This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: blH7BaJvU6Nv+CgpYPzh+n1LNdWiPlat6ZnyiWGGiOQ= Subject key identifier: D7:72:81:8B:C9:20:42:3C:2B:86:EB:F5:0E:11:00:75:A9:79:C5:AA Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 5B3250AC29484FD0AF0E2A903E9F6660A41C9D77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0157 Signing time: Wed 17 Dec 2025 08:12:22 +0000 Manifest this update: Wed 17 Dec 2025 08:07:22 +0000 Manifest next update: Sat 20 Dec 2025 10:09:22 +0000 Files and hashes: 1: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=) 2: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: DYNP1pkQZXlnNBDUWLT0o/w7WroozE34gPyP6ZNIwTM=) 3: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: +xhg3Singtfd0UokeqqzSWdja2C21eC2StR7fb/X5/U=) 4: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:32:50:ac:29:48:4f:d0:af:0e:2a:90:3e:9f:66:60:a4:1c:9d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Dec 17 08:07:22 2025 GMT Not After : Dec 20 10:09:22 2025 GMT Subject: CN=D772818BC920423C2B86EBF50E110075A979C5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:b2:78:86:01:d8:63:58:79:89:19:59:34: 6a:69:23:bc:d9:b6:f0:ea:a4:cb:86:8a:8a:d7:5f: d5:fc:87:44:b8:55:2a:fd:57:08:45:7b:ae:8e:4d: e1:e1:3f:59:e8:ff:1b:89:56:31:74:1a:77:c9:54: 4f:d4:4d:c4:a5:d6:7c:46:39:0d:76:4c:3c:5b:5b: 11:53:a1:ab:a2:11:53:45:a2:ba:40:26:7e:c3:5d: 2f:23:96:84:f4:92:3a:14:db:84:f9:a7:65:29:7c: 12:8d:04:fd:64:6a:20:42:03:41:67:3c:2b:a5:3a: b9:57:c2:3b:a7:da:c2:c0:a9:fc:ca:19:c0:df:bd: 00:bb:71:95:9a:32:30:17:d3:39:ff:19:92:7e:fa: 24:d7:18:6d:f9:88:a1:0e:c3:81:ad:78:f1:2c:5a: 9a:a1:be:fa:fb:f4:42:58:e3:68:5e:07:cb:03:77: d0:57:66:07:7c:86:a3:d1:ee:48:dc:2a:bc:8d:a1: f9:f7:09:47:df:06:64:46:19:58:7f:35:14:46:66: 62:d2:35:db:02:3f:93:33:e5:6b:43:6c:0a:7e:11: 67:7f:70:37:ec:50:78:2b:7d:b8:11:a7:56:35:c0: d5:89:b6:c1:b9:b2:c1:fc:90:8e:77:22:53:0d:e6: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:81:8B:C9:20:42:3C:2B:86:EB:F5:0E:11:00:75:A9:79:C5:AA X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:25:ed:a6:ae:72:ef:45:82:da:17:c3:fe:a7:b0:4c:38:1a: 16:80:a3:9c:37:1f:a2:0b:b9:67:fe:db:df:2d:fe:03:bb:01: 81:cd:6e:9a:ac:2d:61:99:ac:e6:b4:c4:6d:fc:d6:ad:3f:b2: 11:e6:9e:0c:5a:b3:f7:45:32:fa:fc:1c:b0:d1:a0:d5:ab:88: ae:1f:98:1a:79:f6:3e:51:57:d3:5d:c0:20:ce:9f:5a:cc:4e: f9:79:1c:13:72:d6:69:e6:55:0d:5d:59:57:78:1d:4b:65:2d: d3:9e:15:49:35:c4:29:95:ca:42:3c:17:50:46:43:6b:1d:21: ae:94:5b:79:5e:c4:ca:d8:64:62:47:1d:84:a5:e3:15:04:e9: 23:2b:e9:85:b5:26:6c:6b:73:ae:34:0d:34:16:2a:64:b2:3d: e0:12:8a:17:4d:8d:ae:ed:a0:c5:88:aa:43:ec:b1:bb:86:e4: 20:93:de:5b:0f:d1:a2:34:d1:5d:5d:0f:40:37:8b:fe:bd:9b: 06:33:6c:f1:ab:34:4d:72:48:07:8e:be:ad:71:b2:7b:47:24: 8d:01:61:0f:33:ac:7a:78:5c:99:37:b4:e5:52:69:58:70:f6: 40:c4:49:a5:0b:21:df:e9:0a:4d:34:59:7a:92:6e:3b:09:bd: dc:36:45:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzJQrClIT9CvDiqQPp9mYKQcnXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNTEyMTcwODA3MjJaFw0yNTEyMjAxMDA5MjJaMDMxMTAvBgNV BAMTKEQ3NzI4MThCQzkyMDQyM0MyQjg2RUJGNTBFMTEwMDc1QTk3OUM1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaErJ4hgHYY1h5iRlZNGppI7zZ tvDqpMuGiorXX9X8h0S4VSr9VwhFe66OTeHhP1no/xuJVjF0GnfJVE/UTcSl1nxG OQ12TDxbWxFToauiEVNForpAJn7DXS8jloT0kjoU24T5p2UpfBKNBP1kaiBCA0Fn PCulOrlXwjun2sLAqfzKGcDfvQC7cZWaMjAX0zn/GZJ++iTXGG35iKEOw4GtePEs Wpqhvvr79EJY42heB8sDd9BXZgd8hqPR7kjcKryNofn3CUffBmRGGVh/NRRGZmLS NdsCP5Mz5WtDbAp+EWd/cDfsUHgrfbgRp1Y1wNWJtsG5ssH8kI53IlMN5hnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13KBi8kgQjwrhuv1DhEAdal5xaowHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkl7aaucu9FgtoXw/6nsEw4GhaAo5w3H6IL uWf+298t/gO7AYHNbpqsLWGZrOa0xG381q0/shHmngxas/dFMvr8HLDRoNWriK4f mBp59j5RV9NdwCDOn1rMTvl5HBNy1mnmVQ1dWVd4HUtlLdOeFUk1xCmVykI8F1BG Q2sdIa6UW3lexMrYZGJHHYSl4xUE6SMr6YW1Jmxrc640DTQWKmSyPeASihdNja7t oMWIqkPssbuG5CCT3lsP0aI00V1dD0A3i/69mwYzbPGrNE1ySAeOvq1xsntHJI0B YQ8zrHp4XJk3tOVSaVhw9kDESaULId/pCk00WXqSbjsJvdw2RTI= -----END CERTIFICATE-----Generated at Fri Dec 19 17:29:22 2025 by rpki-client