This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: IsbPYsjMzDVAsfsKh6aDJaG1mMEaXV+m6S53rfjNRC0= Subject key identifier: 4A:D2:D4:8B:F5:90:E8:4C:9A:D5:C5:DE:71:AE:3C:2D:BC:82:DF:20 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 1EB62C6B8BB9F74536F732A21AB54BB24F66D3B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 0233 Signing time: Tue 16 Dec 2025 17:42:10 +0000 Manifest this update: Tue 16 Dec 2025 17:37:10 +0000 Manifest next update: Sat 20 Dec 2025 04:06:10 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: a1fvJ9BwcKIiMGObc0FXmXBxwUXT7yjw9KkohhJ7H9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b6:2c:6b:8b:b9:f7:45:36:f7:32:a2:1a:b5:4b:b2:4f:66:d3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Dec 16 17:37:10 2025 GMT Not After : Dec 20 04:06:10 2025 GMT Subject: CN=4AD2D48BF590E84C9AD5C5DE71AE3C2DBC82DF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:07:fc:4b:c4:34:05:6e:2d:d2:ea:6c:57: ea:33:28:a2:5c:bc:4d:68:4c:5a:57:4b:ab:96:08: 79:78:1a:6b:e8:4c:d1:e5:7d:66:7c:6a:07:8a:54: 85:d6:6e:1d:25:36:e3:42:af:47:b6:42:1f:4f:f2: e4:5b:ca:36:df:2e:f1:e5:b7:8d:7e:e4:83:32:dd: 81:82:91:ea:cb:e0:68:47:be:55:94:f9:3b:ee:5e: f5:70:01:6e:db:9c:c9:6b:34:6e:cb:f4:82:b9:fc: c0:fd:ef:1a:e5:68:f1:e5:55:32:03:fa:07:cf:c9: 6e:c7:ec:0e:b6:9b:4b:24:b9:7c:34:e7:ad:93:d2: 15:a2:40:98:b9:73:9e:2c:ac:e6:e5:72:b9:9f:a6: 80:63:71:2f:83:1c:59:dc:61:8b:78:6f:81:89:18: 96:c4:ca:f4:b9:c1:72:8b:5a:5a:d1:3d:af:1a:65: 8e:a4:93:15:7c:7e:c6:1f:b7:37:aa:73:21:b9:fe: 36:07:1e:0c:ba:1a:c1:e4:03:82:4d:66:fe:fb:62: 2b:83:df:73:4e:b4:2d:27:d8:22:3d:e0:1f:af:f6: eb:a9:ab:81:5c:fd:52:70:27:a0:45:d4:a1:ba:94: 83:5e:f1:bf:6b:29:c0:c5:29:0c:71:c4:3e:fb:f5: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:D4:8B:F5:90:E8:4C:9A:D5:C5:DE:71:AE:3C:2D:BC:82:DF:20 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:ea:e1:93:bf:21:ad:b1:17:b7:6c:18:1e:45:5d:32:d4: 0a:91:7d:bd:fb:c5:e0:84:d2:4b:06:a9:4d:c9:66:0f:31:3e: da:ac:f6:6e:ae:84:fd:1b:44:4d:43:ec:90:a7:c0:a7:b0:00: 68:44:10:0e:5a:5a:15:fb:17:ac:ad:0f:b0:a8:57:56:27:32: e9:88:2d:57:b2:30:a8:6c:f5:3a:e9:9a:40:65:4f:28:30:ad: 33:9f:fe:61:b9:1b:36:3b:cb:61:07:0f:21:0a:d0:be:bb:0c: 49:dd:18:9e:7d:e4:3a:7b:72:0c:21:37:b1:1c:f7:a9:55:31: 7b:ec:e4:ba:a7:75:4d:1c:e1:a4:45:f9:63:24:42:02:32:40: e4:b8:3d:34:09:b7:2d:d2:62:2b:65:78:18:fb:5a:bf:78:65: 9f:59:a0:b6:10:a9:db:9c:0f:4d:b7:7e:78:92:a4:8d:bf:c5: 05:a1:59:57:f9:bf:14:7f:13:a8:7e:f0:39:bf:51:88:15:c1: c8:82:6d:37:9d:9c:ac:6a:58:c3:6c:f8:68:ea:37:5c:a8:a0: 8d:b2:41:b2:9a:6b:da:0d:82:95:9d:3f:b9:af:1e:53:25:94: 14:d0:e6:62:2b:41:9e:e2:1d:7e:02:c6:c4:31:60:54:8f:d0: 77:05:0f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrYsa4u590U29zKiGrVLsk9m07UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTEyMTYxNzM3MTBaFw0yNTEyMjAwNDA2MTBaMDMxMTAvBgNV BAMTKDRBRDJENDhCRjU5MEU4NEM5QUQ1QzVERTcxQUUzQzJEQkM4MkRGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGQf8S8Q0BW4t0upsV+ozKKJc vE1oTFpXS6uWCHl4GmvoTNHlfWZ8ageKVIXWbh0lNuNCr0e2Qh9P8uRbyjbfLvHl t41+5IMy3YGCkerL4GhHvlWU+TvuXvVwAW7bnMlrNG7L9IK5/MD97xrlaPHlVTID +gfPyW7H7A62m0skuXw0562T0hWiQJi5c54srOblcrmfpoBjcS+DHFncYYt4b4GJ GJbEyvS5wXKLWlrRPa8aZY6kkxV8fsYftzeqcyG5/jYHHgy6GsHkA4JNZv77YiuD 33NOtC0n2CI94B+v9uupq4Fc/VJwJ6BF1KG6lINe8b9rKcDFKQxxxD779ez/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUStLUi/WQ6Eya1cXeca48LbyC3yAwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuD6uGTvyGtsRe3bBgeRV0y1AqRfb37xeCE 0ksGqU3JZg8xPtqs9m6uhP0bRE1D7JCnwKewAGhEEA5aWhX7F6ytD7CoV1YnMumI LVeyMKhs9TrpmkBlTygwrTOf/mG5GzY7y2EHDyEK0L67DEndGJ595Dp7cgwhN7Ec 96lVMXvs5LqndU0c4aRF+WMkQgIyQOS4PTQJty3SYitleBj7Wr94ZZ9ZoLYQqduc D023fniSpI2/xQWhWVf5vxR/E6h+8Dm/UYgVwciCbTednKxqWMNs+GjqN1yooI2y QbKaa9oNgpWdP7mvHlMllBTQ5mIrQZ7iHX4CxsQxYFSP0HcFD4k= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:47 2025 by rpki-client