This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft File: 94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json) Hash identifier: uBh0TFzm+LDP84AXHJ4YG3hbqydxMlcCx08s4z1GP90= Subject key identifier: 5E:2D:E6:56:55:A5:96:C7:ED:39:E1:EB:96:F8:73:9D:C3:90:7E:CA Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Certificate serial: 3A197A1E9FC50B0190B4E76A8A1DDAF2F56ABB34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft Manifest number: 0131 Signing time: Wed 24 Dec 2025 15:12:41 +0000 Manifest this update: Wed 24 Dec 2025 15:07:41 +0000 Manifest next update: Sun 28 Dec 2025 01:38:41 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=) 2: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: 0wA5Hz8VEozDcQvZ8BtsiXwhg2lxgCBpnmKFmyou5Fw=) 3: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=) 4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:19:7a:1e:9f:c5:0b:01:90:b4:e7:6a:8a:1d:da:f2:f5:6a:bb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Validity Not Before: Dec 24 15:07:41 2025 GMT Not After : Dec 28 01:38:41 2025 GMT Subject: CN=5E2DE65655A596C7ED39E1EB96F8739DC3907ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:c7:25:93:93:b5:ed:59:f2:dc:b8:7d:32: 1a:31:89:10:d0:29:de:11:1b:1f:00:22:15:b9:0e: af:81:d7:7b:49:c3:3a:eb:66:cb:e6:51:a6:6e:74: 67:25:23:15:66:8b:51:52:95:61:ba:f3:98:4a:68: f0:fa:e4:07:ca:49:67:e8:b0:fe:7f:f1:50:b0:ba: 08:c2:d8:3f:33:08:ac:00:b7:12:5a:59:aa:d7:76: 24:d4:3f:85:29:89:84:b9:dd:04:d7:bd:59:b8:94: be:d1:a6:e8:76:7c:e5:db:80:f4:3d:d2:c2:d2:f9: 09:5a:af:ae:df:8b:a4:5f:04:1f:42:7c:f1:1b:8e: 11:0a:1d:cb:4a:b1:40:08:4e:e1:cb:0b:54:cb:6d: 7a:cf:d2:05:60:b1:19:66:49:eb:a1:42:71:e5:1b: 0e:50:d8:2e:67:27:54:cd:55:c3:89:9a:49:17:d7: ca:b3:3f:46:e0:9f:00:98:19:5f:0b:f0:57:a8:40: 16:b2:24:85:31:96:c6:84:e3:62:d7:63:29:9c:dc: d3:a6:e6:f4:15:6b:87:42:89:3a:2d:e9:70:45:ec: f5:50:19:4e:27:c5:52:25:37:cf:9e:b8:92:c8:35: 65:66:ae:48:a4:67:e8:11:be:60:2c:ee:b2:cb:c7: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:E6:56:55:A5:96:C7:ED:39:E1:EB:96:F8:73:9D:C3:90:7E:CA X509v3 Authority Key Identifier: keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a6:cd:ad:f9:43:66:a2:70:0c:d0:b9:41:98:1f:93:91:16: 6c:97:56:11:2c:44:0e:80:c8:46:a4:58:5d:9d:b5:8d:c0:40: 5d:37:5a:05:00:17:29:72:0d:f1:ff:a2:ac:bd:40:ad:a8:82: 44:a5:fb:7d:5d:a4:4e:06:6c:b6:8d:f3:63:55:9b:fd:e2:a9: 54:52:fa:49:e6:42:6a:bc:59:df:5b:d4:9d:24:94:5b:62:43: d9:c8:c8:79:69:d0:ac:b9:ac:0a:4c:f4:67:b6:52:fc:0b:02: bf:e3:1e:7a:52:11:98:6a:f4:52:16:e9:94:03:bf:96:5c:7b: e9:83:9c:a1:64:33:16:00:c5:11:d7:9a:d6:e6:ea:1c:63:be: 53:69:6d:3a:b1:dd:44:ed:2c:9b:e2:a9:02:3a:04:2a:16:11: 19:34:dc:15:8c:0c:be:dc:fb:9f:55:e2:f0:c9:4d:38:9b:78: b2:d5:4f:44:bb:4e:5a:e3:2b:fc:15:f7:cf:d9:44:c0:6a:1d: d7:eb:ca:e4:fc:c7:5f:45:a5:2d:53:fe:30:35:c9:9b:dc:0a: e7:2f:b1:8a:28:16:2a:8d:68:f5:3c:e5:ff:cf:bb:c7:53:de: d0:b3:b5:90:ad:1b:4a:63:51:2e:18:31:6b:ba:80:8d:bb:90: b0:2d:30:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhl6Hp/FCwGQtOdqih3a8vVquzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3 ODA5QTZGMzAeFw0yNTEyMjQxNTA3NDFaFw0yNTEyMjgwMTM4NDFaMDMxMTAvBgNV BAMTKDVFMkRFNjU2NTVBNTk2QzdFRDM5RTFFQjk2Rjg3MzlEQzM5MDdFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkMclk5O17Vny3Lh9MhoxiRDQ Kd4RGx8AIhW5Dq+B13tJwzrrZsvmUaZudGclIxVmi1FSlWG685hKaPD65AfKSWfo sP5/8VCwugjC2D8zCKwAtxJaWarXdiTUP4UpiYS53QTXvVm4lL7Rpuh2fOXbgPQ9 0sLS+Qlar67fi6RfBB9CfPEbjhEKHctKsUAITuHLC1TLbXrP0gVgsRlmSeuhQnHl Gw5Q2C5nJ1TNVcOJmkkX18qzP0bgnwCYGV8L8FeoQBayJIUxlsaE42LXYymc3NOm 5vQVa4dCiTot6XBF7PVQGU4nxVIlN8+euJLINWVmrkikZ+gRvmAs7rLLxwKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXi3mVlWllsftOeHrlvhzncOQfsowHwYDVR0j BBgwFoAUlPbCYCe59yqocB0SlmJ/pXgJpvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGQwMDcxOC01MjEwLTQ0MzgtYjY0ZC02MmVjMWYzZWJjZDAvMC85NEY2QzI2MDI3 QjlGNzJBQTg3MDFEMTI5NjYyN0ZBNTc4MDlBNkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3ODA5 QTZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdG QTU3ODA5QTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFimza35Q2aicAzQuUGYH5ORFmyXVhEsRA6A yEakWF2dtY3AQF03WgUAFylyDfH/oqy9QK2ogkSl+31dpE4GbLaN82NVm/3iqVRS +knmQmq8Wd9b1J0klFtiQ9nIyHlp0Ky5rApM9Ge2UvwLAr/jHnpSEZhq9FIW6ZQD v5Zce+mDnKFkMxYAxRHXmtbm6hxjvlNpbTqx3UTtLJviqQI6BCoWERk03BWMDL7c +59V4vDJTTibeLLVT0S7TlrjK/wV98/ZRMBqHdfryuT8x19FpS1T/jA1yZvcCucv sYooFiqNaPU85f/Pu8dT3tCztZCtG0pjUS4YMWu6gI27kLAtMGQ= -----END CERTIFICATE-----Generated at Wed Dec 24 18:13:38 2025 by rpki-client