This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: G/opGyxj8CzDvE02hgLaFtdBVtqOmj+BbEtS7wHoU6c= Subject key identifier: 70:2F:16:97:D1:F7:98:E7:2D:2E:3D:00:C1:A7:96:15:44:37:51:0B Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 60D0D24C48577AF3650C8ED021D68412ABA76906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: D7 Signing time: Mon 22 Dec 2025 22:42:49 +0000 Manifest this update: Mon 22 Dec 2025 22:37:49 +0000 Manifest next update: Fri 26 Dec 2025 01:22:49 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: UfU49TSM5bDizQ4HNo8M6FaBg9UK7l+ArhQJ9+tBj+8=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d0:d2:4c:48:57:7a:f3:65:0c:8e:d0:21:d6:84:12:ab:a7:69:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Dec 22 22:37:49 2025 GMT Not After : Dec 26 01:22:49 2025 GMT Subject: CN=702F1697D1F798E72D2E3D00C1A796154437510B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:78:65:f7:62:23:cb:d0:ea:92:6b:f3:ef: 58:02:0b:be:a0:03:21:bc:7e:99:8a:48:a9:e3:6b: 75:f2:03:b0:b0:ab:36:18:90:5a:e5:3b:6f:98:21: 10:d8:62:09:b2:5f:2b:58:23:aa:15:d6:27:eb:60: d9:fe:ba:19:e9:f2:88:7a:c1:19:25:6b:47:c4:84: 8b:da:ca:90:e3:21:79:19:56:80:50:e8:86:44:fd: 77:7d:1a:d7:45:b9:40:37:e0:c9:03:2b:5a:05:ab: ef:04:3f:7f:5c:a9:32:b4:6c:cd:35:c0:41:b0:dc: f6:3d:45:28:47:ed:9c:93:31:24:bd:2f:be:f5:0f: bc:58:69:cc:8e:1e:2a:9d:27:d8:a2:58:c9:db:e9: ac:a0:85:8e:e9:3d:78:46:c5:16:9c:1f:ff:29:75: d9:65:26:4c:32:db:02:5b:a9:17:03:59:08:f9:23: 4b:79:10:46:33:ec:59:a4:8d:0e:18:4a:70:59:fe: 2e:48:68:37:88:b9:b2:0a:0c:b4:fe:e4:53:70:43: e6:aa:17:5f:fa:27:5b:a5:b2:02:e7:6c:ab:b8:79: c9:87:99:fa:57:31:f8:5a:fc:38:f3:91:91:3d:ef: a3:33:4e:c9:d0:19:97:47:12:85:8d:53:b1:e3:bd: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2F:16:97:D1:F7:98:E7:2D:2E:3D:00:C1:A7:96:15:44:37:51:0B X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:42:22:c0:cd:70:1e:ac:eb:bc:a1:fc:97:ab:1f:bc:ef:2f: ba:22:a0:15:43:8a:8e:4a:00:b1:01:98:36:cb:f9:6a:1a:75: 13:34:ed:d6:c4:32:f4:36:d6:a4:a6:2d:f4:5b:67:ee:98:2f: c4:3f:00:c9:69:09:26:80:74:e1:b2:c1:16:ea:e6:06:6f:df: 17:c0:fe:7c:9f:3a:14:dd:db:91:d9:7c:a4:5c:91:63:8f:83: 58:dc:a8:9c:61:a3:92:f7:1b:e2:e3:a0:96:ef:fc:05:ce:06: 93:57:e4:db:2c:4c:0b:ab:3e:2c:9d:46:f7:5f:0e:f0:33:75: 27:8a:98:8c:85:22:52:af:cb:49:0f:90:0d:b6:44:4d:91:8c: 70:93:0f:14:78:75:cd:b3:e1:f9:a9:fd:a7:0b:b9:e7:b9:5d: 35:4f:56:34:c8:f6:cf:83:40:7a:62:41:d5:36:9a:74:8e:ee: 51:82:3a:8e:c2:aa:d8:29:e9:f0:29:1c:98:e8:e4:7e:0f:d7: d8:34:e5:88:47:1e:e1:06:d0:60:b7:33:89:da:bf:66:93:65: f0:79:4b:bd:23:de:29:36:6f:9c:cc:55:b8:8c:cc:90:50:bc: 3e:5b:8a:fe:c7:0b:fc:c9:8a:f3:2e:6a:02:db:5d:bf:9e:21: bf:ec:23:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNDSTEhXevNlDI7QIdaEEqunaQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTEyMjIyMjM3NDlaFw0yNTEyMjYwMTIyNDlaMDMxMTAvBgNV BAMTKDcwMkYxNjk3RDFGNzk4RTcyRDJFM0QwMEMxQTc5NjE1NDQzNzUxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOU3hl92Ijy9Dqkmvz71gCC76g AyG8fpmKSKnja3XyA7CwqzYYkFrlO2+YIRDYYgmyXytYI6oV1ifrYNn+uhnp8oh6 wRkla0fEhIvaypDjIXkZVoBQ6IZE/Xd9GtdFuUA34MkDK1oFq+8EP39cqTK0bM01 wEGw3PY9RShH7ZyTMSS9L771D7xYacyOHiqdJ9iiWMnb6ayghY7pPXhGxRacH/8p ddllJkwy2wJbqRcDWQj5I0t5EEYz7FmkjQ4YSnBZ/i5IaDeIubIKDLT+5FNwQ+aq F1/6J1ulsgLnbKu4ecmHmfpXMfha/DjzkZE976MzTsnQGZdHEoWNU7HjvaG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcC8Wl9H3mOctLj0AwaeWFUQ3UQswHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5CIsDNcB6s67yh/JerH7zvL7oioBVDio5K ALEBmDbL+WoadRM07dbEMvQ21qSmLfRbZ+6YL8Q/AMlpCSaAdOGywRbq5gZv3xfA /nyfOhTd25HZfKRckWOPg1jcqJxho5L3G+LjoJbv/AXOBpNX5NssTAurPiydRvdf DvAzdSeKmIyFIlKvy0kPkA22RE2RjHCTDxR4dc2z4fmp/acLuee5XTVPVjTI9s+D QHpiQdU2mnSO7lGCOo7Cqtgp6fApHJjo5H4P19g05YhHHuEG0GC3M4nav2aTZfB5 S70j3ik2b5zMVbiMzJBQvD5biv7HC/zJivMuagLbXb+eIb/sI0k= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:25 2025 by rpki-client