This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: VL3YYQzIOKOGUXl4rHH0DkRDJ5zNEJOvuDscwN3F6uE= Subject key identifier: 65:A1:59:AA:16:83:82:AE:3B:84:4F:EE:F9:27:95:46:79:7C:CA:31 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 7107816B56E61AC74F57C3B3F09DCDD3D4718D5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 0208 Signing time: Wed 17 Dec 2025 18:20:52 +0000 Manifest this update: Wed 17 Dec 2025 18:15:52 +0000 Manifest next update: Sun 21 Dec 2025 01:50:52 +0000 Files and hashes: 1: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) 2: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 3: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 4: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: zT40l6Cer49XfCFsKNUdVZx9OeKvZ7L/NsVKpYmnpAg=) 5: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) 6: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:07:81:6b:56:e6:1a:c7:4f:57:c3:b3:f0:9d:cd:d3:d4:71:8d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Dec 17 18:15:52 2025 GMT Not After : Dec 21 01:50:52 2025 GMT Subject: CN=65A159AA168382AE3B844FEEF9279546797CCA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:1c:ca:dd:bb:88:fe:ad:a5:bc:5b:90:75: de:23:c5:17:7d:e1:08:47:a8:aa:24:80:4e:27:dd: 57:45:11:5d:4c:fc:96:f2:b4:50:d1:89:37:aa:d2: 93:70:c1:96:da:9a:d5:3d:d9:13:c5:79:44:2e:00: d6:c2:e2:ee:dc:41:95:de:2f:3f:47:f3:57:4c:bf: 0a:60:c4:06:2f:ec:ae:9b:e5:e8:42:00:14:5a:68: 26:8f:2f:1f:7a:a3:9d:c1:af:3a:66:8b:f0:c4:8d: 4b:2c:d5:6e:b9:ae:54:90:6e:68:fe:98:69:4b:77: 75:92:5c:c0:ca:fe:e8:e6:c0:c9:5c:e6:c9:01:ab: 72:d3:d6:7b:90:16:8a:24:72:dc:b6:c1:62:79:5e: 7f:61:7f:94:12:9c:dc:68:d0:a7:64:3a:ae:91:6d: eb:0f:ae:e8:ae:25:bc:08:d3:cf:14:fd:aa:4f:bb: 3a:dc:75:41:ae:8d:01:a6:6e:63:4e:b2:ef:e3:5d: dd:d7:f2:79:69:8e:3e:b9:a9:08:f7:87:74:a4:20: 8d:8e:cf:48:c6:1a:47:c6:98:43:44:81:5e:63:2d: 67:4a:c2:08:cc:6e:1b:96:7b:74:ec:ff:b3:a9:ad: 55:6a:86:91:ce:73:c1:d9:ac:f0:01:67:48:97:ce: 9e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A1:59:AA:16:83:82:AE:3B:84:4F:EE:F9:27:95:46:79:7C:CA:31 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:77:55:5f:c6:7d:5b:d4:67:76:80:9a:1f:04:76:8f:25:85: 1d:9c:bb:21:9f:d4:1a:c0:30:02:d1:7f:4a:80:8e:56:03:45: 2b:71:7a:42:bd:2a:d6:75:08:7c:9f:45:81:7f:ca:56:85:18: 02:18:d1:6b:cc:27:4c:c8:e7:4b:ed:d6:34:92:2c:50:9e:82: e6:77:4d:f6:1e:99:52:c1:43:5f:46:e0:f5:5e:21:b8:bb:28: 35:d7:60:75:db:bc:f9:23:1e:87:c5:72:95:d3:a3:c3:e2:02: 27:e6:25:b4:bb:4a:14:cc:6b:67:dc:31:d3:a1:99:c0:dd:e1: 93:46:ad:f8:8b:21:3d:7e:90:63:8f:f7:03:b0:2c:1f:4c:cd: 93:8b:d3:7a:92:89:83:a6:41:dc:11:95:2b:81:45:ee:22:27: fe:5d:75:db:54:9c:14:0a:31:91:ab:af:ec:d6:f4:66:88:bf: 56:45:7b:a8:62:e5:c6:29:61:64:5e:60:e4:52:62:2a:fe:d8: 83:56:40:7b:d2:d1:ba:f5:da:c5:01:8d:64:46:bc:2f:a8:1d: e3:db:da:2b:88:cb:8c:e1:cd:82:f1:ec:b2:02:88:bf:68:f1: a5:6b:45:af:fd:d3:b0:94:ca:4e:0d:b1:66:7b:37:d4:af:1e: 51:86:bd:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQeBa1bmGsdPV8Oz8J3N09RxjVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTEyMTcxODE1NTJaFw0yNTEyMjEwMTUwNTJaMDMxMTAvBgNV BAMTKDY1QTE1OUFBMTY4MzgyQUUzQjg0NEZFRUY5Mjc5NTQ2Nzk3Q0NBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNxzK3buI/q2lvFuQdd4jxRd9 4QhHqKokgE4n3VdFEV1M/JbytFDRiTeq0pNwwZbamtU92RPFeUQuANbC4u7cQZXe Lz9H81dMvwpgxAYv7K6b5ehCABRaaCaPLx96o53Brzpmi/DEjUss1W65rlSQbmj+ mGlLd3WSXMDK/ujmwMlc5skBq3LT1nuQFookcty2wWJ5Xn9hf5QSnNxo0KdkOq6R besPruiuJbwI088U/apPuzrcdUGujQGmbmNOsu/jXd3X8nlpjj65qQj3h3SkII2O z0jGGkfGmENEgV5jLWdKwgjMbhuWe3Ts/7OprVVqhpHOc8HZrPABZ0iXzp4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZaFZqhaDgq47hE/u+SeVRnl8yjEwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALp3VV/GfVvUZ3aAmh8Edo8lhR2cuyGf1BrA MALRf0qAjlYDRStxekK9KtZ1CHyfRYF/ylaFGAIY0WvMJ0zI50vt1jSSLFCeguZ3 TfYemVLBQ19G4PVeIbi7KDXXYHXbvPkjHofFcpXTo8PiAifmJbS7ShTMa2fcMdOh mcDd4ZNGrfiLIT1+kGOP9wOwLB9MzZOL03qSiYOmQdwRlSuBRe4iJ/5dddtUnBQK MZGrr+zW9GaIv1ZFe6hi5cYpYWReYORSYir+2INWQHvS0br12sUBjWRGvC+oHePb 2iuIy4zhzYLx7LICiL9o8aVrRa/907CUyk4NsWZ7N9SvHlGGvTo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:01 2025 by rpki-client