52:b9:9e:20:92:ef:96:57:12:e3:11:e4: 36:4f:8e:d2:dd:fd:42:23:3e:59:99:84:0d:e3:bc:4d:c9:9e: 88:99:ee:bc:f1:06:b3:16:d5:f6:7d:9c:5d:03:65:47:bc:64: f4:8b:b5:67:7c:d8:7f:54:6a:13:26:ce:62:a6:9d:35:a0:da: 8c:bd:3a:d3:ae:1d:15:77:76:ca:81:c0:6e:6b:52:3e:42:df: a5:f5:64:45:a6:92:07:34:cf:43:25:a7:c2:36:a8:3b:c1:e9: 8d:7c:34:25:ac:76:20:6b:17:24:03:8f:a7:b5:51:ac:57:13: e6:39:18:7b:a4:4f:5c:bf:8c:c6:cc:2b:62:79:df:65:9f:94: e2:9f:bb:f5:01:56:d8:5e:fa:c2:ed:ee:20:ba:03:d1:f5:77: bc:bf:f2:99:c3:2a:4b:c8:a4:5e:bc:48:b0:f8:0b:77:1e:17: c9:70:de:d7:df:4d:98:70:9d:f0:e3:5b:46:b9:6d:f3:96:cd: bc:7f:eb:23:3a:f3:6e:20:f0:d8:0a:02:2d:9c:fe:65:36:cb: 9d:94:f5:4e:69:66:5c:eb:a4:11:ec:b3:c2:d3:db:ff:1c:50: f3:97:3c:33:cf:a1:05:2c:ed:a4:69:5a:c3:81:7d:01:71:1e: cc:41:73:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYidRW9n8xr3i72qEiInrSoqsrPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTEyMDUyMTA2NTlaFw0yNTEyMDkwNzU0NTlaMDMxMTAvBgNV BAMTKEExOUYwNEMzQkVDOEFFQTkwNUY5RjgzMzkxNEExMjBBNkFDNDQ0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnhBjgxPNN4SLFeqUo624Rgkd hMzTFnSJVSQF9mBp0j4FRl1lqY9l51ODq3gQcZKZVIwBcbJ1gXSsn/Qe4tZhRzhS e7LpjMq9VlnBv36ck66bjQSp/+kD7x6REHZzjGZNS5U8zKhz1ndA+3S4+7B2BZGC QEPkf/XZRWC1/ceO1TQf4a31ohpiwJ3K+geck6nSqNFVEF+A1/nw6XYgVjyb3ylX TxFd9V4OCKyStopxHOaMU2LuQtNeBayDhj6+hpCuWb22lqQoDiCeAEtcf2VeyRYo c+RXPgPcGTY02/3le4pdbDEnVnrnFu/aNPV2pXEr7X1RN95b6mSooijo2LqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZ8Ew77IrqkF+fgzkUoSCmrEROUwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmOfv5F01K5niCS75ZXEuMR5DZPjtLd/UIj PlmZhA3jvE3JnoiZ7rzxBrMW1fZ9nF0DZUe8ZPSLtWd82H9UahMmzmKmnTWg2oy9 OtOuHRV3dsqBwG5rUj5C36X1ZEWmkgc0z0Mlp8I2qDvB6Y18NCWsdiBrFyQDj6e1 UaxXE+Y5GHukT1y/jMbMK2J532WflOKfu/UBVthe+sLt7iC6A9H1d7y/8pnDKkvI pF68SLD4C3ceF8lw3tffTZhwnfDjW0a5bfOWzbx/6yM6824g8NgKAi2c/mU2y52U 9U5pZlzrpBHss8LT2/8cUPOXPDPPoQUs7aRpWsOBfQFxHsxBc1Y= -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:16 2025 by rpki-client