This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: Ln9/g1tZVUzPHgtub3FrMvCiDJdUAdwDpXQpg/3c3QM= Subject key identifier: 75:A2:34:EE:2D:F5:90:D0:ED:01:FB:CD:CC:FA:C4:36:C0:4D:82:58 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 0F0D76A733871BCABECA0AD4CA5ECF9B2D084805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01FE Signing time: Thu 18 Dec 2025 10:02:29 +0000 Manifest this update: Thu 18 Dec 2025 09:57:29 +0000 Manifest next update: Sun 21 Dec 2025 17:54:29 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) 3: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: BPSFCf7JpygFS9QqjoJDFCYP4rMRhEh1gsKQjjKTX60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0d:76:a7:33:87:1b:ca:be:ca:0a:d4:ca:5e:cf:9b:2d:08:48:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Dec 18 09:57:29 2025 GMT Not After : Dec 21 17:54:29 2025 GMT Subject: CN=75A234EE2DF590D0ED01FBCDCCFAC436C04D8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:24:9c:65:12:f3:7b:9d:d4:cd:4a:c4:0e: 09:b6:d9:ca:8d:00:2b:75:93:a1:d4:6a:ff:8c:cb: 9c:5a:93:a0:97:f1:5f:65:f7:22:82:e7:5c:8b:92: 7f:54:76:71:85:8b:da:eb:26:af:2b:7d:47:ba:22: 21:e4:7a:71:13:3c:0b:88:5a:9f:58:97:d7:32:75: 71:df:62:a0:42:17:7c:85:71:eb:b9:02:56:f3:bb: 13:53:08:52:dd:78:f1:d6:c1:23:9c:66:cc:b8:5d: 59:8a:38:62:5a:87:f3:2d:6a:ff:44:54:c3:de:a0: ca:87:31:c7:72:5a:54:3d:8f:c6:f5:c1:68:91:26: 5b:c7:7e:04:db:c3:d3:b2:a0:ab:b7:b5:ff:ba:45: 94:9f:06:71:76:b5:7e:51:06:31:bb:09:71:66:cc: 89:d1:36:74:b3:0d:5b:da:5c:28:c7:a7:11:3c:32: 19:dc:30:a3:03:e2:0a:18:cc:69:e3:51:d0:5b:f8: cc:5d:64:19:60:f1:49:2b:69:23:c2:11:61:f3:c1: d7:b3:9a:4f:f3:df:06:f6:1f:8b:52:24:e3:10:55: ab:da:5c:e4:5c:b5:7a:aa:36:51:e2:8e:c9:00:cc: cc:5f:09:e5:4f:99:0d:a1:84:fd:d0:a7:d0:46:fd: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A2:34:EE:2D:F5:90:D0:ED:01:FB:CD:CC:FA:C4:36:C0:4D:82:58 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4f:3c:ec:2b:b6:29:31:31:97:71:f4:1a:04:27:5c:9a:6c: 20:7e:88:7e:f9:59:15:07:99:c1:70:7f:70:e2:97:37:86:c6: e8:75:91:37:13:47:74:e5:2c:72:82:bd:6d:3d:ce:d2:28:96: e9:25:b8:9d:0a:a9:bd:e0:cc:47:4b:9a:5e:71:bf:ad:c9:46: 7c:b9:a5:e4:19:78:e0:e6:c4:44:dc:1f:96:7e:25:5a:94:48: ff:f7:7e:12:51:c1:61:39:71:c6:65:1b:82:e4:1f:73:1a:9b: 90:9f:64:25:06:cd:50:1e:34:57:48:34:f7:5b:2d:36:79:be: 1f:8e:ba:63:3f:1c:42:ad:a3:e1:28:1d:40:05:5b:4e:74:1c: 9c:48:73:8c:6e:97:99:00:eb:03:2e:db:82:7a:c2:28:d7:8f: bd:8c:22:00:90:46:97:75:97:35:78:a9:d4:af:e0:8d:b6:a2: c0:17:a9:07:3d:68:09:ad:e7:19:ba:7f:42:f8:ee:57:32:a8: 5b:25:b9:0f:e8:12:e0:b5:8c:4d:cb:d1:6b:ec:d8:65:f8:01: bf:c6:a9:c2:e0:04:56:18:90:e5:59:7f:b2:ba:48:7f:32:ec: ef:f2:a7:f6:84:05:06:a6:f5:e9:2c:da:0d:c6:76:43:72:3a: d6:8f:24:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDw12pzOHG8q+ygrUyl7Pmy0ISAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTEyMTgwOTU3MjlaFw0yNTEyMjExNzU0MjlaMDMxMTAvBgNV BAMTKDc1QTIzNEVFMkRGNTkwRDBFRDAxRkJDRENDRkFDNDM2QzA0RDgyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavCScZRLze53UzUrEDgm22cqN ACt1k6HUav+My5xak6CX8V9l9yKC51yLkn9UdnGFi9rrJq8rfUe6IiHkenETPAuI Wp9Yl9cydXHfYqBCF3yFceu5AlbzuxNTCFLdePHWwSOcZsy4XVmKOGJah/Mtav9E VMPeoMqHMcdyWlQ9j8b1wWiRJlvHfgTbw9OyoKu3tf+6RZSfBnF2tX5RBjG7CXFm zInRNnSzDVvaXCjHpxE8MhncMKMD4goYzGnjUdBb+MxdZBlg8UkraSPCEWHzwdez mk/z3wb2H4tSJOMQVavaXORctXqqNlHijskAzMxfCeVPmQ2hhP3Qp9BG/RnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaI07i31kNDtAfvNzPrENsBNglgwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5PPOwrtikxMZdx9BoEJ1yabCB+iH75WRUH mcFwf3DilzeGxuh1kTcTR3TlLHKCvW09ztIolukluJ0Kqb3gzEdLml5xv63JRny5 peQZeODmxETcH5Z+JVqUSP/3fhJRwWE5ccZlG4LkH3Mam5CfZCUGzVAeNFdINPdb LTZ5vh+OumM/HEKto+EoHUAFW050HJxIc4xul5kA6wMu24J6wijXj72MIgCQRpd1 lzV4qdSv4I22osAXqQc9aAmt5xm6f0L47lcyqFsluQ/oEuC1jE3L0Wvs2GX4Ab/G qcLgBFYYkOVZf7K6SH8y7O/yp/aEBQam9eks2g3GdkNyOtaPJJI= -----END CERTIFICATE-----Generated at Sat Dec 20 11:24:20 2025 by rpki-client