This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: 8M+M8eRlTIpOLgW6bv73CTUl01RIT+6vW53iLRxCh6g= Subject key identifier: 31:0B:6B:07:5D:78:20:8F:22:93:55:71:C0:98:BE:0D:5F:DE:27:B8 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 68061CCD61237A86BDD61CC31643C443F78D1503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 9E Signing time: Sun 07 Dec 2025 09:52:21 +0000 Manifest this update: Sun 07 Dec 2025 09:47:21 +0000 Manifest next update: Wed 10 Dec 2025 15:29:21 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: 3IMwNERVHJR1sdk/nmRWDSuef85mvYTOX4aL+tkCpPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:06:1c:cd:61:23:7a:86:bd:d6:1c:c3:16:43:c4:43:f7:8d:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Dec 7 09:47:21 2025 GMT Not After : Dec 10 15:29:21 2025 GMT Subject: CN=310B6B075D78208F22935571C098BE0D5FDE27B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:af:72:95:da:18:6d:0e:6d:7c:31:8a:43: 83:e0:c7:c7:f4:07:de:c9:a5:19:f1:f1:1e:7a:b1: 1e:bf:e9:3f:67:3c:41:2c:73:24:c5:fa:8a:ec:71: 14:81:fd:20:59:db:75:ae:91:62:d1:30:dc:fb:21: 95:87:a7:df:e1:2c:63:f4:93:b1:12:a1:3a:ac:f4: 0c:5c:cd:84:73:ae:49:f2:cc:45:6f:a5:31:9c:b3: f9:a8:76:e5:d1:ef:a0:38:5c:c3:ac:69:32:97:ac: d6:97:ff:a4:83:60:a0:18:97:d4:63:ce:03:44:1b: c7:31:13:f2:b8:72:33:be:92:3b:30:b9:88:2c:d7: 58:55:61:ce:bc:5b:9d:df:7c:c1:53:b7:8d:eb:1a: 19:14:3b:fe:9e:24:48:e0:f7:c7:5d:03:3c:d3:63: 43:2f:c1:ab:e6:4f:2b:80:cd:11:24:4f:99:10:a2: bd:88:3b:64:ea:ed:78:13:29:6e:39:c2:89:03:a6: 4c:17:35:68:c1:fa:a7:f3:12:db:87:8e:fb:5f:18: 54:68:02:9f:b6:ff:56:7d:ce:a7:ca:45:6c:62:23: 00:f5:4a:1a:3f:c3:9a:2e:11:9b:bd:e7:d8:e7:29: ec:7f:5d:9b:f9:6b:94:29:25:10:87:19:c8:d8:63: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0B:6B:07:5D:78:20:8F:22:93:55:71:C0:98:BE:0D:5F:DE:27:B8 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:a2:f5:bb:94:49:0a:13:1d:16:38:93:85:d8:14:8d:03: 35:14:84:69:44:80:54:1e:af:8b:2d:01:92:85:1c:7e:bf:71: 55:0c:93:a4:3b:28:4e:d4:11:5c:46:e1:c8:b9:5f:d7:d4:74: b2:6d:46:a2:a1:02:d3:34:99:30:1b:40:98:fd:b3:5b:4d:c6: 92:fb:7a:b9:f4:fc:4f:38:01:11:8c:79:d8:43:4f:e1:8d:1e: 60:d7:e5:07:04:53:70:b7:cc:7c:de:a2:74:7f:9c:8d:5e:7b: de:f2:a2:74:3e:da:08:01:a1:49:b4:6f:9e:3f:8a:07:fd:fa: 69:82:c6:fe:9d:8c:13:8a:d3:17:c6:e4:02:d8:13:04:47:30: 1c:7b:8a:d2:a5:33:a7:30:6f:52:50:9c:a1:cf:46:e8:29:df: 7f:67:62:bc:6f:43:04:e3:79:5c:9e:c7:56:b9:d5:8c:df:b3: 64:94:90:d0:47:73:f0:63:ae:f8:e8:ee:ea:ef:17:ae:53:b7: 44:ec:7b:1a:0d:83:4f:dc:8b:4d:4a:03:79:f1:57:44:b2:8f: 56:df:bf:75:61:24:ca:92:1b:45:60:f6:8e:c1:86:6e:88:e3: e2:23:a8:22:a6:d0:2c:fd:9b:3e:6b:94:26:fa:0f:e1:82:11: c6:1e:41:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAYczWEjeoa91hzDFkPEQ/eNFQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTEyMDcwOTQ3MjFaFw0yNTEyMTAxNTI5MjFaMDMxMTAvBgNV BAMTKDMxMEI2QjA3NUQ3ODIwOEYyMjkzNTU3MUMwOThCRTBENUZERTI3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIK9yldoYbQ5tfDGKQ4Pgx8f0 B97JpRnx8R56sR6/6T9nPEEscyTF+orscRSB/SBZ23WukWLRMNz7IZWHp9/hLGP0 k7ESoTqs9AxczYRzrknyzEVvpTGcs/moduXR76A4XMOsaTKXrNaX/6SDYKAYl9Rj zgNEG8cxE/K4cjO+kjswuYgs11hVYc68W53ffMFTt43rGhkUO/6eJEjg98ddAzzT Y0MvwavmTyuAzREkT5kQor2IO2Tq7XgTKW45wokDpkwXNWjB+qfzEtuHjvtfGFRo Ap+2/1Z9zqfKRWxiIwD1Sho/w5ouEZu959jnKex/XZv5a5QpJRCHGcjYY8lvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQtrB114II8ik1VxwJi+DV/eJ7gwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGLovW7lEkKEx0WOJOF2BSNAzUUhGlEgFQe r4stAZKFHH6/cVUMk6Q7KE7UEVxG4ci5X9fUdLJtRqKhAtM0mTAbQJj9s1tNxpL7 ern0/E84ARGMedhDT+GNHmDX5QcEU3C3zHzeonR/nI1ee97yonQ+2ggBoUm0b54/ igf9+mmCxv6djBOK0xfG5ALYEwRHMBx7itKlM6cwb1JQnKHPRugp339nYrxvQwTj eVyex1a51Yzfs2SUkNBHc/Bjrvjo7urvF65Tt0TsexoNg0/ci01KA3nxV0Syj1bf v3VhJMqSG0Vg9o7Bhm6I4+IjqCKm0Cz9mz5rlCb6D+GCEcYeQZg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:31 2025 by rpki-client