This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: zia8VEm4X+PcHnAh3m1P6OmwqL7LyfwScq3A59eiPOs= Subject key identifier: 23:1E:B7:97:98:03:B5:94:D8:46:09:C0:9E:E3:5F:24:9D:BC:80:1F Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 74D12C58060D1AB91D96DD2C08F7C6117C8A9493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: E9 Signing time: Wed 03 Dec 2025 10:41:41 +0000 Manifest this update: Wed 03 Dec 2025 10:36:41 +0000 Manifest next update: Sat 06 Dec 2025 20:27:41 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) 2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: /mgKOAJN523E00BlevI3G7X3Vmq3DHL1fpr4sJZv6rA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d1:2c:58:06:0d:1a:b9:1d:96:dd:2c:08:f7:c6:11:7c:8a:94:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Dec 3 10:36:41 2025 GMT Not After : Dec 6 20:27:41 2025 GMT Subject: CN=231EB7979803B594D84609C09EE35F249DBC801F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:a6:17:39:8b:1e:e6:b8:a2:f7:a8:2b:30: 84:48:d2:9a:75:60:d9:56:d6:06:64:c0:6e:54:50: 58:34:64:74:b2:12:54:96:80:76:61:3b:eb:49:48: 44:2e:b9:e4:28:6b:f1:8f:ef:1e:ca:e8:0a:13:28: 09:4c:6a:1c:7f:49:d3:14:b9:c5:95:76:5e:a6:ea: dd:e9:a8:54:6d:b5:6b:5b:bd:23:98:a5:a9:74:f5: 59:6e:5e:6c:de:62:ff:f8:da:38:c8:42:3a:0e:66: 07:44:58:36:d5:23:a8:f5:4c:46:fe:c2:24:bf:cd: a3:1b:bd:2c:32:31:39:6b:83:61:de:55:ea:a0:c2: c7:ad:74:f5:bf:d6:ae:48:5e:5d:38:9b:54:71:b0: 61:c6:36:93:77:ad:4a:d1:b7:7f:ab:3c:6e:b5:5b: 74:26:55:26:b6:b8:e4:53:67:04:24:93:73:6b:34: 64:3a:1a:60:ee:6e:d0:bc:e5:8a:63:d1:43:e2:5d: 38:63:23:80:94:c3:b6:29:3c:c2:c1:a9:72:25:55: 09:9f:e8:64:0b:eb:20:b5:ab:63:3c:81:c3:52:55: d2:fe:ea:05:eb:68:ce:8a:16:8b:eb:58:43:b9:11: 80:4d:eb:cf:db:62:ef:77:cb:9b:1b:99:90:6b:55: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1E:B7:97:98:03:B5:94:D8:46:09:C0:9E:E3:5F:24:9D:BC:80:1F X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:39:90:16:61:17:89:c8:89:31:f3:e2:41:31:5a:a0:c8:a6: 4b:ba:b8:82:65:69:5d:4b:64:f4:81:b4:ec:9a:e9:29:c0:13: 6b:59:08:02:bf:7f:7d:0e:c0:d0:ef:38:38:ae:46:a8:af:fd: 59:52:89:9d:22:66:5d:29:b0:67:e9:70:93:f7:ef:22:e3:15: 76:ac:92:0a:bb:36:7c:58:50:a0:47:57:3f:c9:b3:bf:eb:bb: 85:1a:d5:38:54:05:f7:e3:2b:a8:86:22:d8:90:81:ea:1b:b1: 65:1e:c1:96:e1:f6:65:50:ac:13:1c:1b:c7:36:a3:ea:db:83: 66:3e:27:de:a0:1a:86:65:16:f6:56:21:20:78:0b:cd:cc:e6: c2:95:e8:a6:35:9f:71:60:9e:85:c2:d6:b9:93:8b:49:cd:fc: a1:97:d2:b3:60:c1:d7:cb:a6:b3:d5:a1:3e:bf:43:e7:38:f0: 86:34:ee:a6:11:56:2b:b9:22:b0:b9:9d:48:d4:ce:b5:dd:44: f3:74:d0:01:1c:d2:09:29:96:85:24:bd:c6:39:ad:e7:84:8b: 68:73:38:88:4b:27:22:11:cf:7d:ba:fd:56:89:91:6c:b7:71: 4e:95:b7:7b:ac:0d:bb:f4:84:ab:8f:26:49:fe:b9:78:b3:6a: 2b:40:da:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNEsWAYNGrkdlt0sCPfGEXyKlJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTEyMDMxMDM2NDFaFw0yNTEyMDYyMDI3NDFaMDMxMTAvBgNV BAMTKDIzMUVCNzk3OTgwM0I1OTREODQ2MDlDMDlFRTM1RjI0OURCQzgwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/6YXOYse5rii96grMIRI0pp1 YNlW1gZkwG5UUFg0ZHSyElSWgHZhO+tJSEQuueQoa/GP7x7K6AoTKAlMahx/SdMU ucWVdl6m6t3pqFRttWtbvSOYpal09VluXmzeYv/42jjIQjoOZgdEWDbVI6j1TEb+ wiS/zaMbvSwyMTlrg2HeVeqgwsetdPW/1q5IXl04m1RxsGHGNpN3rUrRt3+rPG61 W3QmVSa2uORTZwQkk3NrNGQ6GmDubtC85Ypj0UPiXThjI4CUw7YpPMLBqXIlVQmf 6GQL6yC1q2M8gcNSVdL+6gXraM6KFovrWEO5EYBN68/bYu93y5sbmZBrVTM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIx63l5gDtZTYRgnAnuNfJJ28gB8wHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc5kBZhF4nIiTHz4kExWqDIpku6uIJlaV1L ZPSBtOya6SnAE2tZCAK/f30OwNDvODiuRqiv/VlSiZ0iZl0psGfpcJP37yLjFXas kgq7NnxYUKBHVz/Js7/ru4Ua1ThUBffjK6iGItiQgeobsWUewZbh9mVQrBMcG8c2 o+rbg2Y+J96gGoZlFvZWISB4C83M5sKV6KY1n3FgnoXC1rmTi0nN/KGX0rNgwdfL prPVoT6/Q+c48IY07qYRViu5IrC5nUjUzrXdRPN00AEc0gkploUkvcY5reeEi2hz OIhLJyIRz326/VaJkWy3cU6Vt3usDbv0hKuPJkn+uXizaitA2t0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:34 2025 by rpki-client