This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft File: 92C5086020B686EBA68B31410C984CDC9BB75029.mft (raw, json) Hash identifier: b3zs/pCf6m2ayU6xi2C8KYsO87YzPqHwFRbI/S9BA00= Subject key identifier: 57:3C:0A:AB:23:7A:C5:BC:7C:62:8F:46:40:B2:83:14:DF:6F:E0:A3 Authority key identifier: 92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29 Certificate issuer: /CN=92C5086020B686EBA68B31410C984CDC9BB75029 Certificate serial: 0E26E5DD992BF6912E4CE6171BBB4E9B0228C49D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft Manifest number: FF Signing time: Sat 20 Dec 2025 00:50:55 +0000 Manifest this update: Sat 20 Dec 2025 00:45:55 +0000 Manifest next update: Tue 23 Dec 2025 09:01:55 +0000 Files and hashes: 1: 92C5086020B686EBA68B31410C984CDC9BB75029.crl (hash: lPj9FTmGOmqw9Uqm1FOl2Hmp+fHlD5/gCJ0g3G9s/V8=) 2: 3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (hash: NNzs8IlEI7o1IAZM30Xj+tMlh6+Md0RqyVAz6JkcvqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.crl rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:26:e5:dd:99:2b:f6:91:2e:4c:e6:17:1b:bb:4e:9b:02:28:c4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C5086020B686EBA68B31410C984CDC9BB75029 Validity Not Before: Dec 20 00:45:55 2025 GMT Not After : Dec 23 09:01:55 2025 GMT Subject: CN=573C0AAB237AC5BC7C628F4640B28314DF6FE0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:49:06:86:d0:fb:30:22:ff:e0:bf:5a:0c: b9:42:46:1f:1e:9a:57:04:44:10:8a:68:66:97:21: 63:74:41:63:7f:70:3a:9b:96:93:12:53:8b:19:15: f8:72:be:e1:3b:35:d9:18:fe:cb:6a:59:d0:ef:4c: 44:6f:4e:87:11:e1:e8:37:17:e2:18:cd:81:77:6a: 72:3c:9a:f7:00:5b:d7:ac:80:bb:34:d1:97:c5:5e: c4:51:1e:15:04:0d:c6:2b:10:58:cb:36:87:f9:6b: 3b:a4:2e:02:57:39:88:5b:3e:dc:2b:4b:88:f7:2f: 76:a0:a9:1f:22:c2:4b:d2:51:5d:7e:1e:c8:29:46: 53:7e:90:9d:05:17:46:8f:cc:87:7c:8c:9b:d3:01: f0:fe:a5:f7:5a:3e:10:4f:e4:66:6c:e1:77:15:7b: e8:61:aa:6b:60:c0:72:fa:b8:a5:63:81:f5:ec:6e: b4:96:4e:a3:6f:2b:21:2e:10:a2:9d:46:f7:f5:4c: 67:70:66:10:6e:58:05:4e:eb:e4:fa:94:ed:6b:f8: 4b:13:7a:31:35:52:6a:a3:aa:6b:cc:ce:3c:2f:a9: 7a:1a:4e:ab:a3:63:98:b1:e2:77:51:f8:f9:83:96: 63:bb:9e:b6:0f:d3:cc:cc:04:16:15:eb:3a:b7:06: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:0A:AB:23:7A:C5:BC:7C:62:8F:46:40:B2:83:14:DF:6F:E0:A3 X509v3 Authority Key Identifier: keyid:92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:ff:c2:c1:b1:6e:e5:69:dd:9a:e3:0b:2d:58:fd:f2:34: fd:ac:ef:19:55:fe:27:3d:00:c5:4a:2f:df:8c:e7:72:21:17: 69:47:ba:99:89:96:2c:bd:64:af:1a:b6:fb:a1:16:49:2e:af: b2:60:ac:db:55:0b:26:2a:49:3e:69:96:70:5d:5d:c8:8a:10: c7:73:74:e8:94:28:b7:e2:4e:8a:0c:6e:e8:61:c4:c2:9a:5f: e9:06:e5:46:16:60:40:1d:a0:61:1f:f8:8c:ac:da:4d:cb:f8: ef:19:7e:d1:03:ee:2e:20:00:30:d9:16:ef:cd:28:ad:d5:3b: 6d:6c:ba:aa:dc:fc:ca:fc:d4:3e:dd:13:bb:c2:7e:19:dd:1a: 72:b1:70:53:16:bd:66:96:71:02:8e:b5:a6:3b:ce:5d:7c:b3: 38:66:f9:ec:42:7f:f0:c4:11:54:5b:bf:79:f1:a3:95:4f:ef: 51:77:e4:74:7e:b3:3f:a3:44:59:ea:66:01:79:9b:f4:6c:50: 1f:64:e4:c2:21:e7:1c:87:6f:a8:54:74:b5:20:98:58:69:11: ac:7c:9e:26:91:9d:3c:b8:a4:04:bc:4d:03:8d:cc:55:f1:97: 60:75:e5:cd:1d:0a:f2:60:08:d8:9d:ff:7c:bb:5f:8a:99:86: 58:5b:05:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDibl3Zkr9pEuTOYXG7tOmwIoxJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNTA4NjAyMEI2ODZFQkE2OEIzMTQxMEM5ODRDREM5 QkI3NTAyOTAeFw0yNTEyMjAwMDQ1NTVaFw0yNTEyMjMwOTAxNTVaMDMxMTAvBgNV BAMTKDU3M0MwQUFCMjM3QUM1QkM3QzYyOEY0NjQwQjI4MzE0REY2RkUwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3UkGhtD7MCL/4L9aDLlCRh8e mlcERBCKaGaXIWN0QWN/cDqblpMSU4sZFfhyvuE7NdkY/stqWdDvTERvTocR4eg3 F+IYzYF3anI8mvcAW9esgLs00ZfFXsRRHhUEDcYrEFjLNof5azukLgJXOYhbPtwr S4j3L3agqR8iwkvSUV1+HsgpRlN+kJ0FF0aPzId8jJvTAfD+pfdaPhBP5GZs4XcV e+hhqmtgwHL6uKVjgfXsbrSWTqNvKyEuEKKdRvf1TGdwZhBuWAVO6+T6lO1r+EsT ejE1UmqjqmvMzjwvqXoaTqujY5ix4ndR+PmDlmO7nrYP08zMBBYV6zq3Bip7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzwKqyN6xbx8Yo9GQLKDFN9v4KMwHwYDVR0j BBgwFoAUksUIYCC2huumizFBDJhM3Ju3UCkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTIyNTRjMy0yNjYxLTQ2MWYtOTMyNC0wNzA3MDQ3MGNjNmQvMC85MkM1MDg2MDIw QjY4NkVCQTY4QjMxNDEwQzk4NENEQzlCQjc1MDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJDNTA4NjAyMEI2ODZFQkE2OEIzMTQxMEM5ODRDREM5QkI3 NTAyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkyMjU0YzMtMjY2MS00NjFmLTkz MjQtMDcwNzA0NzBjYzZkLzAvOTJDNTA4NjAyMEI2ODZFQkE2OEIzMTQxMEM5ODRD REM5QkI3NTAyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg9/8LBsW7lad2a4wstWP3yNP2s7xlV/ic9 AMVKL9+M53IhF2lHupmJliy9ZK8atvuhFkkur7JgrNtVCyYqST5plnBdXciKEMdz dOiUKLfiTooMbuhhxMKaX+kG5UYWYEAdoGEf+Iys2k3L+O8ZftED7i4gADDZFu/N KK3VO21suqrc/Mr81D7dE7vCfhndGnKxcFMWvWaWcQKOtaY7zl18szhm+exCf/DE EVRbv3nxo5VP71F35HR+sz+jRFnqZgF5m/RsUB9k5MIh5xyHb6hUdLUgmFhpEax8 niaRnTy4pAS8TQONzFXxl2B15c0dCvJgCNid/3y7X4qZhlhbBXc= -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:12 2025 by rpki-client