This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: 8JDqKEL5MXUK9UVFrvorcliCz1drug21SUY0nikyopU= Subject key identifier: DF:6E:24:AE:FD:07:9C:B4:FC:9C:BF:50:C5:36:79:10:FF:8F:83:26 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 8E3C6DD0A9787E6967790E4B7524176CF8575A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 01CF Signing time: Thu 18 Dec 2025 07:11:22 +0000 Manifest this update: Thu 18 Dec 2025 07:06:22 +0000 Manifest next update: Sun 21 Dec 2025 10:11:22 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: rlIfZw2Avt73TAflpKkvh6N3E3peqwUZ8qqt5NY2DDA=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:3c:6d:d0:a9:78:7e:69:67:79:0e:4b:75:24:17:6c:f8:57:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Dec 18 07:06:22 2025 GMT Not After : Dec 21 10:11:22 2025 GMT Subject: CN=DF6E24AEFD079CB4FC9CBF50C5367910FF8F8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:a5:ea:63:fe:5a:af:c7:a5:c1:bd:ea:31: 3f:37:c0:b6:3d:83:3f:7e:bf:a1:d2:6b:40:9b:41: 4e:8d:41:4a:37:92:33:1d:00:e2:3f:98:77:a7:73: 14:8c:04:09:e3:1d:3b:54:33:50:89:14:a1:56:0a: 68:bb:ae:e9:e5:3c:c0:2a:62:a4:84:86:89:01:3c: 7f:b1:09:be:7b:72:f0:b5:71:e5:cf:04:8f:45:23: c4:3d:e2:05:2a:99:cc:c5:ef:21:d7:ff:7f:68:be: 65:3e:ca:7d:e1:dd:9a:d3:69:1f:8d:df:15:05:85: c2:ea:8f:1d:21:eb:61:91:87:c1:38:04:b7:73:23: 38:4a:a1:71:d1:ff:23:ec:00:5a:51:fd:a1:73:c2: 46:97:bf:35:a8:3a:70:b0:e8:1d:26:b3:3f:e3:9a: aa:8c:59:b0:46:2a:0d:53:ab:ef:da:84:d4:d3:30: eb:19:c0:53:b2:b2:03:8d:83:d1:1a:62:aa:18:76: 0a:0c:af:76:e9:33:5b:77:c5:fb:77:5c:12:4e:fc: 13:37:45:a4:91:63:21:aa:27:0a:aa:bc:a8:82:f4: c2:58:2e:fa:8c:d8:8c:70:f2:35:0a:4d:0d:32:3a: e0:72:1e:a2:aa:dd:a0:98:62:9f:38:00:dc:c6:f0: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:24:AE:FD:07:9C:B4:FC:9C:BF:50:C5:36:79:10:FF:8F:83:26 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7c:c0:d7:bf:fa:b9:ba:88:92:d1:65:93:78:74:af:df:2e: 82:13:d5:18:78:32:f9:60:3d:7a:7a:89:8f:6d:4e:e6:f7:41: 0f:c2:1c:85:e6:84:69:9c:09:04:55:a7:4b:ad:39:01:ce:8f: 34:ee:23:25:c5:2c:08:80:96:1c:22:2f:f1:7e:a8:4f:f6:14: e6:5d:f8:7c:f9:47:50:16:f5:6a:4c:de:0f:23:fe:2f:7f:33: e1:a2:d6:02:89:22:8d:99:44:9e:3e:27:6d:b2:3f:88:f5:fe: b4:38:e6:1f:f2:89:5b:bd:01:c3:d8:f2:8a:fc:c5:74:5c:79: c5:43:d8:b0:b6:98:fe:2c:c5:39:02:14:d5:85:81:c9:3a:a0: 9e:aa:4f:3e:bb:e7:07:31:a4:bb:a0:c4:c2:ca:13:51:b1:0e: 2e:49:28:60:93:0a:aa:84:f1:4a:49:d0:8b:1c:90:4e:be:91: 82:aa:27:03:bf:08:04:58:d0:08:de:40:f9:43:b5:a6:20:7b: 00:c8:bf:82:17:dc:c3:91:3f:71:05:28:f7:5d:9e:13:1f:48: 0f:8b:84:24:1c:9c:1e:32:fa:a8:1b:cd:2a:f5:4f:71:81:c3: c0:18:2a:9a:21:4d:0d:bc:b3:bc:ab:32:62:07:89:7d:22:ba: 19:78:ff:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAI48bdCpeH5pZ3kOS3UkF2z4V1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTEyMTgwNzA2MjJaFw0yNTEyMjExMDExMjJaMDMxMTAvBgNV BAMTKERGNkUyNEFFRkQwNzlDQjRGQzlDQkY1MEM1MzY3OTEwRkY4RjgzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnaXqY/5ar8elwb3qMT83wLY9 gz9+v6HSa0CbQU6NQUo3kjMdAOI/mHencxSMBAnjHTtUM1CJFKFWCmi7runlPMAq YqSEhokBPH+xCb57cvC1ceXPBI9FI8Q94gUqmczF7yHX/39ovmU+yn3h3ZrTaR+N 3xUFhcLqjx0h62GRh8E4BLdzIzhKoXHR/yPsAFpR/aFzwkaXvzWoOnCw6B0msz/j mqqMWbBGKg1Tq+/ahNTTMOsZwFOysgONg9EaYqoYdgoMr3bpM1t3xft3XBJO/BM3 RaSRYyGqJwqqvKiC9MJYLvqM2Ixw8jUKTQ0yOuByHqKq3aCYYp84ANzG8D3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU324krv0HnLT8nL9QxTZ5EP+PgyYwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV8wNe/+rm6iJLRZZN4dK/fLoIT1Rh4Mvlg PXp6iY9tTub3QQ/CHIXmhGmcCQRVp0utOQHOjzTuIyXFLAiAlhwiL/F+qE/2FOZd +Hz5R1AW9WpM3g8j/i9/M+Gi1gKJIo2ZRJ4+J22yP4j1/rQ45h/yiVu9AcPY8or8 xXRcecVD2LC2mP4sxTkCFNWFgck6oJ6qTz675wcxpLugxMLKE1GxDi5JKGCTCqqE 8UpJ0IsckE6+kYKqJwO/CARY0AjeQPlDtaYgewDIv4IX3MORP3EFKPddnhMfSA+L hCQcnB4y+qgbzSr1T3GBw8AYKpohTQ28s7yrMmIHiX0iuhl4/x4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:09 2025 by rpki-client