This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json) Hash identifier: iLmsCeLHLdaHDzwTCD6FztY2EhUrvmvjzc941hUVeoA= Subject key identifier: 0E:4A:5C:89:82:38:86:DA:6E:66:0A:E8:65:4E:C8:D1:E9:46:5E:9B Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A Certificate issuer: /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Certificate serial: 34ADE714FF8A3343F33DA4B014A37A0E699E4889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft Manifest number: 052A Signing time: Wed 03 Dec 2025 09:01:18 +0000 Manifest this update: Wed 03 Dec 2025 08:56:18 +0000 Manifest next update: Sat 06 Dec 2025 20:22:18 +0000 Files and hashes: 1: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: 14q0ecjCr7hUVGY8n/Kam1w38+UC+5YHKaAhjVLGbBI=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ad:e7:14:ff:8a:33:43:f3:3d:a4:b0:14:a3:7a:0e:69:9e:48:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Validity Not Before: Dec 3 08:56:18 2025 GMT Not After : Dec 6 20:22:18 2025 GMT Subject: CN=0E4A5C89823886DA6E660AE8654EC8D1E9465E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:18:88:5d:be:87:e8:cf:43:82:5d:67:2a:14: b1:ba:ac:32:34:75:f1:e6:de:3a:89:d9:a0:ba:79: 8f:fe:75:8f:30:57:59:ed:ab:61:a0:78:c2:3f:79: b2:88:1b:f2:1c:1d:13:13:03:78:a8:ec:6d:c6:1c: c9:0c:8e:f1:58:f3:87:ac:91:1b:52:af:b7:11:9f: 3e:e5:02:8b:18:3e:bb:71:01:4e:61:35:a0:89:a4: 81:8f:6d:5b:d8:34:59:58:8e:a8:e2:3d:e0:fa:26: 8b:3a:92:ed:35:46:14:07:43:86:69:62:e9:bc:a7: a5:33:30:af:5d:d2:f5:d4:8a:0d:61:f8:bd:21:ac: 4c:ce:c5:f4:1a:95:90:f9:63:ed:23:48:ad:91:8f: 54:91:d9:48:c7:a0:7c:13:b6:9a:44:e4:a4:91:dd: 79:01:ee:d0:c7:c9:8b:de:72:0c:62:13:f2:4e:4d: 03:69:b0:7d:22:c7:e4:ca:ac:bb:d6:e9:3f:83:bb: b4:c0:fb:49:f5:72:70:3d:77:5d:05:ba:5c:b6:ed: 38:08:d5:54:2b:55:29:e4:cf:7b:54:f9:73:e2:dc: 23:f5:eb:25:44:6a:f5:d8:d2:8a:84:34:ca:05:9a: bf:64:52:84:3c:43:0a:ba:82:05:e2:d2:65:ff:c6: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4A:5C:89:82:38:86:DA:6E:66:0A:E8:65:4E:C8:D1:E9:46:5E:9B X509v3 Authority Key Identifier: keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8c:ba:d0:c6:a7:c3:88:6e:c6:a5:04:c9:7a:d3:dd:5f:54: 8f:df:71:ba:ca:41:1e:9e:88:48:53:16:80:0a:7b:50:43:04: 54:e5:84:e5:8e:18:63:41:ed:b0:3a:80:18:e9:81:23:5d:6d: e0:c0:0c:55:cd:fb:23:be:e7:d0:39:24:e6:76:d0:9d:34:0a: 12:2e:7c:c9:28:18:da:68:86:32:eb:c2:e6:1d:ee:43:5a:b1: 0f:c4:ab:1f:a9:45:11:3c:93:d5:8f:4a:40:89:a3:44:56:c2: 1d:9b:b0:eb:d4:c0:54:d9:b9:f7:16:7c:a0:02:8e:24:da:aa: 01:ef:d5:6b:a3:9a:c7:f9:c0:a6:98:c0:17:17:20:9f:f5:94: 42:cc:46:e9:d5:37:6c:71:f9:70:5c:85:b2:31:83:d6:b7:07: 9d:74:23:1c:76:09:38:41:eb:1d:b0:a3:69:3c:30:8d:86:43: 29:71:0e:66:63:4b:15:f1:16:34:bf:ed:1f:b1:1c:5e:8f:9b: f2:c5:58:3a:eb:b6:3c:88:5d:63:50:0e:89:bc:2e:4a:ec:d2: 00:47:64:11:9f:7c:f4:a4:64:c1:8e:c4:c2:d5:44:1e:1e:84: c3:bb:1c:4a:a5:da:de:d7:57:d7:36:c4:62:e5:e8:d4:52:00: 3a:95:90:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNK3nFP+KM0PzPaSwFKN6DmmeSIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5 RkFDMDc2QTAeFw0yNTEyMDMwODU2MThaFw0yNTEyMDYyMDIyMThaMDMxMTAvBgNV BAMTKDBFNEE1Qzg5ODIzODg2REE2RTY2MEFFODY1NEVDOEQxRTk0NjVFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzGIhdvofoz0OCXWcqFLG6rDI0 dfHm3jqJ2aC6eY/+dY8wV1ntq2GgeMI/ebKIG/IcHRMTA3io7G3GHMkMjvFY84es kRtSr7cRnz7lAosYPrtxAU5hNaCJpIGPbVvYNFlYjqjiPeD6Jos6ku01RhQHQ4Zp Yum8p6UzMK9d0vXUig1h+L0hrEzOxfQalZD5Y+0jSK2Rj1SR2UjHoHwTtppE5KSR 3XkB7tDHyYvecgxiE/JOTQNpsH0ix+TKrLvW6T+Du7TA+0n1cnA9d10Fuly27TgI 1VQrVSnkz3tU+XPi3CP16yVEavXY0oqENMoFmr9kUoQ8Qwq6ggXi0mX/xhoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkpciYI4htpuZgroZU7I0elGXpswHwYDVR0j BBgwFoAUuU9IvKttiwoos5VVBJdcFZ+sB2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjRjMzE1NS1jOGZmLTQyMDctYTJkYy01MWUwMDU1MzBiNTIvMC9COTRGNDhCQ0FC NkQ4QjBBMjhCMzk1NTUwNDk3NUMxNTlGQUMwNzZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5RkFD MDc2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVD MTU5RkFDMDc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeMutDGp8OIbsalBMl6091fVI/fcbrKQR6e iEhTFoAKe1BDBFTlhOWOGGNB7bA6gBjpgSNdbeDADFXN+yO+59A5JOZ20J00ChIu fMkoGNpohjLrwuYd7kNasQ/Eqx+pRRE8k9WPSkCJo0RWwh2bsOvUwFTZufcWfKAC jiTaqgHv1Wujmsf5wKaYwBcXIJ/1lELMRunVN2xx+XBchbIxg9a3B510Ixx2CThB 6x2wo2k8MI2GQylxDmZjSxXxFjS/7R+xHF6Pm/LFWDrrtjyIXWNQDom8Lkrs0gBH ZBGffPSkZMGOxMLVRB4ehMO7HEql2t7XV9c2xGLl6NRSADqVkBk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:36 2025 by rpki-client