This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: x7+1Ta2aLWMl4IGFBP1xBVih/nn29OkFWB0OWgyr/iM= Subject key identifier: E1:A7:12:86:49:58:56:38:DE:FA:83:D4:B2:93:07:3A:48:E2:FB:5B Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 0EE34203E8E68DFBCFCDF2EF3599B019F8FECFF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03A2 Signing time: Tue 02 Dec 2025 07:22:04 +0000 Manifest this update: Tue 02 Dec 2025 07:17:04 +0000 Manifest next update: Fri 05 Dec 2025 10:00:04 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: nfA5PvH/6oFcJzRXHuHteOh6eH9Iuu8EHrXtVvLVjaw=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e3:42:03:e8:e6:8d:fb:cf:cd:f2:ef:35:99:b0:19:f8:fe:cf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Dec 2 07:17:04 2025 GMT Not After : Dec 5 10:00:04 2025 GMT Subject: CN=E1A7128649585638DEFA83D4B293073A48E2FB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:bf:56:97:97:a9:67:4d:a8:5d:e3:a7:00: ef:4c:88:d8:82:ff:19:eb:b1:08:71:50:a5:bf:15: 20:fb:3f:f7:a2:f4:2a:1d:3a:a7:e4:d1:df:22:09: 39:79:b3:2c:8b:f8:e5:90:c1:c6:34:4d:51:15:03: 81:59:dc:67:7d:65:d5:77:5f:b8:38:f0:9a:cf:ae: 6a:32:89:48:fb:f1:a0:55:ed:1c:fd:67:74:73:3a: 56:e2:af:76:42:c0:a8:82:54:97:97:fb:75:92:73: 64:e0:cd:c4:e0:d1:c5:c3:4f:be:cc:9c:1a:80:2b: 8a:3e:e4:48:de:8a:ef:80:1d:0e:47:cb:f8:b3:51: 85:97:a0:01:69:a9:7a:61:2a:90:81:cc:19:3c:c2: 15:53:35:7a:10:ec:e4:58:df:f4:f1:63:11:8c:aa: 63:96:ee:af:8a:28:55:f9:08:e2:ac:7c:c0:f0:85: 8e:c8:0b:fd:6e:3c:b3:e1:82:bb:b1:8d:98:70:c0: 94:6f:14:f6:ba:52:e9:d5:b4:52:e7:da:51:42:f8: dc:2b:cd:4c:13:99:d4:d7:4e:af:b6:37:09:c7:05: 78:f0:f3:1e:46:d0:08:7e:d3:58:3e:23:b6:a1:be: 83:23:5d:d4:5c:72:01:20:19:2c:e9:13:7f:e7:68: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A7:12:86:49:58:56:38:DE:FA:83:D4:B2:93:07:3A:48:E2:FB:5B X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:56:4d:c0:16:55:f5:13:6a:80:de:31:17:c6:49:a0:82:28: 9b:b4:43:30:e0:50:f2:04:7f:2c:e4:2c:f7:df:2d:45:cb:69: 25:42:f2:c5:67:13:9e:bf:84:10:80:80:a8:17:61:85:aa:4b: 74:b7:8b:b2:f9:88:9b:54:cb:36:f0:ea:8a:e4:fb:db:9f:0e: d7:20:5f:e7:ab:de:e0:1e:76:8e:ee:ab:a4:57:8a:e3:cd:b7: c1:93:ff:2f:4c:b7:7a:e7:d1:c0:69:04:61:2b:94:df:a3:7b: fe:a5:40:8d:38:84:b3:0b:df:1f:75:6a:58:84:51:69:82:89: bd:26:32:89:3e:7a:e5:89:dd:ed:59:0d:6b:c4:03:08:e4:fc: 4d:a3:df:8d:ec:fe:6d:5b:53:90:4b:ac:99:44:f1:c2:be:90: a4:6b:88:8b:4b:69:41:8f:e2:94:ba:d8:31:2f:8a:eb:3b:50: 6b:f6:d4:b5:e4:ed:b0:05:eb:0f:59:f7:5c:4b:a1:58:68:0c: ef:26:34:67:3a:28:c9:b7:1a:c5:d1:15:e7:66:69:5d:6f:5e: 7a:56:88:ec:98:17:8e:29:95:e6:a4:91:d6:49:51:93:ed:87: 8a:92:ae:d6:c6:6b:d5:b8:24:39:65:16:6f:35:b7:d0:48:38: cf:18:15:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuNCA+jmjfvPzfLvNZmwGfj+z/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTEyMDIwNzE3MDRaFw0yNTEyMDUxMDAwMDRaMDMxMTAvBgNV BAMTKEUxQTcxMjg2NDk1ODU2MzhERUZBODNENEIyOTMwNzNBNDhFMkZCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBb9Wl5epZ02oXeOnAO9MiNiC /xnrsQhxUKW/FSD7P/ei9CodOqfk0d8iCTl5syyL+OWQwcY0TVEVA4FZ3Gd9ZdV3 X7g48JrPrmoyiUj78aBV7Rz9Z3RzOlbir3ZCwKiCVJeX+3WSc2TgzcTg0cXDT77M nBqAK4o+5Ejeiu+AHQ5Hy/izUYWXoAFpqXphKpCBzBk8whVTNXoQ7ORY3/TxYxGM qmOW7q+KKFX5COKsfMDwhY7IC/1uPLPhgruxjZhwwJRvFPa6UunVtFLn2lFC+Nwr zUwTmdTXTq+2NwnHBXjw8x5G0Ah+01g+I7ahvoMjXdRccgEgGSzpE3/naO0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4acShklYVjje+oPUspMHOkji+1swHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJWTcAWVfUTaoDeMRfGSaCCKJu0QzDgUPIE fyzkLPffLUXLaSVC8sVnE56/hBCAgKgXYYWqS3S3i7L5iJtUyzbw6ork+9ufDtcg X+er3uAedo7uq6RXiuPNt8GT/y9Mt3rn0cBpBGErlN+je/6lQI04hLML3x91aliE UWmCib0mMok+euWJ3e1ZDWvEAwjk/E2j343s/m1bU5BLrJlE8cK+kKRriItLaUGP 4pS62DEvius7UGv21LXk7bAF6w9Z91xLoVhoDO8mNGc6KMm3GsXRFedmaV1vXnpW iOyYF44pleakkdZJUZPth4qSrtbGa9W4JDllFm81t9BIOM8YFY4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:27 2025 by rpki-client