This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: LkciLc9wwPPUM3i5zb0vcg6F8XDvNZv+78XMYfl6pSE= Subject key identifier: 3B:C0:E6:32:FC:B9:39:36:BF:3F:A1:BE:88:BD:E9:B9:66:9C:34:A6 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 4A82C4D08ECCBF1DCB8E91A842EE5E48D22B8E26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02CA Signing time: Wed 17 Dec 2025 01:00:42 +0000 Manifest this update: Wed 17 Dec 2025 00:55:42 +0000 Manifest next update: Sat 20 Dec 2025 11:32:42 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: sAKefAqE6fCMbu4DOoLzGuxty/dZM1YWoGKSvnDKyGQ=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:82:c4:d0:8e:cc:bf:1d:cb:8e:91:a8:42:ee:5e:48:d2:2b:8e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Dec 17 00:55:42 2025 GMT Not After : Dec 20 11:32:42 2025 GMT Subject: CN=3BC0E632FCB93936BF3FA1BE88BDE9B9669C34A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:6d:c7:66:93:8f:c3:ce:05:97:1f:6a:e6: 00:f3:8e:cf:67:b9:79:26:9a:72:57:b5:fb:5d:52: e1:90:ef:6e:7b:ab:04:93:0c:cf:8a:8b:2a:b6:80: 31:ae:1a:0a:da:9a:29:eb:f8:8f:ab:b5:65:57:8b: c6:14:59:6e:03:70:47:43:c3:d1:1d:71:51:92:45: 54:f7:fe:ca:f5:8b:ea:88:b7:25:0c:5b:2a:c6:1a: 51:9f:ac:11:35:ab:b5:68:7d:2b:ce:0f:fe:37:6e: 2e:23:a8:7a:14:8f:33:b2:f3:36:31:57:e8:96:01: 99:59:0e:d2:c1:24:1c:7f:5f:f4:5a:4c:38:43:cf: 51:e9:32:ed:1e:d9:60:7f:13:1d:19:33:c0:68:d8: 3e:e5:d9:a3:1a:3f:8a:d5:18:47:59:97:c4:fb:ab: 29:e8:dc:5e:d0:e1:cb:da:de:1c:ff:3c:50:1a:a3: 0b:1e:91:33:c2:39:5b:75:b6:74:63:e9:ae:8a:ff: e2:9f:04:cb:f6:ba:f3:d8:d3:01:a2:47:70:2e:b8: 1c:40:02:e1:be:0e:0e:02:af:5a:35:07:01:48:59: 8c:e0:07:25:76:85:d5:98:92:c8:69:d1:da:2c:6b: 3e:69:7e:d3:75:1d:55:18:eb:dc:a7:b6:bf:fa:df: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:E6:32:FC:B9:39:36:BF:3F:A1:BE:88:BD:E9:B9:66:9C:34:A6 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8e:8d:75:5a:bc:94:2e:58:61:5d:43:4c:30:ef:28:78:99: e7:6c:75:fd:43:19:d8:9d:31:e2:de:4c:8a:23:fa:50:b6:5d: 8a:51:18:4e:bd:e9:52:5f:0f:cc:0e:bb:55:81:83:3e:bc:b4: 7d:09:49:a0:e5:3d:40:df:5f:cb:a3:db:ed:1f:87:2c:27:0a: 5f:5c:a1:82:bc:bc:76:26:a6:fa:91:51:5d:68:1d:44:d6:c5: 53:e9:25:c1:59:ac:8d:37:71:26:77:4a:44:1a:b0:30:6b:ea: ec:52:c3:35:47:41:7f:03:27:21:f0:3e:50:28:72:e5:3c:8a: 61:8e:a5:98:6d:e7:5f:dd:11:28:72:73:cd:9e:ef:4d:06:60: 70:c1:0d:af:f4:24:07:c5:42:eb:83:b5:26:b3:59:87:61:b6: df:b5:71:ed:a8:1a:40:4a:8a:83:79:72:79:9c:2d:00:f6:0a: 0d:78:cb:7c:58:60:d3:3b:67:b5:8c:a6:ba:23:0a:22:de:06: ac:e8:0c:96:70:5a:c2:b5:1a:1e:16:21:85:e5:16:52:96:90: d3:87:eb:7e:e4:27:ca:7c:1f:ae:8e:2d:b7:75:1e:76:2a:30: 36:90:23:a6:41:48:7a:26:b7:b9:eb:c5:8f:83:6f:fc:98:dd: 24:d7:cc:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoLE0I7Mvx3LjpGoQu5eSNIrjiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTEyMTcwMDU1NDJaFw0yNTEyMjAxMTMyNDJaMDMxMTAvBgNV BAMTKDNCQzBFNjMyRkNCOTM5MzZCRjNGQTFCRTg4QkRFOUI5NjY5QzM0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTW3HZpOPw84Flx9q5gDzjs9n uXkmmnJXtftdUuGQ7257qwSTDM+Kiyq2gDGuGgraminr+I+rtWVXi8YUWW4DcEdD w9EdcVGSRVT3/sr1i+qItyUMWyrGGlGfrBE1q7VofSvOD/43bi4jqHoUjzOy8zYx V+iWAZlZDtLBJBx/X/RaTDhDz1HpMu0e2WB/Ex0ZM8Bo2D7l2aMaP4rVGEdZl8T7 qyno3F7Q4cva3hz/PFAaowsekTPCOVt1tnRj6a6K/+KfBMv2uvPY0wGiR3AuuBxA AuG+Dg4Cr1o1BwFIWYzgByV2hdWYkshp0dosaz5pftN1HVUY69yntr/635C5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8DmMvy5OTa/P6G+iL3puWacNKYwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2OjXVavJQuWGFdQ0ww7yh4medsdf1DGdid MeLeTIoj+lC2XYpRGE696VJfD8wOu1WBgz68tH0JSaDlPUDfX8uj2+0fhywnCl9c oYK8vHYmpvqRUV1oHUTWxVPpJcFZrI03cSZ3SkQasDBr6uxSwzVHQX8DJyHwPlAo cuU8imGOpZht51/dEShyc82e700GYHDBDa/0JAfFQuuDtSazWYdhtt+1ce2oGkBK ioN5cnmcLQD2Cg14y3xYYNM7Z7WMprojCiLeBqzoDJZwWsK1Gh4WIYXlFlKWkNOH 637kJ8p8H66OLbd1HnYqMDaQI6ZBSHomt7nrxY+Db/yY3STXzHM= -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:32 2025 by rpki-client