This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: 8eGAeJEB5WPMXB1HPw6PjNEdmHTfwN9+H52r+OYc22Q= Subject key identifier: 66:AD:79:90:9A:43:CA:6A:B5:EA:C9:AF:0A:AB:AE:44:D2:8C:DD:06 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 4568675454B2B5BE3E1291C3F64053A3166D0635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: C0 Signing time: Tue 16 Dec 2025 22:22:19 +0000 Manifest this update: Tue 16 Dec 2025 22:17:19 +0000 Manifest next update: Sat 20 Dec 2025 03:13:19 +0000 Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) 2: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: c47ru9hhoJuzV3aoi8cHUKDF6CEutRikZ6rS4UcChGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:68:67:54:54:b2:b5:be:3e:12:91:c3:f6:40:53:a3:16:6d:06:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Dec 16 22:17:19 2025 GMT Not After : Dec 20 03:13:19 2025 GMT Subject: CN=66AD79909A43CA6AB5EAC9AF0AABAE44D28CDD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:0f:9d:1e:40:d4:64:d0:3d:f1:c1:c2:29: a6:6a:cf:05:54:84:eb:09:99:8a:bd:45:92:4c:a2: 61:fd:6b:ae:75:c5:4b:ca:68:8d:3f:a5:16:62:cc: ac:68:84:79:52:ce:1e:35:04:fe:af:6e:c5:59:d0: aa:57:c8:c8:ac:dc:c6:96:96:a2:09:7d:c0:70:00: 1f:e4:1d:47:59:45:c8:00:14:b6:8b:47:dc:08:ac: 21:e7:7b:8f:a5:e8:7d:fb:73:b4:e2:a3:fd:b1:ca: 04:e9:18:a5:8e:e3:43:e6:d0:02:4c:2b:79:0d:c2: e4:9f:a0:4f:89:ab:39:de:39:00:53:7d:02:b3:c1: 66:0e:51:36:3b:0f:7e:d3:3b:0d:39:5a:3c:ff:12: f4:a3:28:ca:d9:f9:0a:da:3f:5b:f4:67:d1:36:05: 91:e7:88:38:04:c1:48:e4:e2:83:5d:13:04:9f:34: 89:28:22:cb:11:0d:83:cf:7e:ac:fa:0e:47:fe:42: b7:20:da:75:a2:19:6e:ee:f8:07:88:7f:8b:4e:49: ed:fe:c2:76:c4:b4:f3:33:f4:0d:01:68:2b:b4:b5: bb:d1:72:21:39:df:f1:e2:ab:76:cc:1c:3d:f1:59: b7:b8:6b:ef:8d:fc:ed:38:58:a3:59:ea:14:6c:35: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:79:90:9A:43:CA:6A:B5:EA:C9:AF:0A:AB:AE:44:D2:8C:DD:06 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:79:d0:4b:8b:76:0d:b8:e9:c7:6e:06:19:e7:b8:44:2c:75: 38:d6:a2:59:b5:57:3a:cc:5b:08:9e:77:8a:b4:02:8e:53:f0: d1:2b:1b:d9:da:0b:34:3c:09:77:47:bd:7d:9b:52:46:68:1c: 4b:03:b9:14:ea:3d:51:64:a9:ae:51:c6:ac:6f:a1:0b:4b:c4: 65:bf:bb:ef:51:e2:11:c3:da:09:78:48:bc:84:b5:e5:74:34: ca:59:c2:dd:e7:a4:38:3d:13:f9:bb:2d:cc:f1:0f:01:d0:ae: 19:4f:f4:df:c4:d8:f9:02:50:3c:d2:f1:bf:d1:99:1a:61:d2: 58:e8:67:f9:38:bf:de:b0:36:56:a8:ba:98:65:59:99:5b:be: 4e:8d:35:61:86:74:b4:e5:df:a6:c7:74:5b:bb:76:d0:6f:61: 22:dc:74:77:e4:41:61:b3:a3:2e:1b:5d:f4:79:56:39:89:1c: 13:d2:12:99:e3:5f:14:b1:11:58:ca:ee:35:48:f2:0a:94:79: 62:aa:4a:5f:47:ed:c7:6e:01:ad:7f:fb:d4:c0:f7:cb:ba:06: ad:c5:a3:17:f3:cc:ab:2e:7a:f7:79:5d:e8:a2:64:26:42:ac: 22:5a:c2:5f:c1:1c:69:b4:54:91:31:32:69:cb:88:3f:fd:40: f1:de:17:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWhnVFSytb4+EpHD9kBToxZtBjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTEyMTYyMjE3MTlaFw0yNTEyMjAwMzEzMTlaMDMxMTAvBgNV BAMTKDY2QUQ3OTkwOUE0M0NBNkFCNUVBQzlBRjBBQUJBRTQ0RDI4Q0REMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlA+dHkDUZNA98cHCKaZqzwVU hOsJmYq9RZJMomH9a651xUvKaI0/pRZizKxohHlSzh41BP6vbsVZ0KpXyMis3MaW lqIJfcBwAB/kHUdZRcgAFLaLR9wIrCHne4+l6H37c7Tio/2xygTpGKWO40Pm0AJM K3kNwuSfoE+JqzneOQBTfQKzwWYOUTY7D37TOw05Wjz/EvSjKMrZ+QraP1v0Z9E2 BZHniDgEwUjk4oNdEwSfNIkoIssRDYPPfqz6Dkf+Qrcg2nWiGW7u+AeIf4tOSe3+ wnbEtPMz9A0BaCu0tbvRciE53/Hiq3bMHD3xWbe4a++N/O04WKNZ6hRsNdU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZq15kJpDymq16smvCquuRNKM3QYwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE950EuLdg246cduBhnnuEQsdTjWolm1VzrM Wwied4q0Ao5T8NErG9naCzQ8CXdHvX2bUkZoHEsDuRTqPVFkqa5RxqxvoQtLxGW/ u+9R4hHD2gl4SLyEteV0NMpZwt3npDg9E/m7LczxDwHQrhlP9N/E2PkCUDzS8b/R mRph0ljoZ/k4v96wNlaouphlWZlbvk6NNWGGdLTl36bHdFu7dtBvYSLcdHfkQWGz oy4bXfR5VjmJHBPSEpnjXxSxEVjK7jVI8gqUeWKqSl9H7cduAa1/+9TA98u6Bq3F oxfzzKsuevd5XeiiZCZCrCJawl/BHGm0VJExMmnLiD/9QPHeF+k= -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:22 2025 by rpki-client