This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: lHCMK3sX/bHLDUqOvhpANUmEKVwSKNr5Ci6BWfmvyN4= Subject key identifier: EA:C9:3A:AA:F3:8D:36:6E:D7:74:01:4A:80:90:EF:8D:F3:3D:59:6A Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 0C9E8F7B1F8798EE756CD606BDAE19126AB68A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 01E5 Signing time: Tue 16 Dec 2025 15:11:35 +0000 Manifest this update: Tue 16 Dec 2025 15:06:35 +0000 Manifest next update: Sat 20 Dec 2025 03:01:35 +0000 Files and hashes: 1: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: kQaBHWFZ09LwTrNpnEcdDDYi9aXzLqVrrUv/bLTySVg=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (hash: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20323135373237.roa (hash: 47jeZDZVGJz340J8dcsKd8JOrcaXh6l0x1iSQEe4P38=) 5: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: lKN215wBgs+5GXrw89N0mIzHqVwBYAA/bB6imva6oEw=) 6: 3130332e3131322e3134342e302f32342d3234203d3e20323135373237.roa (hash: gknzJmwMhuMcq+HlLpGDVUWG9agAsyWXJWE8G4S01cU=) 7: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: l8Og1lwkQAH4gQfk3H3firj2CW23m1CTXYf/zpu+3Ek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9e:8f:7b:1f:87:98:ee:75:6c:d6:06:bd:ae:19:12:6a:b6:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Dec 16 15:06:35 2025 GMT Not After : Dec 20 03:01:35 2025 GMT Subject: CN=EAC93AAAF38D366ED774014A8090EF8DF33D596A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:e2:b4:44:a0:70:12:8c:a8:bd:d3:35:ba: 98:4d:80:4e:09:36:18:5e:e4:e1:37:c4:0a:38:7b: 92:fd:18:45:d6:b1:83:d0:9a:70:ed:3d:02:63:ff: 70:17:e1:53:dd:d2:32:7f:b1:76:ee:f7:31:6e:ec: 7f:d7:fa:ff:60:51:f2:bc:46:39:bb:24:55:0b:98: 87:0b:83:9e:50:0f:27:ff:59:83:4f:e1:eb:34:fe: 3f:2a:d4:b0:b9:82:09:75:35:36:9c:80:cd:12:a7: 65:dc:c7:d7:27:99:d0:6e:56:85:7d:76:e6:48:8d: 0d:b7:87:ea:7a:39:ff:ff:91:fa:96:cc:20:cc:bb: fd:32:aa:51:64:6d:83:0a:6e:4a:12:4e:d9:f2:33: 78:9e:b0:b3:03:3d:38:09:90:88:4d:88:71:05:ab: 10:9d:58:35:79:5d:b5:f4:6e:f5:15:3a:ff:a7:b3: 67:25:5e:4a:04:b8:f4:1a:a8:48:c8:cd:46:33:91: 06:1c:c4:92:24:39:0c:1e:c0:47:51:f1:f7:45:af: e0:b9:04:dc:e2:41:65:84:66:66:f6:02:7f:b8:f5: 93:2d:1b:e3:fe:20:82:07:24:62:5d:0d:51:b9:6e: f8:cb:27:92:ce:f8:a9:23:bc:02:2a:30:94:2a:27: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:3A:AA:F3:8D:36:6E:D7:74:01:4A:80:90:EF:8D:F3:3D:59:6A X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:2a:4b:a5:b0:88:5c:b3:da:ce:24:8c:66:88:80:4a:23: 73:28:41:79:68:98:d7:91:37:fa:96:b5:b2:04:a6:00:9b:36: 77:41:30:5e:46:e4:11:e1:16:eb:07:aa:11:bb:08:21:bd:d6: fe:c3:de:a8:6b:14:a7:93:01:ea:e8:f0:0f:a5:80:72:b3:12: 35:05:43:11:5e:b2:df:11:9c:a0:98:bb:dd:ed:ba:12:21:10: 0c:0f:16:41:8f:47:36:7a:07:49:a6:c1:c6:7c:c2:0b:b9:cb: 7f:48:57:ea:ac:45:2d:3b:d6:48:76:8e:b6:76:6f:0d:48:76: 50:4e:f4:6e:6e:05:5c:77:29:81:15:6e:3f:a3:56:e1:07:22: 55:e2:64:5d:1d:cf:52:3c:d3:ee:9c:db:03:c5:6a:04:bd:70: 3a:01:62:3d:6c:84:09:35:58:92:77:a5:ad:91:b5:6a:31:46: 48:13:02:67:af:e5:65:1d:c0:52:ff:27:e7:4b:75:9c:23:e7: e8:14:09:05:88:db:da:8d:8a:ea:03:3f:f7:ba:fc:25:2a:98: 99:52:ea:b6:9e:95:2f:01:b3:1f:c8:d3:9c:ec:78:0a:70:f1: 3b:1c:a8:12:fd:ed:28:03:62:f5:28:69:f2:4c:2a:37:71:83: cd:fe:ef:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJ6Pex+HmO51bNYGva4ZEmq2ihIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTEyMTYxNTA2MzVaFw0yNTEyMjAwMzAxMzVaMDMxMTAvBgNV BAMTKEVBQzkzQUFBRjM4RDM2NkVENzc0MDE0QTgwOTBFRjhERjMzRDU5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUuK0RKBwEoyovdM1uphNgE4J Nhhe5OE3xAo4e5L9GEXWsYPQmnDtPQJj/3AX4VPd0jJ/sXbu9zFu7H/X+v9gUfK8 Rjm7JFULmIcLg55QDyf/WYNP4es0/j8q1LC5ggl1NTacgM0Sp2Xcx9cnmdBuVoV9 duZIjQ23h+p6Of//kfqWzCDMu/0yqlFkbYMKbkoSTtnyM3iesLMDPTgJkIhNiHEF qxCdWDV5XbX0bvUVOv+ns2clXkoEuPQaqEjIzUYzkQYcxJIkOQwewEdR8fdFr+C5 BNziQWWEZmb2An+49ZMtG+P+IIIHJGJdDVG5bvjLJ5LO+KkjvAIqMJQqJ787AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sk6qvONNm7XdAFKgJDvjfM9WWowHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExtKkulsIhcs9rOJIxmiIBKI3MoQXlomNeR N/qWtbIEpgCbNndBMF5G5BHhFusHqhG7CCG91v7D3qhrFKeTAero8A+lgHKzEjUF QxFest8RnKCYu93tuhIhEAwPFkGPRzZ6B0mmwcZ8wgu5y39IV+qsRS071kh2jrZ2 bw1IdlBO9G5uBVx3KYEVbj+jVuEHIlXiZF0dz1I80+6c2wPFagS9cDoBYj1shAk1 WJJ3pa2RtWoxRkgTAmev5WUdwFL/J+dLdZwj5+gUCQWI29qNiuoDP/e6/CUqmJlS 6raelS8Bsx/I05zseApw8TscqBL97SgDYvUoafJMKjdxg83+760= -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:47 2025 by rpki-client