This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: x06N3G7qsAziU3BypmlAiOx8R5DYsZC09xIda7wfyP8= Subject key identifier: FE:D9:63:DF:7B:52:55:51:E4:E2:BA:57:C1:42:48:1A:E2:14:B9:1F Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 3F877B86F440B753992045A860CE27C26BDFD5E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 02AF Signing time: Fri 19 Dec 2025 04:52:04 +0000 Manifest this update: Fri 19 Dec 2025 04:47:04 +0000 Manifest next update: Mon 22 Dec 2025 13:08:04 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8=) 2: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: AE+ZCCTzgO3Qmcw5jGJa+lE6wP4sJuNRg5uv/IYmN8c=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: GwLSbTnQeuh0a53ovkV2iGQ8IVBTUAVLDO4WWZFmNyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:87:7b:86:f4:40:b7:53:99:20:45:a8:60:ce:27:c2:6b:df:d5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Dec 19 04:47:04 2025 GMT Not After : Dec 22 13:08:04 2025 GMT Subject: CN=FED963DF7B525551E4E2BA57C142481AE214B91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:bc:7d:04:41:ec:76:8a:b8:35:09:47:5b: 5f:3d:69:83:41:d9:6e:6b:14:1e:8d:e6:24:f1:06: 9c:4f:7c:81:5c:30:f3:ad:c7:19:3f:82:f5:ef:02: 54:ae:83:15:3f:06:b7:cd:33:5c:5d:a9:b7:6b:80: 0f:dd:3c:a6:73:83:db:d1:e1:3d:53:3e:a1:28:86: 59:ab:71:9d:77:00:22:0a:f0:3b:29:31:f6:a3:61: 13:e0:23:9e:d2:5d:0c:b0:c0:85:14:aa:f7:53:2a: a1:8a:a1:1f:ab:71:08:04:3e:c4:b0:07:76:9b:22: 21:2a:ae:59:41:c5:c4:00:f5:20:38:44:1c:93:d5: 6e:85:2f:dd:52:e9:36:16:33:49:55:10:cb:66:ab: b7:6a:4a:1d:5d:59:ce:68:0f:5e:02:5f:89:3e:cd: 61:53:a1:73:99:82:95:e2:dd:18:9f:dc:67:01:ea: 6a:85:ad:36:1c:e4:42:6d:88:4e:c2:86:9c:c1:b2: 38:ef:2c:38:6e:81:13:99:60:57:d1:f0:83:78:35: b9:81:85:d3:d9:b5:69:7f:17:0a:68:01:da:72:6b: c6:a9:7d:f4:41:fd:a9:75:be:86:25:5d:a7:78:9c: 83:41:87:fa:45:ee:a6:3d:64:a6:7b:1c:83:65:1f: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D9:63:DF:7B:52:55:51:E4:E2:BA:57:C1:42:48:1A:E2:14:B9:1F X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:69:0a:4c:a9:11:bc:20:e4:93:e0:38:cd:e8:0f:8e:29:b6: f6:1f:16:77:5c:c2:a9:fe:39:4c:96:60:02:b1:f3:52:66:e7: f8:38:e8:9c:85:8a:6e:53:70:4c:d6:20:18:be:4b:e0:62:9a: e6:36:4b:13:cd:4f:5f:19:03:1a:3a:07:d9:91:d7:be:2c:ed: 15:4e:a3:62:ce:76:6b:6c:f8:9d:e1:bb:cd:f4:76:31:dc:2e: bb:73:be:29:04:ce:fb:a7:2f:1f:b2:9d:18:40:77:af:8a:8d: 9d:2e:f8:a6:db:93:4a:9c:3d:ae:ba:c2:51:38:d3:25:0a:68: 16:b2:55:98:9c:76:de:e1:5b:bc:73:40:3a:b8:76:be:fe:50: ed:fc:08:6c:be:a1:a2:b4:83:a7:fa:1f:52:94:4d:e0:e2:ac: 7d:2a:64:0c:61:32:bd:f4:2e:ef:80:b9:11:44:d1:b5:0d:b7: 90:c5:ea:13:32:2b:f5:7c:2b:aa:bd:79:63:02:25:78:11:a0: af:3c:63:d1:47:47:aa:93:c4:2e:00:d7:db:ac:5d:21:73:cb: 25:b1:a7:b1:f8:af:24:5b:fd:92:d7:f5:bd:55:73:3e:04:1d: f3:8b:af:8f:58:41:e1:fa:43:af:03:32:36:a3:e1:fa:a5:fe: 4c:a8:96:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4d7hvRAt1OZIEWoYM4nwmvf1egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTEyMTkwNDQ3MDRaFw0yNTEyMjIxMzA4MDRaMDMxMTAvBgNV BAMTKEZFRDk2M0RGN0I1MjU1NTFFNEUyQkE1N0MxNDI0ODFBRTIxNEI5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsLx9BEHsdoq4NQlHW189aYNB 2W5rFB6N5iTxBpxPfIFcMPOtxxk/gvXvAlSugxU/BrfNM1xdqbdrgA/dPKZzg9vR 4T1TPqEohlmrcZ13ACIK8DspMfajYRPgI57SXQywwIUUqvdTKqGKoR+rcQgEPsSw B3abIiEqrllBxcQA9SA4RByT1W6FL91S6TYWM0lVEMtmq7dqSh1dWc5oD14CX4k+ zWFToXOZgpXi3Rif3GcB6mqFrTYc5EJtiE7ChpzBsjjvLDhugROZYFfR8IN4NbmB hdPZtWl/FwpoAdpya8apffRB/al1voYlXad4nINBh/pF7qY9ZKZ7HINlH1MBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tlj33tSVVHk4rpXwUJIGuIUuR8wHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZpCkypEbwg5JPgOM3oD44ptvYfFndcwqn+ OUyWYAKx81Jm5/g46JyFim5TcEzWIBi+S+BimuY2SxPNT18ZAxo6B9mR174s7RVO o2LOdmts+J3hu830djHcLrtzvikEzvunLx+ynRhAd6+KjZ0u+Kbbk0qcPa66wlE4 0yUKaBayVZicdt7hW7xzQDq4dr7+UO38CGy+oaK0g6f6H1KUTeDirH0qZAxhMr30 Lu+AuRFE0bUNt5DF6hMyK/V8K6q9eWMCJXgRoK88Y9FHR6qTxC4A19usXSFzyyWx p7H4ryRb/ZLX9b1Vcz4EHfOLr49YQeH6Q68DMjaj4fql/kyolig= -----END CERTIFICATE-----Generated at Sun Dec 21 14:40:51 2025 by rpki-client