This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: q+QaJ+xb7ODnMTpRUQWv7Q1kFnUL7Kg5vRoiXQFNvpU= Subject key identifier: 4D:0D:54:01:66:39:3B:5B:3F:E6:B1:71:58:6A:B3:16:DC:6F:AD:64 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 0732CDF2B819E20A8C695AF53F81C83D26D56B98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 038F Signing time: Sat 06 Dec 2025 23:10:04 +0000 Manifest this update: Sat 06 Dec 2025 23:05:04 +0000 Manifest next update: Wed 10 Dec 2025 02:36:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: Rs5jlPFNNXEGLX+fgmsw9pHSTuIrsST0OpNrLyrb3PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:32:cd:f2:b8:19:e2:0a:8c:69:5a:f5:3f:81:c8:3d:26:d5:6b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Dec 6 23:05:04 2025 GMT Not After : Dec 10 02:36:04 2025 GMT Subject: CN=4D0D540166393B5B3FE6B171586AB316DC6FAD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:5b:11:4f:2c:c0:4e:06:e4:76:cf:cd:61: 70:a8:eb:9b:27:90:d3:aa:3e:ae:ba:3f:b5:32:6f: 23:31:f1:44:17:0e:fd:a4:0a:9b:7f:7e:97:75:2c: 5f:97:e0:6a:ba:19:7e:c1:f9:d6:2c:23:68:d9:85: 51:9f:6e:64:f6:5b:b9:ac:5b:67:e6:c9:0f:7e:9a: 19:75:13:4c:78:79:87:fe:b7:63:d4:a9:eb:b2:42: 0c:a2:db:ec:6b:b0:2f:32:d8:69:0e:75:5d:bc:1b: ab:fe:a3:e4:0f:30:84:71:aa:27:ec:17:6e:57:0a: 9b:df:7a:66:51:1d:33:6f:4c:50:a4:5e:27:4c:83: 22:0e:2b:bb:eb:54:c5:46:41:15:08:5b:14:84:30: a4:e3:dc:fd:08:64:79:57:76:dc:c8:1e:fe:ad:83: 1b:20:f1:8f:04:7c:b4:7b:0b:b9:fe:41:4d:ca:73: 38:1d:39:f5:f2:e7:97:0a:b1:d8:94:87:a7:33:b0: 9f:e5:3a:7e:54:8c:b4:31:fc:a1:3b:ab:27:0e:78: 74:64:76:4b:10:5f:97:95:1c:00:7d:d4:c5:dd:60: 5a:27:63:ba:c4:26:e5:36:c8:07:a4:4c:94:1d:20: 9f:45:e4:8d:04:12:01:6f:49:9f:28:ad:d5:2d:fa: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0D:54:01:66:39:3B:5B:3F:E6:B1:71:58:6A:B3:16:DC:6F:AD:64 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7a:57:af:84:0a:47:84:74:e4:56:b4:72:55:9b:4e:fe:42: 32:a1:3b:eb:49:00:35:fc:4d:7b:b5:0f:6b:5e:52:4f:c8:5b: df:cc:01:c4:ac:46:c6:12:d1:2d:5e:af:fa:dc:28:d7:af:57: 3d:c6:79:3e:84:8a:c6:36:b2:a9:2e:6a:59:91:62:76:d3:34: a9:de:2b:24:45:aa:17:7e:14:1e:7a:bb:72:67:95:d4:23:f9: 87:53:58:c5:e6:51:e2:77:5d:80:75:1a:7f:66:8e:21:0e:aa: e6:db:bc:74:60:7c:76:87:1d:13:cd:f5:55:d0:95:d0:bc:8f: 4f:28:96:bb:4d:0b:e5:92:c8:6e:77:6b:0c:5f:62:e1:72:36: 63:a3:70:3d:b8:7f:95:0f:be:88:ea:00:ab:bd:ca:34:a7:7e: a2:b1:72:89:76:5a:94:52:f4:4c:56:16:f5:a0:b0:20:10:6e: 53:aa:d7:08:79:67:ad:d4:47:76:79:4c:7c:bb:b7:04:0d:93: bf:ed:33:3e:b0:a8:2a:ad:c4:ce:6e:32:97:a9:cb:c3:7c:da: 55:1d:7b:23:5e:9f:22:e5:d0:c8:cb:e4:e5:7e:62:e8:a4:19: fe:02:0b:9b:39:19:dc:83:73:40:0f:4b:37:a8:c8:6c:82:b6: 5c:c6:46:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzLN8rgZ4gqMaVr1P4HIPSbVa5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTEyMDYyMzA1MDRaFw0yNTEyMTAwMjM2MDRaMDMxMTAvBgNV BAMTKDREMEQ1NDAxNjYzOTNCNUIzRkU2QjE3MTU4NkFCMzE2REM2RkFENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYglsRTyzATgbkds/NYXCo65sn kNOqPq66P7UybyMx8UQXDv2kCpt/fpd1LF+X4Gq6GX7B+dYsI2jZhVGfbmT2W7ms W2fmyQ9+mhl1E0x4eYf+t2PUqeuyQgyi2+xrsC8y2GkOdV28G6v+o+QPMIRxqifs F25XCpvfemZRHTNvTFCkXidMgyIOK7vrVMVGQRUIWxSEMKTj3P0IZHlXdtzIHv6t gxsg8Y8EfLR7C7n+QU3KczgdOfXy55cKsdiUh6czsJ/lOn5UjLQx/KE7qycOeHRk dksQX5eVHAB91MXdYFonY7rEJuU2yAekTJQdIJ9F5I0EEgFvSZ8ordUt+vGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQ1UAWY5O1s/5rFxWGqzFtxvrWQwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALl6V6+ECkeEdORWtHJVm07+QjKhO+tJADX8 TXu1D2teUk/IW9/MAcSsRsYS0S1er/rcKNevVz3GeT6EisY2sqkualmRYnbTNKne KyRFqhd+FB56u3JnldQj+YdTWMXmUeJ3XYB1Gn9mjiEOqubbvHRgfHaHHRPN9VXQ ldC8j08olrtNC+WSyG53awxfYuFyNmOjcD24f5UPvojqAKu9yjSnfqKxcol2WpRS 9ExWFvWgsCAQblOq1wh5Z63UR3Z5THy7twQNk7/tMz6wqCqtxM5uMpepy8N82lUd eyNenyLl0MjL5OV+YuikGf4CC5s5GdyDc0APSzeoyGyCtlzGRhA= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:13 2025 by rpki-client