This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: TcTz9/2rjBwzJb9OlQpJahlEsLXSTgSfN+5ew5asAaI= Subject key identifier: 64:0E:D2:A8:7F:AC:BE:EE:95:4C:22:71:8B:2C:9E:64:A7:50:CF:A3 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 48487B0E2B7E504F503CB7BB479E621C7966FE85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: B3 Signing time: Tue 09 Dec 2025 14:11:08 +0000 Manifest this update: Tue 09 Dec 2025 14:06:08 +0000 Manifest next update: Fri 12 Dec 2025 15:45:08 +0000 Files and hashes: 1: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) 2: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: 4Ihhej8zc8q/xafdZiB+NEXNVuG/Fhtz2cVcKjVCg9A=) 3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 15:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:7b:0e:2b:7e:50:4f:50:3c:b7:bb:47:9e:62:1c:79:66:fe:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Dec 9 14:06:08 2025 GMT Not After : Dec 12 15:45:08 2025 GMT Subject: CN=640ED2A87FACBEEE954C22718B2C9E64A750CFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:45:39:43:75:a7:aa:1b:3c:1e:e2:53:0c: 82:74:aa:db:24:22:70:b9:db:9b:84:bb:ed:59:68: 1f:0a:66:61:12:96:bf:41:52:bd:1b:d3:4c:fd:28: 90:34:71:17:ff:41:8a:17:65:30:f3:fc:b2:49:40: db:3e:80:b6:5d:32:23:c4:1d:30:b1:37:a6:63:89: 0b:b1:59:03:92:d5:f4:c3:fd:f1:ef:34:90:9b:f5: 26:40:4b:51:63:a0:67:d9:6f:fe:44:78:4b:df:aa: 70:3a:8d:e5:96:51:b8:67:9c:ef:01:40:77:95:40: cc:57:e2:d0:e8:ab:35:73:ea:b8:6c:57:19:31:b3: a5:61:3b:19:e3:4b:ed:59:b2:22:76:e2:82:6f:e5: 2b:21:e0:b6:d6:bb:23:ec:58:4d:16:54:df:a9:a9: 9b:bb:de:bd:60:be:41:b9:67:d6:21:b8:05:d0:00: d0:8e:13:29:cf:b7:d2:43:de:8e:11:99:dd:54:8f: 1b:9f:5d:00:de:2d:c2:02:f0:b3:97:05:ca:d2:a0: 3f:cf:c3:b3:3d:17:84:e6:51:87:08:0c:d8:cb:2d: 9f:b3:61:a0:6e:57:6f:ee:3b:8c:1e:89:67:42:bc: 97:08:5e:fd:da:92:43:a6:8d:5f:37:f6:97:9e:cc: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0E:D2:A8:7F:AC:BE:EE:95:4C:22:71:8B:2C:9E:64:A7:50:CF:A3 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a1:20:8d:fc:7f:13:eb:22:47:cd:f0:36:20:71:c8:9e:d9: 3e:47:af:f2:3c:85:5e:2f:67:aa:17:ba:af:f7:d4:80:e8:dd: f9:9e:cf:30:2f:f7:70:9f:74:41:26:c2:af:d8:61:57:2c:e5: 6a:51:4f:46:d8:77:dd:4e:82:26:44:b3:dc:d8:be:2e:5d:90: cb:2d:08:dc:8e:e4:da:74:e2:92:f0:39:25:f4:77:be:f2:9a: 65:61:24:a1:fa:ad:4e:4e:cf:fd:e5:81:1d:ae:db:f8:56:b6: 12:9a:1b:d4:aa:b0:e8:1a:7d:82:ee:09:80:03:6c:7e:52:b8: 99:77:fc:84:26:b4:cd:7b:bc:d9:a8:26:e7:36:65:31:4d:1e: a9:12:bc:c7:6e:47:5b:b4:61:8d:00:57:66:e7:19:47:05:b3: 03:d8:bf:23:9c:b6:d4:2a:eb:97:63:29:8d:ea:fd:e9:2e:a9: 54:a6:7f:a7:e6:5d:66:76:60:eb:68:16:bb:c4:53:b4:7e:a9: 26:e8:b8:8e:89:56:8c:4e:6b:be:d0:b6:f5:6a:86:fc:fb:b4: c7:2f:53:e0:37:03:10:98:18:f9:91:c8:e6:76:1c:3b:01:19: 43:e9:1b:68:96:5f:29:cb:21:10:b9:01:ab:d3:cf:b4:2e:e5: 04:35:d7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEh7Dit+UE9QPLe7R55iHHlm/oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTEyMDkxNDA2MDhaFw0yNTEyMTIxNTQ1MDhaMDMxMTAvBgNV BAMTKDY0MEVEMkE4N0ZBQ0JFRUU5NTRDMjI3MThCMkM5RTY0QTc1MENGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgUU5Q3Wnqhs8HuJTDIJ0qtsk InC525uEu+1ZaB8KZmESlr9BUr0b00z9KJA0cRf/QYoXZTDz/LJJQNs+gLZdMiPE HTCxN6ZjiQuxWQOS1fTD/fHvNJCb9SZAS1FjoGfZb/5EeEvfqnA6jeWWUbhnnO8B QHeVQMxX4tDoqzVz6rhsVxkxs6VhOxnjS+1ZsiJ24oJv5Ssh4LbWuyPsWE0WVN+p qZu73r1gvkG5Z9YhuAXQANCOEynPt9JD3o4Rmd1UjxufXQDeLcIC8LOXBcrSoD/P w7M9F4TmUYcIDNjLLZ+zYaBuV2/uO4weiWdCvJcIXv3akkOmjV839peezEABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZA7SqH+svu6VTCJxiyyeZKdQz6MwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWhII38fxPrIkfN8DYgccie2T5Hr/I8hV4v Z6oXuq/31IDo3fmezzAv93CfdEEmwq/YYVcs5WpRT0bYd91OgiZEs9zYvi5dkMst CNyO5Np04pLwOSX0d77ymmVhJKH6rU5Oz/3lgR2u2/hWthKaG9SqsOgafYLuCYAD bH5SuJl3/IQmtM17vNmoJuc2ZTFNHqkSvMduR1u0YY0AV2bnGUcFswPYvyOcttQq 65djKY3q/ekuqVSmf6fmXWZ2YOtoFrvEU7R+qSbouI6JVoxOa77QtvVqhvz7tMcv U+A3AxCYGPmRyOZ2HDsBGUPpG2iWXynLIRC5AavTz7Qu5QQ119k= -----END CERTIFICATE-----Generated at Wed Dec 10 02:14:56 2025 by rpki-client