This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: T1ckGCr0QYI8OAIUi2vKJAg3eCh4eZWgx+h7sbAjE2M= Subject key identifier: 80:B4:04:5D:31:CC:6F:23:C2:C5:3E:6D:EE:09:D8:BA:71:5A:41:87 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 6749EBF79E9CEC9828E7F02DF7BD759C3E902865 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 052D Signing time: Sun 07 Dec 2025 03:11:22 +0000 Manifest this update: Sun 07 Dec 2025 03:06:22 +0000 Manifest next update: Wed 10 Dec 2025 13:08:22 +0000 Files and hashes: 1: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: nEMJTvskeFEJkb+hXryhmvFKtIkXHCRfWPlYujGjbfs=) 2: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) 3: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:eb:f7:9e:9c:ec:98:28:e7:f0:2d:f7:bd:75:9c:3e:90:28:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Dec 7 03:06:22 2025 GMT Not After : Dec 10 13:08:22 2025 GMT Subject: CN=80B4045D31CC6F23C2C53E6DEE09D8BA715A4187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:2d:41:14:4c:60:9e:01:48:f5:dd:22:17: 3a:3b:5c:7c:d6:70:40:e4:8e:48:d6:51:80:44:40: 1f:2d:50:c0:d1:01:e0:e0:1a:41:e7:a7:e6:17:02: 78:1e:ec:7e:6e:0a:b8:f9:13:1e:cd:ad:ea:22:40: e3:19:94:91:13:28:a3:68:db:08:65:3d:78:f8:be: 11:b8:77:07:90:6a:b8:27:85:cc:d1:49:d0:e1:5b: d2:8c:bf:5e:3c:1a:8d:c8:4d:57:8e:70:ba:d7:b3: 6b:67:e7:cc:48:96:68:7f:23:be:30:9a:d3:63:82: 45:65:81:90:ff:ee:b6:0b:fa:e8:c8:69:5b:c7:4b: 88:10:7a:25:5b:5a:79:57:cb:43:ff:d4:41:e0:5d: 45:77:ae:45:be:92:ea:cc:ed:02:c2:b5:00:60:fc: 39:07:65:96:64:e8:73:02:f2:f6:69:5a:13:3e:f1: a7:7f:57:49:f0:77:69:cc:2c:01:1b:9e:a1:d5:31: 5d:0d:bb:85:73:2e:cf:6e:9f:7a:f0:7d:98:7d:9e: 92:3e:70:ba:f9:a8:49:30:d4:32:1b:86:29:39:ab: d0:c3:a5:ca:41:01:cf:94:d0:79:68:7c:4f:2c:65: 98:a0:7c:7e:a1:9f:44:98:9d:54:76:d3:65:3a:83: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B4:04:5D:31:CC:6F:23:C2:C5:3E:6D:EE:09:D8:BA:71:5A:41:87 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:eb:82:fc:aa:3f:4d:06:39:a1:fa:4b:a8:9d:a2:55:e3:05: 2d:05:be:8a:fb:34:5a:32:d9:5f:b5:30:35:49:44:59:9a:1a: 8b:69:dc:9b:f1:6a:54:a2:ff:a7:99:ed:ad:f8:c2:db:c6:52: c8:fa:02:ff:a7:93:8d:0b:d9:65:7c:89:f6:e3:51:13:e2:b9: b8:de:64:c4:76:66:bb:01:29:ca:07:fb:1e:62:19:5d:16:e2: 10:73:ce:cd:a7:69:7a:1d:e5:07:96:0e:c7:62:8a:59:ed:9d: 4a:03:75:77:6f:39:f4:f6:6b:91:e6:28:b3:a3:97:cb:bf:7f: 35:82:06:1b:4d:e9:7f:10:06:fb:5c:8c:da:76:c4:a4:a3:de: a4:ec:6c:a4:11:a3:0a:5a:a2:0a:f0:57:f1:21:44:34:6f:45: 26:41:89:a5:fa:d5:21:c4:6f:fc:fa:f7:9c:90:44:d5:46:c9: d7:46:5e:ae:58:eb:9b:e4:a4:d7:b3:92:76:c9:4d:fb:14:76: 3c:cf:68:78:18:f3:9f:a3:74:d4:fa:ae:ab:05:a6:82:7b:3a: c6:0a:74:97:e8:62:dd:cd:8e:cd:45:13:ac:1f:f4:ce:7a:bd: ed:e2:5b:2f:c3:40:c7:25:f5:67:38:16:69:1a:61:e5:4d:d7: 1a:42:be:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0nr956c7Jgo5/At9711nD6QKGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTEyMDcwMzA2MjJaFw0yNTEyMTAxMzA4MjJaMDMxMTAvBgNV BAMTKDgwQjQwNDVEMzFDQzZGMjNDMkM1M0U2REVFMDlEOEJBNzE1QTQxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduS1BFExgngFI9d0iFzo7XHzW cEDkjkjWUYBEQB8tUMDRAeDgGkHnp+YXAnge7H5uCrj5Ex7NreoiQOMZlJETKKNo 2whlPXj4vhG4dweQargnhczRSdDhW9KMv148Go3ITVeOcLrXs2tn58xIlmh/I74w mtNjgkVlgZD/7rYL+ujIaVvHS4gQeiVbWnlXy0P/1EHgXUV3rkW+kurM7QLCtQBg /DkHZZZk6HMC8vZpWhM+8ad/V0nwd2nMLAEbnqHVMV0Nu4VzLs9un3rwfZh9npI+ cLr5qEkw1DIbhik5q9DDpcpBAc+U0HlofE8sZZigfH6hn0SYnVR202U6g7ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLQEXTHMbyPCxT5t7gnYunFaQYcwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3rgvyqP00GOaH6S6idolXjBS0Fvor7NFoy 2V+1MDVJRFmaGotp3JvxalSi/6eZ7a34wtvGUsj6Av+nk40L2WV8ifbjURPiubje ZMR2ZrsBKcoH+x5iGV0W4hBzzs2naXod5QeWDsdiilntnUoDdXdvOfT2a5HmKLOj l8u/fzWCBhtN6X8QBvtcjNp2xKSj3qTsbKQRowpaogrwV/EhRDRvRSZBiaX61SHE b/z695yQRNVGyddGXq5Y65vkpNezknbJTfsUdjzPaHgY85+jdNT6rqsFpoJ7OsYK dJfoYt3Njs1FE6wf9M56ve3iWy/DQMcl9Wc4FmkaYeVN1xpCvjc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:06 2025 by rpki-client