This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: 8ES2kfKsgWDJAHfsFl3N7pPpkG8PEHLAO6mHhpUUeek= Subject key identifier: 5C:8D:B4:A9:85:AB:D1:1A:5A:F0:3F:7A:9A:88:3F:E6:5D:1B:B7:C6 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 49FE39370E020BAA6961B11B6080979A7B5C6BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03AD Signing time: Fri 05 Dec 2025 14:21:39 +0000 Manifest this update: Fri 05 Dec 2025 14:16:39 +0000 Manifest next update: Mon 08 Dec 2025 15:44:39 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: PM5+Do9YCvPOZmfTEb/FpwXuJW5Q/NEPXDmP6laeVJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fe:39:37:0e:02:0b:aa:69:61:b1:1b:60:80:97:9a:7b:5c:6b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Dec 5 14:16:39 2025 GMT Not After : Dec 8 15:44:39 2025 GMT Subject: CN=5C8DB4A985ABD11A5AF03F7A9A883FE65D1BB7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6f:d2:da:6c:36:3e:0c:18:f7:a6:b0:d5:8e: 7a:20:98:cd:e8:ed:f7:a4:f6:13:50:91:3b:1a:30: 75:83:83:3d:50:9e:4d:4d:db:68:ac:0e:79:92:8b: 1a:26:85:c8:e5:25:11:5d:b6:17:43:59:cf:0e:69: fb:a7:ff:9c:79:46:1c:4b:78:05:c4:87:98:18:33: 01:3c:21:58:29:25:6b:e9:80:14:39:74:8e:bc:5d: 3e:98:9b:c5:1a:14:66:29:29:f4:eb:e6:89:f1:3e: 24:62:b8:ac:52:0e:b5:64:a5:63:94:6f:a5:ed:22: e0:2d:39:4c:ff:b5:74:ea:f7:37:bd:d8:cb:b1:0d: 65:14:c0:15:87:ba:d8:e5:ce:37:a7:3e:e4:be:0c: 8e:2b:6a:00:ce:85:45:8b:6a:57:64:eb:fb:ef:4e: f8:97:11:68:9d:07:51:20:70:35:a4:6c:a1:65:0b: 81:92:c5:35:c3:28:2e:34:9f:3c:2f:fd:d9:15:e0: ec:f9:3d:d4:3b:77:bc:29:ce:6b:99:77:ad:c5:5c: 8a:9b:91:9b:63:eb:b2:4a:50:53:8b:1d:31:b3:73: 89:7b:ab:58:e6:71:a5:c2:fe:e5:1b:e5:db:5e:8d: d1:4f:b2:be:f0:e4:27:2f:52:e9:6f:54:84:dc:ea: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8D:B4:A9:85:AB:D1:1A:5A:F0:3F:7A:9A:88:3F:E6:5D:1B:B7:C6 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d3:82:2b:c0:03:cd:78:8b:0a:2d:8e:17:84:9d:51:dc:7f: 82:f9:a0:ab:fb:42:21:9d:35:7c:6d:38:10:d7:ed:c7:03:ac: 6d:a6:0c:b7:61:42:14:86:28:6a:dc:62:3e:87:02:30:02:cd: 2a:4b:7e:f4:88:8b:6d:44:e8:a3:a9:83:93:bc:a4:bc:ed:60: 80:5a:8a:b4:48:1c:d7:cd:34:87:89:a0:68:f6:56:c1:28:00: 0d:b1:86:87:ca:ec:14:66:4c:79:4a:06:78:13:07:a6:02:9f: da:cc:98:66:86:f5:e0:4d:0e:13:a4:d2:39:cb:de:2a:a9:4c: 85:9a:8b:b7:8d:28:ac:30:fe:6d:b7:a4:0f:1b:ab:0e:ca:5a: 87:35:86:14:dc:6b:0f:6c:9c:81:a2:66:9a:47:c2:a3:64:a5: 47:b7:35:fa:c3:df:50:d9:d5:fc:a1:5e:32:82:24:81:1a:6e: 06:7a:0e:1a:6c:6e:e3:b7:40:16:c0:7a:04:21:85:02:09:f2: 03:bf:42:74:75:ed:fb:1f:9e:9d:30:46:22:0c:8a:ef:1c:96: 37:f4:dc:07:a8:22:ee:4c:e6:01:df:21:36:ec:1e:fe:7f:d7: e7:a7:02:7b:5f:87:38:1d:b9:58:b8:ec:ad:2e:fb:86:50:a3: fb:bd:11:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSf45Nw4CC6ppYbEbYICXmntca9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTEyMDUxNDE2MzlaFw0yNTEyMDgxNTQ0MzlaMDMxMTAvBgNV BAMTKDVDOERCNEE5ODVBQkQxMUE1QUYwM0Y3QTlBODgzRkU2NUQxQkI3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDob9LabDY+DBj3prDVjnogmM3o 7fek9hNQkTsaMHWDgz1Qnk1N22isDnmSixomhcjlJRFdthdDWc8Oafun/5x5RhxL eAXEh5gYMwE8IVgpJWvpgBQ5dI68XT6Ym8UaFGYpKfTr5onxPiRiuKxSDrVkpWOU b6XtIuAtOUz/tXTq9ze92MuxDWUUwBWHutjlzjenPuS+DI4ragDOhUWLaldk6/vv TviXEWidB1EgcDWkbKFlC4GSxTXDKC40nzwv/dkV4Oz5PdQ7d7wpzmuZd63FXIqb kZtj67JKUFOLHTGzc4l7q1jmcaXC/uUb5dtejdFPsr7w5CcvUulvVITc6lCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXI20qYWr0Rpa8D96mog/5l0bt8YwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7TgivAA814iwotjheEnVHcf4L5oKv7QiGd NXxtOBDX7ccDrG2mDLdhQhSGKGrcYj6HAjACzSpLfvSIi21E6KOpg5O8pLztYIBa irRIHNfNNIeJoGj2VsEoAA2xhofK7BRmTHlKBngTB6YCn9rMmGaG9eBNDhOk0jnL 3iqpTIWai7eNKKww/m23pA8bqw7KWoc1hhTcaw9snIGiZppHwqNkpUe3NfrD31DZ 1fyhXjKCJIEabgZ6DhpsbuO3QBbAegQhhQIJ8gO/QnR17fsfnp0wRiIMiu8cljf0 3AeoIu5M5gHfITbsHv5/1+enAntfhzgduVi47K0u+4ZQo/u9EWY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:46 2025 by rpki-client