This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: QNDsLNxoZ94aBImr6UOEjH4r/i3WyS+6r/BIsNxEW6U= Subject key identifier: 07:03:3E:04:9E:D3:16:9D:74:5E:1F:83:92:21:D4:F6:49:3C:36:8D Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 0D5E434480E9AEC1ADD83DC29AE3BA7CD2DB3DC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: FC Signing time: Fri 05 Dec 2025 06:10:06 +0000 Manifest this update: Fri 05 Dec 2025 06:05:05 +0000 Manifest next update: Mon 08 Dec 2025 13:23:05 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: ajW2DARx8Gm7fuMzPz9MLacRRW180gMeT1WiSI6wQUM=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 3: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5e:43:44:80:e9:ae:c1:ad:d8:3d:c2:9a:e3:ba:7c:d2:db:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Dec 5 06:05:05 2025 GMT Not After : Dec 8 13:23:05 2025 GMT Subject: CN=07033E049ED3169D745E1F839221D4F6493C368D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:1f:8e:ec:87:71:a6:f4:1a:1e:df:a8:ab: 7b:3b:8a:78:78:b0:7e:6b:a4:e2:fb:f1:45:92:78: 4a:98:88:21:4a:74:cd:9b:62:c4:00:31:f8:00:f4: 5b:5f:18:9b:84:77:7f:82:ac:99:43:0a:26:b8:d6: f6:d9:8a:1c:5d:88:d5:09:9a:d8:5d:80:63:ae:5b: c2:86:97:62:e7:56:ff:2e:79:64:25:6e:20:41:1a: 29:e5:e7:ca:79:fe:17:bc:3b:9f:7e:59:7e:66:3f: cf:51:62:7f:93:3d:9b:e7:41:bc:6f:8a:fb:17:05: 06:67:4f:04:fd:2f:7c:ab:c9:1f:1f:7b:13:28:b1: 13:34:52:8c:db:21:3f:46:0b:03:c4:49:4d:26:a0: 72:e4:69:b7:51:3a:02:08:46:3b:d0:fe:ae:b7:39: f1:a9:56:f6:fa:c0:59:9f:69:f7:b7:f3:f8:59:21: b4:ec:1d:cd:04:2f:e9:e0:a4:6c:51:21:4d:5a:0f: c5:76:86:7e:9a:4e:f9:44:d3:4a:3c:25:49:f7:87: e1:0d:f7:92:6c:d0:4f:ab:a0:84:12:a3:c4:71:be: ab:a2:d6:37:98:1c:e3:fb:5f:81:01:68:0f:83:8b: fb:98:fe:19:b3:11:98:db:23:b8:a8:06:2a:1c:d7: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:03:3E:04:9E:D3:16:9D:74:5E:1F:83:92:21:D4:F6:49:3C:36:8D X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1b:88:e5:a2:4f:e6:7c:70:99:63:95:14:f6:34:c3:aa:d8: c4:97:3a:4f:70:44:f1:9b:81:5c:4b:62:83:4c:10:b3:15:29: dc:37:b1:f4:93:c1:ae:bf:84:bf:89:93:b3:94:e3:e7:05:cb: c1:05:7e:85:01:b1:fe:36:fd:18:9b:d5:aa:70:c8:6e:5d:7e: 8c:3e:b4:19:82:92:c9:d4:f9:36:d9:f4:2a:ba:dd:fc:29:8a: d9:ab:20:02:f9:03:ef:61:8c:5d:bb:b4:c7:d8:c7:e8:10:0a: 5b:1c:a3:80:59:d2:fe:7a:a0:31:64:a4:7e:22:4b:e7:39:5e: 0c:67:9a:ed:f2:43:c4:c9:34:cf:80:36:51:96:13:0e:82:3c: af:70:9f:23:87:9b:74:da:5e:d3:9f:76:49:28:8a:4e:2e:22: 25:ba:5d:42:56:96:23:0f:60:91:a8:ee:d5:28:30:e1:d0:ff: 94:d9:c3:65:ea:77:9b:d7:5e:f8:9c:d8:08:b2:4b:e2:47:fb: ca:8b:4f:e6:c2:5a:02:33:2c:19:58:a6:45:e5:fc:6a:a8:73: bd:19:8d:75:9e:b7:92:8f:65:88:68:5d:4e:0a:e6:b8:1f:06: f3:36:59:fb:14:62:fa:98:1c:2e:9e:b0:92:41:91:35:1c:d1: 66:5c:d5:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDV5DRIDprsGt2D3CmuO6fNLbPcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTEyMDUwNjA1MDVaFw0yNTEyMDgxMzIzMDVaMDMxMTAvBgNV BAMTKDA3MDMzRTA0OUVEMzE2OUQ3NDVFMUY4MzkyMjFENEY2NDkzQzM2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlB+O7IdxpvQaHt+oq3s7inh4 sH5rpOL78UWSeEqYiCFKdM2bYsQAMfgA9FtfGJuEd3+CrJlDCia41vbZihxdiNUJ mthdgGOuW8KGl2LnVv8ueWQlbiBBGinl58p5/he8O59+WX5mP89RYn+TPZvnQbxv ivsXBQZnTwT9L3yryR8fexMosRM0UozbIT9GCwPESU0moHLkabdROgIIRjvQ/q63 OfGpVvb6wFmfafe38/hZIbTsHc0EL+ngpGxRIU1aD8V2hn6aTvlE00o8JUn3h+EN 95Js0E+roIQSo8Rxvqui1jeYHOP7X4EBaA+Di/uY/hmzEZjbI7ioBioc16njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwM+BJ7TFp10Xh+DkiHU9kk8No0wHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMbiOWiT+Z8cJljlRT2NMOq2MSXOk9wRPGb gVxLYoNMELMVKdw3sfSTwa6/hL+Jk7OU4+cFy8EFfoUBsf42/Rib1apwyG5dfow+ tBmCksnU+TbZ9Cq63fwpitmrIAL5A+9hjF27tMfYx+gQClsco4BZ0v56oDFkpH4i S+c5Xgxnmu3yQ8TJNM+ANlGWEw6CPK9wnyOHm3TaXtOfdkkoik4uIiW6XUJWliMP YJGo7tUoMOHQ/5TZw2Xqd5vXXvic2AiyS+JH+8qLT+bCWgIzLBlYpkXl/Gqoc70Z jXWet5KPZYhoXU4K5rgfBvM2WfsUYvqYHC6esJJBkTUc0WZc1fU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:37 2025 by rpki-client