This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: ENQTscEhJEGYVIeD+Xi171w1BvNuo+L3xId9K8S57JE= Subject key identifier: 9F:15:5D:C7:36:60:14:2F:29:49:19:15:C5:2A:CC:A7:6C:B3:DC:F1 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 5859E7777C46D5AD6A2860165A6088A206EAD6D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01CA Signing time: Fri 26 Dec 2025 18:50:47 +0000 Manifest this update: Fri 26 Dec 2025 18:45:47 +0000 Manifest next update: Mon 29 Dec 2025 21:44:47 +0000 Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: xSrYekrusqXPq7WjIX+obwRxR8Kd5DFa9cXhAnSy280=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:59:e7:77:7c:46:d5:ad:6a:28:60:16:5a:60:88:a2:06:ea:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Dec 26 18:45:47 2025 GMT Not After : Dec 29 21:44:47 2025 GMT Subject: CN=9F155DC73660142F29491915C52ACCA76CB3DCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:10:70:e4:9b:22:cb:ef:b6:25:63:35:16: 91:47:03:3b:aa:77:43:f1:57:77:c9:8a:97:c6:e9: 32:d3:f6:67:52:a4:1d:b4:5f:c4:33:60:ec:95:b8: 66:4a:19:1d:b3:45:22:23:e3:f2:63:2c:29:cb:c7: 70:6c:20:c0:37:de:32:ba:fb:d6:9c:c6:f0:b2:df: c9:83:6d:02:13:08:60:7f:e2:38:74:76:11:2b:3c: e7:d4:01:8f:8d:6e:43:1e:e9:a4:18:f4:f2:82:6e: c7:3d:0a:96:dc:e4:d0:98:52:f2:3f:0b:9a:ba:92: d0:87:9d:21:0b:7d:b9:f1:76:df:87:ed:e6:62:45: 6b:3a:48:23:57:89:ec:da:49:43:a5:f1:9e:72:2b: 7d:6f:d3:82:4e:4b:d0:7e:ef:29:6c:97:00:30:92: 5b:d8:17:16:6d:be:79:7d:55:3e:86:3c:71:93:8f: 92:fc:ee:ec:bc:b3:02:92:76:ff:a0:e9:8e:f3:87: 91:cb:ec:66:ca:f4:75:6d:86:56:b4:8b:e3:d2:54: 13:88:2a:6a:9b:6f:9f:c2:d5:88:33:10:92:4b:5f: 38:c7:e7:6e:ae:42:b4:90:ab:67:23:0b:0d:3a:6d: 6b:ed:7e:66:25:54:8a:ab:6e:c9:30:25:e0:8d:8a: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:5D:C7:36:60:14:2F:29:49:19:15:C5:2A:CC:A7:6C:B3:DC:F1 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d7:db:09:40:05:51:f5:d9:cb:d3:6e:6d:9e:f4:06:f4:db: d2:71:b2:67:b5:e6:95:d6:c0:2c:90:8e:74:2b:87:b7:5f:58: 81:dd:5f:b6:a5:60:d5:3b:57:c7:5f:24:50:5f:95:95:18:71: e9:b6:05:62:72:3c:c3:dc:d5:2e:1d:80:31:40:73:68:6f:0b: be:96:f4:a0:c7:41:47:95:03:ae:79:1b:3b:7d:1b:d6:87:03: 33:e4:03:00:2d:8b:23:8e:97:75:50:3f:e4:2d:91:34:b8:84: b0:c3:2a:c3:21:d2:f7:77:94:5c:33:d7:4f:c1:f6:8e:98:28: db:8f:5b:37:6c:df:19:4d:e5:e0:f1:db:79:a5:6f:9f:63:01: 54:01:24:cb:9f:2d:8c:96:1e:0d:ea:85:04:c3:f5:0f:85:e8: 8c:86:69:74:69:48:91:a5:a4:28:93:5b:15:4c:9e:f0:50:12: e0:aa:dd:21:03:17:bd:e5:2d:f3:41:8c:94:92:8e:2c:76:09: b9:f0:ea:fa:f5:ac:bf:5c:f7:14:6e:38:c0:8f:33:39:82:ae: 10:4e:ea:14:9c:a3:67:02:00:13:f1:71:d6:98:a2:15:85:0c: 01:c6:e9:ea:16:b2:91:a7:9d:83:77:66:77:8f:ae:a2:a1:76: 6a:05:ce:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFnnd3xG1a1qKGAWWmCIogbq1tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNTEyMjYxODQ1NDdaFw0yNTEyMjkyMTQ0NDdaMDMxMTAvBgNV BAMTKDlGMTU1REM3MzY2MDE0MkYyOTQ5MTkxNUM1MkFDQ0E3NkNCM0RDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjRBw5Jsiy++2JWM1FpFHAzuq d0PxV3fJipfG6TLT9mdSpB20X8QzYOyVuGZKGR2zRSIj4/JjLCnLx3BsIMA33jK6 +9acxvCy38mDbQITCGB/4jh0dhErPOfUAY+NbkMe6aQY9PKCbsc9Cpbc5NCYUvI/ C5q6ktCHnSELfbnxdt+H7eZiRWs6SCNXiezaSUOl8Z5yK31v04JOS9B+7ylslwAw klvYFxZtvnl9VT6GPHGTj5L87uy8swKSdv+g6Y7zh5HL7GbK9HVthla0i+PSVBOI Kmqbb5/C1YgzEJJLXzjH526uQrSQq2cjCw06bWvtfmYlVIqrbskwJeCNirUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxVdxzZgFC8pSRkVxSrMp2yz3PEwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/X2wlABVH12cvTbm2e9Ab029Jxsme15pXW wCyQjnQrh7dfWIHdX7alYNU7V8dfJFBflZUYcem2BWJyPMPc1S4dgDFAc2hvC76W 9KDHQUeVA655Gzt9G9aHAzPkAwAtiyOOl3VQP+QtkTS4hLDDKsMh0vd3lFwz10/B 9o6YKNuPWzds3xlN5eDx23mlb59jAVQBJMufLYyWHg3qhQTD9Q+F6IyGaXRpSJGl pCiTWxVMnvBQEuCq3SEDF73lLfNBjJSSjix2Cbnw6vr1rL9c9xRuOMCPMzmCrhBO 6hSco2cCABPxcdaYohWFDAHG6eoWspGnnYN3ZnePrqKhdmoFzrQ= -----END CERTIFICATE-----Generated at Sat Dec 27 05:33:50 2025 by rpki-client