This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: hdFYCUi8MoBS7glgjIs7ifYBMX7LRuLCDYBjUKjuBMU= Subject key identifier: E6:E7:9C:19:76:B7:23:1D:80:A3:2B:1D:0D:90:E7:1E:E1:BF:EF:13 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 7AA0331E3A708C4A12B4EB3D72D7C52A043D83D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 01B6 Signing time: Wed 17 Dec 2025 21:21:52 +0000 Manifest this update: Wed 17 Dec 2025 21:16:52 +0000 Manifest next update: Sun 21 Dec 2025 07:57:52 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: X0kGc11ag3u28IOUf8mrKye7ofkSNfAWLgBIfxee+6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a0:33:1e:3a:70:8c:4a:12:b4:eb:3d:72:d7:c5:2a:04:3d:83:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Dec 17 21:16:52 2025 GMT Not After : Dec 21 07:57:52 2025 GMT Subject: CN=E6E79C1976B7231D80A32B1D0D90E71EE1BFEF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:cd:e1:bf:6a:21:a6:dd:71:4b:42:e3:89: 28:f4:2a:12:84:a3:f7:59:80:d5:b9:97:00:2a:99: ac:a1:16:9f:90:7b:af:98:e5:b4:e8:ae:bb:25:cc: 08:39:44:43:ee:05:f5:07:d0:b5:1c:68:bd:35:39: 20:44:e8:92:ec:19:e0:48:da:2f:8c:fa:13:d2:21: 49:41:ad:ba:6a:2b:8f:90:68:7a:b2:97:08:51:18: 62:4e:57:08:e5:95:34:5b:ee:25:01:36:4d:38:86: c9:85:6d:13:69:16:45:34:9c:43:52:bb:2f:7c:bd: 60:59:c6:f9:63:0d:34:5c:16:75:3a:13:47:92:1b: 45:8c:99:98:4b:f0:4b:ea:df:d0:fc:ed:97:ee:c2: 9f:e0:bc:52:3b:8c:cc:18:ac:3a:5e:07:d3:86:64: 11:7e:20:be:ff:0d:c9:4f:43:b3:16:43:fe:2c:e7: 6b:18:5e:3d:ff:63:80:e2:76:bc:79:57:d9:0b:58: f1:e2:b7:f8:10:7a:8f:ef:be:c8:8f:a0:07:52:3f: 0e:bb:f4:5d:f5:91:35:b2:51:37:16:45:bd:4a:5e: 0b:4e:a7:ac:ec:94:ff:be:be:0b:ca:bc:e2:8d:56: 06:b6:52:f2:1f:b1:c8:70:91:00:fd:28:ff:23:c0: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E7:9C:19:76:B7:23:1D:80:A3:2B:1D:0D:90:E7:1E:E1:BF:EF:13 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:42:4b:e3:95:22:95:ac:e4:0f:35:6d:57:35:d6:dc:8d:e4: 98:0d:6e:d6:7e:51:9e:a7:5b:4e:4d:7e:68:f9:6d:26:4e:68: fd:4f:41:ca:ac:7d:ee:64:1a:56:38:27:ff:1c:f2:31:64:c2: 95:08:bc:4c:b2:67:bb:da:63:5a:3e:1e:2d:70:78:d7:23:cc: c1:b6:b1:6f:3d:61:db:1a:65:c0:11:b9:8f:67:56:01:9c:2e: 97:f9:39:e2:d9:40:80:df:92:ce:73:2b:42:e9:e6:b8:f0:8b: 1a:a2:ba:3e:77:34:56:7b:38:26:76:3a:2a:2b:96:0c:ec:9b: ab:96:e6:f8:50:c4:c5:50:2b:e8:a1:23:36:3a:96:5f:aa:8b: f2:46:f8:dc:2b:ac:9e:8f:e4:7a:b3:ce:5b:9f:22:79:9b:09: 72:ce:76:75:95:1d:cb:8a:68:e1:92:11:b8:4d:10:6f:fa:c8: 22:31:ba:2b:4f:ae:92:40:0f:89:97:36:19:6a:a1:0b:65:d5: 92:62:f6:aa:e6:f8:19:3c:a3:3e:a2:2d:98:cb:8c:60:a2:42: 22:dd:60:3d:53:b3:80:a6:89:b5:5f:2b:1b:4e:13:6c:b1:d7: ae:25:d3:a5:b5:c0:d5:7c:99:a0:3c:f9:e0:d2:da:c0:b2:58: 54:10:57:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqAzHjpwjEoStOs9ctfFKgQ9g9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTEyMTcyMTE2NTJaFw0yNTEyMjEwNzU3NTJaMDMxMTAvBgNV BAMTKEU2RTc5QzE5NzZCNzIzMUQ4MEEzMkIxRDBEOTBFNzFFRTFCRkVGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xc3hv2ohpt1xS0LjiSj0KhKE o/dZgNW5lwAqmayhFp+Qe6+Y5bTorrslzAg5REPuBfUH0LUcaL01OSBE6JLsGeBI 2i+M+hPSIUlBrbpqK4+QaHqylwhRGGJOVwjllTRb7iUBNk04hsmFbRNpFkU0nENS uy98vWBZxvljDTRcFnU6E0eSG0WMmZhL8Evq39D87Zfuwp/gvFI7jMwYrDpeB9OG ZBF+IL7/DclPQ7MWQ/4s52sYXj3/Y4Didrx5V9kLWPHit/gQeo/vvsiPoAdSPw67 9F31kTWyUTcWRb1KXgtOp6zslP++vgvKvOKNVga2UvIfschwkQD9KP8jwLYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uecGXa3Ix2AoysdDZDnHuG/7xMwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNCS+OVIpWs5A81bVc11tyN5JgNbtZ+UZ6n W05Nfmj5bSZOaP1PQcqsfe5kGlY4J/8c8jFkwpUIvEyyZ7vaY1o+Hi1weNcjzMG2 sW89YdsaZcARuY9nVgGcLpf5OeLZQIDfks5zK0Lp5rjwixqiuj53NFZ7OCZ2Oior lgzsm6uW5vhQxMVQK+ihIzY6ll+qi/JG+NwrrJ6P5HqzzlufInmbCXLOdnWVHcuK aOGSEbhNEG/6yCIxuitPrpJAD4mXNhlqoQtl1ZJi9qrm+Bk8oz6iLZjLjGCiQiLd YD1Ts4CmibVfKxtOE2yx164l06W1wNV8maA8+eDS2sCyWFQQV8M= -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:10 2025 by rpki-client