This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: QqEgIPG8pNbyYmfMTANym1s2AtubNDimhzLI/nCA7Rk= Subject key identifier: F4:9F:3F:D8:54:BC:B6:A7:E9:1B:62:D8:0D:33:57:56:7E:2C:1E:0B Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 77198100F69C074EA2CAC4FCA8EA60C965C92B14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01F4 Signing time: Thu 18 Dec 2025 08:50:54 +0000 Manifest this update: Thu 18 Dec 2025 08:45:54 +0000 Manifest next update: Sun 21 Dec 2025 10:17:54 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: L+ziUE6Sc90FtrEacF1yT1/F1V/qejc+Y3XskYLXx3E=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:19:81:00:f6:9c:07:4e:a2:ca:c4:fc:a8:ea:60:c9:65:c9:2b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Dec 18 08:45:54 2025 GMT Not After : Dec 21 10:17:54 2025 GMT Subject: CN=F49F3FD854BCB6A7E91B62D80D3357567E2C1E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:67:07:c6:d6:6c:64:9c:ff:6c:e4:6e:07: 32:be:2d:a8:60:b6:6e:d8:26:c4:38:62:2a:ce:c0: 00:68:19:ca:23:b1:d2:5e:86:fb:e5:52:98:f7:cc: 39:10:67:75:33:e8:e7:19:13:f0:f4:fa:89:7f:d3: cd:78:83:e0:0e:5b:a7:db:b3:87:0a:1d:55:38:b8: 05:22:a2:97:e4:13:44:12:e1:e3:72:1e:59:f4:f2: 33:92:0f:6c:da:c8:3f:fc:f2:6a:24:38:af:9f:d5: 0d:c1:a9:31:29:d6:c6:8d:09:e0:6f:1f:c2:0b:b4: 80:b7:29:ab:ec:6f:ff:33:4b:8c:27:52:e4:ec:aa: db:4b:4c:c0:05:02:21:7f:1d:a2:2f:93:50:2d:eb: 5b:b7:15:4b:e9:29:72:42:44:65:fb:5f:66:94:3f: c2:7a:c6:1b:ac:61:0d:0a:5f:41:a8:05:1e:8e:e2: 1b:8b:8e:44:3a:73:bf:31:6d:1e:1d:1d:76:5d:16: 0b:60:68:2c:6a:a8:3a:ea:96:00:6a:d8:c8:26:7c: d6:da:8a:2a:05:3c:41:9d:18:98:31:7c:50:dc:09: fe:ef:98:df:cd:f8:dc:a9:dd:96:ce:ff:61:06:5e: 9e:ea:8b:04:8f:11:9a:32:15:55:ef:15:35:b5:cc: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:3F:D8:54:BC:B6:A7:E9:1B:62:D8:0D:33:57:56:7E:2C:1E:0B X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e9:9d:1d:b5:01:38:e8:fd:fb:d4:57:c7:13:65:ed:43:c8: aa:74:9b:76:40:b4:69:02:03:bb:ce:dc:61:2e:ed:78:61:94: 0a:19:41:df:e9:b9:fb:3f:7d:e3:dc:6b:58:06:51:57:cc:a4: 0f:6e:4f:6f:fd:f1:af:dd:2b:79:95:dd:f6:d1:e8:6e:54:73: be:35:b1:23:a6:66:e9:4a:f4:83:fd:88:d7:52:f9:4c:0e:8a: 2a:08:0d:d4:ad:8c:4f:c3:75:84:76:23:f6:71:0a:e5:5a:d8: 35:27:1c:38:e7:71:d4:a9:b1:68:bc:96:8b:f5:d3:98:d9:eb: a6:3c:4e:e6:d1:70:01:f2:63:29:69:f7:f0:7f:af:61:00:55: 5c:b1:b2:d2:15:56:6e:37:c9:df:df:ba:00:4a:18:0e:42:00: 94:da:ae:57:3b:81:71:78:dd:2b:ad:18:dd:03:b8:7e:3f:c1: b1:70:5c:28:05:58:97:53:00:3f:ff:0e:46:84:9c:86:15:f4: f2:6d:ac:bc:0d:7f:67:0b:a8:16:a1:c9:31:b4:43:dd:3a:2c: 31:64:e0:75:b2:0b:7c:66:01:e1:d6:57:04:0c:52:4b:f6:4f: e7:02:e1:d2:b5:7d:3d:07:95:ca:5f:15:83:e6:d3:c8:24:cf: 74:fd:47:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxmBAPacB06iysT8qOpgyWXJKxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTEyMTgwODQ1NTRaFw0yNTEyMjExMDE3NTRaMDMxMTAvBgNV BAMTKEY0OUYzRkQ4NTRCQ0I2QTdFOTFCNjJEODBEMzM1NzU2N0UyQzFFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhWcHxtZsZJz/bORuBzK+Lahg tm7YJsQ4YirOwABoGcojsdJehvvlUpj3zDkQZ3Uz6OcZE/D0+ol/0814g+AOW6fb s4cKHVU4uAUiopfkE0QS4eNyHln08jOSD2zayD/88mokOK+f1Q3BqTEp1saNCeBv H8ILtIC3Kavsb/8zS4wnUuTsqttLTMAFAiF/HaIvk1At61u3FUvpKXJCRGX7X2aU P8J6xhusYQ0KX0GoBR6O4huLjkQ6c78xbR4dHXZdFgtgaCxqqDrqlgBq2MgmfNba iioFPEGdGJgxfFDcCf7vmN/N+Nyp3ZbO/2EGXp7qiwSPEZoyFVXvFTW1zC2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9J8/2FS8tqfpG2LYDTNXVn4sHgswHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErpnR21ATjo/fvUV8cTZe1DyKp0m3ZAtGkC A7vO3GEu7XhhlAoZQd/pufs/fePca1gGUVfMpA9uT2/98a/dK3mV3fbR6G5Uc741 sSOmZulK9IP9iNdS+UwOiioIDdStjE/DdYR2I/ZxCuVa2DUnHDjncdSpsWi8lov1 05jZ66Y8TubRcAHyYylp9/B/r2EAVVyxstIVVm43yd/fugBKGA5CAJTarlc7gXF4 3SutGN0DuH4/wbFwXCgFWJdTAD//DkaEnIYV9PJtrLwNf2cLqBahyTG0Q906LDFk 4HWyC3xmAeHWVwQMUkv2T+cC4dK1fT0HlcpfFYPm08gkz3T9R7w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:46 2025 by rpki-client