This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: xMMp/G65jnwHQWz7C6dTrWUywItFdgcPkNjV1O2bv0U= Subject key identifier: 85:A7:7A:E4:1C:F1:CD:E7:56:9E:1A:BC:FF:10:AD:3A:48:82:CE:BC Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 6EFE3C8BF73B9D10EE9412DFC94F15F8231C097B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: EE Signing time: Tue 23 Dec 2025 18:51:03 +0000 Manifest this update: Tue 23 Dec 2025 18:46:03 +0000 Manifest next update: Fri 26 Dec 2025 23:10:03 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: O+RLcFMnzk5Tx7BJPPbA7fnGAPBzbCe1TTKmbN1TRtc=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fe:3c:8b:f7:3b:9d:10:ee:94:12:df:c9:4f:15:f8:23:1c:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Dec 23 18:46:03 2025 GMT Not After : Dec 26 23:10:03 2025 GMT Subject: CN=85A77AE41CF1CDE7569E1ABCFF10AD3A4882CEBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:4b:73:b0:76:6b:76:a0:3b:1d:c3:5a:17: 74:5f:29:35:79:3e:83:50:12:6f:7a:f8:86:bd:4c: 17:e1:c4:07:1d:a3:b2:fd:38:9c:66:05:41:24:46: 47:ce:b3:ab:2e:ee:d3:c2:6c:ac:1f:48:f7:13:49: 1b:4d:55:7a:5e:8c:a6:cf:63:ab:15:20:35:32:bd: bf:a5:fa:33:a9:77:21:cd:6f:62:ac:b5:14:3d:9f: 20:e3:ad:ea:08:2f:ab:24:20:04:cb:14:45:ac:aa: ec:f3:ca:3c:95:99:22:88:ea:6b:8c:82:92:0b:a4: 75:3d:a7:27:81:e0:b4:5e:d8:0e:37:34:3d:89:ed: e5:34:2d:9b:9c:29:bb:f4:e3:87:c3:ea:30:31:12: a9:0a:45:d7:b1:da:03:07:24:c9:2f:85:17:18:f4: e2:21:24:44:50:5d:8f:13:87:7a:e7:a0:00:6d:bf: a2:ba:ea:d3:58:52:fe:8d:62:96:68:e3:dd:d4:e2: e3:9e:e5:6d:97:82:db:2e:b9:4d:72:73:7c:1a:f5: 83:f5:5c:0f:c4:de:9b:dd:22:a3:a3:68:6d:2a:82: 04:8c:e3:a8:d3:0b:c1:cd:97:5e:1f:d2:af:83:d3: fa:86:e6:70:58:8e:21:99:4a:5d:af:85:7e:d1:8a: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A7:7A:E4:1C:F1:CD:E7:56:9E:1A:BC:FF:10:AD:3A:48:82:CE:BC X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:04:1f:82:67:b6:3f:ce:23:d2:3b:be:f9:f7:40:d8:36:0e: 8c:ec:a8:3e:1a:2b:a5:e2:47:2e:b4:41:b8:cc:b0:5e:3d:9c: e9:65:77:94:f9:49:69:bd:3c:04:ed:bd:c6:10:41:a0:34:0f: f7:f6:40:d4:ad:61:41:d5:f4:82:d4:bb:9a:75:ba:43:8e:05: 84:c6:f3:a0:5a:b5:2b:2c:7f:bf:5b:0b:f3:08:ac:74:56:35: 49:1e:5a:40:dc:79:e4:ce:9c:3f:34:49:a6:39:40:5e:7c:4d: 95:ed:dc:87:62:bd:38:e8:74:dd:9d:27:1b:02:fe:be:b2:2b: d4:95:2e:2d:5b:cc:22:6e:de:d5:2c:0f:31:6d:f6:32:5e:e1: 82:ce:2b:08:39:1a:9e:87:ba:d7:5b:11:29:56:82:68:07:b7: d3:2e:0b:ed:91:ff:e5:25:6a:fb:40:e2:c1:7f:61:02:48:e3: 37:a2:63:33:32:a8:f4:14:de:91:3b:99:c0:00:40:8e:de:2f: e7:e3:e2:27:09:08:75:d9:5b:2e:f6:1a:bb:c5:23:39:d6:1d: f1:8e:a9:95:dc:05:50:9e:80:a8:4f:ab:b3:78:c6:81:88:9d: 02:41:c6:79:fd:20:cc:5b:dc:ef:68:a0:28:b6:0b:db:56:ec: 9d:d7:c9:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbv48i/c7nRDulBLfyU8V+CMcCXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTEyMjMxODQ2MDNaFw0yNTEyMjYyMzEwMDNaMDMxMTAvBgNV BAMTKDg1QTc3QUU0MUNGMUNERTc1NjlFMUFCQ0ZGMTBBRDNBNDg4MkNFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkktzsHZrdqA7HcNaF3RfKTV5 PoNQEm96+Ia9TBfhxAcdo7L9OJxmBUEkRkfOs6su7tPCbKwfSPcTSRtNVXpejKbP Y6sVIDUyvb+l+jOpdyHNb2KstRQ9nyDjreoIL6skIATLFEWsquzzyjyVmSKI6muM gpILpHU9pyeB4LRe2A43ND2J7eU0LZucKbv044fD6jAxEqkKRdex2gMHJMkvhRcY 9OIhJERQXY8Th3rnoABtv6K66tNYUv6NYpZo493U4uOe5W2XgtsuuU1yc3wa9YP1 XA/E3pvdIqOjaG0qggSM46jTC8HNl14f0q+D0/qG5nBYjiGZSl2vhX7RihzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhad65BzxzedWnhq8/xCtOkiCzrwwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIEH4Jntj/OI9I7vvn3QNg2DozsqD4aK6Xi Ry60QbjMsF49nOlld5T5SWm9PATtvcYQQaA0D/f2QNStYUHV9ILUu5p1ukOOBYTG 86BatSssf79bC/MIrHRWNUkeWkDceeTOnD80SaY5QF58TZXt3IdivTjodN2dJxsC /r6yK9SVLi1bzCJu3tUsDzFt9jJe4YLOKwg5Gp6HutdbESlWgmgHt9MuC+2R/+Ul avtA4sF/YQJI4zeiYzMyqPQU3pE7mcAAQI7eL+fj4icJCHXZWy72GrvFIznWHfGO qZXcBVCegKhPq7N4xoGInQJBxnn9IMxb3O9ooCi2C9tW7J3XyeI= -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:33 2025 by rpki-client