This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: uSxJvRqLYAavgCp2FlbIOWURRIOpxgakrNwPwAvcVS8= Subject key identifier: 7A:83:C0:D0:12:3C:BA:BD:AD:32:50:7D:6B:F2:DA:80:64:80:EC:9F Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 64BE374B996E83A8F6497F1A02C34F271034CB89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01BC Signing time: Tue 02 Dec 2025 05:11:45 +0000 Manifest this update: Tue 02 Dec 2025 05:06:45 +0000 Manifest next update: Fri 05 Dec 2025 08:39:45 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: 8G1XeeNYVKOK4ZpL/ktk4G/7YPBRZlH5IeLe9Yl1wWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:be:37:4b:99:6e:83:a8:f6:49:7f:1a:02:c3:4f:27:10:34:cb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Dec 2 05:06:45 2025 GMT Not After : Dec 5 08:39:45 2025 GMT Subject: CN=7A83C0D0123CBABDAD32507D6BF2DA806480EC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:78:55:02:c8:2d:18:79:2c:ba:0c:12:f4: a0:02:9c:3d:f7:26:7c:7f:04:71:9c:75:06:67:2d: 8f:71:85:4c:d7:48:68:b1:80:c8:80:18:b8:20:42: 6f:eb:05:c7:23:dc:cc:7c:b1:11:4a:d9:a0:88:6f: f4:fd:e1:bd:22:09:0f:73:1b:b4:90:26:9b:46:94: 41:fe:cc:1b:2a:87:e9:43:52:81:1f:ea:12:3e:a1: 87:a7:ba:41:c1:04:82:e2:85:72:19:b6:69:58:56: c1:e1:99:af:b5:c9:31:d4:67:1e:2a:83:26:e0:b5: ca:7d:e4:a0:7f:72:27:25:b0:59:55:2d:2c:44:df: bf:9f:5e:cd:c7:b8:81:ca:6d:da:09:7a:fe:89:74: 9b:fb:c6:92:82:0f:c9:02:07:cc:e2:36:42:0a:0d: b3:fa:7b:44:5f:c5:fd:0f:db:fc:5c:8d:7a:13:5f: d2:2a:94:d0:2a:2c:3f:5c:35:6e:ad:07:4c:b1:d5: 90:a1:e3:ef:6d:fa:a4:6f:78:e8:c7:b3:0a:dc:e6: b2:65:02:b4:c6:f3:3a:95:99:67:0f:3b:35:d6:15: eb:55:4e:d8:f4:9c:e8:d0:0a:48:59:f8:00:e0:10: f3:d4:48:14:a8:35:9a:ed:c6:7d:0e:cb:d4:36:83: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:83:C0:D0:12:3C:BA:BD:AD:32:50:7D:6B:F2:DA:80:64:80:EC:9F X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:30:ac:86:63:ff:91:cf:ff:c2:a7:ff:aa:1c:37:02:f1:6c: be:aa:9c:0b:99:89:80:0f:66:46:db:40:eb:3c:32:ef:9c:9a: 0f:fe:07:56:ab:b8:da:1f:ab:23:1c:78:7b:96:e1:90:af:a5: b1:70:2c:b0:80:be:4f:c7:16:73:74:15:fa:c2:e6:f5:70:28: cc:bc:24:db:78:f3:12:32:9a:ea:4e:de:55:7f:e2:62:2e:85: bf:4c:12:0f:cc:f7:7e:f9:36:12:80:e1:16:91:6c:5c:4f:c3: 2b:bc:c5:43:26:25:8c:b9:5c:13:c4:37:18:b1:a4:9a:ab:d0: 75:94:14:6b:db:36:bc:d6:ea:c1:b8:5a:15:19:81:87:39:de: a7:d4:a8:87:d6:77:60:1d:b3:3f:5f:22:09:ad:69:ba:59:62: 05:8b:04:77:94:d6:61:72:8d:bb:35:64:cb:c8:b6:6d:be:fa: de:08:94:b7:cc:96:fc:e7:7e:fd:d6:ee:33:ff:34:36:3b:02: 23:53:f6:ba:8a:68:27:16:46:d7:67:c6:97:4c:a7:48:05:2f: 5f:7c:c8:92:0a:53:f9:20:43:62:d1:86:ba:f2:69:57:61:1a: f9:b7:53:4d:4d:1a:c3:b2:41:9b:13:cf:b9:ac:68:0b:95:0a: f8:dd:49:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL43S5lug6j2SX8aAsNPJxA0y4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTEyMDIwNTA2NDVaFw0yNTEyMDUwODM5NDVaMDMxMTAvBgNV BAMTKDdBODNDMEQwMTIzQ0JBQkRBRDMyNTA3RDZCRjJEQTgwNjQ4MEVDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5XhVAsgtGHksugwS9KACnD33 Jnx/BHGcdQZnLY9xhUzXSGixgMiAGLggQm/rBccj3Mx8sRFK2aCIb/T94b0iCQ9z G7SQJptGlEH+zBsqh+lDUoEf6hI+oYenukHBBILihXIZtmlYVsHhma+1yTHUZx4q gybgtcp95KB/ciclsFlVLSxE37+fXs3HuIHKbdoJev6JdJv7xpKCD8kCB8ziNkIK DbP6e0Rfxf0P2/xcjXoTX9IqlNAqLD9cNW6tB0yx1ZCh4+9t+qRveOjHswrc5rJl ArTG8zqVmWcPOzXWFetVTtj0nOjQCkhZ+ADgEPPUSBSoNZrtxn0Oy9Q2gyITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeoPA0BI8ur2tMlB9a/LagGSA7J8wHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcwrIZj/5HP/8Kn/6ocNwLxbL6qnAuZiYAP ZkbbQOs8Mu+cmg/+B1aruNofqyMceHuW4ZCvpbFwLLCAvk/HFnN0FfrC5vVwKMy8 JNt48xIymupO3lV/4mIuhb9MEg/M9375NhKA4RaRbFxPwyu8xUMmJYy5XBPENxix pJqr0HWUFGvbNrzW6sG4WhUZgYc53qfUqIfWd2Adsz9fIgmtabpZYgWLBHeU1mFy jbs1ZMvItm2++t4IlLfMlvznfv3W7jP/NDY7AiNT9rqKaCcWRtdnxpdMp0gFL198 yJIKU/kgQ2LRhrryaVdhGvm3U01NGsOyQZsTz7msaAuVCvjdSck= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client