This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: OS70MnA+tlwnk+xvUCVdD6vYy6ZL+AXcUyvoFuNx+fU= Subject key identifier: E3:46:FC:F3:B8:B4:A6:FC:BE:63:96:40:6D:CE:B4:0B:EA:F4:17:FD Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 2622E06AA7366CBA32E133B39F37B5210E862DA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 01CF Signing time: Thu 04 Dec 2025 17:32:23 +0000 Manifest this update: Thu 04 Dec 2025 17:27:23 +0000 Manifest next update: Sun 07 Dec 2025 23:49:23 +0000 Files and hashes: 1: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: RCuhg/8M6rjL1ZiP7ooThwQd2BPIkZvqKViwelG5zjg=) 2: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: uz+mWVTVia+vitlv373HGRqQqyhynrWuHzLw/EVOgos=) 3: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: DU0fCsxoRXxLuGIvLie3IhsmUfNJhRn0zykqF5A0jpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:22:e0:6a:a7:36:6c:ba:32:e1:33:b3:9f:37:b5:21:0e:86:2d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Dec 4 17:27:23 2025 GMT Not After : Dec 7 23:49:23 2025 GMT Subject: CN=E346FCF3B8B4A6FCBE6396406DCEB40BEAF417FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:72:01:ee:d6:fd:f5:af:4b:b7:fa:58:e0: 2a:33:8f:06:aa:23:f6:99:11:d3:a3:ed:81:08:13: 1f:ab:ca:dd:82:2c:bf:e3:46:a5:85:df:5a:df:bc: 69:15:af:2c:9b:41:19:5b:07:51:3f:12:eb:ff:30: f7:c3:5a:2e:5b:48:97:1c:6f:72:f6:68:56:bb:8d: 6a:5c:69:6e:32:8c:dd:8e:34:5b:5b:b6:45:67:5f: 3f:bb:0a:19:1d:c3:66:b4:5c:f1:3d:17:34:ec:3d: dc:f4:f6:51:76:8b:96:59:0a:04:16:ca:1e:fd:6b: c4:34:e0:cb:0d:78:8b:17:09:94:9d:0b:29:c4:da: 24:e9:fc:75:70:63:b9:01:22:68:e2:8a:89:6c:af: f4:1f:d8:0a:74:81:aa:07:ac:0c:a2:00:7c:fb:e7: 4a:91:2f:5c:62:ad:4b:bd:63:40:8f:16:59:37:27: 60:cb:fd:9a:d3:1e:ec:1a:29:3d:fe:72:96:e3:35: 5b:3b:59:17:b8:4b:dd:81:49:9e:98:bc:f6:c5:e0: f3:00:c1:1b:28:90:b7:b3:32:66:cd:03:ee:f5:a5: ec:b6:30:dc:0d:9a:16:eb:12:26:69:1d:b9:c0:a7: a9:5c:f8:2b:2f:fd:70:9e:66:96:77:8a:aa:ce:f0: 20:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:FC:F3:B8:B4:A6:FC:BE:63:96:40:6D:CE:B4:0B:EA:F4:17:FD X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:51:69:69:d0:ea:46:89:2a:83:8f:22:ed:0d:5f:ba:49:ff: 1b:b6:72:9c:80:cf:ef:02:93:97:85:99:05:13:61:1e:d0:e9: ef:53:47:29:8b:83:6c:9e:08:08:cb:be:a9:86:9a:80:8b:d3: e6:fe:8e:0b:ea:3f:28:5a:93:c9:45:13:fa:9c:9f:3f:79:0e: 01:be:08:7b:29:55:dc:9c:8b:ab:37:35:e8:25:e7:9e:bc:f9: 2e:9c:93:6a:f8:20:00:e0:bf:11:49:44:4f:fe:5c:e5:a7:18: 2e:e7:b2:ec:f6:f6:ae:8f:42:fe:df:7a:f8:98:e2:8b:f3:ba: 8e:77:30:1a:9b:dc:21:bd:27:b2:7f:11:ad:3c:c1:ba:f5:6c: 99:e0:cb:ae:f2:70:95:45:40:26:87:55:3c:8b:8c:bb:a8:f2: 07:58:ad:df:a1:95:fc:de:ba:79:71:f6:94:1a:f6:7c:ae:aa: 27:e5:f4:2a:d8:0c:9c:80:69:61:3f:04:39:5d:6f:b9:40:d8: 26:8a:c0:52:44:49:59:2a:4e:70:0e:79:35:5a:e4:e6:49:d0: ce:77:67:07:c9:98:b8:27:6e:f3:31:39:6e:76:f7:ba:12:6e: 0c:1f:92:7d:fc:06:be:47:bf:be:bf:63:b1:59:ca:0f:65:3c: e3:dc:0a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiLgaqc2bLoy4TOznze1IQ6GLagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTEyMDQxNzI3MjNaFw0yNTEyMDcyMzQ5MjNaMDMxMTAvBgNV BAMTKEUzNDZGQ0YzQjhCNEE2RkNCRTYzOTY0MDZEQ0VCNDBCRUFGNDE3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr8XIB7tb99a9Lt/pY4Cozjwaq I/aZEdOj7YEIEx+ryt2CLL/jRqWF31rfvGkVryybQRlbB1E/Euv/MPfDWi5bSJcc b3L2aFa7jWpcaW4yjN2ONFtbtkVnXz+7Chkdw2a0XPE9FzTsPdz09lF2i5ZZCgQW yh79a8Q04MsNeIsXCZSdCynE2iTp/HVwY7kBImjiiolsr/Qf2Ap0gaoHrAyiAHz7 50qRL1xirUu9Y0CPFlk3J2DL/ZrTHuwaKT3+cpbjNVs7WRe4S92BSZ6YvPbF4PMA wRsokLezMmbNA+71pey2MNwNmhbrEiZpHbnAp6lc+Csv/XCeZpZ3iqrO8CBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40b887i0pvy+Y5ZAbc60C+r0F/0wHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFRaWnQ6kaJKoOPIu0NX7pJ/xu2cpyAz+8C k5eFmQUTYR7Q6e9TRymLg2yeCAjLvqmGmoCL0+b+jgvqPyhak8lFE/qcnz95DgG+ CHspVdyci6s3Negl5568+S6ck2r4IADgvxFJRE/+XOWnGC7nsuz29q6PQv7feviY 4ovzuo53MBqb3CG9J7J/Ea08wbr1bJngy67ycJVFQCaHVTyLjLuo8gdYrd+hlfze unlx9pQa9nyuqifl9CrYDJyAaWE/BDldb7lA2CaKwFJESVkqTnAOeTVa5OZJ0M53 ZwfJmLgnbvMxOW5297oSbgwfkn38Br5Hv76/Y7FZyg9lPOPcCrs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:33 2025 by rpki-client