This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: 7D9+3753YxuHOdaeUWafTHFTofD/k6BNbMN4g0igcvQ= Subject key identifier: 1F:FE:6D:DA:C0:60:6C:5D:BA:26:89:71:C5:65:F8:09:A4:F9:AC:17 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 25DBD184E12BA1A793BAEC483EED87F09EF6E740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01F8 Signing time: Sun 07 Dec 2025 03:31:40 +0000 Manifest this update: Sun 07 Dec 2025 03:26:40 +0000 Manifest next update: Wed 10 Dec 2025 05:04:40 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: XY7XwBi9uNEws7fNulc4NO9k0BdqqS71U+RvSgw6Mqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:db:d1:84:e1:2b:a1:a7:93:ba:ec:48:3e:ed:87:f0:9e:f6:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Dec 7 03:26:40 2025 GMT Not After : Dec 10 05:04:40 2025 GMT Subject: CN=1FFE6DDAC0606C5DBA268971C565F809A4F9AC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:e3:08:ea:f6:1a:a7:9c:a2:3d:fc:ad:23: ce:e7:30:2f:7a:6f:fb:71:9d:12:f8:63:25:c8:07: d8:ab:11:61:95:4c:2f:e0:81:03:da:d3:66:4b:c0: df:e0:85:6a:35:38:c5:dc:49:e7:31:c6:bd:b2:fa: 33:44:32:55:88:f1:88:7f:0a:d0:e5:0d:8e:48:ee: 57:6d:12:46:3b:77:34:0c:8b:6f:e5:e0:0e:46:8d: 7a:ca:cb:35:e1:4a:1a:ca:75:b5:19:0c:53:85:b2: 46:84:f2:e9:bf:0f:d1:1a:7d:53:57:72:25:87:03: 4b:82:33:30:19:43:e7:38:03:40:73:81:67:a4:44: 49:81:60:76:d2:0b:e1:de:4a:fe:9c:12:80:21:b6: 4c:8f:16:7e:92:c9:c2:ae:05:bc:3d:05:ca:5c:07: 44:d3:6e:a0:f5:0a:21:5f:bb:7b:72:b9:4e:1b:a2: 91:5d:8e:50:70:0e:1e:79:76:6b:36:76:7d:7e:39: e6:2f:54:2d:d9:d5:8c:7a:76:59:de:cf:b2:9e:f4: b2:1b:46:6b:26:fe:68:6a:be:21:55:f1:08:c6:a0: 1d:3a:e3:c9:67:81:c6:e8:c7:ff:a4:68:cb:00:4a: 0b:5e:c7:1c:1b:54:74:41:1f:cc:79:a0:7d:44:5c: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:6D:DA:C0:60:6C:5D:BA:26:89:71:C5:65:F8:09:A4:F9:AC:17 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ba:98:02:a0:d6:ff:e9:d8:16:7a:70:ff:19:0a:e4:2b:d7: 3f:2e:e7:cd:1d:73:44:82:0a:d8:6f:6e:4f:b0:8b:d9:e9:b9: d4:cc:9f:8a:a1:4c:e7:46:90:a0:44:e7:08:09:96:51:1a:b4: 41:3e:0b:b0:86:bc:d5:99:79:08:b6:b2:57:7a:7d:68:3b:54: ec:b7:4c:ff:a4:47:55:74:79:3c:18:95:ec:c2:a4:89:49:73: 14:d5:35:b0:1b:89:99:9f:fe:9d:91:76:98:de:46:47:44:c7: bd:bd:9a:49:89:15:29:ab:29:5f:85:0e:ef:7e:58:b7:98:6b: 76:c6:26:ac:c3:a3:7f:95:cc:ba:e5:0f:8e:ba:0e:0a:d7:63: c0:76:41:08:28:16:09:ab:f3:3c:83:e9:c4:ae:e9:04:22:bc: d7:05:52:04:2e:dc:f0:3e:48:92:96:90:c1:8b:ba:f7:8f:66: a3:69:5a:7f:bb:82:ae:e6:ee:f7:b4:4a:07:72:75:0b:8e:34: 15:2d:86:0c:cd:e9:a7:f2:e7:74:7b:86:67:31:8c:b4:e2:d3: d6:0a:03:52:57:13:22:0d:7e:4d:94:da:89:88:03:69:fe:b3: 99:9a:84:2e:cc:82:cf:f5:de:0a:44:9b:27:6e:40:94:cf:50: 9c:db:d7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdvRhOEroaeTuuxIPu2H8J7250AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTEyMDcwMzI2NDBaFw0yNTEyMTAwNTA0NDBaMDMxMTAvBgNV BAMTKDFGRkU2RERBQzA2MDZDNURCQTI2ODk3MUM1NjVGODA5QTRGOUFDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TOMI6vYap5yiPfytI87nMC96 b/txnRL4YyXIB9irEWGVTC/ggQPa02ZLwN/ghWo1OMXcSecxxr2y+jNEMlWI8Yh/ CtDlDY5I7ldtEkY7dzQMi2/l4A5GjXrKyzXhShrKdbUZDFOFskaE8um/D9EafVNX ciWHA0uCMzAZQ+c4A0BzgWekREmBYHbSC+HeSv6cEoAhtkyPFn6SycKuBbw9Bcpc B0TTbqD1CiFfu3tyuU4bopFdjlBwDh55dms2dn1+OeYvVC3Z1Yx6dlnez7Ke9LIb Rmsm/mhqviFV8QjGoB0648lngcbox/+kaMsASgtexxwbVHRBH8x5oH1EXF3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/5t2sBgbF26JolxxWX4CaT5rBcwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW6mAKg1v/p2BZ6cP8ZCuQr1z8u580dc0SC Cthvbk+wi9npudTMn4qhTOdGkKBE5wgJllEatEE+C7CGvNWZeQi2sld6fWg7VOy3 TP+kR1V0eTwYlezCpIlJcxTVNbAbiZmf/p2RdpjeRkdEx729mkmJFSmrKV+FDu9+ WLeYa3bGJqzDo3+VzLrlD466DgrXY8B2QQgoFgmr8zyD6cSu6QQivNcFUgQu3PA+ SJKWkMGLuvePZqNpWn+7gq7m7ve0SgdydQuONBUthgzN6afy53R7hmcxjLTi09YK A1JXEyINfk2U2omIA2n+s5mahC7Mgs/13gpEmyduQJTPUJzb1zg= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:12 2025 by rpki-client