This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: 28CP1WbG9M4i4aa4eJkj+W45y/4nDN7M19dUKb02MzU= Subject key identifier: 69:61:FA:D4:71:61:AC:06:DD:05:A6:74:19:59:FE:AF:3E:E9:26:AE Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 0BFB95143C6EFBB7081FDD6E43B349E0F55D5147 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 03A3 Signing time: Sat 06 Dec 2025 02:22:22 +0000 Manifest this update: Sat 06 Dec 2025 02:17:22 +0000 Manifest next update: Tue 09 Dec 2025 03:21:22 +0000 Files and hashes: 1: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 2: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) 3: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: Slk7eTg5zms11Ek887bPdk3M14uNblsY0SdHL5pC5b0=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fb:95:14:3c:6e:fb:b7:08:1f:dd:6e:43:b3:49:e0:f5:5d:51:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Dec 6 02:17:22 2025 GMT Not After : Dec 9 03:21:22 2025 GMT Subject: CN=6961FAD47161AC06DD05A6741959FEAF3EE926AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:53:42:37:2c:02:37:c7:04:11:f5:7e:8d:86: 8b:ff:75:c7:2b:5f:ca:44:3c:c2:e7:a7:e0:7d:2e: 35:7b:c5:d4:3e:99:41:d6:dc:03:52:4c:ae:dc:9b: 88:d4:e6:aa:35:2e:32:3f:bf:0f:3e:7d:3d:74:b6: d4:89:ef:0b:b4:12:bf:c0:e4:06:e4:10:e4:43:5f: b4:36:21:46:de:9f:b5:9f:76:2f:b6:c1:7f:c4:f4: a3:0a:96:56:e8:a7:55:5c:11:7d:0b:0c:fd:7c:5e: 0b:c8:df:90:08:80:94:53:84:56:0d:c5:d3:30:f2: 4b:f7:01:36:02:b1:ee:41:0a:d3:e3:0d:29:7b:3b: 93:2c:75:b0:8f:a1:14:92:7b:ef:f5:b6:91:77:f8: 13:e6:27:1d:a6:6f:6e:7e:0d:07:fa:55:ce:2a:3b: 3d:b4:67:b0:13:76:7d:4d:94:3a:99:0d:56:77:2f: e3:26:df:f3:d6:df:47:ca:b3:59:0e:b2:9f:56:9b: cb:31:ef:65:ea:fd:cc:10:02:b5:8d:71:12:2f:a2: 42:c8:71:90:63:43:f5:ce:07:ac:be:7e:ab:9f:e0: 46:40:27:9d:11:b5:76:31:fc:bb:86:19:ea:43:23: 41:65:fb:4f:a5:1f:b2:a3:e6:77:9e:1a:64:c5:7f: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:61:FA:D4:71:61:AC:06:DD:05:A6:74:19:59:FE:AF:3E:E9:26:AE X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b2:ba:61:89:95:34:30:c2:54:8d:ef:17:a2:88:23:be:85: 66:9f:32:4d:d0:e1:62:45:62:e8:91:48:49:a5:69:ec:58:41: 85:86:57:c2:4c:7d:2b:a0:72:5f:8b:d8:8f:e5:e5:76:4a:b2: e3:18:82:07:fa:6b:64:6f:0e:ae:89:ea:d6:5d:e8:e9:8e:fd: d3:ce:4b:26:ed:a6:82:c8:8f:94:8e:41:78:ef:da:3a:2b:2f: 76:b6:4d:a2:45:70:aa:1c:eb:19:af:92:af:b7:12:70:61:42: 3c:a0:70:40:fe:f0:5a:0e:5d:a6:bd:77:8d:38:8a:a3:55:8c: 1e:bc:99:e0:d4:84:9d:c8:2a:58:b0:f4:8a:18:2e:4d:7c:86: 44:02:59:fd:36:43:23:3b:cf:13:64:17:e7:b2:37:10:43:7b: 39:ce:11:5b:90:ad:29:3e:a5:c6:01:ed:5a:20:c1:a9:24:15: 63:b1:87:16:93:a3:4d:80:33:af:ab:8a:c9:f6:59:f3:c0:90: 87:a0:84:7f:cf:d9:ff:41:bb:7b:af:52:81:d9:41:8d:2a:4a: 14:a4:30:e6:58:58:1c:27:ff:ef:0d:0b:bc:c3:3a:24:20:bc: 11:d5:c9:ae:10:4c:4e:99:5c:79:cc:f6:03:b6:11:07:90:13: fc:67:a2:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/uVFDxu+7cIH91uQ7NJ4PVdUUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTEyMDYwMjE3MjJaFw0yNTEyMDkwMzIxMjJaMDMxMTAvBgNV BAMTKDY5NjFGQUQ0NzE2MUFDMDZERDA1QTY3NDE5NTlGRUFGM0VFOTI2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+U0I3LAI3xwQR9X6Nhov/dccr X8pEPMLnp+B9LjV7xdQ+mUHW3ANSTK7cm4jU5qo1LjI/vw8+fT10ttSJ7wu0Er/A 5AbkEORDX7Q2IUben7Wfdi+2wX/E9KMKllbop1VcEX0LDP18XgvI35AIgJRThFYN xdMw8kv3ATYCse5BCtPjDSl7O5MsdbCPoRSSe+/1tpF3+BPmJx2mb25+DQf6Vc4q Oz20Z7ATdn1NlDqZDVZ3L+Mm3/PW30fKs1kOsp9Wm8sx72Xq/cwQArWNcRIvokLI cZBjQ/XOB6y+fquf4EZAJ50RtXYx/LuGGepDI0Fl+0+lH7Kj5neeGmTFfyNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWH61HFhrAbdBaZ0GVn+rz7pJq4wHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmyumGJlTQwwlSN7xeiiCO+hWafMk3Q4WJF YuiRSEmlaexYQYWGV8JMfSugcl+L2I/l5XZKsuMYggf6a2RvDq6J6tZd6OmO/dPO SybtpoLIj5SOQXjv2jorL3a2TaJFcKoc6xmvkq+3EnBhQjygcED+8FoOXaa9d404 iqNVjB68meDUhJ3IKliw9IoYLk18hkQCWf02QyM7zxNkF+eyNxBDeznOEVuQrSk+ pcYB7VogwakkFWOxhxaTo02AM6+risn2WfPAkIeghH/P2f9Bu3uvUoHZQY0qShSk MOZYWBwn/+8NC7zDOiQgvBHVya4QTE6ZXHnM9gO2EQeQE/xnohk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:45 2025 by rpki-client