This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: wqPvZM45tvBIYe54ZTOePRMZh4lhY8UYXJ1gP/EN9HM= Subject key identifier: C6:53:72:D0:19:09:31:B1:CB:FF:F6:2C:59:25:5A:F0:C9:D8:6C:3A Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 23F7DF74635AE9BE83D4CE1C1CB79094F7681918 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: EF Signing time: Tue 16 Dec 2025 18:51:38 +0000 Manifest this update: Tue 16 Dec 2025 18:46:38 +0000 Manifest next update: Sat 20 Dec 2025 03:50:38 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: Xr07fpV3U06VJ7lMqgkzX3MZgAgSn/+ZixPCGUFyL6E=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f7:df:74:63:5a:e9:be:83:d4:ce:1c:1c:b7:90:94:f7:68:19:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Dec 16 18:46:38 2025 GMT Not After : Dec 20 03:50:38 2025 GMT Subject: CN=C65372D0190931B1CBFFF62C59255AF0C9D86C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:82:9c:f6:00:d1:34:c4:5c:f7:da:a3:3f: 82:58:4c:f0:70:f7:d9:97:c9:cc:54:2f:c8:91:db: 22:35:0b:c0:71:c4:a9:66:02:16:98:4c:50:8b:23: 22:e3:bf:0b:0a:e3:77:ae:86:17:e1:ee:a8:33:b9: 37:ac:a8:fa:bf:84:4f:57:c3:e8:71:42:ad:b8:00: 10:a5:f4:33:ba:82:4d:ef:f5:a7:42:ef:42:bf:2d: 69:a3:12:6d:25:0c:cd:a8:3a:ae:ab:03:2f:26:96: 30:a1:eb:43:9d:c2:10:ce:a4:74:0a:0d:02:a7:b9: cf:51:85:71:b5:a9:bc:17:85:cd:cd:d2:4e:09:97: 32:c6:40:04:b8:23:68:82:38:f9:60:c3:94:7b:bb: b5:8c:c0:88:5c:35:fd:a8:ae:56:70:d5:33:c7:47: 5a:12:55:e8:d4:ba:25:de:33:68:b8:8a:eb:89:e1: 53:5f:bf:7d:30:2d:31:df:ee:dc:c5:d1:94:13:da: 15:48:50:28:0a:57:ab:58:11:bd:93:2e:a8:7a:47: 3e:d4:29:6d:5f:59:83:2f:55:cb:84:30:71:30:a2: 44:11:bd:9e:bf:ed:23:a6:ba:96:5b:81:36:22:4d: c2:ae:bb:f4:ab:d3:d5:35:1c:e0:4f:7b:74:a0:d0: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:72:D0:19:09:31:B1:CB:FF:F6:2C:59:25:5A:F0:C9:D8:6C:3A X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bf:8c:94:75:57:35:e6:3a:6a:d9:e1:ee:98:4b:f6:10:dd: 3b:2f:a8:b1:6c:7b:08:87:41:8c:13:e9:22:f7:8b:7b:48:d7: c5:4d:e9:ff:21:2b:9f:61:8c:96:8a:1a:ad:1a:4b:18:8a:8a: 4b:55:d6:15:e4:4c:68:84:64:5a:99:b4:d0:e6:2b:61:05:0f: 75:77:35:bb:34:9d:f8:bc:1f:a6:66:93:00:92:22:47:0b:5f: 14:2a:6e:ad:bd:42:c2:44:2b:2c:da:f7:b6:c4:52:50:79:65: aa:1f:d3:8a:16:c1:f8:c1:bb:f4:67:7e:c1:6b:2e:a7:f2:8e: f7:1a:6d:f8:da:5a:27:77:3d:62:5d:d6:f0:74:07:20:e6:75: e7:aa:f5:48:5b:5c:cf:60:4a:c7:04:fd:4d:fe:d3:31:d4:22: ae:af:ee:4c:b3:10:dd:f5:db:7b:7f:00:ba:df:a7:e6:80:db: ed:ca:42:28:0f:c5:59:36:14:d5:94:72:55:0d:f6:e6:47:b5: 6c:ee:af:2f:2f:8b:1a:36:63:85:89:74:df:d8:02:b6:56:83: 6e:c4:26:d1:9b:cf:ed:9f:cb:15:5f:5e:78:f1:38:d9:0c:8b: 89:e6:aa:52:2b:ca:f7:14:d9:f7:9e:08:eb:45:d9:1f:a7:28: 9d:b8:e1:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/ffdGNa6b6D1M4cHLeQlPdoGRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTEyMTYxODQ2MzhaFw0yNTEyMjAwMzUwMzhaMDMxMTAvBgNV BAMTKEM2NTM3MkQwMTkwOTMxQjFDQkZGRjYyQzU5MjU1QUYwQzlEODZDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgYKc9gDRNMRc99qjP4JYTPBw 99mXycxUL8iR2yI1C8BxxKlmAhaYTFCLIyLjvwsK43euhhfh7qgzuTesqPq/hE9X w+hxQq24ABCl9DO6gk3v9adC70K/LWmjEm0lDM2oOq6rAy8mljCh60OdwhDOpHQK DQKnuc9RhXG1qbwXhc3N0k4JlzLGQAS4I2iCOPlgw5R7u7WMwIhcNf2orlZw1TPH R1oSVejUuiXeM2i4iuuJ4VNfv30wLTHf7tzF0ZQT2hVIUCgKV6tYEb2TLqh6Rz7U KW1fWYMvVcuEMHEwokQRvZ6/7SOmupZbgTYiTcKuu/Sr09U1HOBPe3Sg0GXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlNy0BkJMbHL//YsWSVa8MnYbDowHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm/jJR1VzXmOmrZ4e6YS/YQ3TsvqLFsewiH QYwT6SL3i3tI18VN6f8hK59hjJaKGq0aSxiKiktV1hXkTGiEZFqZtNDmK2EFD3V3 Nbs0nfi8H6ZmkwCSIkcLXxQqbq29QsJEKyza97bEUlB5Zaof04oWwfjBu/RnfsFr LqfyjvcabfjaWid3PWJd1vB0ByDmdeeq9UhbXM9gSscE/U3+0zHUIq6v7kyzEN31 23t/ALrfp+aA2+3KQigPxVk2FNWUclUN9uZHtWzury8vixo2Y4WJdN/YArZWg27E JtGbz+2fyxVfXnjxONkMi4nmqlIryvcU2feeCOtF2R+nKJ244d0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:01 2025 by rpki-client