This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: 5ZI7QS1qYT20GgWDA7EHD6g5t618EVzTrn439H5G2Tc= Subject key identifier: 13:55:C2:25:6D:A3:EE:05:27:04:C8:FD:16:DC:E5:64:29:31:D6:EF Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 29A0D456FE68640325853B4BE35B076D923A7379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 02A4 Signing time: Mon 24 Nov 2025 07:01:34 +0000 Manifest this update: Mon 24 Nov 2025 06:56:34 +0000 Manifest next update: Thu 27 Nov 2025 13:20:34 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8=) 2: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: x/SzMmmQ/mAJW9Es1xlmR2zbwnBMMKsxdKU3h35Xf2o=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: GwLSbTnQeuh0a53ovkV2iGQ8IVBTUAVLDO4WWZFmNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 13:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a0:d4:56:fe:68:64:03:25:85:3b:4b:e3:5b:07:6d:92:3a:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Nov 24 06:56:34 2025 GMT Not After : Nov 27 13:20:34 2025 GMT Subject: CN=1355C2256DA3EE052704C8FD16DCE5642931D6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:69:79:e8:74:42:2b:c3:9b:01:d5:fc:e9: 58:75:47:7d:f2:09:6a:77:cf:96:35:a7:46:cc:5e: c0:12:f7:5b:b5:49:6e:33:4f:fd:b9:c9:48:66:ae: 74:f1:81:ea:a1:5b:00:fc:0e:1a:c9:b0:26:ac:41: 9b:a0:24:f7:33:1d:58:40:ca:b2:c7:e6:bb:2a:5a: de:21:73:36:45:6b:19:bd:76:6f:88:03:e8:d8:24: ee:5c:56:71:f2:16:ab:f1:f1:64:ce:3c:89:74:1a: 91:5f:59:b9:d2:63:fc:70:cb:92:02:67:54:48:5e: ab:91:d6:f6:f0:b1:d6:75:9d:06:25:fc:7d:36:22: 5a:52:01:73:cf:49:f8:90:2d:80:b6:06:89:78:dc: d4:7f:a7:9f:e0:3f:26:4d:18:25:28:03:d3:9b:71: 55:c3:28:67:ae:c6:0e:91:69:da:37:08:58:1a:f9: dd:a1:74:98:ed:36:fc:42:0b:2b:4f:d4:f0:47:58: ab:49:11:91:eb:e4:5f:cd:28:82:65:22:d1:5b:ba: 08:a7:11:df:76:5b:14:ba:1f:6d:09:57:22:64:ce: d6:87:60:ac:04:e1:73:44:d1:16:1f:c6:a2:8d:54: 1f:bd:7f:e8:95:43:d9:30:42:5d:e1:7b:c2:a4:c9: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:55:C2:25:6D:A3:EE:05:27:04:C8:FD:16:DC:E5:64:29:31:D6:EF X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:60:50:f9:95:29:74:cb:1a:1e:ef:37:de:5c:be:3d:9b: d7:61:ff:aa:eb:ca:3d:22:e3:bf:ff:27:25:62:98:2a:41:8b: 44:c4:f2:50:d4:c2:31:52:23:fc:25:42:8c:87:ab:f8:f5:73: b2:99:e8:3d:65:ff:ba:d7:ab:de:8b:7e:0f:67:93:01:50:67: a1:a2:1f:fd:f5:ca:c0:fd:c8:29:af:43:b8:da:e0:24:a7:74: 48:ca:12:29:87:36:33:90:77:07:94:b0:b8:be:d9:85:1e:5a: af:35:21:1b:12:b5:83:7d:dd:f7:34:68:00:58:5a:db:a9:59: 90:f7:71:14:41:a2:b0:30:bc:dd:69:b9:d2:08:fd:24:6a:84: 83:ad:50:db:5e:42:b4:7f:e8:c9:95:42:2b:3f:ff:0c:80:a4: 76:fc:39:5c:99:6f:dc:90:e9:ed:5f:ff:68:09:cc:86:4f:9d: ad:c6:a1:99:44:9a:db:88:8c:cf:ad:68:3a:49:fe:e7:33:60: f0:c3:73:d7:5f:b0:1e:b1:f9:d3:1a:6e:c3:39:c0:d3:48:69: 2f:e9:33:fd:0f:e7:bf:6e:7a:4f:b7:6f:e1:4e:5b:0c:47:a9: af:cf:e7:cb:4f:38:e1:18:76:9c:82:dd:1f:42:32:e8:a9:4f: ce:49:ef:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaDUVv5oZAMlhTtL41sHbZI6c3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTExMjQwNjU2MzRaFw0yNTExMjcxMzIwMzRaMDMxMTAvBgNV BAMTKDEzNTVDMjI1NkRBM0VFMDUyNzA0QzhGRDE2RENFNTY0MjkzMUQ2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTeml56HRCK8ObAdX86Vh1R33y CWp3z5Y1p0bMXsAS91u1SW4zT/25yUhmrnTxgeqhWwD8DhrJsCasQZugJPczHVhA yrLH5rsqWt4hczZFaxm9dm+IA+jYJO5cVnHyFqvx8WTOPIl0GpFfWbnSY/xwy5IC Z1RIXquR1vbwsdZ1nQYl/H02IlpSAXPPSfiQLYC2Bol43NR/p5/gPyZNGCUoA9Ob cVXDKGeuxg6Rado3CFga+d2hdJjtNvxCCytP1PBHWKtJEZHr5F/NKIJlItFbugin Ed92WxS6H20JVyJkztaHYKwE4XNE0RYfxqKNVB+9f+iVQ9kwQl3he8KkyeBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1XCJW2j7gUnBMj9FtzlZCkx1u8wHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEIYFD5lSl0yxoe7zfeXL49m9dh/6rryj0i 47//JyVimCpBi0TE8lDUwjFSI/wlQoyHq/j1c7KZ6D1l/7rXq96Lfg9nkwFQZ6Gi H/31ysD9yCmvQ7ja4CSndEjKEimHNjOQdweUsLi+2YUeWq81IRsStYN93fc0aABY WtupWZD3cRRBorAwvN1pudII/SRqhIOtUNteQrR/6MmVQis//wyApHb8OVyZb9yQ 6e1f/2gJzIZPna3GoZlEmtuIjM+taDpJ/uczYPDDc9dfsB6x+dMabsM5wNNIaS/p M/0P579uek+3b+FOWwxHqa/P58tPOOEYdpyC3R9CMuipT85J75M= -----END CERTIFICATE-----Generated at Tue Nov 25 20:35:07 2025 by rpki-client