This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: 7IAaeOnGyXQW34wPbAiq9Yy6mRCWXFijk3L8NboRYzY= Subject key identifier: 55:13:DA:9F:68:37:F7:36:F0:06:E7:F8:F7:98:15:25:0E:37:A2:B1 Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 25C37DBF7406E22AB03D025FC6B9880BCC17EAAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: 011B Signing time: Sat 20 Dec 2025 16:52:27 +0000 Manifest this update: Sat 20 Dec 2025 16:47:27 +0000 Manifest next update: Tue 23 Dec 2025 22:23:27 +0000 Files and hashes: 1: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: 6up+Eqrk/QmC5o6AoQXEY8Btg4uHgbqui1Crqnf0jD4=) 2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:7d:bf:74:06:e2:2a:b0:3d:02:5f:c6:b9:88:0b:cc:17:ea:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Dec 20 16:47:27 2025 GMT Not After : Dec 23 22:23:27 2025 GMT Subject: CN=5513DA9F6837F736F006E7F8F79815250E37A2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:c2:42:53:2f:79:f2:73:a2:52:73:f0:32: 81:38:c1:ec:8f:cd:92:b2:94:ce:21:5a:c3:9f:87: a0:c0:a6:a6:f7:6e:5c:9a:2b:35:91:18:53:a3:b3: 21:0d:2e:3b:42:5b:59:ac:ca:0b:3a:7c:7b:85:88: 2c:15:21:12:0d:6b:9c:85:ac:f2:bb:26:57:ff:82: 1e:41:a6:4b:5a:a1:8e:38:f1:b8:c9:1d:d1:55:81: 2d:f0:31:87:b3:f9:c6:86:26:66:a2:39:b6:72:37: c2:10:22:b8:dd:a9:b9:50:c5:03:26:56:9d:f6:c2: 40:e2:7a:a3:44:93:2f:a8:ae:00:a8:1f:ba:f8:04: 3a:09:aa:8d:01:d0:9d:6d:f0:1e:7d:bb:a8:83:af: 82:a4:b7:d1:1e:39:32:b3:1f:48:83:90:a2:54:f4: 9f:2b:98:ef:8d:0f:f4:b3:b5:3d:72:2f:dd:5d:a3: 89:da:bc:86:5b:65:ef:dd:82:a4:94:81:04:cd:4c: f2:f7:03:35:07:ce:66:8e:ed:2d:a5:37:33:0f:c0: 14:6f:a0:d5:c1:82:7d:5e:d2:5f:d1:bc:6f:91:9d: 83:3a:a6:f0:99:ce:b5:7b:b4:9c:e6:38:a8:1f:03: 45:df:2f:0f:b0:0f:53:5c:22:ce:77:f6:84:a9:4b: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:13:DA:9F:68:37:F7:36:F0:06:E7:F8:F7:98:15:25:0E:37:A2:B1 X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:49:4a:0a:38:d5:05:61:b8:dc:37:6f:ed:71:34:f6:4a:07: 44:50:8f:a0:59:d9:5e:92:93:84:1c:cf:27:f8:a8:43:03:64: a6:b0:c1:24:26:ba:11:77:5c:14:4d:2c:9b:cb:7b:3b:65:36: 24:12:6e:e4:03:9a:0b:59:40:2c:08:14:96:c1:60:81:92:26: 07:6d:a1:aa:32:76:ba:27:48:5d:53:20:85:11:11:a1:c7:f8: 0b:bc:64:0c:49:6f:a8:44:24:38:97:64:4e:79:bf:4d:ef:aa: c2:30:b9:83:75:5a:24:3c:65:da:9d:5b:c1:3f:8c:aa:df:b5: 83:33:9a:65:2d:b0:9f:64:f4:00:f2:e2:e5:95:15:07:33:2c: c4:f3:82:d5:0d:34:c6:f6:f9:13:61:93:5b:5c:24:5f:47:9f: 17:9a:0c:e1:03:da:61:5f:5b:09:57:17:fe:b9:63:13:b9:c6: 98:52:21:bc:98:58:fe:a5:dd:4c:b2:af:e5:e2:ff:ac:44:7c: 4c:6a:b6:82:ec:a3:f3:68:13:04:41:0c:95:ba:36:0e:c8:5b: 32:9b:c0:f2:41:4d:05:4d:d1:b0:86:15:14:84:33:b3:27:85: 04:5e:5b:79:ef:2e:c6:cc:c9:af:21:aa:9e:ba:15:43:0a:d6: 68:ab:26:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcN9v3QG4iqwPQJfxrmIC8wX6qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTEyMjAxNjQ3MjdaFw0yNTEyMjMyMjIzMjdaMDMxMTAvBgNV BAMTKDU1MTNEQTlGNjgzN0Y3MzZGMDA2RTdGOEY3OTgxNTI1MEUzN0EyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDic8JCUy958nOiUnPwMoE4weyP zZKylM4hWsOfh6DApqb3blyaKzWRGFOjsyENLjtCW1msygs6fHuFiCwVIRINa5yF rPK7Jlf/gh5BpktaoY448bjJHdFVgS3wMYez+caGJmaiObZyN8IQIrjdqblQxQMm Vp32wkDieqNEky+orgCoH7r4BDoJqo0B0J1t8B59u6iDr4Kkt9EeOTKzH0iDkKJU 9J8rmO+ND/SztT1yL91do4navIZbZe/dgqSUgQTNTPL3AzUHzmaO7S2lNzMPwBRv oNXBgn1e0l/RvG+RnYM6pvCZzrV7tJzmOKgfA0XfLw+wD1NcIs539oSpS/i3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRPan2g39zbwBuf495gVJQ43orEwHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1JSgo41QVhuNw3b+1xNPZKB0RQj6BZ2V6S k4Qczyf4qEMDZKawwSQmuhF3XBRNLJvLeztlNiQSbuQDmgtZQCwIFJbBYIGSJgdt oaoydronSF1TIIUREaHH+Au8ZAxJb6hEJDiXZE55v03vqsIwuYN1WiQ8ZdqdW8E/ jKrftYMzmmUtsJ9k9ADy4uWVFQczLMTzgtUNNMb2+RNhk1tcJF9HnxeaDOED2mFf WwlXF/65YxO5xphSIbyYWP6l3Uyyr+Xi/6xEfExqtoLso/NoEwRBDJW6Ng7IWzKb wPJBTQVN0bCGFRSEM7MnhQReW3nvLsbMya8hqp66FUMK1mirJmE= -----END CERTIFICATE-----Generated at Sun Dec 21 09:26:31 2025 by rpki-client