This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: AQUBC6uJGJj3Skc76w5Zd1axYuxifrLDQROmRGism7E= Subject key identifier: 66:0D:BA:E0:1F:AD:83:1C:94:75:6A:6D:07:84:7A:0F:B1:B1:87:1E Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 24EA450D4974EE224F7958A4022603C736E0BD9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0237 Signing time: Thu 04 Dec 2025 21:11:21 +0000 Manifest this update: Thu 04 Dec 2025 21:06:21 +0000 Manifest next update: Mon 08 Dec 2025 05:40:21 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: chVexFWNbdsAUHAUT9m1wirgPIcrfiDgnEmnmoIYaYc=) 3: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ea:45:0d:49:74:ee:22:4f:79:58:a4:02:26:03:c7:36:e0:bd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Dec 4 21:06:21 2025 GMT Not After : Dec 8 05:40:21 2025 GMT Subject: CN=660DBAE01FAD831C94756A6D07847A0FB1B1871E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:0f:05:17:20:59:92:30:21:da:3d:53:8f: e0:75:e4:ad:a4:c9:c3:dd:14:f8:05:45:cf:0d:90: 71:36:91:c3:c3:95:40:75:e0:27:13:3d:22:c0:c0: 0d:bb:4c:57:6c:20:fe:e0:46:1f:19:d3:0f:5e:04: 81:5a:15:d7:c1:24:8e:9e:c1:bd:73:b5:1b:10:6a: a9:eb:9f:e8:8c:cd:73:a5:ab:cb:82:ab:3e:75:06: e6:eb:07:04:f7:3e:ec:35:86:42:7b:55:b8:37:11: dc:91:4e:21:88:ee:9f:1c:dd:85:7d:d3:cc:07:45: 03:2e:c2:bb:ca:24:8e:4a:8d:b5:87:3a:34:ba:2c: 68:09:46:2e:dd:2d:e9:e2:28:39:75:84:fe:a7:dc: bb:d2:81:62:bc:e0:50:5a:45:a5:c7:f3:07:8e:3a: 9c:8d:35:cc:c6:7d:b5:6e:e2:e6:c3:50:1d:34:bf: 43:26:04:04:35:f1:ec:ca:77:31:21:67:7a:69:e6: 16:ab:ec:eb:fd:77:ee:75:e4:ac:71:76:bc:49:1b: 18:c7:cc:fe:2f:f4:df:17:6e:ec:18:ae:ec:ae:7c: 09:3b:d1:0f:f2:c6:93:e7:7c:2c:5a:d1:a4:8d:d5: 99:30:fd:4f:0f:2f:82:2b:18:7d:f8:81:11:b2:2d: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0D:BA:E0:1F:AD:83:1C:94:75:6A:6D:07:84:7A:0F:B1:B1:87:1E X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:f8:6b:61:13:92:84:22:6a:4b:96:54:33:0d:80:6a:0b:8d: e8:c5:50:7f:93:bd:65:10:a5:7f:d7:d7:82:a8:8a:a2:4e:57: 3d:cf:7c:a1:98:35:9d:74:95:6c:6e:ee:17:ed:6f:f8:45:25: c8:be:84:8c:ac:1e:cf:cb:46:48:0a:ab:59:67:d9:06:79:cc: a6:11:2d:ab:25:17:86:23:84:3d:78:63:19:45:8b:2e:0c:b1: 0a:b4:e5:41:2e:3d:89:d3:6a:8a:2c:4f:cf:3b:0b:35:75:c2: 9f:88:16:11:6d:18:d9:ac:a2:1f:c0:85:ab:63:46:09:db:22: 01:7f:df:cd:95:9f:e8:4e:e2:17:1b:7e:de:5d:ac:9f:4b:dd: ac:9d:3b:22:5a:e3:da:48:86:65:aa:fa:36:01:05:0c:18:92: 0a:d5:7c:ff:b6:bf:1b:c8:f4:70:cd:34:b6:b9:81:d3:20:b0: 57:fb:58:17:02:f7:f6:00:ae:28:5d:51:21:5b:be:42:47:93: f5:2a:d6:3c:a8:3f:a9:a9:58:8e:28:9d:95:18:5a:2c:74:a7: 57:17:1d:d0:9c:81:13:e5:ff:ae:af:99:c6:d1:ae:a2:fd:21: fa:04:45:dc:4f:46:e9:9b:17:9b:af:16:05:54:57:2b:fe:32: 6f:c1:f4:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOpFDUl07iJPeVikAiYDxzbgvZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTEyMDQyMTA2MjFaFw0yNTEyMDgwNTQwMjFaMDMxMTAvBgNV BAMTKDY2MERCQUUwMUZBRDgzMUM5NDc1NkE2RDA3ODQ3QTBGQjFCMTg3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONg8FFyBZkjAh2j1Tj+B15K2k ycPdFPgFRc8NkHE2kcPDlUB14CcTPSLAwA27TFdsIP7gRh8Z0w9eBIFaFdfBJI6e wb1ztRsQaqnrn+iMzXOlq8uCqz51BubrBwT3Puw1hkJ7Vbg3EdyRTiGI7p8c3YV9 08wHRQMuwrvKJI5KjbWHOjS6LGgJRi7dLeniKDl1hP6n3LvSgWK84FBaRaXH8weO OpyNNczGfbVu4ubDUB00v0MmBAQ18ezKdzEhZ3pp5har7Ov9d+515KxxdrxJGxjH zP4v9N8XbuwYruyufAk70Q/yxpPnfCxa0aSN1Zkw/U8PL4IrGH34gRGyLZ+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZg264B+tgxyUdWptB4R6D7Gxhx4wHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/4a2ETkoQiakuWVDMNgGoLjejFUH+TvWUQ pX/X14KoiqJOVz3PfKGYNZ10lWxu7hftb/hFJci+hIysHs/LRkgKq1ln2QZ5zKYR LaslF4YjhD14YxlFiy4MsQq05UEuPYnTaoosT887CzV1wp+IFhFtGNmsoh/Ahatj RgnbIgF/382Vn+hO4hcbft5drJ9L3aydOyJa49pIhmWq+jYBBQwYkgrVfP+2vxvI 9HDNNLa5gdMgsFf7WBcC9/YArihdUSFbvkJHk/Uq1jyoP6mpWI4onZUYWix0p1cX HdCcgRPl/66vmcbRrqL9IfoERdxPRumbF5uvFgVUVyv+Mm/B9Mo= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:25 2025 by rpki-client