This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: MLJjj9sW78eWRLVrgcjIOLSXdtCJYG6qPIoQ+EcdZYI= Subject key identifier: FE:CC:EF:0C:26:DB:5F:DE:39:16:A0:35:BA:BB:B4:49:6F:CC:02:BE Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 208718B3151C12DACA1A55916CC9CF94628F3EF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02C5 Signing time: Fri 05 Dec 2025 08:00:42 +0000 Manifest this update: Fri 05 Dec 2025 07:55:42 +0000 Manifest next update: Mon 08 Dec 2025 18:31:42 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: VDiYZ7deO/aXK4OTOJwWmbDXWXoxnxWUeuX6e5taW9M=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:87:18:b3:15:1c:12:da:ca:1a:55:91:6c:c9:cf:94:62:8f:3e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Dec 5 07:55:42 2025 GMT Not After : Dec 8 18:31:42 2025 GMT Subject: CN=FECCEF0C26DB5FDE3916A035BABBB4496FCC02BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:e5:b6:b0:b4:f1:e2:ed:a1:68:bf:8d:61: 13:4c:b1:09:d4:c0:da:2f:e7:e3:e9:79:03:4e:e8: f9:5a:46:63:38:92:b3:74:e2:35:ba:fd:b8:ef:77: c6:29:b9:4f:6a:65:68:55:58:55:6d:6f:93:3b:35: 20:fa:79:cf:86:45:de:b6:e7:c6:1e:9d:52:36:8b: bc:5e:b9:b4:88:a6:30:08:29:9c:a8:b2:7c:10:2e: 48:e7:04:e6:24:c4:3f:12:a0:b6:3e:3b:5f:88:70: 7b:1d:57:84:d8:60:dc:85:8a:59:f2:42:32:26:36: 8c:8f:fd:e5:ae:da:15:fc:e7:3e:71:34:61:10:26: 2b:e2:bc:4a:35:ae:61:e9:0a:83:7e:97:64:cc:72: ac:35:e0:30:fb:c9:41:77:f5:97:c6:b7:48:6e:a3: 6b:32:94:d6:a2:7e:a0:6c:37:a8:e3:40:84:e9:2c: 3c:06:c7:6e:ff:aa:56:b8:af:20:ba:72:fd:2d:cb: b5:65:cb:e0:d7:14:30:3d:7a:a0:a6:f9:a2:5d:7a: 01:b0:bc:e8:f0:d0:a3:3a:05:d6:b3:54:30:f2:a2: 2b:4f:f0:f9:f4:f3:dd:97:63:21:4f:fd:84:5b:02: 18:db:1d:c1:39:21:57:5b:4a:57:25:8b:05:72:66: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:EF:0C:26:DB:5F:DE:39:16:A0:35:BA:BB:B4:49:6F:CC:02:BE X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:85:c8:9a:0b:6f:44:37:b3:e1:65:3b:08:47:0f:ec:c0: 03:24:c1:16:81:b3:01:ad:46:5e:bb:89:92:df:19:e2:53:f9: d1:5e:c0:0a:83:a8:e5:89:ea:93:1d:ae:25:cc:1a:2b:2f:d1: 1b:cc:c5:e6:27:65:b1:62:e2:12:6d:2e:dc:ab:ae:8b:83:bc: 4a:8a:45:65:3a:2d:a0:15:5d:6a:aa:a2:f3:83:29:57:c6:99: 39:ab:70:20:a7:40:28:89:72:fa:07:d9:a0:f9:98:fa:10:ff: ca:f4:37:99:22:3e:a4:0a:7b:9c:1d:d7:b3:23:58:b3:83:ad: 95:78:81:8f:63:0d:97:2b:f8:8e:0b:3f:dd:7a:54:86:26:db: ab:ec:81:de:92:ba:d6:2b:c1:3d:28:fb:18:28:fa:bd:64:67: 4b:ab:16:9c:11:3f:e1:37:3c:34:77:9a:77:b9:26:45:a6:36: ad:dc:37:a5:95:89:2a:4d:a4:99:1f:fc:ac:26:39:50:32:ed: 72:ea:f5:4f:9b:2c:d3:6f:6a:2e:67:3a:40:98:98:f9:2d:f6: b8:59:4d:36:e8:bb:df:4d:a1:8e:21:2b:7b:2f:30:16:01:ae: 2b:a6:8d:d3:32:d8:8e:cb:08:df:85:49:47:fc:19:22:dc:d9: 89:38:11:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIcYsxUcEtrKGlWRbMnPlGKPPvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTEyMDUwNzU1NDJaFw0yNTEyMDgxODMxNDJaMDMxMTAvBgNV BAMTKEZFQ0NFRjBDMjZEQjVGREUzOTE2QTAzNUJBQkJCNDQ5NkZDQzAyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4f+W2sLTx4u2haL+NYRNMsQnU wNov5+PpeQNO6PlaRmM4krN04jW6/bjvd8YpuU9qZWhVWFVtb5M7NSD6ec+GRd62 58YenVI2i7xeubSIpjAIKZyosnwQLkjnBOYkxD8SoLY+O1+IcHsdV4TYYNyFilny QjImNoyP/eWu2hX85z5xNGEQJivivEo1rmHpCoN+l2TMcqw14DD7yUF39ZfGt0hu o2sylNaifqBsN6jjQITpLDwGx27/qla4ryC6cv0ty7Vly+DXFDA9eqCm+aJdegGw vOjw0KM6BdazVDDyoitP8Pn0892XYyFP/YRbAhjbHcE5IVdbSlcliwVyZqE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/szvDCbbX945FqA1uru0SW/MAr4wHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEquhciaC29EN7PhZTsIRw/swAMkwRaBswGt Rl67iZLfGeJT+dFewAqDqOWJ6pMdriXMGisv0RvMxeYnZbFi4hJtLtyrrouDvEqK RWU6LaAVXWqqovODKVfGmTmrcCCnQCiJcvoH2aD5mPoQ/8r0N5kiPqQKe5wd17Mj WLODrZV4gY9jDZcr+I4LP916VIYm26vsgd6SutYrwT0o+xgo+r1kZ0urFpwRP+E3 PDR3mne5JkWmNq3cN6WViSpNpJkf/KwmOVAy7XLq9U+bLNNvai5nOkCYmPkt9rhZ TTbou99NoY4hK3svMBYBriumjdMy2I7LCN+FSUf8GSLc2Yk4EbQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:44 2025 by rpki-client