This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: TGU2X/myI9cgCYe4WDz009030wIjbZK6ehiY12fhXwU= Subject key identifier: 7B:C0:45:EE:5E:F7:27:1A:1F:2D:4E:18:41:DD:DA:2E:93:6C:9E:9E Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 13BCE9D42B47A64F6070946E655E98AC9D30A81C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 01BA Signing time: Mon 22 Dec 2025 22:12:14 +0000 Manifest this update: Mon 22 Dec 2025 22:07:14 +0000 Manifest next update: Fri 26 Dec 2025 07:43:14 +0000 Files and hashes: 1: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: saiY37YS91lIhnIYJWr4MZeVzfnwDq5KYQ4liUMQd8Q=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:e9:d4:2b:47:a6:4f:60:70:94:6e:65:5e:98:ac:9d:30:a8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Dec 22 22:07:14 2025 GMT Not After : Dec 26 07:43:14 2025 GMT Subject: CN=7BC045EE5EF7271A1F2D4E1841DDDA2E936C9E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:82:ed:9a:56:db:98:d0:47:c5:72:5a:7c: 42:eb:d6:17:65:a0:82:86:c0:5e:80:17:b5:7a:a4: 72:14:25:c5:16:18:02:b5:91:36:dd:af:93:bd:0c: fb:3e:84:46:74:0c:44:4d:08:99:f7:cd:3a:91:42: f5:48:b0:3f:31:63:3a:3f:1d:10:1d:e5:50:d2:02: 35:17:4b:4b:76:ae:af:0d:7a:25:5d:8c:d1:60:0b: 5d:10:ff:e8:f1:d3:b4:6f:64:de:1f:d4:2f:bf:5d: e6:0a:12:68:14:18:36:c0:a5:7d:40:69:00:63:e2: b9:33:4b:4d:29:b5:59:de:0f:a4:dc:8b:f4:0c:64: 90:9f:d8:23:03:7c:fe:a0:b3:34:51:db:20:8a:00: dd:a2:92:31:d7:7e:47:29:47:df:4a:0a:c2:24:cc: 62:b1:c2:c2:d9:3d:10:fd:bd:fb:b6:ab:0e:6e:e4: 19:2a:f0:d6:67:54:49:7f:7b:42:ad:e2:d5:25:db: ea:df:8d:6b:68:08:64:44:84:71:7f:6c:2f:f7:89: 6f:35:35:dc:65:f1:15:28:bc:85:aa:5b:58:83:86: 19:55:da:89:0a:a7:07:59:49:f7:f8:42:ea:d7:ba: 07:ed:62:7d:a2:7b:5b:22:e5:55:59:51:ec:e3:d7: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:45:EE:5E:F7:27:1A:1F:2D:4E:18:41:DD:DA:2E:93:6C:9E:9E X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1c:b5:2d:f1:a3:0f:e5:e8:46:2f:16:28:7f:cf:93:25:e9: 1b:88:f8:7e:34:a0:c9:60:9a:fb:24:a3:87:7b:77:2d:ee:35: bb:96:d6:b8:c3:9d:86:8f:1c:c8:2d:f5:7a:7b:34:d8:8a:67: e2:a9:e9:65:29:d5:60:c2:1e:23:47:cc:31:b2:55:46:22:f1: 20:81:6c:61:d4:43:d6:a6:af:b9:8d:16:5a:d4:ad:f6:9f:00: e4:8c:d3:8b:4f:7f:72:53:b3:46:69:64:6f:59:c2:66:c9:7f: 0e:41:48:82:48:43:e8:1e:e9:64:b2:99:53:a2:61:fb:ab:ec: f5:25:de:3f:b2:8e:47:49:b8:fb:1c:9a:d6:dd:13:e3:8b:8c: 73:0a:67:0b:ec:b8:c2:40:f5:75:5e:c0:75:67:be:8a:bf:27: 45:98:70:59:40:4d:52:c7:9e:c5:c7:72:27:35:e7:87:87:3b: 51:be:c5:dd:58:8d:1c:20:25:02:d4:69:bd:49:ae:aa:0e:07: 71:6c:cc:84:e8:b3:72:c0:6a:34:1b:98:98:c0:87:b5:bb:e9: 0d:7b:67:a4:dd:9c:9f:41:bf:dc:b9:77:14:ba:45:ff:d7:f6: 7a:da:a9:d7:87:5d:7f:f4:a9:76:fe:71:32:56:64:a2:0c:57: 73:ee:da:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7zp1CtHpk9gcJRuZV6YrJ0wqBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTEyMjIyMjA3MTRaFw0yNTEyMjYwNzQzMTRaMDMxMTAvBgNV BAMTKDdCQzA0NUVFNUVGNzI3MUExRjJENEUxODQxREREQTJFOTM2QzlFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykoLtmlbbmNBHxXJafELr1hdl oIKGwF6AF7V6pHIUJcUWGAK1kTbdr5O9DPs+hEZ0DERNCJn3zTqRQvVIsD8xYzo/ HRAd5VDSAjUXS0t2rq8NeiVdjNFgC10Q/+jx07RvZN4f1C+/XeYKEmgUGDbApX1A aQBj4rkzS00ptVneD6Tci/QMZJCf2CMDfP6gszRR2yCKAN2ikjHXfkcpR99KCsIk zGKxwsLZPRD9vfu2qw5u5Bkq8NZnVEl/e0Kt4tUl2+rfjWtoCGREhHF/bC/3iW81 Ndxl8RUovIWqW1iDhhlV2okKpwdZSff4QurXugftYn2ie1si5VVZUezj10b1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8BF7l73JxofLU4YQd3aLpNsnp4wHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4ctS3xow/l6EYvFih/z5Ml6RuI+H40oMlg mvsko4d7dy3uNbuW1rjDnYaPHMgt9Xp7NNiKZ+Kp6WUp1WDCHiNHzDGyVUYi8SCB bGHUQ9amr7mNFlrUrfafAOSM04tPf3JTs0ZpZG9ZwmbJfw5BSIJIQ+ge6WSymVOi Yfur7PUl3j+yjkdJuPscmtbdE+OLjHMKZwvsuMJA9XVewHVnvoq/J0WYcFlATVLH nsXHcic154eHO1G+xd1YjRwgJQLUab1JrqoOB3FszITos3LAajQbmJjAh7W76Q17 Z6TdnJ9Bv9y5dxS6Rf/X9nraqdeHXX/0qXb+cTJWZKIMV3Pu2ps= -----END CERTIFICATE-----Generated at Tue Dec 23 13:01:56 2025 by rpki-client