This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: EwWfE8g88VUIwlR6JFiK/IxgACuyvJhn9FJCJI2zqc8= Subject key identifier: B4:0E:61:92:1B:15:22:0F:3D:9D:CF:05:04:95:68:47:0D:AF:61:37 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 5E2DB2BBCB1B5CD25604A3068693FB38BD0F9E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: C2 Signing time: Sun 07 Dec 2025 09:01:56 +0000 Manifest this update: Sun 07 Dec 2025 08:56:56 +0000 Manifest next update: Wed 10 Dec 2025 17:32:56 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: rnr/24rrx2RxYp52UF7StRwOkve47QZ9iTZbfRALNGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2d:b2:bb:cb:1b:5c:d2:56:04:a3:06:86:93:fb:38:bd:0f:9e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Dec 7 08:56:56 2025 GMT Not After : Dec 10 17:32:56 2025 GMT Subject: CN=B40E61921B15220F3D9DCF05049568470DAF6137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:a7:e6:20:f7:f3:a7:43:14:71:78:7c:09: 93:98:86:ea:0b:84:56:cd:3e:0d:da:95:a6:e8:44: 33:77:de:5e:1a:81:1f:1d:5b:b8:f6:66:0c:4e:b6: 3a:8c:8e:a0:ac:fc:df:ad:e8:eb:b8:7a:f0:b9:05: e2:89:ca:20:5c:f1:a5:8f:64:83:65:22:1d:cc:3f: 2c:bd:22:a1:53:ee:54:9b:f1:ac:81:db:c4:06:32: 50:dc:7d:50:95:b4:0d:84:55:e3:b0:d7:00:28:07: 2b:ea:13:ab:4d:65:9f:02:69:5a:d1:77:dc:c2:86: 6a:ac:66:e7:67:4b:2b:45:0e:ec:b8:15:70:b4:84: b7:a5:b0:69:d4:13:20:3f:55:fe:2a:e0:71:cd:37: ec:0b:77:d6:1b:ce:9e:cd:d0:6e:e8:23:3c:52:75: 86:aa:ee:a5:b0:b1:70:2c:a5:1a:99:c6:50:b5:4b: b0:93:af:ee:01:18:5c:2c:61:b9:7f:95:97:b7:a6: 3b:1a:83:34:67:88:90:c0:df:f7:18:f6:a7:a0:fd: 09:48:3a:93:33:dd:9c:6c:59:5d:d8:97:0c:55:3c: e1:fe:c5:38:87:a7:83:c8:d1:7f:e2:04:27:b9:cb: 17:6d:ed:92:4c:19:7c:47:91:62:5b:90:4a:0f:73: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:61:92:1B:15:22:0F:3D:9D:CF:05:04:95:68:47:0D:AF:61:37 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:84:96:e2:d2:c2:bd:5e:e0:e8:16:07:ca:dd:e3:73:96:03: 2d:11:52:fe:8f:0d:b1:0b:ba:ac:bf:2c:e0:6b:f8:41:7e:26: 93:9d:32:d8:f6:9b:4d:e8:0e:9d:11:f7:44:e7:87:17:03:f2: 28:09:e9:19:20:ed:0b:aa:af:cc:77:f9:d3:aa:fd:a7:b9:b4: b9:c5:37:8d:f5:0c:0b:80:a2:08:1b:11:73:6d:2a:18:e9:e8: c4:71:6a:99:23:22:df:d7:4c:cd:27:af:c2:3b:3d:76:77:79: a3:0d:cc:77:2b:5f:72:55:59:a1:7b:ff:02:f1:ec:e7:f4:9d: 67:b8:fa:81:82:6c:5f:b8:36:2d:47:4f:f1:56:9f:3a:0c:17: 4a:33:eb:73:06:71:67:ff:80:75:b6:2e:10:61:e2:68:67:8f: 05:ac:06:d9:83:4c:f6:e8:18:01:20:63:c0:f2:6e:23:e6:a0: 85:27:77:ac:1c:8b:61:9b:f1:58:61:53:f2:e2:eb:cc:d0:09: 0e:b8:6e:74:66:0c:6c:c4:e9:86:cd:e2:d7:1c:7f:82:18:1f: 8c:1d:a0:34:bd:e5:78:da:33:10:27:b2:b8:0d:78:f2:4d:29: b5:6b:27:85:91:71:cc:2c:82:0f:09:1b:e9:7c:93:65:77:c3: a9:79:ad:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXi2yu8sbXNJWBKMGhpP7OL0PnogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTEyMDcwODU2NTZaFw0yNTEyMTAxNzMyNTZaMDMxMTAvBgNV BAMTKEI0MEU2MTkyMUIxNTIyMEYzRDlEQ0YwNTA0OTU2ODQ3MERBRjYxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRh6fmIPfzp0MUcXh8CZOYhuoL hFbNPg3alaboRDN33l4agR8dW7j2ZgxOtjqMjqCs/N+t6Ou4evC5BeKJyiBc8aWP ZINlIh3MPyy9IqFT7lSb8ayB28QGMlDcfVCVtA2EVeOw1wAoByvqE6tNZZ8CaVrR d9zChmqsZudnSytFDuy4FXC0hLelsGnUEyA/Vf4q4HHNN+wLd9Ybzp7N0G7oIzxS dYaq7qWwsXAspRqZxlC1S7CTr+4BGFwsYbl/lZe3pjsagzRniJDA3/cY9qeg/QlI OpMz3ZxsWV3YlwxVPOH+xTiHp4PI0X/iBCe5yxdt7ZJMGXxHkWJbkEoPc/JhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtA5hkhsVIg89nc8FBJVoRw2vYTcwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCEluLSwr1e4OgWB8rd43OWAy0RUv6PDbEL uqy/LOBr+EF+JpOdMtj2m03oDp0R90TnhxcD8igJ6Rkg7Quqr8x3+dOq/ae5tLnF N431DAuAoggbEXNtKhjp6MRxapkjIt/XTM0nr8I7PXZ3eaMNzHcrX3JVWaF7/wLx 7Of0nWe4+oGCbF+4Ni1HT/FWnzoMF0oz63MGcWf/gHW2LhBh4mhnjwWsBtmDTPbo GAEgY8DybiPmoIUnd6wci2Gb8VhhU/Li68zQCQ64bnRmDGzE6YbN4tccf4IYH4wd oDS95XjaMxAnsrgNePJNKbVrJ4WRccwsgg8JG+l8k2V3w6l5rQg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:29 2025 by rpki-client