This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: W0oWGtQBws1r2TNWxz/64DSjYyQZ2u9oMT1qTImM4p4= Subject key identifier: 8F:70:B1:FD:E4:AA:CA:AD:60:57:BF:86:B6:17:D7:CF:4D:64:EF:37 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 360254C0E4676350148CF8C5C6626C144073294C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0221 Signing time: Sat 06 Dec 2025 11:00:06 +0000 Manifest this update: Sat 06 Dec 2025 10:55:06 +0000 Manifest next update: Tue 09 Dec 2025 14:11:06 +0000 Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 2: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 3: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 4: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: IwXOcWpnKtJYlTwnpG2yWPPBt0Q55ehoqNhzFmbRb8Q=) 5: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:02:54:c0:e4:67:63:50:14:8c:f8:c5:c6:62:6c:14:40:73:29:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Dec 6 10:55:06 2025 GMT Not After : Dec 9 14:11:06 2025 GMT Subject: CN=8F70B1FDE4AACAAD6057BF86B617D7CF4D64EF37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:57:a9:aa:ea:db:e3:59:d5:ae:f5:c2:82: 83:07:b8:65:cf:c1:19:1e:79:a3:55:7d:95:66:5e: ac:2c:52:e7:51:16:13:9e:46:76:43:cd:3b:9c:a7: 48:b9:5d:c4:42:17:e1:1b:e8:bb:91:ab:42:69:c1: 85:2a:0f:69:c4:72:45:38:e7:60:48:f6:11:91:21: f7:e3:84:e7:e2:3f:89:d7:18:b0:7b:d2:a8:a8:36: 66:3f:11:2b:10:78:f3:14:04:05:52:ad:52:81:1b: 43:6c:99:24:ce:9b:5b:72:19:e8:b7:fb:4a:7d:eb: a2:63:90:e5:2b:fe:e0:dd:00:a7:7d:57:0f:06:70: 0e:67:6e:f0:71:6f:58:9d:a9:a3:de:cd:2f:50:5c: df:2d:80:f9:5e:30:ed:f6:21:0a:b3:20:97:72:2c: 24:10:eb:00:3c:1c:5d:be:2c:56:69:a9:69:5e:da: 0c:75:ca:8a:2b:9e:5d:87:ef:42:30:0e:a0:9f:13: 8d:89:dd:10:11:dc:95:a3:95:bb:64:ae:98:0e:1c: b5:70:8f:30:c6:a9:36:69:67:48:26:74:c1:49:f0: 7e:60:f0:35:4d:75:06:c0:98:c7:af:bf:8d:10:9d: 4f:d0:1a:7d:64:2f:04:8e:3b:0b:af:92:0b:22:db: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:B1:FD:E4:AA:CA:AD:60:57:BF:86:B6:17:D7:CF:4D:64:EF:37 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9c:9d:5f:f2:2e:91:12:56:da:a3:ff:bf:2c:ef:be:3e:75: 63:f3:02:4e:6d:94:4f:fd:66:f9:44:db:bc:17:ab:54:a9:2f: 9d:d3:d8:89:d8:59:d9:0c:4f:8d:2b:ce:1f:1d:ad:d6:2a:b6: 2f:24:8f:7c:7c:a1:47:98:7e:4f:73:b1:c1:94:9c:cf:91:b5: dd:8d:f5:94:a6:d3:ad:53:f8:d5:95:58:63:a2:44:b8:de:33: f2:7a:ef:63:fe:70:f6:80:54:23:ba:4c:66:7a:59:8f:4f:b0: ca:09:ca:c4:79:5c:35:41:44:7c:45:c5:7a:cf:c3:05:b7:1e: d0:f7:d7:85:1d:32:55:ad:72:d7:d1:14:2c:cb:64:3f:5f:fa: 4b:18:98:0e:f1:03:36:ca:cc:87:f4:c7:dd:ca:77:76:98:51: 79:9c:7a:7a:a3:d7:c7:2c:63:dc:49:f5:de:78:fd:e5:30:31: fc:b4:ef:30:d6:63:7d:be:bb:48:cd:da:6f:5f:55:ab:ce:ad: 88:81:b3:2a:0f:11:3b:81:9b:0d:31:a3:ad:52:4a:ad:0e:7e: ee:84:db:56:07:04:fb:1e:87:bd:f6:21:70:e9:1f:74:34:1d: 67:c8:c4:67:25:45:d9:90:02:9d:56:67:0a:94:7b:3a:9d:fe: bf:10:ae:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgJUwORnY1AUjPjFxmJsFEBzKUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTEyMDYxMDU1MDZaFw0yNTEyMDkxNDExMDZaMDMxMTAvBgNV BAMTKDhGNzBCMUZERTRBQUNBQUQ2MDU3QkY4NkI2MTdEN0NGNEQ2NEVGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsFepqurb41nVrvXCgoMHuGXP wRkeeaNVfZVmXqwsUudRFhOeRnZDzTucp0i5XcRCF+Eb6LuRq0JpwYUqD2nEckU4 52BI9hGRIffjhOfiP4nXGLB70qioNmY/ESsQePMUBAVSrVKBG0NsmSTOm1tyGei3 +0p966JjkOUr/uDdAKd9Vw8GcA5nbvBxb1idqaPezS9QXN8tgPleMO32IQqzIJdy LCQQ6wA8HF2+LFZpqWle2gx1yoornl2H70IwDqCfE42J3RAR3JWjlbtkrpgOHLVw jzDGqTZpZ0gmdMFJ8H5g8DVNdQbAmMevv40QnU/QGn1kLwSOOwuvkgsi27fjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3Cx/eSqyq1gV7+GthfXz01k7zcwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2cnV/yLpESVtqj/78s774+dWPzAk5tlE/9 ZvlE27wXq1SpL53T2InYWdkMT40rzh8drdYqti8kj3x8oUeYfk9zscGUnM+Rtd2N 9ZSm061T+NWVWGOiRLjeM/J672P+cPaAVCO6TGZ6WY9PsMoJysR5XDVBRHxFxXrP wwW3HtD314UdMlWtctfRFCzLZD9f+ksYmA7xAzbKzIf0x93Kd3aYUXmcenqj18cs Y9xJ9d54/eUwMfy07zDWY32+u0jN2m9fVavOrYiBsyoPETuBmw0xo61SSq0Ofu6E 21YHBPseh732IXDpH3Q0HWfIxGclRdmQAp1WZwqUezqd/r8QrlA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:50:59 2025 by rpki-client