This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: V8MUYQYY2pZgIpqJVVx4741O25bFsM8QysuixZm2yEM= Subject key identifier: D7:A7:1E:16:A4:29:D5:8B:27:09:A3:28:77:49:78:DF:3E:CF:50:27 Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 1393B70351DEEFCCBA9418361772BBBBBB06BBAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 01B1 Signing time: Tue 02 Dec 2025 00:41:41 +0000 Manifest this update: Tue 02 Dec 2025 00:36:41 +0000 Manifest next update: Fri 05 Dec 2025 05:05:41 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) 2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: pG8pXW+IIx0WPc78VnK8lyJ9wKG/ZkNDppORaTOcK6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:93:b7:03:51:de:ef:cc:ba:94:18:36:17:72:bb:bb:bb:06:bb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Dec 2 00:36:41 2025 GMT Not After : Dec 5 05:05:41 2025 GMT Subject: CN=D7A71E16A429D58B2709A328774978DF3ECF5027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:67:bc:e5:eb:99:89:33:2f:a4:7a:a9:aa: 5d:4a:ab:ad:6c:cc:36:21:20:5b:75:e5:d7:69:46: ff:a2:0e:63:1d:1a:2c:9f:32:32:32:90:a7:52:7d: c2:16:13:84:b0:01:3e:6f:13:3d:65:ce:44:8d:05: ec:a6:69:da:4b:85:01:c4:97:99:4c:09:7b:e1:dc: 0d:d9:6c:4a:41:34:46:21:7a:d2:29:e3:bf:51:12: 0f:f4:4b:31:46:62:01:d3:4e:8c:55:34:a0:ec:7d: 4d:e4:4f:84:8b:53:d2:2f:83:b8:98:26:db:e1:e2: ae:e8:ed:01:e2:4b:eb:6e:e9:aa:76:b4:7a:91:e0: 73:3f:4a:87:66:63:76:75:b9:71:aa:5e:0e:46:18: 99:99:af:58:9c:14:e4:8d:8f:45:b7:bd:26:63:21: b8:a7:0d:db:47:24:33:f3:05:77:a4:10:14:1e:ab: 67:15:03:7a:5b:22:d0:a4:48:80:f8:ce:aa:b7:15: 3e:3f:e1:2c:22:8c:6b:9c:79:e4:ce:30:f4:f2:27: 23:ec:47:59:70:2b:8d:95:8f:82:ee:00:86:1f:8b: f5:35:63:2e:e3:f0:75:f8:4c:13:3b:42:9f:3f:42: 47:90:84:81:ed:53:eb:2c:90:0a:bd:49:4b:8e:4e: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:1E:16:A4:29:D5:8B:27:09:A3:28:77:49:78:DF:3E:CF:50:27 X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ff:e3:8f:aa:ae:41:b6:d6:38:ec:bc:db:7f:39:39:c1:e5: 0a:2a:e3:97:0a:51:f7:bc:92:56:67:b0:4e:79:3c:32:0c:23: 3d:bf:a2:0d:73:2c:b5:ed:e7:d7:47:4d:e8:55:39:dc:e5:73: 8c:a7:27:9d:98:52:ec:3a:b7:d0:95:c3:15:ab:ff:36:85:45: 11:3c:ba:aa:bf:68:eb:99:56:f2:6f:89:ff:3c:d0:2d:64:8f: 54:98:d6:e8:37:a3:ca:c0:6b:8d:f6:82:14:1e:76:97:94:d8: a8:87:75:68:b2:fb:91:91:07:19:b0:d9:98:c1:6b:4f:d8:9c: 23:a5:3a:52:d3:b3:94:37:ce:a8:3a:37:c4:b6:f8:6b:d2:b6: 78:01:22:dc:49:c5:f0:2b:47:a1:e4:e0:05:8b:7b:b1:76:72: 38:6a:b0:12:2b:6b:63:63:d7:77:dc:81:5a:b5:f3:d8:f9:b5: 2c:00:d9:ec:18:41:7a:1b:96:45:20:02:b3:41:12:ca:6c:89: dd:f3:bb:d1:67:d9:e6:51:5b:6b:cf:22:8f:54:6a:6f:4d:93: 0d:c9:c3:df:a8:92:d9:8e:ef:ed:19:e0:85:13:7b:c4:0f:3f: 19:01:60:96:88:05:9a:d9:11:89:5d:27:d3:88:95:e3:0d:7c: 28:88:f7:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5O3A1He78y6lBg2F3K7u7sGu60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTEyMDIwMDM2NDFaFw0yNTEyMDUwNTA1NDFaMDMxMTAvBgNV BAMTKEQ3QTcxRTE2QTQyOUQ1OEIyNzA5QTMyODc3NDk3OERGM0VDRjUwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB2e85euZiTMvpHqpql1Kq61s zDYhIFt15ddpRv+iDmMdGiyfMjIykKdSfcIWE4SwAT5vEz1lzkSNBeymadpLhQHE l5lMCXvh3A3ZbEpBNEYhetIp479REg/0SzFGYgHTToxVNKDsfU3kT4SLU9Ivg7iY Jtvh4q7o7QHiS+tu6ap2tHqR4HM/SodmY3Z1uXGqXg5GGJmZr1icFOSNj0W3vSZj IbinDdtHJDPzBXekEBQeq2cVA3pbItCkSID4zqq3FT4/4SwijGuceeTOMPTyJyPs R1lwK42Vj4LuAIYfi/U1Yy7j8HX4TBM7Qp8/QkeQhIHtU+sskAq9SUuOTk4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16ceFqQp1YsnCaMod0l43z7PUCcwHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP/44+qrkG21jjsvNt/OTnB5Qoq45cKUfe8 klZnsE55PDIMIz2/og1zLLXt59dHTehVOdzlc4ynJ52YUuw6t9CVwxWr/zaFRRE8 uqq/aOuZVvJvif880C1kj1SY1ug3o8rAa432ghQedpeU2KiHdWiy+5GRBxmw2ZjB a0/YnCOlOlLTs5Q3zqg6N8S2+GvStngBItxJxfArR6Hk4AWLe7F2cjhqsBIra2Nj 13fcgVq189j5tSwA2ewYQXoblkUgArNBEspsid3zu9Fn2eZRW2vPIo9Uam9Nkw3J w9+oktmO7+0Z4IUTe8QPPxkBYJaIBZrZEYldJ9OIleMNfCiI94M= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:24 2025 by rpki-client