This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: /LMp2fWBcB3+6GzLw9mlYwJLKATjsuApZnAdjhoLwAk= Subject key identifier: 9E:63:FA:82:F6:41:03:D6:A3:8B:07:11:2D:5F:5A:B4:EF:31:C0:99 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 3C2A973E0532B92ABC64D24C3D12F89B3DB3F6DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 039F Signing time: Mon 08 Dec 2025 02:01:48 +0000 Manifest this update: Mon 08 Dec 2025 01:56:48 +0000 Manifest next update: Thu 11 Dec 2025 08:14:48 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (hash: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: OSXwwNWxzg+REzvTtqftoEavaBtVy47ZjAdHxJlZxqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 08:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2a:97:3e:05:32:b9:2a:bc:64:d2:4c:3d:12:f8:9b:3d:b3:f6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Dec 8 01:56:48 2025 GMT Not After : Dec 11 08:14:48 2025 GMT Subject: CN=9E63FA82F64103D6A38B07112D5F5AB4EF31C099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:a0:ae:fa:5b:87:1a:06:4b:43:00:b1:f0: 29:b3:93:86:98:35:24:28:e2:d1:98:0c:0a:21:55: 5b:60:83:ec:53:45:7a:35:5b:b7:21:a6:b2:4d:58: e2:04:b4:1d:81:7d:ed:c6:1f:d2:64:46:2c:23:bf: 86:32:80:51:6b:88:99:a5:24:10:7a:86:f5:a7:4c: e1:d0:f8:a9:69:bf:b4:80:03:1b:f7:59:8a:68:7c: 49:58:a3:4d:6b:33:15:03:86:b1:2b:84:1f:d5:00: d0:7c:4b:ae:d7:1d:00:f5:9b:5b:88:82:96:78:ad: b1:bd:68:3a:ec:bb:f8:3e:24:a0:3e:a9:3e:c2:a4: 63:42:41:47:1d:13:29:c5:ec:6b:3b:af:29:cf:61: fe:64:55:f0:0f:bd:2f:51:dd:37:aa:6e:13:3a:6b: 86:8a:6a:7d:2c:09:c6:f9:00:db:f4:e7:d5:ca:7e: a0:6a:33:ca:bd:fb:ff:10:f2:7d:81:c6:89:c6:b8: 9e:70:0a:0a:64:d4:24:dd:62:6b:c1:3d:89:a0:f0: fe:e2:03:41:1c:35:1c:5a:c7:d9:16:bc:08:9d:c8: b2:fc:e7:55:e9:06:bc:e4:06:9c:96:d2:56:33:84: 43:4c:17:bb:6f:43:b6:e0:04:d6:0d:b2:fb:a6:86: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:FA:82:F6:41:03:D6:A3:8B:07:11:2D:5F:5A:B4:EF:31:C0:99 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3c:6f:29:8d:ea:b6:a8:27:36:e5:aa:6f:ec:9a:ea:b2:15: a8:9a:95:d8:7b:6b:0f:05:34:83:99:95:9e:da:a4:b0:1c:34: 04:c5:19:61:4f:f6:4c:0b:c6:54:99:f0:8d:e3:d0:c5:97:86: 35:65:bf:ee:85:84:11:86:5f:5f:0c:83:81:be:48:69:b7:3c: 70:2c:d1:f0:92:5e:b1:13:da:46:34:a7:ea:b5:86:86:14:be: e4:aa:71:cd:81:d2:66:f5:f4:97:d6:8f:00:bf:2c:4a:fa:ac: c6:7b:af:ac:24:ae:ec:81:51:95:db:3e:a5:7f:18:56:47:b7: ac:5f:1c:c1:db:61:53:2a:f8:00:44:1b:aa:c3:0c:93:32:a6: f7:4f:a7:69:21:d3:ac:5e:27:3d:98:b7:b1:20:e9:3d:ef:58: 44:ee:11:4d:0f:07:67:8a:c5:ac:02:f1:c9:92:b1:4d:85:84: 47:72:a8:ab:05:fe:ad:33:9b:c3:97:6c:30:9e:9f:5a:df:b7: 2d:e4:5e:97:e1:97:ec:62:01:03:cf:9e:28:05:d4:21:b8:7e: dc:fa:1f:94:91:f5:68:06:bf:c7:76:27:a5:9f:3f:26:85:60: 01:7e:22:a9:18:b4:43:b5:66:31:31:7b:5a:5f:44:ed:fd:06: fe:e8:54:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCqXPgUyuSq8ZNJMPRL4mz2z9tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTEyMDgwMTU2NDhaFw0yNTEyMTEwODE0NDhaMDMxMTAvBgNV BAMTKDlFNjNGQTgyRjY0MTAzRDZBMzhCMDcxMTJENUY1QUI0RUYzMUMwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSaCu+luHGgZLQwCx8Cmzk4aY NSQo4tGYDAohVVtgg+xTRXo1W7chprJNWOIEtB2Bfe3GH9JkRiwjv4YygFFriJml JBB6hvWnTOHQ+Klpv7SAAxv3WYpofElYo01rMxUDhrErhB/VANB8S67XHQD1m1uI gpZ4rbG9aDrsu/g+JKA+qT7CpGNCQUcdEynF7Gs7rynPYf5kVfAPvS9R3TeqbhM6 a4aKan0sCcb5ANv059XKfqBqM8q9+/8Q8n2BxonGuJ5wCgpk1CTdYmvBPYmg8P7i A0EcNRxax9kWvAidyLL851XpBrzkBpyW0lYzhENMF7tvQ7bgBNYNsvumhrILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmP6gvZBA9ajiwcRLV9atO8xwJkwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs8bymN6raoJzblqm/smuqyFaialdh7aw8F NIOZlZ7apLAcNATFGWFP9kwLxlSZ8I3j0MWXhjVlv+6FhBGGX18Mg4G+SGm3PHAs 0fCSXrET2kY0p+q1hoYUvuSqcc2B0mb19JfWjwC/LEr6rMZ7r6wkruyBUZXbPqV/ GFZHt6xfHMHbYVMq+ABEG6rDDJMypvdPp2kh06xeJz2Yt7Eg6T3vWETuEU0PB2eK xawC8cmSsU2FhEdyqKsF/q0zm8OXbDCen1rfty3kXpfhl+xiAQPPnigF1CG4ftz6 H5SR9WgGv8d2J6WfPyaFYAF+IqkYtEO1ZjExe1pfRO39Bv7oVCI= -----END CERTIFICATE-----Generated at Wed Dec 10 05:14:26 2025 by rpki-client