This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: q17S2SI7tCibL7Zk3BV5HZRUyAgdMwGHWTsN5Wfs1lA= Subject key identifier: D0:B4:3A:E1:FD:69:1D:9A:8E:C5:E8:F4:D5:2B:D5:D3:F7:76:7F:14 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 5A6B3B57E2F1DCA0E1BD075BCB7FB706D6E90FA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: CC Signing time: Mon 29 Dec 2025 21:11:58 +0000 Manifest this update: Mon 29 Dec 2025 21:06:58 +0000 Manifest next update: Fri 02 Jan 2026 07:53:58 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: 6xQkTvjlgEH9ozaXKtr4qYGj1xQMOD47BeWeX6nTJ3E=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) 3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 03:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6b:3b:57:e2:f1:dc:a0:e1:bd:07:5b:cb:7f:b7:06:d6:e9:0f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Dec 29 21:06:58 2025 GMT Not After : Jan 2 07:53:58 2026 GMT Subject: CN=D0B43AE1FD691D9A8EC5E8F4D52BD5D3F7767F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:d0:32:05:9c:58:d0:38:f0:55:06:58:f8: b8:8b:c1:44:a3:95:92:4d:0c:7f:4e:e0:bf:c8:6a: 2a:8b:79:12:f4:b9:20:ed:d7:67:61:3f:b9:f4:e0: a4:12:e5:0d:4b:f3:61:b4:9d:3c:aa:80:85:38:74: 0e:5b:45:c2:04:6a:cc:0a:56:24:5b:85:e3:54:4f: f8:95:f7:98:76:ae:27:a8:3e:0b:a1:55:3d:be:b6: 38:bc:9b:aa:47:dc:f7:c7:77:f6:a0:78:8c:5e:90: 4a:c9:87:d2:a4:88:e6:57:45:02:71:a8:af:5e:cb: 5b:0f:39:b7:b0:44:ce:73:ef:f5:66:5c:80:23:39: 4b:b2:c1:86:36:a2:74:7e:d6:50:ff:7b:81:e9:26: 6c:5c:76:d7:c3:2a:ba:44:c2:17:85:7d:2a:e9:be: 1f:39:0b:33:57:54:89:6f:4f:3d:16:fe:2b:3d:51: dd:23:09:a1:05:24:0c:68:9f:0d:14:a2:b9:f9:95: 2b:77:f9:ec:1e:c5:92:49:dd:b7:2c:e7:51:7f:fa: 43:1c:35:f4:bc:8a:f2:c2:63:25:c4:bf:6e:ce:ea: e9:53:8c:bd:5e:1a:bb:6e:77:2b:37:43:cb:ee:0c: 6f:48:31:a4:b5:79:c5:0f:82:d8:2c:5f:0f:7d:e1: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B4:3A:E1:FD:69:1D:9A:8E:C5:E8:F4:D5:2B:D5:D3:F7:76:7F:14 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:78:6a:fd:10:65:dd:18:16:9f:c3:dc:4f:85:a6:7a:4a:07: 9a:e8:c2:41:2a:fc:52:a8:0b:7b:95:97:b3:53:dc:8c:2d:a1: cb:62:be:a8:8e:7a:c3:5d:02:5a:e0:90:b0:2f:54:cd:c8:ed: dd:1b:b4:df:51:d5:8c:64:a3:f6:a2:03:26:90:4a:89:4d:38: ad:a2:e6:53:51:73:a3:51:75:b4:26:06:c9:5a:6e:bd:0a:e0: ce:e2:ee:b6:59:58:ba:1b:5e:91:0a:7c:21:69:94:d3:76:ad: fa:d9:85:d6:e4:21:95:5d:fc:7a:a0:d6:ae:fa:65:ea:d7:50: df:a3:e7:b1:89:ce:b2:9c:b0:4c:85:8e:cf:62:9d:2a:8b:d2: 5c:96:97:31:34:e8:1a:f1:b5:0f:1b:b9:49:fa:11:1c:aa:c5: 1a:20:4b:83:18:76:3e:30:88:5d:f1:58:d0:1d:0d:47:98:9a: c8:bf:d8:64:ab:62:b7:90:0b:0a:a0:aa:28:9f:42:28:f7:cd: d3:a3:11:3e:be:4e:dc:bd:3f:5b:01:24:6e:74:f3:86:24:3e: f1:52:fa:1f:ca:5a:45:4a:29:fc:14:3b:ac:5a:63:11:14:1d: ca:73:fe:33:51:13:ca:20:2b:92:dd:80:f8:52:f9:6b:45:af: df:94:8b:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWms7V+Lx3KDhvQdby3+3BtbpD6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTEyMjkyMTA2NThaFw0yNjAxMDIwNzUzNThaMDMxMTAvBgNV BAMTKEQwQjQzQUUxRkQ2OTFEOUE4RUM1RThGNEQ1MkJENUQzRjc3NjdGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXdAyBZxY0DjwVQZY+LiLwUSj lZJNDH9O4L/IaiqLeRL0uSDt12dhP7n04KQS5Q1L82G0nTyqgIU4dA5bRcIEaswK ViRbheNUT/iV95h2rieoPguhVT2+tji8m6pH3PfHd/ageIxekErJh9KkiOZXRQJx qK9ey1sPObewRM5z7/VmXIAjOUuywYY2onR+1lD/e4HpJmxcdtfDKrpEwheFfSrp vh85CzNXVIlvTz0W/is9Ud0jCaEFJAxonw0Uorn5lSt3+ewexZJJ3bcs51F/+kMc NfS8ivLCYyXEv27O6ulTjL1eGrtudys3Q8vuDG9IMaS1ecUPgtgsXw994WhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0LQ64f1pHZqOxej01SvV0/d2fxQwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB14av0QZd0YFp/D3E+FpnpKB5rowkEq/FKo C3uVl7NT3IwtoctivqiOesNdAlrgkLAvVM3I7d0btN9R1Yxko/aiAyaQSolNOK2i 5lNRc6NRdbQmBslabr0K4M7i7rZZWLobXpEKfCFplNN2rfrZhdbkIZVd/Hqg1q76 ZerXUN+j57GJzrKcsEyFjs9inSqL0lyWlzE06BrxtQ8buUn6ERyqxRogS4MYdj4w iF3xWNAdDUeYmsi/2GSrYreQCwqgqiifQij3zdOjET6+Tty9P1sBJG5084YkPvFS +h/KWkVKKfwUO6xaYxEUHcpz/jNRE8ogK5LdgPhS+WtFr9+UixA= -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:55 2025 by rpki-client