This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: gltK1xiRUeybgUWUeuEj5uLzRYIUVOaIomcL2TMx6dA= Subject key identifier: 83:3D:59:F4:DC:6F:BC:5C:9F:1F:0E:AA:69:28:87:5B:3C:A3:FB:BA Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 55F2ED2CE5C3723D6FFC4F526F44BED1DAD8A3C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0151 Signing time: Wed 03 Dec 2025 03:12:20 +0000 Manifest this update: Wed 03 Dec 2025 03:07:20 +0000 Manifest next update: Sat 06 Dec 2025 14:37:20 +0000 Files and hashes: 1: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: DYNP1pkQZXlnNBDUWLT0o/w7WroozE34gPyP6ZNIwTM=) 2: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: MkcsNTKNtwgFDmdvnTWxivRmAMFbAVwqvbzLzf0C+DA=) 3: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) 4: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f2:ed:2c:e5:c3:72:3d:6f:fc:4f:52:6f:44:be:d1:da:d8:a3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Dec 3 03:07:20 2025 GMT Not After : Dec 6 14:37:20 2025 GMT Subject: CN=833D59F4DC6FBC5C9F1F0EAA6928875B3CA3FBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:39:db:7d:f1:d7:3e:cb:3c:22:f1:ad:77: ff:82:a2:37:89:cc:4b:31:de:62:26:b9:fa:a2:7d: a4:c2:0f:32:4e:95:70:45:69:bc:e2:3b:3d:71:a7: 2e:31:60:94:4f:b8:d6:48:58:50:b8:22:d5:f6:e9: 39:1d:34:5c:b9:a0:ed:59:3a:28:41:01:f7:a7:38: 49:02:d7:ba:43:49:83:b9:67:54:0e:8f:26:0a:97: 8d:ef:f6:bf:60:04:2c:c9:90:1b:a8:51:55:70:b0: bd:eb:96:e6:25:04:4e:87:b8:20:15:ac:37:a4:3f: 6b:af:15:d1:75:5b:68:6c:6e:bd:73:0c:6b:0b:58: 99:5a:6e:60:f8:c2:ad:17:fa:d7:26:d3:9c:62:45: 39:a4:05:05:4d:65:b1:f4:7e:c8:b8:22:6c:cc:27: 7c:44:90:c5:eb:e0:00:9a:18:52:5b:8b:7a:cd:91: df:59:52:d7:57:46:20:19:47:aa:94:c4:25:84:d1: ba:eb:4f:11:00:d6:eb:e7:90:5e:37:67:1e:3e:b9: 49:c0:96:33:e5:73:aa:5e:a1:8d:cb:fa:8d:87:5f: 5e:f2:7d:92:b8:db:1c:12:1c:73:37:42:4c:a2:64: 46:49:09:94:84:df:51:b2:46:15:aa:76:a8:48:86: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3D:59:F4:DC:6F:BC:5C:9F:1F:0E:AA:69:28:87:5B:3C:A3:FB:BA X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:85:68:08:15:f4:c4:52:f0:77:88:e2:1f:96:e9:f7:56:7d: 37:36:b0:ca:db:2a:a8:07:96:d0:34:c6:4c:13:0a:70:7b:c2: 5f:e1:9d:06:7f:42:32:af:8f:0f:b0:fa:1c:a3:07:0f:3e:05: 55:50:f4:fa:af:4d:8f:0f:66:3b:49:77:f7:2c:c6:53:fc:12: 09:6c:45:3f:8a:b2:10:ec:21:04:5f:56:90:d0:22:59:bf:b0: 45:fb:36:58:65:bb:d1:39:34:b6:e4:38:6d:b7:fb:77:41:59: 0d:02:b2:23:f8:a3:f3:6c:51:d3:0b:f9:34:b8:cb:22:e3:50: fc:f0:23:7c:05:df:cc:88:dc:10:89:7d:3e:6b:04:5c:b7:20: 90:da:6f:3e:ff:34:07:a7:29:f5:1e:db:f5:49:78:c4:0c:b0: 81:d7:6d:50:39:83:ba:64:f7:26:46:9b:08:bf:70:b6:c4:aa: 7f:e0:f5:bd:20:ed:21:21:ef:71:64:f2:92:51:69:3d:6e:a5: db:2a:65:17:32:1c:c4:e5:47:05:eb:24:2b:c6:49:70:bc:dc: 9e:ef:7c:9b:7c:fd:20:a4:8a:56:73:cc:42:60:fc:44:0d:29: 15:b5:33:c1:dd:b1:8a:5f:94:ee:34:82:7c:b6:25:09:6b:b8: bd:46:7e:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfLtLOXDcj1v/E9Sb0S+0drYo8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNTEyMDMwMzA3MjBaFw0yNTEyMDYxNDM3MjBaMDMxMTAvBgNV BAMTKDgzM0Q1OUY0REM2RkJDNUM5RjFGMEVBQTY5Mjg4NzVCM0NBM0ZCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdYznbffHXPss8IvGtd/+CojeJ zEsx3mImufqifaTCDzJOlXBFabziOz1xpy4xYJRPuNZIWFC4ItX26TkdNFy5oO1Z OihBAfenOEkC17pDSYO5Z1QOjyYKl43v9r9gBCzJkBuoUVVwsL3rluYlBE6HuCAV rDekP2uvFdF1W2hsbr1zDGsLWJlabmD4wq0X+tcm05xiRTmkBQVNZbH0fsi4ImzM J3xEkMXr4ACaGFJbi3rNkd9ZUtdXRiAZR6qUxCWE0brrTxEA1uvnkF43Zx4+uUnA ljPlc6peoY3L+o2HX17yfZK42xwSHHM3QkyiZEZJCZSE31GyRhWqdqhIhgLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgz1Z9NxvvFyfHw6qaSiHWzyj+7owHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeFaAgV9MRS8HeI4h+W6fdWfTc2sMrbKqgH ltA0xkwTCnB7wl/hnQZ/QjKvjw+w+hyjBw8+BVVQ9PqvTY8PZjtJd/csxlP8Egls RT+KshDsIQRfVpDQIlm/sEX7Nlhlu9E5NLbkOG23+3dBWQ0CsiP4o/NsUdML+TS4 yyLjUPzwI3wF38yI3BCJfT5rBFy3IJDabz7/NAenKfUe2/VJeMQMsIHXbVA5g7pk 9yZGmwi/cLbEqn/g9b0g7SEh73Fk8pJRaT1updsqZRcyHMTlRwXrJCvGSXC83J7v fJt8/SCkilZzzEJg/EQNKRW1M8HdsYpflO40gny2JQlruL1GfmQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:39 2025 by rpki-client