This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: Q7uaK0ybo3f6wFfbCm2504i/PBT7YSjSBU8I9NiP7iM= Subject key identifier: AC:22:77:B0:0B:A9:E4:CB:67:2D:ED:EE:40:12:0C:92:0C:FD:B3:02 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 19C7F7D300EB861E2F2223A0276F7CDE345DD1E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: ED Signing time: Thu 18 Dec 2025 21:52:16 +0000 Manifest this update: Thu 18 Dec 2025 21:47:16 +0000 Manifest next update: Mon 22 Dec 2025 06:56:16 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: eefGX4iZCzwVavbSYxPshz+NvXxr+LiN3ztSDUN3XTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c7:f7:d3:00:eb:86:1e:2f:22:23:a0:27:6f:7c:de:34:5d:d1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Dec 18 21:47:16 2025 GMT Not After : Dec 22 06:56:16 2025 GMT Subject: CN=AC2277B00BA9E4CB672DEDEE40120C920CFDB302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:8b:52:07:2f:d2:b1:cb:e4:b8:03:ae:71: b9:ea:64:a9:ed:2a:56:4d:29:65:35:d2:6c:22:de: b9:15:9b:04:06:66:2e:49:40:ba:14:e9:0a:2e:4e: 1f:69:71:e9:c0:ef:8d:d0:66:dd:da:c5:2b:e5:a7: 62:37:82:74:c1:74:2d:86:fe:f1:da:a9:d0:96:cc: 82:8c:8d:95:ad:4a:0d:49:ac:d1:57:c2:55:72:45: 4a:d3:5e:02:6f:e9:d4:92:1d:a4:6b:b7:c6:14:b5: 53:d7:7d:b9:21:d8:b5:92:fb:a1:f2:41:9c:ed:0b: 3d:50:d8:a8:bb:64:93:c9:5c:e2:94:d1:76:30:1d: 8f:6d:4d:ba:8f:40:2a:4f:f6:12:3b:13:a4:33:b1: 53:9d:84:35:9f:7d:d3:bd:94:ef:f0:5d:dc:a6:79: f2:f0:60:92:94:c5:96:3d:93:30:b0:97:18:30:be: 52:4d:60:8a:f8:5e:10:e2:99:af:69:a0:11:30:ec: 2d:44:7c:08:7e:29:c4:bc:a2:5b:2b:3a:53:3b:fd: 5e:92:4f:44:9c:3c:39:3e:e9:67:83:84:b0:27:21: f7:cc:61:0c:59:43:c9:45:6f:a7:1a:5c:2c:73:fa: 42:90:a4:39:24:38:2e:d4:e7:34:9e:0e:38:ec:4f: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:22:77:B0:0B:A9:E4:CB:67:2D:ED:EE:40:12:0C:92:0C:FD:B3:02 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a6:2c:03:ac:c0:5c:c0:b8:3c:13:ee:76:04:f6:e2:3a:b7: f1:06:27:19:60:fa:6c:65:0c:4c:fa:b6:87:33:ae:ae:17:20: 76:99:d7:a1:9b:a4:76:3f:01:ef:df:89:04:82:4f:1e:3c:ba: 16:cd:58:d2:12:04:ea:d8:06:96:94:65:d8:2e:ce:52:8d:59: 01:44:21:22:0b:f3:5c:77:ba:51:90:6f:bc:eb:69:98:79:e4: bc:4a:26:8b:de:2f:86:73:da:d3:53:80:8b:2b:88:84:2c:a1: 8c:aa:59:dc:c9:24:c0:00:6f:e6:ea:d9:11:7c:ed:fe:2a:f5: 6e:63:18:eb:05:15:df:17:6e:cb:b1:b5:05:3d:38:74:52:ee: 8f:f0:7c:21:3a:89:49:56:20:79:74:8e:f6:cf:07:dc:f6:f7: ae:6c:9b:da:64:4d:9d:1b:66:15:2c:13:32:d9:da:d1:78:cd: 5d:30:e1:c5:c2:95:88:19:04:b6:ae:a3:52:92:d8:1b:c8:41: 9b:af:fd:8a:c1:30:5c:51:cf:55:ba:fa:f8:28:08:52:ff:ac: 4b:72:86:98:39:93:97:1d:c7:8c:83:ca:cd:8a:29:44:8e:b3: 21:5e:d4:80:2b:0b:af:92:c5:89:97:39:85:ab:c0:b1:c2:96: 93:7e:4b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcf30wDrhh4vIiOgJ2983jRd0eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTEyMTgyMTQ3MTZaFw0yNTEyMjIwNjU2MTZaMDMxMTAvBgNV BAMTKEFDMjI3N0IwMEJBOUU0Q0I2NzJERURFRTQwMTIwQzkyMENGREIzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vItSBy/SscvkuAOucbnqZKnt KlZNKWU10mwi3rkVmwQGZi5JQLoU6QouTh9pcenA743QZt3axSvlp2I3gnTBdC2G /vHaqdCWzIKMjZWtSg1JrNFXwlVyRUrTXgJv6dSSHaRrt8YUtVPXfbkh2LWS+6Hy QZztCz1Q2Ki7ZJPJXOKU0XYwHY9tTbqPQCpP9hI7E6QzsVOdhDWffdO9lO/wXdym efLwYJKUxZY9kzCwlxgwvlJNYIr4XhDima9poBEw7C1EfAh+KcS8olsrOlM7/V6S T0ScPDk+6WeDhLAnIffMYQxZQ8lFb6caXCxz+kKQpDkkOC7U5zSeDjjsT+bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCJ3sAup5MtnLe3uQBIMkgz9swIwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKmLAOswFzAuDwT7nYE9uI6t/EGJxlg+mxl DEz6toczrq4XIHaZ16GbpHY/Ae/fiQSCTx48uhbNWNISBOrYBpaUZdguzlKNWQFE ISIL81x3ulGQb7zraZh55LxKJoveL4Zz2tNTgIsriIQsoYyqWdzJJMAAb+bq2RF8 7f4q9W5jGOsFFd8XbsuxtQU9OHRS7o/wfCE6iUlWIHl0jvbPB9z2965sm9pkTZ0b ZhUsEzLZ2tF4zV0w4cXClYgZBLauo1KS2BvIQZuv/YrBMFxRz1W6+vgoCFL/rEty hpg5k5cdx4yDys2KKUSOsyFe1IArC6+SxYmXOYWrwLHClpN+S8A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:46 2025 by rpki-client