This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: qiFFqSm9M4I+9zfcRUhlLBBn7AZF/R0ysDZCLMePs8I= Subject key identifier: 6B:FC:CA:E4:1E:12:FE:37:B4:D4:66:97:0E:3D:8A:57:C0:C9:F0:AA Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 40AF2F9CF0E7FAC7B91A91436B11061A32C9360F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: DE Signing time: Fri 05 Dec 2025 18:02:07 +0000 Manifest this update: Fri 05 Dec 2025 17:57:07 +0000 Manifest next update: Mon 08 Dec 2025 20:30:07 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: 0rgS8xoKq9IPGodD09+rCtsOFaeZwPD6oa5bL2sglG4=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:af:2f:9c:f0:e7:fa:c7:b9:1a:91:43:6b:11:06:1a:32:c9:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Dec 5 17:57:07 2025 GMT Not After : Dec 8 20:30:07 2025 GMT Subject: CN=6BFCCAE41E12FE37B4D466970E3D8A57C0C9F0AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:59:4f:be:b2:90:36:69:37:7a:a7:e6:12: ea:ed:db:85:3f:60:d2:94:d8:c6:76:9e:09:3d:d3: 44:79:55:98:d8:4d:68:98:fd:93:2c:a0:9a:55:4f: 68:7b:98:a3:6d:03:6e:48:9d:c4:e9:ca:8f:34:12: 29:aa:0c:38:29:53:fd:35:c4:fa:9c:69:4b:59:a4: dd:05:2d:b4:dd:9d:ef:d8:13:31:e9:99:91:71:10: 79:1a:c6:32:9d:d9:a9:21:5e:b1:8d:70:ec:b7:6d: 8f:94:4a:2a:6d:ba:47:f0:8e:0b:b1:c4:ec:25:ab: 2c:a6:85:14:4d:f8:e1:c7:12:cb:c4:fb:88:df:bf: ee:be:41:fb:b9:09:fe:57:0c:cd:20:c7:97:d7:09: f9:b2:6a:30:ed:a4:14:f3:7d:1a:89:af:4f:22:32: 4d:57:ca:3b:af:8d:a3:c9:19:25:0f:c7:b0:a6:0b: 13:e1:12:95:cb:31:51:07:b6:c9:1c:61:d3:10:07: 2b:87:20:4d:f0:a6:bb:7c:ae:b2:74:9c:a5:ae:d5: d5:d7:1a:ca:fa:d7:bb:4f:3a:35:37:2c:94:19:80: d6:12:17:63:f8:b0:b0:39:19:0f:c4:a9:3f:c9:04: 36:b6:73:2e:04:76:0c:ff:e3:68:35:0a:f4:b1:61: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:CA:E4:1E:12:FE:37:B4:D4:66:97:0E:3D:8A:57:C0:C9:F0:AA X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:90:7a:98:40:12:af:05:ff:c6:3d:78:41:a7:89:0a:77: 47:8c:84:03:91:6f:00:43:d9:ed:2a:5a:70:f0:17:2d:bc:a4: a3:c8:d9:b0:ae:87:2b:70:7d:c0:ee:c4:e3:4d:29:d0:52:46: 08:fb:53:62:a1:c6:d1:48:6d:72:9d:f6:95:80:98:a8:a4:18: 7b:e5:dc:13:bd:6d:d6:ae:52:50:77:cb:e9:61:63:a4:c7:02: f5:8f:db:50:dc:5e:bb:29:c7:9e:bb:2b:1f:b2:55:cb:6f:26: 9c:5c:cd:b6:51:aa:89:80:54:52:05:5a:ba:26:87:8d:de:aa: d3:c2:5a:7f:8b:37:40:45:a4:fe:8d:58:c7:33:32:63:b6:f7: c5:cd:8d:79:9c:8e:53:82:a7:79:76:90:00:f9:65:10:d8:44: 4a:d0:d2:b9:b6:e3:9e:c1:99:8e:dc:a3:48:a5:75:ba:d7:0c: 25:02:dd:4d:70:bf:3d:9f:bf:99:d2:6b:85:6e:c6:33:b3:93: 3b:4e:ce:b8:e2:d5:08:cd:88:21:45:1d:32:2e:33:81:19:4a: 95:50:9c:77:dc:de:39:84:2b:a6:e8:54:a7:64:bc:01:16:65: 05:08:eb:e1:2f:67:77:a8:4f:26:c7:11:06:56:9a:f3:01:87: 08:3d:f6:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQK8vnPDn+se5GpFDaxEGGjLJNg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTEyMDUxNzU3MDdaFw0yNTEyMDgyMDMwMDdaMDMxMTAvBgNV BAMTKDZCRkNDQUU0MUUxMkZFMzdCNEQ0NjY5NzBFM0Q4QTU3QzBDOUYwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dllPvrKQNmk3eqfmEurt24U/ YNKU2MZ2ngk900R5VZjYTWiY/ZMsoJpVT2h7mKNtA25IncTpyo80EimqDDgpU/01 xPqcaUtZpN0FLbTdne/YEzHpmZFxEHkaxjKd2akhXrGNcOy3bY+USiptukfwjgux xOwlqyymhRRN+OHHEsvE+4jfv+6+Qfu5Cf5XDM0gx5fXCfmyajDtpBTzfRqJr08i Mk1XyjuvjaPJGSUPx7CmCxPhEpXLMVEHtskcYdMQByuHIE3wprt8rrJ0nKWu1dXX Gsr617tPOjU3LJQZgNYSF2P4sLA5GQ/EqT/JBDa2cy4Edgz/42g1CvSxYR0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/zK5B4S/je01GaXDj2KV8DJ8KowHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtykHqYQBKvBf/GPXhBp4kKd0eMhAORbwBD 2e0qWnDwFy28pKPI2bCuhytwfcDuxONNKdBSRgj7U2KhxtFIbXKd9pWAmKikGHvl 3BO9bdauUlB3y+lhY6THAvWP21DcXrspx567Kx+yVctvJpxczbZRqomAVFIFWrom h43eqtPCWn+LN0BFpP6NWMczMmO298XNjXmcjlOCp3l2kAD5ZRDYRErQ0rm2457B mY7co0ildbrXDCUC3U1wvz2fv5nSa4VuxjOzkztOzrji1QjNiCFFHTIuM4EZSpVQ nHfc3jmEK6boVKdkvAEWZQUI6+EvZ3eoTybHEQZWmvMBhwg99oQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:54 2025 by rpki-client