This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: aw2s+N3ZJ5HlP1goDHZDqUv+tSJKl9GYNg30kH8BLB8= Subject key identifier: 63:AA:F8:2F:14:10:C5:72:40:24:11:6E:67:07:8F:FF:81:79:23:5D Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 2104677C7AE969E83AC369D9B06F98A1AC42FDA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 01DF Signing time: Wed 03 Dec 2025 01:41:33 +0000 Manifest this update: Wed 03 Dec 2025 01:36:33 +0000 Manifest next update: Sat 06 Dec 2025 07:57:33 +0000 Files and hashes: 1: 3130332e3131322e3134352e302f32342d3234203d3e20323135373237.roa (hash: 47jeZDZVGJz340J8dcsKd8JOrcaXh6l0x1iSQEe4P38=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (hash: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4=) 3: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: l8Og1lwkQAH4gQfk3H3firj2CW23m1CTXYf/zpu+3Ek=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: kQaBHWFZ09LwTrNpnEcdDDYi9aXzLqVrrUv/bLTySVg=) 5: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: qWDmS5UKm4lAYqWSeGNChIV3yMaBEaC1Kn8FH4F+UyY=) 6: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) 7: 3130332e3131322e3134342e302f32342d3234203d3e20323135373237.roa (hash: gknzJmwMhuMcq+HlLpGDVUWG9agAsyWXJWE8G4S01cU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:04:67:7c:7a:e9:69:e8:3a:c3:69:d9:b0:6f:98:a1:ac:42:fd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Dec 3 01:36:33 2025 GMT Not After : Dec 6 07:57:33 2025 GMT Subject: CN=63AAF82F1410C5724024116E67078FFF8179235D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:89:29:d9:4c:11:ba:55:7f:cd:91:8e:67: f8:50:b6:43:f3:75:0d:64:33:6b:f3:9c:16:4b:24: af:85:0d:87:88:12:e1:12:5c:26:67:47:1e:28:30: db:67:1e:c4:ba:b3:5e:c5:9f:0f:99:3b:3f:aa:43: 61:ef:3d:20:c1:1c:d7:1e:33:e0:30:f9:2b:4b:23: c7:78:28:94:2a:d0:3d:7d:2c:55:85:8c:71:2f:50: ff:be:5f:8c:34:77:43:16:c4:ea:85:a2:e9:6a:c3: c3:9b:88:ca:55:46:ea:91:77:be:c4:01:53:36:cf: 5a:ae:40:8c:ba:33:b2:6d:5c:0d:ac:fb:d0:04:d0: ce:3f:7f:11:9c:bd:fe:b9:ef:e4:71:0f:22:33:58: 62:a9:1b:e8:17:76:0e:f0:b0:73:e6:be:04:dd:f5: 53:db:25:3e:fc:59:18:82:8d:5e:64:b6:34:c9:c5: 61:41:a3:2a:0e:1f:79:ac:3d:2e:b5:69:19:f7:5a: 20:7f:dd:23:f5:f0:22:57:85:2f:e3:90:9e:d7:7f: ed:b8:2e:db:96:6c:5c:e5:ce:62:6c:2e:8d:97:5a: 4f:58:2e:1c:9e:73:79:17:4d:31:63:5c:d2:52:99: b6:e0:bf:62:67:f8:c4:2c:05:d4:db:e6:8c:89:f9: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AA:F8:2F:14:10:C5:72:40:24:11:6E:67:07:8F:FF:81:79:23:5D X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b5:22:a1:66:06:15:2d:35:b9:6c:f5:20:4a:0f:a1:94:e8: 21:90:fe:ab:4d:4b:5d:c5:14:0b:9b:c2:85:6f:05:c8:7b:a4: cc:30:82:d2:20:0d:95:74:29:9c:1f:97:56:f5:25:06:c8:3c: b9:7d:45:9b:64:69:d2:73:c8:ed:fc:47:81:d7:f6:a2:45:04: 5a:d9:04:1e:07:0d:1f:04:b6:45:06:0b:04:af:ef:54:78:03: 8f:28:b1:7a:db:73:70:12:7e:20:10:e6:e1:83:51:b7:df:93: 27:d1:c7:eb:3a:b6:0a:37:84:75:72:f0:5b:95:07:3b:87:27: e6:da:48:bc:8c:09:a3:2c:55:d5:1e:6e:b9:12:09:be:e3:88: 34:87:39:a9:54:de:c8:9d:0b:90:f9:2a:cc:94:ea:8a:57:cf: f9:ca:c5:4b:09:0b:73:fd:a7:a4:6d:dd:95:e8:8d:ac:77:be: 45:40:68:3c:8e:8d:ac:1e:ec:05:0e:6c:92:81:77:ca:91:80: 73:be:48:48:f8:6f:7c:7f:44:40:63:ae:5d:aa:48:cd:b4:7f: 89:8c:25:f0:92:5e:14:db:ad:e8:98:99:a5:25:3e:ab:81:4c: ff:f6:e4:90:c9:66:ca:76:3f:ca:2b:8e:b9:9f:ca:06:76:f2: 59:d6:33:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQRnfHrpaeg6w2nZsG+YoaxC/aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTEyMDMwMTM2MzNaFw0yNTEyMDYwNzU3MzNaMDMxMTAvBgNV BAMTKDYzQUFGODJGMTQxMEM1NzI0MDI0MTE2RTY3MDc4RkZGODE3OTIzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGYkp2UwRulV/zZGOZ/hQtkPz dQ1kM2vznBZLJK+FDYeIEuESXCZnRx4oMNtnHsS6s17Fnw+ZOz+qQ2HvPSDBHNce M+Aw+StLI8d4KJQq0D19LFWFjHEvUP++X4w0d0MWxOqFoulqw8ObiMpVRuqRd77E AVM2z1quQIy6M7JtXA2s+9AE0M4/fxGcvf657+RxDyIzWGKpG+gXdg7wsHPmvgTd 9VPbJT78WRiCjV5ktjTJxWFBoyoOH3msPS61aRn3WiB/3SP18CJXhS/jkJ7Xf+24 LtuWbFzlzmJsLo2XWk9YLhyec3kXTTFjXNJSmbbgv2Jn+MQsBdTb5oyJ+RiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6r4LxQQxXJAJBFuZweP/4F5I10wHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+1IqFmBhUtNbls9SBKD6GU6CGQ/qtNS13F FAubwoVvBch7pMwwgtIgDZV0KZwfl1b1JQbIPLl9RZtkadJzyO38R4HX9qJFBFrZ BB4HDR8EtkUGCwSv71R4A48osXrbc3ASfiAQ5uGDUbffkyfRx+s6tgo3hHVy8FuV BzuHJ+baSLyMCaMsVdUebrkSCb7jiDSHOalU3sidC5D5KsyU6opXz/nKxUsJC3P9 p6Rt3ZXojax3vkVAaDyOjawe7AUObJKBd8qRgHO+SEj4b3x/REBjrl2qSM20f4mM JfCSXhTbreiYmaUlPquBTP/25JDJZsp2P8orjrmfygZ28lnWM7M= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:06 2025 by rpki-client