This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft File: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft (raw, json) Hash identifier: K+64Gw9piMhBP6isx8nywf+bAXPvzdIEM4E4tuU7i38= Subject key identifier: C0:6F:78:9A:EC:AF:7A:4A:E4:1F:3B:71:EB:FA:6D:46:5F:1E:83:E8 Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Certificate serial: 5CB749224681F240FF386EB0DBBEB884C648A2F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft Manifest number: AD Signing time: Sat 20 Dec 2025 11:02:04 +0000 Manifest this update: Sat 20 Dec 2025 10:57:04 +0000 Manifest next update: Tue 23 Dec 2025 17:38:04 +0000 Files and hashes: 1: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (hash: zf1MaGLqV/tw8WvNNhputR/GL/ayDucvUD33jfoZSO8=) 2: 3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (hash: wkYiZl4OD2/WIQUb3uhI0STi5SwbOPkvcCiktl/4DZc=) 3: 92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl (hash: zttuTrm27+3ke3mQwPoAc8tA74w3V67G6UfPthrv3bk=) 4: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (hash: xK1cySsZG++2I6rCYVHEbww86m1izKvQx6hrvB42kz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b7:49:22:46:81:f2:40:ff:38:6e:b0:db:be:b8:84:c6:48:a2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Validity Not Before: Dec 20 10:57:04 2025 GMT Not After : Dec 23 17:38:04 2025 GMT Subject: CN=C06F789AECAF7A4AE41F3B71EBFA6D465F1E83E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:fb:6e:a0:6b:d7:76:31:c7:ed:43:9d:15: 2c:fa:d1:7e:72:ef:30:2f:b2:8f:e6:b7:dc:30:f1: 9a:02:a3:f8:96:71:02:f0:e7:79:b0:be:52:2f:0a: 53:9f:fe:ec:24:67:61:f0:aa:2c:4a:ad:d1:02:20: 4c:76:1c:fd:70:5f:da:0d:db:ff:e0:e5:87:b0:d9: b5:43:25:a1:77:3c:db:2a:9b:15:80:c7:1c:26:e1: 58:56:90:71:03:ac:c5:99:d4:e9:30:50:99:8c:0e: bf:19:22:80:be:e5:be:68:60:f0:fa:c3:e7:7a:aa: 82:54:9b:31:52:f9:b6:0c:d0:5a:7a:d9:cf:f3:52: 1c:d1:04:b8:fa:55:0e:ce:fe:78:ce:fc:2c:bc:fc: ad:65:2a:fa:ad:20:d9:c2:12:7c:45:74:9e:df:b3: 76:55:dd:b1:86:b4:ac:cc:ee:bf:96:f6:64:9f:59: c7:2b:c7:37:c4:5c:1d:44:aa:df:cd:e4:3c:b5:49: fa:0c:f1:b5:66:fd:70:64:50:4e:05:07:6a:7f:6d: fd:70:29:aa:4b:37:c6:b7:96:58:1e:b4:96:9d:1c: 0f:34:b9:da:e7:6b:3e:27:54:3e:cd:f8:66:d5:e5: 94:57:74:39:61:e5:3f:d9:91:58:61:49:c9:0a:2f: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6F:78:9A:EC:AF:7A:4A:E4:1F:3B:71:EB:FA:6D:46:5F:1E:83:E8 X509v3 Authority Key Identifier: keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4c:44:72:bc:9d:ec:8e:bb:95:b7:3a:25:d1:89:aa:01:11: 0d:72:17:a6:f8:dd:13:6c:1b:3e:e0:d1:01:ad:89:08:46:b0: 57:be:e3:0e:93:c8:dc:19:5e:01:b5:35:5c:c3:39:53:b1:60: c8:1f:f4:71:38:fa:0a:e1:00:f5:14:fc:74:45:64:d4:6b:1c: c2:ea:6b:77:ca:87:1d:34:81:2b:55:7d:59:cc:f4:ec:87:af: 3f:bb:ee:ea:00:d7:f6:78:63:2c:70:39:4d:7e:f3:12:3a:97: 0d:71:a9:29:8a:4e:62:72:68:f3:57:5f:99:82:a2:d7:c6:6d: 45:c0:19:a8:7d:d3:8a:c8:7d:f2:41:10:bb:c4:5a:19:cd:38: 40:a0:fe:37:37:8a:d1:33:08:76:ee:fb:98:8a:32:c8:82:a9: 42:22:13:48:71:47:f5:e7:69:ac:ae:6d:76:dc:93:f2:8d:2d: dd:23:2b:47:f0:bc:a5:d1:5d:23:90:67:4d:4b:a4:78:4b:cc: c3:b6:15:e2:5e:00:b7:41:0b:ba:bd:93:91:d1:3b:97:de:8d: cc:0d:f6:dd:12:f1:2f:99:0d:4b:43:1e:55:5f:e4:af:38:19: e1:9b:2c:59:a5:16:63:57:b3:76:b8:bc:ee:ef:96:7b:57:3c: fe:fe:85:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLdJIkaB8kD/OG6w2764hMZIovMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3 Q0NCRTQ0MTAeFw0yNTEyMjAxMDU3MDRaFw0yNTEyMjMxNzM4MDRaMDMxMTAvBgNV BAMTKEMwNkY3ODlBRUNBRjdBNEFFNDFGM0I3MUVCRkE2RDQ2NUYxRTgzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5APtuoGvXdjHH7UOdFSz60X5y 7zAvso/mt9ww8ZoCo/iWcQLw53mwvlIvClOf/uwkZ2HwqixKrdECIEx2HP1wX9oN 2//g5Yew2bVDJaF3PNsqmxWAxxwm4VhWkHEDrMWZ1OkwUJmMDr8ZIoC+5b5oYPD6 w+d6qoJUmzFS+bYM0Fp62c/zUhzRBLj6VQ7O/njO/Cy8/K1lKvqtINnCEnxFdJ7f s3ZV3bGGtKzM7r+W9mSfWccrxzfEXB1Eqt/N5Dy1SfoM8bVm/XBkUE4FB2p/bf1w KapLN8a3llgetJadHA80udrnaz4nVD7N+GbV5ZRXdDlh5T/ZkVhhSckKL2V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwG94muyvekrkHztx6/ptRl8eg+gwHwYDVR0j BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2 OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC RTQ0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNkYjJiZjgtYmViMy00Y2M5LTgz YWQtMmM5ZDU3NWY5NGFmLzAvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FG Rjc3Q0NCRTQ0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9MRHK8neyOu5W3OiXRiaoBEQ1yF6b43RNs Gz7g0QGtiQhGsFe+4w6TyNwZXgG1NVzDOVOxYMgf9HE4+grhAPUU/HRFZNRrHMLq a3fKhx00gStVfVnM9OyHrz+77uoA1/Z4YyxwOU1+8xI6lw1xqSmKTmJyaPNXX5mC otfGbUXAGah904rIffJBELvEWhnNOECg/jc3itEzCHbu+5iKMsiCqUIiE0hxR/Xn aayubXbck/KNLd0jK0fwvKXRXSOQZ01LpHhLzMO2FeJeALdBC7q9k5HRO5fejcwN 9t0S8S+ZDUtDHlVf5K84GeGbLFmlFmNXs3a4vO7vlntXPP7+hdY= -----END CERTIFICATE-----Generated at Sun Dec 21 23:09:47 2025 by rpki-client