This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: HFyYEjvzbd6yzIhb6yRjxbheA2zagmNIDrZAIM2qlSE= Subject key identifier: 76:26:20:7D:C9:BA:01:E5:E4:D5:7A:6D:54:01:01:83:33:30:8B:67 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 4448D383B3865BABE2149E9C9CBD733D6248471F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 04AA Signing time: Wed 17 Dec 2025 14:40:50 +0000 Manifest this update: Wed 17 Dec 2025 14:35:50 +0000 Manifest next update: Sat 20 Dec 2025 19:23:50 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=) 2: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=) 3: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: h7EPWxdfUoT2QyNECwbh2WBGwRfLqhhGaLTB4Vb/uDk=) 4: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:48:d3:83:b3:86:5b:ab:e2:14:9e:9c:9c:bd:73:3d:62:48:47:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Dec 17 14:35:50 2025 GMT Not After : Dec 20 19:23:50 2025 GMT Subject: CN=7626207DC9BA01E5E4D57A6D5401018333308B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:4a:2a:73:3c:78:05:68:e9:84:24:b2:72: 59:06:9b:72:95:b6:06:62:db:ca:89:48:8d:2b:68: 51:c9:b3:a2:7f:a5:0a:18:35:14:1f:87:89:19:b1: 14:ab:eb:4a:84:b4:c5:33:e8:12:91:87:d6:19:d1: 12:fa:06:5a:6c:23:1b:e2:05:5b:54:ea:26:fb:95: 2e:a4:a1:19:98:3f:42:d1:2c:6e:4d:31:51:b7:a7: 03:ab:42:8a:09:c7:6c:03:b9:23:9b:c9:76:f6:e5: 00:f4:87:b5:97:2a:a4:3c:6e:6e:35:4f:c2:7a:b5: b6:df:52:1d:ce:7e:20:0a:01:cb:05:38:ed:c2:8a: 3a:f3:29:31:40:73:81:6e:d4:5c:8b:8a:46:57:c4: 9c:89:ff:c0:e8:6f:e3:e4:ba:77:43:ac:bd:d4:d1: 3f:46:d7:d8:36:83:45:dc:98:a9:63:07:47:42:6a: da:ad:3f:0e:cb:22:6e:6e:a1:29:3f:79:55:f9:c1: 0e:aa:43:79:4b:72:d8:97:f0:51:8e:55:66:71:87: 94:4a:56:0c:4c:c6:56:42:aa:af:37:53:8f:a9:b4: 0c:e7:05:42:ef:ef:4a:1d:1b:cb:9e:d9:6a:c9:76: e4:6c:29:9f:8a:de:c0:93:ac:b8:79:09:a5:e2:e6: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:20:7D:C9:BA:01:E5:E4:D5:7A:6D:54:01:01:83:33:30:8B:67 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:17:cb:a4:14:fb:8d:70:8b:94:06:d7:3e:aa:a2:81:20:0a: 6b:69:fa:8e:f0:5d:63:4b:87:b1:bb:72:87:3d:ff:42:33:a6: cc:48:dd:7d:ca:69:6d:90:9b:38:f6:4e:cc:0a:87:eb:a7:42: 5d:45:99:d7:ac:70:74:f5:09:b1:d0:64:11:83:7b:75:74:ab: c5:80:cf:cc:32:fe:69:ee:69:0d:47:db:69:44:a1:80:a8:c4: 90:d2:88:54:db:33:78:92:08:36:83:07:f3:87:e3:fd:fb:48: 19:d5:19:d9:f3:fd:63:14:b9:c8:2a:f2:e3:59:6c:28:62:ee: f1:b6:37:28:17:00:96:4b:8d:62:05:46:61:81:3d:0b:87:ed: 54:c0:c6:43:8d:a4:02:2c:78:bd:39:71:4a:e0:e5:37:24:3a: 3d:fc:e1:43:2e:47:6a:cd:83:0c:40:ae:5a:a1:1b:48:5a:78: 3d:81:53:20:71:ff:d0:46:ad:a5:32:90:6d:d3:74:f8:8b:d2: 3b:75:71:d3:06:4e:29:22:87:a3:df:f1:47:60:ec:9e:4e:31: 5b:f6:77:dc:56:54:20:10:38:3e:e1:77:f2:7e:7e:30:f0:04: 91:c9:9b:65:ce:52:71:1d:5a:57:51:97:20:84:1b:bd:9c:d4: d6:b7:5d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREjTg7OGW6viFJ6cnL1zPWJIRx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTEyMTcxNDM1NTBaFw0yNTEyMjAxOTIzNTBaMDMxMTAvBgNV BAMTKDc2MjYyMDdEQzlCQTAxRTVFNEQ1N0E2RDU0MDEwMTgzMzMzMDhCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOkoqczx4BWjphCSyclkGm3KV tgZi28qJSI0raFHJs6J/pQoYNRQfh4kZsRSr60qEtMUz6BKRh9YZ0RL6BlpsIxvi BVtU6ib7lS6koRmYP0LRLG5NMVG3pwOrQooJx2wDuSObyXb25QD0h7WXKqQ8bm41 T8J6tbbfUh3OfiAKAcsFOO3CijrzKTFAc4Fu1FyLikZXxJyJ/8Dob+PkundDrL3U 0T9G19g2g0XcmKljB0dCatqtPw7LIm5uoSk/eVX5wQ6qQ3lLctiX8FGOVWZxh5RK VgxMxlZCqq83U4+ptAznBULv70odG8ue2WrJduRsKZ+K3sCTrLh5CaXi5lsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdiYgfcm6AeXk1XptVAEBgzMwi2cwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4Xy6QU+41wi5QG1z6qooEgCmtp+o7wXWNL h7G7coc9/0IzpsxI3X3KaW2Qmzj2TswKh+unQl1FmdescHT1CbHQZBGDe3V0q8WA z8wy/mnuaQ1H22lEoYCoxJDSiFTbM3iSCDaDB/OH4/37SBnVGdnz/WMUucgq8uNZ bChi7vG2NygXAJZLjWIFRmGBPQuH7VTAxkONpAIseL05cUrg5TckOj384UMuR2rN gwxArlqhG0haeD2BUyBx/9BGraUykG3TdPiL0jt1cdMGTikih6Pf8Udg7J5OMVv2 d9xWVCAQOD7hd/J+fjDwBJHJm2XOUnEdWldRlyCEG72c1Na3Xcg= -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:45 2025 by rpki-client