This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: SmIZuWXQ59yryjGtmvI4hCrpU+JpNhS5yZ3rFf17x6s= Subject key identifier: A4:B8:65:27:9B:83:99:C5:BA:5F:7F:F0:7B:A2:12:F4:33:73:B8:4C Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 41DDF1BF9AD05226F6AFA9F532EC37C1CE2CD46A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 0113 Signing time: Wed 03 Dec 2025 14:22:30 +0000 Manifest this update: Wed 03 Dec 2025 14:17:30 +0000 Manifest next update: Sat 06 Dec 2025 21:06:30 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: ugIWDCORUZPyqpzSXrwnSHUcpk87nawIzLPlc4t8U6M=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dd:f1:bf:9a:d0:52:26:f6:af:a9:f5:32:ec:37:c1:ce:2c:d4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Dec 3 14:17:30 2025 GMT Not After : Dec 6 21:06:30 2025 GMT Subject: CN=A4B865279B8399C5BA5F7FF07BA212F43373B84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:2e:fe:83:c9:2e:8d:e0:18:f3:1b:26:d6: ff:cd:c2:1c:83:3d:24:c5:13:8f:ed:6d:65:72:6f: 32:55:49:39:56:ac:37:23:3c:7e:7f:51:87:8d:b1: fc:36:75:54:b0:54:26:f3:95:c5:5c:b0:c8:12:d9: ce:d4:5c:bc:ee:7f:e4:eb:32:20:38:16:26:a8:2c: 34:e2:c3:a3:7b:1b:70:4a:25:41:b6:09:9d:2a:a4: 6d:ca:4d:51:24:2a:ab:c4:6f:46:2f:3b:a4:38:99: 43:9d:c8:e3:ea:94:94:49:de:a0:d7:40:41:76:d6: b1:31:db:a9:44:3b:95:25:b4:21:1e:48:cc:30:33: 48:c3:6f:fa:7a:a3:56:53:dd:c5:74:75:d7:bc:cb: fe:3f:7a:6d:85:07:bb:3e:22:bc:ea:d1:6e:ca:04: 40:72:f9:86:bf:dd:7e:2e:20:3e:c0:6b:2f:78:d5: d2:92:43:b0:86:9f:8f:c1:58:0d:e9:38:ec:ce:87: cf:09:22:ae:5e:0a:1a:13:6d:24:f8:59:8c:8b:b0: 6f:59:65:f9:4e:5a:9b:44:ab:c2:dd:fa:72:63:d2: 0f:64:b1:08:15:92:5f:8f:73:66:05:50:99:ee:fe: 31:b9:81:8a:6e:14:55:45:5f:47:46:a5:24:40:65: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B8:65:27:9B:83:99:C5:BA:5F:7F:F0:7B:A2:12:F4:33:73:B8:4C X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:65:bd:47:f8:da:8a:40:88:87:2c:2f:fe:73:2a:f3:76: ce:65:5f:58:cb:cf:bd:e7:48:a6:e9:08:9d:44:95:5c:4d:d8: 29:e0:66:d5:6b:a9:f5:5e:39:27:ed:f9:1a:cc:6c:f6:95:f7: 4a:69:00:d6:10:d6:0c:e7:d8:08:9c:b8:3a:2c:f3:1a:92:e6: 2f:69:8a:da:1b:e5:8a:b3:01:3f:b0:ed:ad:78:f7:13:83:4d: 29:cb:bf:82:20:e0:2d:9b:59:6f:0f:6d:65:d2:0b:4e:8f:5b: 83:ed:69:0b:5d:eb:f8:9b:6f:92:71:a0:f7:55:3b:5a:aa:05: c6:16:f5:19:b7:58:af:42:af:1c:a0:19:e5:08:91:33:27:be: ce:d2:dd:56:7f:d7:5c:ff:f7:0e:26:e4:7c:af:95:cd:99:62: a4:c5:2a:65:2f:94:93:b7:5a:ca:25:c3:18:de:b8:6b:67:01: 9f:6e:86:6d:f6:02:36:ca:16:80:34:9f:59:89:39:8c:1f:94: ad:5b:cf:9f:10:a3:77:87:e3:38:a9:be:1d:1e:70:a9:1d:0e: b3:4e:64:14:2b:6a:de:28:37:3e:ab:13:a8:34:4b:ca:42:ee: 94:1d:e6:b5:64:3b:d4:b1:d6:c6:3a:dc:d9:02:34:33:f6:82: 88:ca:8d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQd3xv5rQUib2r6n1Muw3wc4s1GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTEyMDMxNDE3MzBaFw0yNTEyMDYyMTA2MzBaMDMxMTAvBgNV BAMTKEE0Qjg2NTI3OUI4Mzk5QzVCQTVGN0ZGMDdCQTIxMkY0MzM3M0I4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4i7+g8kujeAY8xsm1v/NwhyD PSTFE4/tbWVybzJVSTlWrDcjPH5/UYeNsfw2dVSwVCbzlcVcsMgS2c7UXLzuf+Tr MiA4FiaoLDTiw6N7G3BKJUG2CZ0qpG3KTVEkKqvEb0YvO6Q4mUOdyOPqlJRJ3qDX QEF21rEx26lEO5UltCEeSMwwM0jDb/p6o1ZT3cV0dde8y/4/em2FB7s+Irzq0W7K BEBy+Ya/3X4uID7Aay941dKSQ7CGn4/BWA3pOOzOh88JIq5eChoTbST4WYyLsG9Z ZflOWptEq8Ld+nJj0g9ksQgVkl+Pc2YFUJnu/jG5gYpuFFVFX0dGpSRAZZQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLhlJ5uDmcW6X3/we6IS9DNzuEwwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIInZb1H+NqKQIiHLC/+cyrzds5lX1jLz73n SKbpCJ1ElVxN2CngZtVrqfVeOSft+RrMbPaV90ppANYQ1gzn2AicuDos8xqS5i9p itob5YqzAT+w7a149xODTSnLv4Ig4C2bWW8PbWXSC06PW4PtaQtd6/ibb5JxoPdV O1qqBcYW9Rm3WK9CrxygGeUIkTMnvs7S3VZ/11z/9w4m5Hyvlc2ZYqTFKmUvlJO3 WsolwxjeuGtnAZ9uhm32AjbKFoA0n1mJOYwflK1bz58Qo3eH4zipvh0ecKkdDrNO ZBQrat4oNz6rE6g0S8pC7pQd5rVkO9Sx1sY63NkCNDP2gojKjW0= -----END CERTIFICATE-----Generated at Wed Dec 3 17:37:02 2025 by rpki-client