This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: KR73/EcUFytu+N02NcySbqqe0PhYRcyQLNVIH211JTA= Subject key identifier: 6E:4D:D7:14:31:C4:66:E7:29:47:FB:3B:F9:95:CB:30:50:57:69:8E Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 48F7A2140D637065A880E00EFDBD2337DC257BCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: F9 Signing time: Sun 07 Dec 2025 00:30:50 +0000 Manifest this update: Sun 07 Dec 2025 00:25:50 +0000 Manifest next update: Wed 10 Dec 2025 05:17:50 +0000 Files and hashes: 1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) 2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: DAEWY3n4K5n619fHiK3ky2rY9c6v9aCC10wlGpEbRsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:a2:14:0d:63:70:65:a8:80:e0:0e:fd:bd:23:37:dc:25:7b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Dec 7 00:25:50 2025 GMT Not After : Dec 10 05:17:50 2025 GMT Subject: CN=6E4DD71431C466E72947FB3BF995CB305057698E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:98:bb:e3:c3:04:cb:a4:23:10:20:ce:35: fe:9f:e9:a8:4f:8a:a2:ea:a6:a2:b2:7e:c8:8a:a7: f4:49:0f:32:e6:05:2b:29:ac:dc:3e:3e:38:58:21: 6d:23:fb:25:d5:e5:ad:a4:fe:7f:df:53:79:24:67: b8:5e:6c:c0:c6:a5:b4:57:a4:60:04:a4:36:b1:4a: 04:cd:85:d5:14:8c:c3:8a:78:fe:e1:45:f4:16:cc: 21:34:58:68:d9:c8:61:4c:26:1d:62:03:d9:9c:f6: 0e:fe:83:c3:37:f4:f7:4b:a7:97:6e:ef:6f:bf:48: cd:04:1a:4e:f4:1e:ea:6f:1e:08:dd:97:01:27:a0: b2:a9:a1:a4:1f:72:06:20:02:56:a1:42:72:72:a6: 94:95:2e:27:e8:3d:d7:83:06:b3:50:e1:af:1c:79: c0:3d:93:c8:16:30:27:8f:0b:3d:2a:64:0f:1b:16: 93:54:1d:de:4d:80:d5:08:97:77:c2:22:25:ad:88: 4e:1e:17:5a:3d:92:0e:a0:32:57:58:ea:c2:18:2c: f8:0a:37:95:ed:3a:45:e5:03:ab:c6:67:cf:24:c1: e7:80:cd:6b:1c:e0:38:f5:0e:bc:28:00:64:33:2c: 23:56:08:62:bb:23:15:83:fa:67:17:e3:3a:73:82: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:D7:14:31:C4:66:E7:29:47:FB:3B:F9:95:CB:30:50:57:69:8E X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:ba:aa:7d:17:e5:cc:0f:11:9e:6e:1c:1b:53:fb:33:b2: 76:38:77:61:f0:97:1e:bf:14:07:96:76:e9:c3:a8:59:d8:d4: 7b:07:39:64:4b:9b:4d:5f:c8:88:c7:65:95:19:0d:00:65:a9: e8:d8:e1:7f:c4:c0:1b:0b:b6:aa:35:2a:d7:59:77:16:0d:f2: 19:58:21:a0:16:d3:d8:1e:f7:a8:c2:e0:2b:35:b7:8f:58:78: d5:ad:ed:57:33:9b:35:93:a2:a2:2e:e6:01:10:64:88:66:57: 6e:02:de:64:7b:5e:56:83:48:a7:d4:a1:f2:d9:6e:f3:13:ee: a1:eb:9f:52:4b:1c:34:0a:cc:99:bb:bc:f9:90:cb:7f:ee:a9: 8d:dd:8f:b2:81:f6:3f:9c:5a:60:a8:b8:84:6b:f7:49:42:b9: cb:48:ff:34:5e:e0:bf:52:15:54:68:6a:02:62:8e:26:ed:02: b9:91:b9:99:b8:c9:32:f4:51:fb:fe:e9:84:3e:29:3a:f7:4c: 78:f1:7f:69:b1:e2:60:dd:64:49:7a:08:46:cf:8b:f2:72:53: 4e:98:43:dc:87:07:25:5f:f9:11:03:37:6a:44:67:96:14:a5: ee:9c:b5:5d:f7:67:f2:75:e8:99:1c:43:74:16:f0:ca:30:2f: a2:1e:54:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPeiFA1jcGWogOAO/b0jN9wle8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNTEyMDcwMDI1NTBaFw0yNTEyMTAwNTE3NTBaMDMxMTAvBgNV BAMTKDZFNERENzE0MzFDNDY2RTcyOTQ3RkIzQkY5OTVDQjMwNTA1NzY5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0eZi748MEy6QjECDONf6f6ahP iqLqpqKyfsiKp/RJDzLmBSsprNw+PjhYIW0j+yXV5a2k/n/fU3kkZ7hebMDGpbRX pGAEpDaxSgTNhdUUjMOKeP7hRfQWzCE0WGjZyGFMJh1iA9mc9g7+g8M39PdLp5du 72+/SM0EGk70HupvHgjdlwEnoLKpoaQfcgYgAlahQnJyppSVLifoPdeDBrNQ4a8c ecA9k8gWMCePCz0qZA8bFpNUHd5NgNUIl3fCIiWtiE4eF1o9kg6gMldY6sIYLPgK N5XtOkXlA6vGZ88kweeAzWsc4Dj1DrwoAGQzLCNWCGK7IxWD+mcX4zpzgswbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbk3XFDHEZucpR/s7+ZXLMFBXaY4wHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGquqp9F+XMDxGebhwbU/szsnY4d2Hwlx6/ FAeWdunDqFnY1HsHOWRLm01fyIjHZZUZDQBlqejY4X/EwBsLtqo1KtdZdxYN8hlY IaAW09ge96jC4Cs1t49YeNWt7VczmzWToqIu5gEQZIhmV24C3mR7XlaDSKfUofLZ bvMT7qHrn1JLHDQKzJm7vPmQy3/uqY3dj7KB9j+cWmCouIRr90lCuctI/zRe4L9S FVRoagJijibtArmRuZm4yTL0Ufv+6YQ+KTr3THjxf2mx4mDdZEl6CEbPi/JyU06Y Q9yHByVf+REDN2pEZ5YUpe6ctV33Z/J16JkcQ3QW8MowL6IeVB4= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:30 2025 by rpki-client