This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: gb1pixaXQUnyOEIuUgLydTL5lXFT6LwmQTYfTOy6gCc= Subject key identifier: D8:49:71:01:4B:38:CA:C8:74:AF:5B:54:C2:BE:41:83:59:D2:AD:48 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 22BF808E3A8C5FB2C061F4A96389553562307996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 0308 Signing time: Tue 02 Dec 2025 05:00:00 +0000 Manifest this update: Tue 02 Dec 2025 04:55:00 +0000 Manifest next update: Fri 05 Dec 2025 10:27:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: sRDEh7k5O1w8w2h9g/1u5C3onS7IgMoApU9Gddw9Pko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bf:80:8e:3a:8c:5f:b2:c0:61:f4:a9:63:89:55:35:62:30:79:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Dec 2 04:55:00 2025 GMT Not After : Dec 5 10:27:00 2025 GMT Subject: CN=D84971014B38CAC874AF5B54C2BE418359D2AD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:c0:53:30:97:f0:f3:2c:d1:cf:ca:b9:f2: 1c:25:36:bb:11:86:42:5b:32:c5:ef:2d:7a:b2:51: 6e:ec:99:19:d6:cc:c2:f7:05:68:7c:64:fd:86:0a: 00:9a:e1:09:d2:91:40:5a:f5:09:5b:c6:92:4e:ea: 45:e5:3b:d7:03:a2:a6:14:31:5e:5b:35:44:6d:c9: aa:a3:fc:28:0c:59:b3:3b:a4:94:0d:79:18:a4:f9: 65:15:3f:80:bb:dc:a8:58:c5:89:95:08:c2:65:5a: e9:3d:d8:04:c5:1f:32:da:35:68:35:c3:94:b6:b3: 56:43:ad:32:d8:ec:dc:9a:2e:21:fd:ec:c1:2b:0d: b4:52:7d:df:a2:6f:6b:e7:00:21:6b:20:18:e6:3a: 5a:ae:eb:20:7f:ba:bb:9e:10:de:5c:b8:4e:77:ae: db:ae:e0:fc:d8:e2:6b:c1:0e:96:9c:ad:15:f6:e8: 1e:ab:3a:65:d6:70:ef:92:88:1d:5a:2b:c6:9c:bb: d6:70:b0:84:1e:cb:e6:ca:f3:72:34:5a:a1:a5:92: ad:20:16:27:84:08:8f:fd:5e:cd:5b:ad:35:4b:eb: e1:39:4d:27:05:22:48:8a:2b:b0:18:fe:da:d3:79: 6d:06:ff:83:00:04:31:2f:b9:b7:4e:3a:64:a6:ff: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:49:71:01:4B:38:CA:C8:74:AF:5B:54:C2:BE:41:83:59:D2:AD:48 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b8:56:cf:ac:ad:04:5c:13:a8:35:44:d9:e4:f4:0f:7d:7d: 48:53:56:11:da:bc:ec:f1:ac:8b:6f:2e:71:6c:c2:dc:35:de: 51:32:9a:3a:96:1f:bc:4e:c9:f1:4f:76:be:fa:c9:12:b2:5c: 05:01:b9:3f:eb:dd:94:59:3b:0f:0d:d2:88:c3:65:81:41:86: 7a:c5:f7:d0:75:53:54:fc:c8:e3:d3:ce:74:8c:d5:d3:8d:f3: 73:6b:a7:d3:3a:fd:75:36:11:68:ed:4f:5c:90:2d:90:77:4c: 26:91:d4:5a:bc:1a:c4:ee:d7:02:08:aa:80:52:43:f3:62:92: 4d:98:b4:4d:dd:d6:ba:43:68:18:2d:92:e9:00:1d:8b:48:1e: 44:08:5f:21:65:e2:2a:05:37:d5:d9:7d:23:64:21:23:47:fd: 58:f3:b1:5f:d3:d9:da:f1:5e:68:59:00:26:fe:45:01:a4:46: f5:b8:26:bc:34:f3:99:88:f1:14:23:9c:b3:2e:84:3a:67:a9: 0c:60:6e:09:6d:e8:4b:9a:fc:25:6d:40:f1:ac:a7:fe:65:f1: 56:b9:d1:f1:01:85:e4:38:1b:d6:e0:c8:e2:7b:e5:02:be:15: c5:af:4f:bd:a2:49:48:d9:33:3f:91:1a:80:77:2b:f3:0b:52: 9d:5f:0b:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr+AjjqMX7LAYfSpY4lVNWIweZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTEyMDIwNDU1MDBaFw0yNTEyMDUxMDI3MDBaMDMxMTAvBgNV BAMTKEQ4NDk3MTAxNEIzOENBQzg3NEFGNUI1NEMyQkU0MTgzNTlEMkFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUesBTMJfw8yzRz8q58hwlNrsR hkJbMsXvLXqyUW7smRnWzML3BWh8ZP2GCgCa4QnSkUBa9QlbxpJO6kXlO9cDoqYU MV5bNURtyaqj/CgMWbM7pJQNeRik+WUVP4C73KhYxYmVCMJlWuk92ATFHzLaNWg1 w5S2s1ZDrTLY7NyaLiH97MErDbRSfd+ib2vnACFrIBjmOlqu6yB/urueEN5cuE53 rtuu4PzY4mvBDpacrRX26B6rOmXWcO+SiB1aK8acu9ZwsIQey+bK83I0WqGlkq0g FieECI/9Xs1brTVL6+E5TScFIkiKK7AY/trTeW0G/4MABDEvubdOOmSm/61NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ElxAUs4ysh0r1tUwr5Bg1nSrUgwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu4Vs+srQRcE6g1RNnk9A99fUhTVhHavOzx rItvLnFswtw13lEymjqWH7xOyfFPdr76yRKyXAUBuT/r3ZRZOw8N0ojDZYFBhnrF 99B1U1T8yOPTznSM1dON83Nrp9M6/XU2EWjtT1yQLZB3TCaR1Fq8GsTu1wIIqoBS Q/Nikk2YtE3d1rpDaBgtkukAHYtIHkQIXyFl4ioFN9XZfSNkISNH/VjzsV/T2drx XmhZACb+RQGkRvW4Jrw085mI8RQjnLMuhDpnqQxgbglt6Eua/CVtQPGsp/5l8Va5 0fEBheQ4G9bgyOJ75QK+FcWvT72iSUjZMz+RGoB3K/MLUp1fC6w= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:57 2025 by rpki-client