This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: U0qo47pUU8JmlPYt65aiS7LbTE5Y/HF/PNjAIpBWWHo= Subject key identifier: A6:BC:D7:74:D9:80:D1:9A:47:4F:DF:E9:5F:1B:20:40:1C:F9:6B:2A Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 23C29BBDD27617753FF81007A2C87BE4D27250A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03AB Signing time: Mon 22 Dec 2025 14:12:08 +0000 Manifest this update: Mon 22 Dec 2025 14:07:08 +0000 Manifest next update: Fri 26 Dec 2025 00:11:08 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: p7/tLElLV7liCucYxqzG6HK8tKnP2PgF5U9wvLmR6do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c2:9b:bd:d2:76:17:75:3f:f8:10:07:a2:c8:7b:e4:d2:72:50:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Dec 22 14:07:08 2025 GMT Not After : Dec 26 00:11:08 2025 GMT Subject: CN=A6BCD774D980D19A474FDFE95F1B20401CF96B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:0d:92:ce:d9:3f:8c:41:4e:90:91:39:fa: 4c:77:84:f4:2c:fe:d1:d1:1c:d0:ef:04:eb:41:7f: 5a:5c:20:d4:04:d9:be:d6:43:6f:58:c5:e7:82:dd: 78:10:b6:4c:89:19:0d:44:b6:1e:a3:90:ce:9b:44: 4b:98:1c:61:f3:fa:cf:78:c6:36:51:68:b0:4c:7f: 55:d6:d6:74:25:4c:5b:44:3b:3d:20:da:04:97:1d: dd:bd:5d:a3:f5:8a:d8:e0:3b:cf:1c:b4:5c:02:b7: 7e:08:dd:e4:8f:b0:1b:f7:1b:39:39:0e:49:1c:df: c1:61:20:4c:b5:39:ee:ce:1f:90:92:7b:cb:2a:2f: fc:1a:c4:ef:66:28:43:d4:33:5f:5d:d6:48:fb:00: a7:7e:fe:9c:8f:ff:21:9a:94:27:cb:31:95:53:11: 90:e1:af:a4:ba:06:cf:33:11:d3:ea:9d:66:c3:2f: 5c:19:e3:79:1c:5b:67:56:66:ef:7f:98:3e:64:46: 75:cc:2c:4e:0e:61:18:8c:0f:4b:e1:35:f7:ee:8a: 36:cc:4b:c8:8b:93:51:65:70:7a:85:0e:aa:9f:10: c8:45:06:1a:3c:eb:c0:5f:45:56:36:a6:73:1e:61: 20:00:63:55:14:ba:00:32:7a:ae:27:f5:11:30:74: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:D7:74:D9:80:D1:9A:47:4F:DF:E9:5F:1B:20:40:1C:F9:6B:2A X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ff:10:da:ae:01:42:aa:e2:8c:0f:0b:80:a3:b8:c8:36:3b: 1a:1c:74:82:30:2a:fc:a3:23:81:bc:37:04:31:6a:43:6b:20: b1:b7:b8:8f:34:2f:90:46:fe:42:51:db:05:c7:52:90:a5:8a: aa:66:00:81:68:b7:aa:7d:d5:98:64:09:93:c5:26:b5:3e:73: 14:0d:50:a0:88:1d:17:f3:56:cd:a0:bc:b7:55:c9:52:bb:f1: d5:44:de:c9:c4:78:d6:62:2c:33:ce:dd:d9:2e:c3:15:bc:f3: 2e:e8:36:71:7e:47:52:af:fc:5d:b0:11:79:cc:63:79:d4:8c: 38:ca:78:14:92:a0:6f:fa:12:f9:bb:64:98:a7:8b:3b:b3:60: 68:9a:68:bc:6a:bd:3d:01:af:dd:ac:74:59:61:dd:99:72:ad: 2f:e3:a5:84:e4:29:0c:51:24:96:fb:61:59:87:2b:e2:15:f7: 17:97:97:8d:31:b0:8b:41:81:76:cf:2f:9b:04:dc:0b:43:7e: b4:da:54:e9:6d:47:a5:6e:5b:52:8e:d8:e0:9a:0c:e1:64:b4: b7:b7:d8:38:30:e8:aa:a3:2f:d6:27:88:34:a5:f3:5b:55:85: 9e:a6:95:39:44:2b:24:00:5f:e4:7b:8d:bc:7d:24:6b:91:b1: 01:0d:cd:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8KbvdJ2F3U/+BAHosh75NJyUKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTEyMjIxNDA3MDhaFw0yNTEyMjYwMDExMDhaMDMxMTAvBgNV BAMTKEE2QkNENzc0RDk4MEQxOUE0NzRGREZFOTVGMUIyMDQwMUNGOTZCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDQ2Sztk/jEFOkJE5+kx3hPQs /tHRHNDvBOtBf1pcINQE2b7WQ29YxeeC3XgQtkyJGQ1Eth6jkM6bREuYHGHz+s94 xjZRaLBMf1XW1nQlTFtEOz0g2gSXHd29XaP1itjgO88ctFwCt34I3eSPsBv3Gzk5 Dkkc38FhIEy1Oe7OH5CSe8sqL/waxO9mKEPUM19d1kj7AKd+/pyP/yGalCfLMZVT EZDhr6S6Bs8zEdPqnWbDL1wZ43kcW2dWZu9/mD5kRnXMLE4OYRiMD0vhNffuijbM S8iLk1FlcHqFDqqfEMhFBho868BfRVY2pnMeYSAAY1UUugAyeq4n9REwdGMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprzXdNmA0ZpHT9/pXxsgQBz5ayowHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB//ENquAUKq4owPC4CjuMg2OxocdIIwKvyj I4G8NwQxakNrILG3uI80L5BG/kJR2wXHUpCliqpmAIFot6p91ZhkCZPFJrU+cxQN UKCIHRfzVs2gvLdVyVK78dVE3snEeNZiLDPO3dkuwxW88y7oNnF+R1Kv/F2wEXnM Y3nUjDjKeBSSoG/6Evm7ZJinizuzYGiaaLxqvT0Br92sdFlh3ZlyrS/jpYTkKQxR JJb7YVmHK+IV9xeXl40xsItBgXbPL5sE3AtDfrTaVOltR6VuW1KO2OCaDOFktLe3 2Dgw6KqjL9YniDSl81tVhZ6mlTlEKyQAX+R7jbx9JGuRsQENzVU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:26 2025 by rpki-client