This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: LhymFGONOC/e+UWl7LaR2b+u5bdUM2cSj0Px0dDKKSI= Subject key identifier: 95:3E:FC:26:9E:6E:25:C1:EE:43:B9:DC:6A:D9:CB:61:9D:3A:AA:C6 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 3DD92A016D092EED9E17C07569C6D77F574AFAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: E6 Signing time: Wed 03 Dec 2025 11:21:46 +0000 Manifest this update: Wed 03 Dec 2025 11:16:46 +0000 Manifest next update: Sat 06 Dec 2025 12:18:46 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: EBEPvFmhnLcmxHGK6YzCbcorCYxBQR8BKCDWTBRh0lA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d9:2a:01:6d:09:2e:ed:9e:17:c0:75:69:c6:d7:7f:57:4a:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Dec 3 11:16:46 2025 GMT Not After : Dec 6 12:18:46 2025 GMT Subject: CN=953EFC269E6E25C1EE43B9DC6AD9CB619D3AAAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:e6:e5:56:80:96:3a:de:48:50:d4:fa:76: 88:10:29:0b:8c:35:02:91:6c:b7:b6:18:69:2f:f3: 05:cc:69:e9:f1:d7:29:b0:17:5c:d4:31:2b:db:df: e1:6f:7e:b0:8f:a6:17:ab:87:02:fa:80:7c:e4:ed: 64:45:d9:7c:05:25:76:d0:8b:e3:c2:34:8a:76:55: 25:b4:d4:4a:cd:58:df:20:9b:b2:ed:fe:9d:e4:5c: 5a:cd:e1:86:95:49:90:22:43:53:bf:98:32:a3:91: 92:d4:b5:6d:53:b6:a3:71:f7:0c:6c:d6:d3:a5:6a: 7f:82:9b:bb:01:a3:c9:3f:ab:86:70:d4:d6:03:d2: a0:61:3b:17:c0:32:0c:f5:56:6e:1a:eb:75:77:60: 73:8c:d1:91:06:b2:43:d4:50:0b:e2:cf:14:ff:74: 22:ce:e1:04:bd:d9:c9:88:82:0a:a2:90:ce:9e:f4: 36:8a:f5:e8:8a:c7:77:18:8b:55:c4:dd:03:3c:08: 2f:a8:32:5b:1c:cd:cb:af:3f:77:bd:39:d3:38:2a: 73:94:67:a8:c7:29:ed:f0:af:79:c8:3a:c1:9f:d0: b0:98:4d:ef:06:bf:b5:a0:2a:23:40:81:43:dc:51: 02:73:68:31:ae:23:28:84:d3:94:28:9c:60:68:ed: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:FC:26:9E:6E:25:C1:EE:43:B9:DC:6A:D9:CB:61:9D:3A:AA:C6 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ad:63:74:3c:06:c5:1e:56:f3:52:64:ad:41:0b:bc:72:25: b0:cf:74:4b:0e:9f:fd:27:aa:25:c3:5d:27:3f:65:d8:99:89: 4d:d3:8c:37:da:53:24:82:6f:ae:e2:2a:b9:b2:72:68:8b:96: c8:67:a5:25:96:14:64:09:ab:ab:31:69:d4:41:e7:59:71:af: 24:20:22:81:53:17:b3:33:29:f9:1c:73:1d:b4:31:cb:e5:61: d8:c4:6a:47:fb:89:eb:df:fb:05:34:29:2c:d4:b2:1f:e0:27: c0:c8:8c:96:7c:91:15:20:75:fe:1e:94:e1:44:f5:1e:06:27: 4f:d2:d4:d8:ab:a0:b8:06:15:84:52:da:a4:d5:99:23:5d:2d: 74:a3:14:4f:52:93:a8:c2:fe:36:cc:17:75:1c:d3:b5:f8:23: 3b:29:9e:3c:59:64:97:2f:05:61:cb:42:aa:0b:e2:d9:3a:ed: 5a:5f:e1:25:29:96:1a:3e:50:ce:0e:17:61:71:e7:fa:f9:a6: b7:dd:58:17:f4:d5:28:d4:b6:79:3f:23:10:ab:96:3e:fd:49: 59:91:a8:e4:9f:54:f4:f5:be:f4:b7:be:6c:98:1c:ac:62:e6: 72:be:df:3b:cb:59:44:a6:b9:52:1d:94:eb:06:57:91:c1:7c: ee:4e:13:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdkqAW0JLu2eF8B1acbXf1dK+q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTEyMDMxMTE2NDZaFw0yNTEyMDYxMjE4NDZaMDMxMTAvBgNV BAMTKDk1M0VGQzI2OUU2RTI1QzFFRTQzQjlEQzZBRDlDQjYxOUQzQUFBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjR+blVoCWOt5IUNT6dogQKQuM NQKRbLe2GGkv8wXMaenx1ymwF1zUMSvb3+FvfrCPpherhwL6gHzk7WRF2XwFJXbQ i+PCNIp2VSW01ErNWN8gm7Lt/p3kXFrN4YaVSZAiQ1O/mDKjkZLUtW1TtqNx9wxs 1tOlan+Cm7sBo8k/q4Zw1NYD0qBhOxfAMgz1Vm4a63V3YHOM0ZEGskPUUAvizxT/ dCLO4QS92cmIggqikM6e9DaK9eiKx3cYi1XE3QM8CC+oMlsczcuvP3e9OdM4KnOU Z6jHKe3wr3nIOsGf0LCYTe8Gv7WgKiNAgUPcUQJzaDGuIyiE05QonGBo7Z3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlT78Jp5uJcHuQ7ncatnLYZ06qsYwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+tY3Q8BsUeVvNSZK1BC7xyJbDPdEsOn/0n qiXDXSc/ZdiZiU3TjDfaUySCb67iKrmycmiLlshnpSWWFGQJq6sxadRB51lxryQg IoFTF7MzKfkccx20McvlYdjEakf7ievf+wU0KSzUsh/gJ8DIjJZ8kRUgdf4elOFE 9R4GJ0/S1NiroLgGFYRS2qTVmSNdLXSjFE9Sk6jC/jbMF3Uc07X4IzspnjxZZJcv BWHLQqoL4tk67Vpf4SUplho+UM4OF2Fx5/r5prfdWBf01SjUtnk/IxCrlj79SVmR qOSfVPT1vvS3vmyYHKxi5nK+3zvLWUSmuVIdlOsGV5HBfO5OE+4= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:07 2025 by rpki-client