This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: 4azSop/vAqoSrG71gMjqIs/4HkwaX+tvessTlXtPez4= Subject key identifier: DC:37:A5:63:45:60:15:55:C6:F6:12:A1:57:72:86:EE:03:7C:15:86 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 530FF8F2DD269BA230CA88CA8D85E71288D6E7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 0215 Signing time: Fri 05 Dec 2025 00:41:51 +0000 Manifest this update: Fri 05 Dec 2025 00:36:51 +0000 Manifest next update: Mon 08 Dec 2025 07:51:51 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: 04NQmcG1YBntt5ThMjBULSklFNOkAYZWA7v/A+Iuo4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0f:f8:f2:dd:26:9b:a2:30:ca:88:ca:8d:85:e7:12:88:d6:e7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Dec 5 00:36:51 2025 GMT Not After : Dec 8 07:51:51 2025 GMT Subject: CN=DC37A56345601555C6F612A1577286EE037C1586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:40:a2:08:da:7c:6c:a2:e1:5a:f8:4f:d5: 41:3e:a4:e8:3c:83:98:62:5a:8e:0d:a5:2d:e8:bb: 1a:81:4c:89:a5:a4:28:97:f0:6f:9d:cb:9f:f7:c9: 2b:a4:41:db:6c:36:49:f9:77:18:b8:35:6c:32:fb: b4:21:93:30:6f:cd:1d:3f:38:4f:d3:93:07:ae:1b: 16:e4:db:d4:3a:cf:f0:46:14:ad:f1:e4:74:4a:df: 11:0f:6a:f9:66:f3:4e:3b:9c:dc:88:e9:b0:d0:df: 85:5b:66:47:d8:fb:52:ac:31:e6:6b:77:9f:3b:8e: 40:eb:ba:18:6c:b5:f6:89:36:19:cb:20:05:ec:0e: 3f:3b:8b:e0:a3:35:6f:b9:9e:fc:85:fe:20:4b:42: 71:41:b0:80:a8:48:cb:3f:26:fd:2c:f7:ed:41:45: ba:99:5e:5d:32:97:5b:f0:b5:2f:da:ee:9e:48:9e: af:85:ce:b7:5a:7c:c0:7a:0e:ca:e3:32:10:a3:3e: ab:4a:4f:e9:82:ec:4d:e4:b3:42:b9:6b:54:3b:bc: c9:9d:03:e8:b5:96:78:a0:f2:33:b3:d2:b4:dc:2e: 59:b5:6e:bb:bd:61:bd:cb:6c:31:d2:54:49:13:ea: a6:8e:ef:9d:ed:5d:bb:05:87:24:36:83:94:7a:0a: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:A5:63:45:60:15:55:C6:F6:12:A1:57:72:86:EE:03:7C:15:86 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:eb:a3:b3:36:38:7f:2c:16:70:55:92:b8:30:e2:c9:df:6c: af:01:71:85:3b:a1:78:03:94:41:86:88:d5:69:7f:0b:8b:de: d7:bc:c5:2a:de:2b:e7:b1:15:76:b9:bc:9f:47:29:e8:82:70: 87:78:34:fd:78:d6:68:0f:55:9d:62:2e:e7:1f:bc:f8:89:a4: 60:f7:50:c1:b4:0e:85:16:b6:b4:bd:ba:2a:9f:c0:b0:92:6e: cb:c4:63:53:d6:9a:95:8c:50:a7:63:4e:db:49:ae:88:dc:1d: fc:d3:95:56:ea:3f:40:16:b9:d7:c2:a4:48:1a:5c:45:32:0c: 6e:9f:94:e5:ca:20:d9:00:9c:a0:7f:a0:19:43:e7:dc:38:3f: 73:8b:fb:cc:79:e5:48:22:b0:e5:51:45:f2:19:64:e1:30:fa: 0e:c3:8c:f4:c4:dd:07:42:69:54:99:bd:18:8f:5f:96:1e:82: c9:b6:be:04:83:5c:2c:f2:23:b0:12:8c:5a:cb:fa:77:8a:8a: 6a:f8:af:4a:f6:7b:00:b2:37:9b:50:b6:ed:0d:49:0d:84:ad: 17:b7:d2:b9:63:fc:d2:28:06:a8:4f:34:eb:f0:b7:24:3a:fb: a6:df:19:b6:66:c2:5d:fc:f8:54:34:ef:75:60:a1:ee:5f:c9: db:5d:03:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUw/48t0mm6IwyojKjYXnEojW578wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTEyMDUwMDM2NTFaFw0yNTEyMDgwNzUxNTFaMDMxMTAvBgNV BAMTKERDMzdBNTYzNDU2MDE1NTVDNkY2MTJBMTU3NzI4NkVFMDM3QzE1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BkCiCNp8bKLhWvhP1UE+pOg8 g5hiWo4NpS3ouxqBTImlpCiX8G+dy5/3ySukQdtsNkn5dxi4NWwy+7QhkzBvzR0/ OE/TkweuGxbk29Q6z/BGFK3x5HRK3xEPavlm8047nNyI6bDQ34VbZkfY+1KsMeZr d587jkDruhhstfaJNhnLIAXsDj87i+CjNW+5nvyF/iBLQnFBsICoSMs/Jv0s9+1B RbqZXl0yl1vwtS/a7p5Inq+FzrdafMB6DsrjMhCjPqtKT+mC7E3ks0K5a1Q7vMmd A+i1lnig8jOz0rTcLlm1bru9Yb3LbDHSVEkT6qaO753tXbsFhyQ2g5R6Cia9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3DelY0VgFVXG9hKhV3KG7gN8FYYwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjro7M2OH8sFnBVkrgw4snfbK8BcYU7oXgD lEGGiNVpfwuL3te8xSreK+exFXa5vJ9HKeiCcId4NP141mgPVZ1iLucfvPiJpGD3 UMG0DoUWtrS9uiqfwLCSbsvEY1PWmpWMUKdjTttJrojcHfzTlVbqP0AWudfCpEga XEUyDG6flOXKINkAnKB/oBlD59w4P3OL+8x55UgisOVRRfIZZOEw+g7DjPTE3QdC aVSZvRiPX5Yegsm2vgSDXCzyI7ASjFrL+neKimr4r0r2ewCyN5tQtu0NSQ2ErRe3 0rlj/NIoBqhPNOvwtyQ6+6bfGbZmwl38+FQ073Vgoe5fydtdA4E= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:46 2025 by rpki-client