This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: g9AQkCRmxZJRY4OUmHUfnO7CUkR2AEDy04/Rigl5ky8= Subject key identifier: 4F:C5:1D:F9:68:09:DB:29:14:CA:C7:51:28:F8:69:2A:37:0E:B7:8F Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 0BE86A468A21B62B30DCE40734A2669AAD0C018C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0199 Signing time: Sat 20 Dec 2025 05:52:03 +0000 Manifest this update: Sat 20 Dec 2025 05:47:03 +0000 Manifest next update: Tue 23 Dec 2025 16:46:03 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: YKrt7XFUZI2NAhjCAvldtaWELaVNfK9mkdW7Pv6cLfE=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:6a:46:8a:21:b6:2b:30:dc:e4:07:34:a2:66:9a:ad:0c:01:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Dec 20 05:47:03 2025 GMT Not After : Dec 23 16:46:03 2025 GMT Subject: CN=4FC51DF96809DB2914CAC75128F8692A370EB78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:b9:c7:f7:c4:e3:76:3a:06:2f:83:f8:78: 45:75:90:a4:c1:c3:a3:69:9a:30:6f:d6:e9:79:a0: e5:04:2c:b6:1e:f7:6b:19:fc:4f:e4:49:f8:79:cb: 98:cd:3f:71:18:c9:45:18:3d:34:cb:e5:56:f3:82: 07:73:d6:77:6b:07:8c:17:ad:b5:7f:e1:c2:62:c1: 36:41:a3:4c:21:cb:39:ad:9b:08:17:dd:33:8d:fa: a3:81:8d:0c:d9:a2:0a:c7:95:a4:42:d8:4e:f5:9f: 27:03:69:d1:0d:b8:4a:10:a4:de:37:f3:6a:e3:59: 27:7a:6e:c1:fc:6d:97:af:80:05:a4:c4:1d:8d:11: 8b:28:90:2d:cb:96:94:3a:af:ed:b4:22:b3:d8:87: 87:7f:b7:70:72:c4:94:ad:0a:24:bd:06:84:6d:f3: 2e:e4:8e:c5:b5:88:4f:10:8c:a4:1f:ed:a3:6e:e3: af:09:e9:bd:a5:1a:5c:34:b7:fa:f2:34:42:62:a7: 6d:6d:e6:f4:38:a0:e8:40:a6:a5:ed:6f:28:a9:c9: b8:70:16:bb:5a:e4:64:ec:d2:58:45:a6:44:07:f7: 6e:52:bf:3f:9a:d8:b8:d1:aa:c6:cb:cd:02:e8:71: 5e:b0:40:0c:0e:7c:03:45:cd:e5:7f:54:92:09:c3: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C5:1D:F9:68:09:DB:29:14:CA:C7:51:28:F8:69:2A:37:0E:B7:8F X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:9a:96:86:ae:11:bd:d9:41:00:99:8c:e0:99:48:11:74: b5:19:92:0a:7f:81:91:60:fd:1d:dc:b6:d2:a9:16:14:97:4c: 4e:52:09:b2:80:8e:f6:47:cd:9d:8f:5e:5b:d2:c7:4e:6f:f2: 0b:2a:d8:81:44:d9:dc:56:78:61:6c:a9:cc:ee:b9:c1:bc:ee: 93:04:4d:c7:f2:c4:71:ca:2c:74:58:77:a0:e6:8f:bb:61:27: 4f:51:56:c4:e2:7d:a5:6b:4b:0e:f6:4a:f4:c0:8e:15:3c:76: 5d:5a:0a:a7:82:4d:1c:69:8d:10:6b:0f:35:af:f2:b3:16:70: 62:95:27:2a:7a:ce:2e:8d:6f:5c:2a:03:20:1a:71:ea:2d:ed: a3:74:47:60:24:d2:37:2a:be:02:41:07:bf:39:51:54:81:2c: 2a:ba:ca:4a:44:1d:b7:a9:fd:60:40:09:09:4e:be:a8:75:ed: 9e:b9:e3:a6:1f:03:8f:8c:d2:b5:e6:ef:76:e3:e8:0b:c4:08: ca:12:6d:a3:86:d5:de:26:7b:89:1a:ee:b3:34:eb:8b:ed:45: b7:85:90:63:77:ec:c3:07:b3:52:79:23:c3:c3:f5:6b:89:c2: 54:39:b1:bc:0a:00:76:82:5d:ca:af:fb:1f:5d:05:d8:df:82: 70:bf:c5:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+hqRoohtisw3OQHNKJmmq0MAYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTEyMjAwNTQ3MDNaFw0yNTEyMjMxNjQ2MDNaMDMxMTAvBgNV BAMTKDRGQzUxREY5NjgwOURCMjkxNENBQzc1MTI4Rjg2OTJBMzcwRUI3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZLnH98TjdjoGL4P4eEV1kKTB w6NpmjBv1ul5oOUELLYe92sZ/E/kSfh5y5jNP3EYyUUYPTTL5Vbzggdz1ndrB4wX rbV/4cJiwTZBo0whyzmtmwgX3TON+qOBjQzZogrHlaRC2E71nycDadENuEoQpN43 82rjWSd6bsH8bZevgAWkxB2NEYsokC3LlpQ6r+20IrPYh4d/t3ByxJStCiS9BoRt 8y7kjsW1iE8QjKQf7aNu468J6b2lGlw0t/ryNEJip21t5vQ4oOhApqXtbyipybhw Frta5GTs0lhFpkQH925Svz+a2LjRqsbLzQLocV6wQAwOfANFzeV/VJIJw9uFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8Ud+WgJ2ykUysdRKPhpKjcOt48wHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImempaGrhG92UEAmYzgmUgRdLUZkgp/gZFg /R3cttKpFhSXTE5SCbKAjvZHzZ2PXlvSx05v8gsq2IFE2dxWeGFsqczuucG87pME TcfyxHHKLHRYd6Dmj7thJ09RVsTifaVrSw72SvTAjhU8dl1aCqeCTRxpjRBrDzWv 8rMWcGKVJyp6zi6Nb1wqAyAaceot7aN0R2Ak0jcqvgJBB785UVSBLCq6ykpEHbep /WBACQlOvqh17Z6546YfA4+M0rXm73bj6AvECMoSbaOG1d4me4ka7rM064vtRbeF kGN37MMHs1J5I8PD9WuJwlQ5sbwKAHaCXcqv+x9dBdjfgnC/xdA= -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:28 2025 by rpki-client