This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: zvvawEklbjCAH7Uh1bx9BdnOkjuGTVX7OXVu+smmvIs= Subject key identifier: 00:C5:66:CD:A4:0D:E7:CE:2E:8B:31:9B:E9:49:96:40:CD:E3:5B:3E Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 3A45FDA6D92602972FA762CA707ECEACFDB5954E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 019D Signing time: Wed 03 Dec 2025 08:40:49 +0000 Manifest this update: Wed 03 Dec 2025 08:35:49 +0000 Manifest next update: Sat 06 Dec 2025 15:42:49 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: 0c/KKGC3Z432KGsRvQZHGizTskXNjh/52jTVQCi39VQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:45:fd:a6:d9:26:02:97:2f:a7:62:ca:70:7e:ce:ac:fd:b5:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Dec 3 08:35:49 2025 GMT Not After : Dec 6 15:42:49 2025 GMT Subject: CN=00C566CDA40DE7CE2E8B319BE9499640CDE35B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9f:1f:10:28:d9:d1:4f:61:48:a4:53:3d:77: 90:6f:ee:4e:b9:92:3e:6a:e7:48:eb:4e:43:26:33: 46:ad:10:2b:c6:08:8a:86:27:2c:d6:80:b7:67:bf: 9f:88:3a:07:6a:91:2f:21:43:e5:0a:24:5b:74:d6: 53:99:b4:a5:bd:46:be:6d:ce:48:a7:43:14:9c:0e: 48:71:f9:3d:1a:be:81:cb:2c:21:ff:8e:7d:9c:07: a0:79:7a:4d:15:84:62:50:b1:19:0e:c2:46:01:f6: 20:c9:55:2c:4f:05:38:aa:92:7d:7a:0a:a3:d4:01: 2b:8c:20:3e:5c:23:91:30:90:2b:dd:03:01:8c:72: 47:37:d4:32:30:6f:a6:58:87:4c:61:86:ff:2f:6e: 11:20:41:55:8e:67:29:e7:38:9f:bb:f1:5a:b0:2e: d0:8b:b4:8e:ea:10:06:27:22:23:4e:a9:4c:ce:44: 39:80:fa:42:fe:75:53:96:4c:5f:45:35:2e:5a:8b: 9f:7c:51:d5:13:7a:42:42:df:70:91:8d:5c:93:d9: c6:9e:cb:c1:6e:d3:8c:2f:a5:32:48:ed:73:14:fb: 39:ed:5d:06:00:06:83:8c:cd:38:ca:31:9d:bc:b8: bf:a3:92:92:30:87:f6:95:10:1c:d9:d6:03:fe:c9: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:66:CD:A4:0D:E7:CE:2E:8B:31:9B:E9:49:96:40:CD:E3:5B:3E X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c4:3b:72:3f:e1:1a:92:20:cd:dc:fb:a8:86:2b:0e:f2:e7: 48:d8:67:ee:da:3c:d4:be:30:a1:6f:87:0e:be:8c:79:c6:db: 3b:43:9c:0f:43:84:a3:0e:27:99:8e:01:7e:72:63:eb:7e:89: e6:0e:04:45:a0:07:fd:b2:56:0f:90:93:f1:7e:b2:18:35:a9: 5a:8b:26:a8:39:07:e8:48:20:4d:b3:40:b5:a1:90:c9:35:27: 81:83:76:2a:2f:22:58:e5:6a:4f:7e:eb:5c:67:4e:c6:85:a3: 54:a4:b3:a8:08:b8:56:e7:5f:6d:2e:ef:04:b1:ac:6b:65:72: 09:23:f9:ba:fa:35:96:d9:5c:2b:2a:87:7a:0e:12:5d:52:82: de:92:b7:cb:82:2c:24:44:e0:e6:2a:64:7c:ff:70:92:36:73: a3:32:81:a7:74:dc:d0:57:2f:4d:9c:08:b8:da:1e:2c:61:4d: 77:50:b2:8a:e4:8a:95:74:fd:8a:99:7a:b2:10:62:8b:18:ed: 34:95:47:bc:7d:ab:fc:39:35:64:4a:79:20:ed:64:4e:4a:9f: 63:24:fd:aa:c2:af:27:cc:c6:56:37:06:01:a6:62:95:ad:5e: 0d:c2:36:03:6a:de:29:d8:8b:a8:12:20:ea:4c:9a:18:08:f4: 51:31:c7:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkX9ptkmApcvp2LKcH7OrP21lU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTEyMDMwODM1NDlaFw0yNTEyMDYxNTQyNDlaMDMxMTAvBgNV BAMTKDAwQzU2NkNEQTQwREU3Q0UyRThCMzE5QkU5NDk5NjQwQ0RFMzVCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnx8QKNnRT2FIpFM9d5Bv7k65 kj5q50jrTkMmM0atECvGCIqGJyzWgLdnv5+IOgdqkS8hQ+UKJFt01lOZtKW9Rr5t zkinQxScDkhx+T0avoHLLCH/jn2cB6B5ek0VhGJQsRkOwkYB9iDJVSxPBTiqkn16 CqPUASuMID5cI5EwkCvdAwGMckc31DIwb6ZYh0xhhv8vbhEgQVWOZynnOJ+78Vqw LtCLtI7qEAYnIiNOqUzORDmA+kL+dVOWTF9FNS5ai598UdUTekJC33CRjVyT2cae y8Fu04wvpTJI7XMU+zntXQYABoOMzTjKMZ28uL+jkpIwh/aVEBzZ1gP+yVuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMVmzaQN584uizGb6UmWQM3jWz4wHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjEO3I/4RqSIM3c+6iGKw7y50jYZ+7aPNS+ MKFvhw6+jHnG2ztDnA9DhKMOJ5mOAX5yY+t+ieYOBEWgB/2yVg+Qk/F+shg1qVqL Jqg5B+hIIE2zQLWhkMk1J4GDdiovIljlak9+61xnTsaFo1Sks6gIuFbnX20u7wSx rGtlcgkj+br6NZbZXCsqh3oOEl1Sgt6St8uCLCRE4OYqZHz/cJI2c6Mygad03NBX L02cCLjaHixhTXdQsorkipV0/YqZerIQYosY7TSVR7x9q/w5NWRKeSDtZE5Kn2Mk /arCryfMxlY3BgGmYpWtXg3CNgNq3inYi6gSIOpMmhgI9FExx/k= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:57 2025 by rpki-client