This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: bcZfN/G0gvGTPARw0ickFOM8ECY0GOmkvUlJPQq05rA= Subject key identifier: 01:F4:CF:5A:5E:A9:E3:01:93:18:B9:19:FB:DA:B1:DA:8C:F1:3D:AA Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 4B58253820978889A7A65674EEE03177F4C7EA07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0263 Signing time: Sat 06 Dec 2025 10:11:21 +0000 Manifest this update: Sat 06 Dec 2025 10:06:21 +0000 Manifest next update: Tue 09 Dec 2025 10:40:21 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: MKJSJ+SIrdC/r3ECz7hv3YgygrdB6iewafScyy501VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:58:25:38:20:97:88:89:a7:a6:56:74:ee:e0:31:77:f4:c7:ea:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Dec 6 10:06:21 2025 GMT Not After : Dec 9 10:40:21 2025 GMT Subject: CN=01F4CF5A5EA9E3019318B919FBDAB1DA8CF13DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:29:af:d6:81:65:10:33:e7:8e:5f:b4:9f: 1b:88:68:55:5f:86:eb:81:de:c2:32:c2:15:fa:0b: ac:c8:83:c7:64:d0:7c:8c:4d:1b:9c:6e:8d:cd:4f: 32:da:4d:29:be:14:40:2c:4a:57:83:3b:0f:6a:23: 44:cd:40:9c:d2:ac:1f:7d:92:7a:3a:56:89:90:55: 61:f9:72:75:70:9c:0e:a8:b0:6d:58:d0:74:ff:83: a8:9a:7a:f2:6b:ca:16:ee:ef:39:16:ee:4d:78:09: 8a:0a:c9:b1:cc:4f:ea:9a:3e:b9:b6:91:b6:bb:dd: c4:04:cd:f8:ec:9a:e8:76:7b:b7:5a:47:5e:06:4e: 7c:d2:e1:be:9c:bd:16:a3:b4:de:19:83:82:e3:6d: 47:f0:01:a9:e6:a8:93:f4:90:19:e8:77:6a:ed:e0: 40:a8:fc:0c:2e:0b:21:b2:eb:9c:e0:a1:32:6d:fa: 99:6a:8e:36:15:f0:e1:21:d0:fb:a6:6b:af:d5:4f: 49:a3:7a:6b:70:b7:5e:60:8e:5e:79:44:f6:48:a7: a4:a2:18:a0:b3:33:92:80:b9:67:b8:8a:90:ea:28: ad:52:db:73:3c:21:80:31:ca:91:31:c6:ce:11:a1: f1:a8:e1:9d:23:16:e1:5b:75:84:94:c7:d2:90:dc: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:CF:5A:5E:A9:E3:01:93:18:B9:19:FB:DA:B1:DA:8C:F1:3D:AA X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:c8:7d:14:cb:a5:c2:03:af:6a:a1:77:f6:c5:5f:3d:54: 09:7a:f1:7c:38:23:59:46:b0:24:35:e8:e7:37:d5:23:9e:1e: ec:ed:07:24:8d:2f:c8:04:5d:a0:dc:df:05:69:ca:93:fb:00: 65:73:f3:76:bc:69:ef:ea:d2:a4:32:1d:7c:51:9e:39:b1:d3: fb:59:ff:53:7d:bc:7f:58:98:b1:c3:d0:cd:16:8a:c4:d4:9c: 76:8c:8a:47:42:36:ad:9b:56:42:89:5a:d2:03:32:bf:8b:e9: 73:4b:21:fe:d2:9d:df:ef:43:80:7a:de:61:aa:53:c6:82:06: 1b:75:37:db:e9:af:cc:d3:5d:9a:4e:01:7c:5c:0c:93:1f:ea: 85:70:e7:77:68:53:71:df:00:fb:19:94:39:bc:a7:84:48:b1: a9:8b:00:9e:25:70:d6:1c:bd:ad:0f:7f:c5:b9:8b:ad:94:b7: 73:42:cb:44:c3:9f:53:39:eb:09:ff:23:0a:d9:59:70:f3:f5: 1b:40:18:03:2b:b2:eb:27:e1:1f:c2:77:4a:2d:16:68:be:f4: ba:e5:0e:93:88:fc:b3:f7:57:0c:31:f5:91:7b:03:ba:bf:1a: e7:3b:83:13:32:93:96:b3:57:57:12:aa:31:11:fa:4a:96:78: d8:13:39:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1glOCCXiImnplZ07uAxd/TH6gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTEyMDYxMDA2MjFaFw0yNTEyMDkxMDQwMjFaMDMxMTAvBgNV BAMTKDAxRjRDRjVBNUVBOUUzMDE5MzE4QjkxOUZCREFCMURBOENGMTNEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsymv1oFlEDPnjl+0nxuIaFVf huuB3sIywhX6C6zIg8dk0HyMTRucbo3NTzLaTSm+FEAsSleDOw9qI0TNQJzSrB99 kno6VomQVWH5cnVwnA6osG1Y0HT/g6iaevJryhbu7zkW7k14CYoKybHMT+qaPrm2 kba73cQEzfjsmuh2e7daR14GTnzS4b6cvRajtN4Zg4LjbUfwAanmqJP0kBnod2rt 4ECo/AwuCyGy65zgoTJt+plqjjYV8OEh0Puma6/VT0mjemtwt15gjl55RPZIp6Si GKCzM5KAuWe4ipDqKK1S23M8IYAxypExxs4RofGo4Z0jFuFbdYSUx9KQ3Lu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfTPWl6p4wGTGLkZ+9qx2ozxPaowHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDEyH0Uy6XCA69qoXf2xV89VAl68Xw4I1lG sCQ16Oc31SOeHuztBySNL8gEXaDc3wVpypP7AGVz83a8ae/q0qQyHXxRnjmx0/tZ /1N9vH9YmLHD0M0WisTUnHaMikdCNq2bVkKJWtIDMr+L6XNLIf7Snd/vQ4B63mGq U8aCBht1N9vpr8zTXZpOAXxcDJMf6oVw53doU3HfAPsZlDm8p4RIsamLAJ4lcNYc va0Pf8W5i62Ut3NCy0TDn1M56wn/IwrZWXDz9RtAGAMrsusn4R/Cd0otFmi+9Lrl DpOI/LP3Vwwx9ZF7A7q/Guc7gxMyk5azV1cSqjER+kqWeNgTOQE= -----END CERTIFICATE-----Generated at Sat Dec 6 19:50:10 2025 by rpki-client