This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: XYPGxG0HGZvnB3m1u+o14xh8vM1AW8MgUJBZeRMcvys= Subject key identifier: CE:B1:64:35:2B:CF:21:73:91:0B:BB:77:AC:79:A8:C5:7A:B5:C5:00 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 366EF4597743C4688623067E663F9344F2BCE2DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 0201 Signing time: Tue 02 Dec 2025 01:10:52 +0000 Manifest this update: Tue 02 Dec 2025 01:05:52 +0000 Manifest next update: Fri 05 Dec 2025 12:52:52 +0000 Files and hashes: 1: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 3: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 4: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: koh7NQv9d/P8kqT8DH73/y/KrVYuWgxEXOsBmxOHT50=) 5: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) 6: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6e:f4:59:77:43:c4:68:86:23:06:7e:66:3f:93:44:f2:bc:e2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Dec 2 01:05:52 2025 GMT Not After : Dec 5 12:52:52 2025 GMT Subject: CN=CEB164352BCF2173910BBB77AC79A8C57AB5C500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:74:7f:b3:28:0f:cd:7e:ab:5b:ef:2a:4f: cb:2e:f6:ec:43:ed:5a:25:ac:3a:e2:9d:64:79:52: af:0e:bd:10:f6:94:44:80:99:f4:27:26:23:fd:b0: 87:ef:d0:93:8f:38:0e:24:e4:46:66:9f:8c:13:03: ad:a2:23:e5:66:9b:8e:7c:f4:4a:46:2d:d2:d4:81: 8a:86:a4:89:8a:e9:0d:9d:15:b5:d5:78:28:18:75: 1c:11:82:f4:16:99:ad:d8:2e:cf:fe:a7:25:b1:8e: 89:39:5e:fd:3c:d6:df:89:70:41:79:69:0f:6c:23: 22:39:3f:16:0f:9a:6b:ed:8a:0c:d0:bb:03:cc:5f: 47:be:83:7f:5d:25:61:1f:84:47:81:b2:fe:bf:59: f5:24:b3:e9:da:75:25:d3:cf:b2:90:27:26:6b:8f: b5:55:7e:35:4f:31:27:cc:29:c7:5f:3b:d7:79:41: f0:a8:fe:df:a2:17:9b:f8:45:27:97:08:de:c7:44: c5:4d:ed:d9:bc:24:72:61:2a:06:03:c4:1e:e3:0c: 20:16:5a:99:c5:0d:f0:0f:46:bb:73:09:87:a0:b5: 70:d6:39:d0:db:26:8a:a4:86:81:27:cb:3d:b7:0c: 0b:32:29:8d:ee:b4:74:c9:1c:f1:dc:49:7e:1c:2c: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:64:35:2B:CF:21:73:91:0B:BB:77:AC:79:A8:C5:7A:B5:C5:00 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:17:fa:f7:75:49:99:99:d5:c2:95:be:76:c8:ba:f5:35:ee: 24:a4:15:b6:a2:f6:33:15:12:05:e2:1b:ab:78:0a:8d:a6:b2: d5:ad:04:a6:53:f5:27:cb:0d:01:50:d2:ce:21:c2:e0:cc:ab: 6b:d0:24:35:61:a8:ad:e8:5d:1e:17:bc:67:c0:5e:4f:e5:cb: c6:2d:77:79:e8:1d:16:51:82:65:29:1e:73:3f:ed:7a:cd:0c: 2b:c9:f7:f2:e9:a6:00:f6:a7:5d:fb:df:2a:60:cc:cc:5a:52: 22:72:7e:e2:32:25:44:39:22:c1:12:89:bb:dc:14:93:16:f4: 49:56:db:de:52:ad:0f:62:54:a3:1d:b8:7a:1e:9e:8b:07:65: 8c:86:59:cd:99:c2:fd:5f:50:8a:16:43:3b:16:d9:4a:e5:6c: cc:b0:47:60:25:58:33:c2:76:2e:6a:da:f0:9f:e5:c5:2a:9b: bc:b4:bb:4f:14:21:3e:6d:b0:bc:89:dd:20:2b:25:fa:75:0e: b4:7a:2a:6c:73:21:4f:40:0f:3c:49:7d:e5:3b:a4:d9:10:8e: 23:f5:e0:54:2e:dd:d8:21:26:0d:ee:b5:4a:b6:40:f8:dd:08: 44:f7:cf:4c:ba:91:96:cc:4a:92:e5:f6:0c:d0:5b:c9:c9:fa: de:e6:df:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNm70WXdDxGiGIwZ+Zj+TRPK84tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTEyMDIwMTA1NTJaFw0yNTEyMDUxMjUyNTJaMDMxMTAvBgNV BAMTKENFQjE2NDM1MkJDRjIxNzM5MTBCQkI3N0FDNzlBOEM1N0FCNUM1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+HR/sygPzX6rW+8qT8su9uxD 7VolrDrinWR5Uq8OvRD2lESAmfQnJiP9sIfv0JOPOA4k5EZmn4wTA62iI+Vmm458 9EpGLdLUgYqGpImK6Q2dFbXVeCgYdRwRgvQWma3YLs/+pyWxjok5Xv081t+JcEF5 aQ9sIyI5PxYPmmvtigzQuwPMX0e+g39dJWEfhEeBsv6/WfUks+nadSXTz7KQJyZr j7VVfjVPMSfMKcdfO9d5QfCo/t+iF5v4RSeXCN7HRMVN7dm8JHJhKgYDxB7jDCAW WpnFDfAPRrtzCYegtXDWOdDbJoqkhoEnyz23DAsyKY3utHTJHPHcSX4cLLv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrFkNSvPIXORC7t3rHmoxXq1xQAwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYX+vd1SZmZ1cKVvnbIuvU17iSkFbai9jMV EgXiG6t4Co2mstWtBKZT9SfLDQFQ0s4hwuDMq2vQJDVhqK3oXR4XvGfAXk/ly8Yt d3noHRZRgmUpHnM/7XrNDCvJ9/LppgD2p1373ypgzMxaUiJyfuIyJUQ5IsESibvc FJMW9ElW295SrQ9iVKMduHoenosHZYyGWc2Zwv1fUIoWQzsW2UrlbMywR2AlWDPC di5q2vCf5cUqm7y0u08UIT5tsLyJ3SArJfp1DrR6KmxzIU9ADzxJfeU7pNkQjiP1 4FQu3dghJg3utUq2QPjdCET3z0y6kZbMSpLl9gzQW8nJ+t7m34M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:45 2025 by rpki-client