This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: 2dnaqgVcKSVZ0ynmVxskJe/XQIbRVq4FE9m+ONoIKF0= Subject key identifier: 6B:2D:17:23:F5:18:DA:70:9C:58:B9:B8:52:33:47:A7:51:FD:B7:0F Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 41F827447989AAB4B5A7777635228034FCE4C760 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: DA Signing time: Mon 29 Dec 2025 12:42:13 +0000 Manifest this update: Mon 29 Dec 2025 12:37:13 +0000 Manifest next update: Thu 01 Jan 2026 23:49:13 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: oArIjllwCuuNQY+/Szkuem6LfJi2YXbvYcvMrWxtdgk=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 23:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f8:27:44:79:89:aa:b4:b5:a7:77:76:35:22:80:34:fc:e4:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Dec 29 12:37:13 2025 GMT Not After : Jan 1 23:49:13 2026 GMT Subject: CN=6B2D1723F518DA709C58B9B8523347A751FDB70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:b2:ef:5c:d8:5f:e4:f7:06:4b:a5:a9:94: f8:11:37:bf:13:fd:8f:fa:15:31:21:41:36:bf:ca: 1d:01:0b:e9:83:88:a6:28:01:c9:20:5c:b7:39:e0: ec:07:22:af:60:6d:5a:79:bf:4b:b4:80:3b:e7:fe: f9:dd:ed:93:d5:fc:be:dd:d7:75:a5:96:f4:ba:26: 8d:5b:4c:12:a5:c0:ce:e5:1f:ac:0a:1b:40:4e:3d: b3:f7:73:1e:96:ab:f2:4c:f8:7f:c7:cd:fb:7c:93: 6a:c2:dc:da:88:67:87:72:87:22:6c:a3:58:ce:f1: cc:71:df:d3:8d:5f:c4:7e:e5:3c:9b:32:0e:22:a4: 1c:0c:0d:64:13:78:a5:d2:a4:35:0a:2c:18:81:35: c5:9d:20:1a:97:bb:12:a2:9e:30:94:30:ce:a2:fe: bd:95:7d:db:d1:15:8c:1c:30:33:ef:65:e4:81:58: 6c:60:3d:8a:96:f6:74:23:89:30:0b:4e:ff:da:aa: 7a:96:cc:e3:4c:73:33:28:9a:7b:91:82:c6:be:63: cc:24:58:3a:48:1a:90:d2:0b:0d:7a:e3:b8:a4:ac: e6:72:91:ac:f2:a0:53:96:54:01:46:76:9f:4b:07: 3e:2c:70:14:8a:4d:a3:0b:06:84:15:d0:e3:a4:2e: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:17:23:F5:18:DA:70:9C:58:B9:B8:52:33:47:A7:51:FD:B7:0F X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:b5:78:7b:fe:f1:26:6e:a1:aa:25:59:af:f1:cb:6a:2f: e0:da:12:00:5c:35:ea:77:9d:3e:61:2d:7d:d0:16:92:70:f4: c5:f6:d4:aa:01:8c:b0:47:7f:f1:53:4a:35:11:61:94:57:1c: 5c:38:e6:aa:72:19:51:96:a4:9a:c4:2b:41:6b:be:cd:99:3e: 56:43:02:7f:d8:59:f0:c2:7c:ba:e2:bf:d7:98:a6:fa:29:37: 10:27:bf:1c:41:39:bc:3b:75:d3:da:93:2b:69:1d:2b:d8:6f: 15:35:d5:8e:6c:ce:d3:cf:7f:bf:24:98:57:c8:c9:7c:34:cc: ef:52:92:38:b7:f1:01:6a:e8:3b:57:b8:83:dc:b7:a8:8c:85: e2:1e:ac:12:67:cb:24:c3:8d:ec:09:33:ef:d4:30:9e:8e:29: b0:42:08:2d:f8:df:0f:f6:18:08:09:f5:f3:32:ab:3d:c3:f1: 7f:f5:28:60:21:a6:23:18:5f:55:ce:6e:a5:8e:5f:22:d4:5a: 58:81:1c:3a:cc:e9:44:2b:50:35:4b:8a:85:38:1a:34:08:63: f2:f1:4b:c8:08:4c:da:aa:80:56:3a:9d:fa:a7:e1:f3:63:ae: fd:ce:89:ac:8c:6f:b0:f4:b9:e3:28:e5:ea:37:41:da:16:f0: d2:d8:15:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfgnRHmJqrS1p3d2NSKANPzkx2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTEyMjkxMjM3MTNaFw0yNjAxMDEyMzQ5MTNaMDMxMTAvBgNV BAMTKDZCMkQxNzIzRjUxOERBNzA5QzU4QjlCODUyMzM0N0E3NTFGREI3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEbLvXNhf5PcGS6WplPgRN78T /Y/6FTEhQTa/yh0BC+mDiKYoAckgXLc54OwHIq9gbVp5v0u0gDvn/vnd7ZPV/L7d 13WllvS6Jo1bTBKlwM7lH6wKG0BOPbP3cx6Wq/JM+H/Hzft8k2rC3NqIZ4dyhyJs o1jO8cxx39ONX8R+5TybMg4ipBwMDWQTeKXSpDUKLBiBNcWdIBqXuxKinjCUMM6i /r2VfdvRFYwcMDPvZeSBWGxgPYqW9nQjiTALTv/aqnqWzONMczMomnuRgsa+Y8wk WDpIGpDSCw1647ikrOZykazyoFOWVAFGdp9LBz4scBSKTaMLBoQV0OOkLhRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUay0XI/UY2nCcWLm4UjNHp1H9tw8wHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkotXh7/vEmbqGqJVmv8ctqL+DaEgBcNep3 nT5hLX3QFpJw9MX21KoBjLBHf/FTSjURYZRXHFw45qpyGVGWpJrEK0Frvs2ZPlZD An/YWfDCfLriv9eYpvopNxAnvxxBObw7ddPakytpHSvYbxU11Y5sztPPf78kmFfI yXw0zO9Skji38QFq6DtXuIPct6iMheIerBJnyyTDjewJM+/UMJ6OKbBCCC343w/2 GAgJ9fMyqz3D8X/1KGAhpiMYX1XObqWOXyLUWliBHDrM6UQrUDVLioU4GjQIY/Lx S8gITNqqgFY6nfqn4fNjrv3OiayMb7D0ueMo5eo3QdoW8NLYFYU= -----END CERTIFICATE-----Generated at Wed Dec 31 19:58:09 2025 by rpki-client