This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: GiE9QY2ltz3+MFvzwKWe/tRGavfhWmbNzAzV7sUahjU= Subject key identifier: 00:52:D9:86:85:C5:CD:A0:24:04:62:F9:69:D9:EA:98:26:4E:00:DB Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 7363B2DA69A17DE5E33E85B75F28A8BAA437E548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: D7 Signing time: Tue 02 Dec 2025 12:40:39 +0000 Manifest this update: Tue 02 Dec 2025 12:35:39 +0000 Manifest next update: Fri 05 Dec 2025 20:19:39 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: efNub4/MCEqbdo7StiBrGrnt70nfRGSJJi2QsuisVLk=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:63:b2:da:69:a1:7d:e5:e3:3e:85:b7:5f:28:a8:ba:a4:37:e5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Dec 2 12:35:39 2025 GMT Not After : Dec 5 20:19:39 2025 GMT Subject: CN=0052D98685C5CDA0240462F969D9EA98264E00DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:1e:27:f1:80:72:a5:25:13:38:4d:d3:ff: 36:a3:f2:d5:54:ca:6b:81:79:c1:56:9b:0b:5d:6c: fe:02:d1:7f:af:07:06:74:ec:d9:94:8f:ad:d3:3f: b2:26:09:47:a8:7e:29:e6:08:36:6d:62:bc:52:b6: 33:4e:8e:3e:a5:a2:f7:30:63:72:84:7b:b0:5f:f5: dc:35:47:4d:de:8e:ee:a8:6b:76:be:94:ae:78:24: 61:1f:6b:01:d5:b8:e1:ae:f9:9f:69:16:f7:9b:f2: cb:5d:37:30:b1:92:a7:23:1a:5a:9e:d7:fe:54:28: 5e:55:bf:f8:d7:53:f9:52:ae:fc:0a:59:3a:da:c6: a1:96:78:ac:27:10:ef:a6:7f:1f:78:3f:ad:3b:1f: 39:60:7a:ed:69:38:ea:94:7c:b7:c6:c7:3a:33:da: ae:7c:33:f5:87:c6:b7:47:f3:20:77:b3:91:30:e4: b7:9e:23:1c:f2:0c:17:5f:59:f2:11:3a:6b:cf:ff: 3d:f8:70:9d:44:41:8c:8f:ad:7b:9f:75:36:f3:57: 74:9d:2f:e2:72:cb:b1:d9:ba:78:75:1f:5f:d3:fe: 3b:4b:a5:a1:75:81:12:97:ae:68:b7:ed:8f:ba:7f: 81:c5:09:52:57:30:4c:d4:ed:09:0f:c9:4f:6b:cf: 53:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:52:D9:86:85:C5:CD:A0:24:04:62:F9:69:D9:EA:98:26:4E:00:DB X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:8d:67:63:7c:30:78:a7:79:b9:31:3e:fe:6a:76:d6:56: 19:5a:ce:72:b9:3b:72:32:e6:c6:f9:83:09:c0:44:f5:14:df: 59:c1:cd:59:20:ef:3a:66:bf:fc:0d:f5:d9:32:5f:fd:b1:d4: cc:40:f8:4a:38:40:e6:4d:0d:31:a9:8a:5d:b9:e2:ad:a5:68: b1:60:56:ae:55:28:43:2b:24:e3:38:0b:6f:ad:c9:f1:19:62: 4f:d7:63:19:73:c3:68:54:17:6e:17:a3:41:93:9d:15:44:89: 79:03:23:11:a8:64:b4:b4:b9:77:64:7b:43:1e:11:19:ca:dd: d4:47:91:a2:5c:ad:ff:18:01:51:0c:0e:3a:c6:60:3a:a0:97: 15:52:17:8c:c1:9b:d6:b0:96:74:18:7a:d6:5a:65:2f:b7:91: cd:ae:06:24:a0:ab:ee:24:5e:20:fa:43:4c:56:0f:51:68:46: cd:59:39:5e:ce:17:1a:93:8e:1f:61:81:ce:2a:ef:97:ea:28: 4d:bd:c3:58:b1:3e:7a:ce:c7:68:bd:f7:80:46:f4:60:2c:70: 97:b0:87:43:02:aa:4f:15:09:18:e9:8a:18:f8:c4:59:cb:1b: f1:3c:20:76:4d:17:ed:33:69:40:84:5c:86:08:aa:3a:cf:89: 61:48:54:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2Oy2mmhfeXjPoW3XyiouqQ35UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTEyMDIxMjM1MzlaFw0yNTEyMDUyMDE5MzlaMDMxMTAvBgNV BAMTKDAwNTJEOTg2ODVDNUNEQTAyNDA0NjJGOTY5RDlFQTk4MjY0RTAwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPx4n8YBypSUTOE3T/zaj8tVU ymuBecFWmwtdbP4C0X+vBwZ07NmUj63TP7ImCUeofinmCDZtYrxStjNOjj6lovcw Y3KEe7Bf9dw1R03eju6oa3a+lK54JGEfawHVuOGu+Z9pFveb8stdNzCxkqcjGlqe 1/5UKF5Vv/jXU/lSrvwKWTraxqGWeKwnEO+mfx94P607Hzlgeu1pOOqUfLfGxzoz 2q58M/WHxrdH8yB3s5Ew5LeeIxzyDBdfWfIROmvP/z34cJ1EQYyPrXufdTbzV3Sd L+Jyy7HZunh1H1/T/jtLpaF1gRKXrmi37Y+6f4HFCVJXMEzU7QkPyU9rz1PjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAFLZhoXFzaAkBGL5adnqmCZOANswHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3qjWdjfDB4p3m5MT7+anbWVhlaznK5O3Iy 5sb5gwnARPUU31nBzVkg7zpmv/wN9dkyX/2x1MxA+Eo4QOZNDTGpil254q2laLFg Vq5VKEMrJOM4C2+tyfEZYk/XYxlzw2hUF24Xo0GTnRVEiXkDIxGoZLS0uXdke0Me ERnK3dRHkaJcrf8YAVEMDjrGYDqglxVSF4zBm9awlnQYetZaZS+3kc2uBiSgq+4k XiD6Q0xWD1FoRs1ZOV7OFxqTjh9hgc4q75fqKE29w1ixPnrOx2i994BG9GAscJew h0MCqk8VCRjpihj4xFnLG/E8IHZNF+0zaUCEXIYIqjrPiWFIVM8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:15:05 2025 by rpki-client