This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: rM8h9Jd+V7jL7zHv0ZwrNe9r2ZcrVsKIst6dWZpETeM= Subject key identifier: A0:A9:37:60:77:E2:74:1B:1E:6F:9B:94:0E:8F:FC:DE:FB:FD:2C:B3 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 537F6D6FC92CFD060F561D49FABBD2C1A1021F46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01F5 Signing time: Sat 20 Dec 2025 10:21:28 +0000 Manifest this update: Sat 20 Dec 2025 10:16:28 +0000 Manifest next update: Tue 23 Dec 2025 12:30:28 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: TWfOnzYVfSB1XbshCnrr5reZ9QnJDoVE0kx3w/H7Yrs=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 12:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7f:6d:6f:c9:2c:fd:06:0f:56:1d:49:fa:bb:d2:c1:a1:02:1f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Dec 20 10:16:28 2025 GMT Not After : Dec 23 12:30:28 2025 GMT Subject: CN=A0A9376077E2741B1E6F9B940E8FFCDEFBFD2CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:52:9a:66:a7:3c:27:75:79:f5:ae:75:3b: a4:eb:7b:c2:cb:9f:55:87:76:ff:eb:5c:9e:de:dd: 0c:c6:2e:89:43:c8:c5:a4:bd:e6:c4:bc:b0:bd:61: 5e:68:77:df:f2:94:fe:52:fa:39:88:40:ac:c6:c4: e1:81:12:e4:ac:08:f6:28:73:07:40:29:6c:f6:ff: 2f:85:0e:fa:c7:a1:5a:ff:94:10:8a:54:e9:bd:5e: b4:bc:96:70:43:e2:ba:f6:9c:10:da:b2:e3:29:6f: 6a:6b:cb:17:6c:87:14:15:de:74:cf:f0:a4:50:df: 30:cd:4f:8d:5e:6c:5c:74:4a:e2:40:bb:44:2b:13: eb:7c:57:45:d6:d5:df:cb:9e:26:7a:70:78:8f:59: 5b:ab:ba:4b:77:e2:23:65:da:8f:e4:9a:9b:a2:8e: 67:a1:23:d8:ff:16:fd:ff:fb:f8:4f:38:19:01:a8: 59:56:e5:13:88:1d:e9:71:f6:69:60:1e:b2:bf:fa: 08:1b:c3:c4:8c:96:b9:20:e7:6c:22:b0:0b:78:2e: 94:5c:8e:42:d2:8a:69:90:69:d5:47:7a:cf:44:32: de:46:be:48:e9:78:30:f2:dd:7d:c3:fa:c5:d1:8a: 8f:e2:0f:8d:2f:b9:6b:8d:1f:d4:1d:7a:b1:15:1b: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:37:60:77:E2:74:1B:1E:6F:9B:94:0E:8F:FC:DE:FB:FD:2C:B3 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2f:fb:16:f6:bb:9d:c1:62:c0:8e:3e:a6:e0:39:32:e8:5a: cf:b9:5c:62:84:a1:27:35:14:c9:68:a8:28:a0:4e:52:ce:f3: 79:85:39:80:e2:61:f6:9e:66:e8:42:74:84:a2:36:8c:18:94: 6c:1b:11:be:72:ed:4d:46:b1:bc:52:db:a8:a5:c9:7f:82:bf: 83:0f:8d:18:3e:99:94:af:90:58:57:c9:44:51:9e:bc:4e:24: bd:2b:0c:45:dc:cb:0c:43:67:7d:a3:bb:aa:55:94:29:28:e5: 32:ac:62:30:78:c9:db:04:a5:f0:f9:d0:c9:d8:1c:d0:35:29: 78:bf:d3:81:ba:0b:b7:dd:10:48:b0:48:6b:a7:f1:79:94:a7: 76:bc:ad:8b:92:ab:ef:bd:bc:df:85:3c:4f:9d:5c:b8:01:9e: 3e:6c:fe:26:02:cd:35:81:31:f1:9d:0b:e9:aa:a7:36:e0:e2: f1:3e:d4:84:ec:66:56:07:6f:f0:e0:33:8a:18:bf:79:8e:b4: cc:b3:0a:43:17:99:9c:2c:10:93:73:78:63:b0:0e:2a:00:15: 6d:29:5f:50:3b:32:cf:4a:47:e1:04:cc:47:8f:b1:06:6e:00: 9d:7e:0a:84:c8:87:d5:73:8f:25:fd:e1:8e:ac:74:f6:89:0d: 52:19:3a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU39tb8ks/QYPVh1J+rvSwaECH0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTEyMjAxMDE2MjhaFw0yNTEyMjMxMjMwMjhaMDMxMTAvBgNV BAMTKEEwQTkzNzYwNzdFMjc0MUIxRTZGOUI5NDBFOEZGQ0RFRkJGRDJDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT1KaZqc8J3V59a51O6Tre8LL n1WHdv/rXJ7e3QzGLolDyMWkvebEvLC9YV5od9/ylP5S+jmIQKzGxOGBEuSsCPYo cwdAKWz2/y+FDvrHoVr/lBCKVOm9XrS8lnBD4rr2nBDasuMpb2pryxdshxQV3nTP 8KRQ3zDNT41ebFx0SuJAu0QrE+t8V0XW1d/LniZ6cHiPWVurukt34iNl2o/kmpui jmehI9j/Fv3/+/hPOBkBqFlW5ROIHelx9mlgHrK/+ggbw8SMlrkg52wisAt4LpRc jkLSimmQadVHes9EMt5GvkjpeDDy3X3D+sXRio/iD40vuWuNH9QderEVG3dZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoKk3YHfidBseb5uUDo/83vv9LLMwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIv+xb2u53BYsCOPqbgOTLoWs+5XGKEoSc1 FMloqCigTlLO83mFOYDiYfaeZuhCdISiNowYlGwbEb5y7U1GsbxS26ilyX+Cv4MP jRg+mZSvkFhXyURRnrxOJL0rDEXcywxDZ32ju6pVlCko5TKsYjB4ydsEpfD50MnY HNA1KXi/04G6C7fdEEiwSGun8XmUp3a8rYuSq++9vN+FPE+dXLgBnj5s/iYCzTWB MfGdC+mqpzbg4vE+1ITsZlYHb/DgM4oYv3mOtMyzCkMXmZwsEJNzeGOwDioAFW0p X1A7Ms9KR+EEzEePsQZuAJ1+CoTIh9VzjyX94Y6sdPaJDVIZOss= -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:38 2025 by rpki-client