This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: S57yueBOBul5JFfqNezmSL5/xH+auia8Bo9+50i4TZY= Subject key identifier: A1:39:E5:4E:FF:73:A5:D9:F2:25:9B:DD:0A:9F:9A:03:9E:13:BB:60 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 11353D15A3D9BEDFD7DA16B400129AC1E4A2163B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 022E Signing time: Thu 04 Dec 2025 18:11:20 +0000 Manifest this update: Thu 04 Dec 2025 18:06:20 +0000 Manifest next update: Mon 08 Dec 2025 04:40:20 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: 8erQ81oOA147Yiw/lxFxgokAyG8i3Islolyrg1AGymI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:35:3d:15:a3:d9:be:df:d7:da:16:b4:00:12:9a:c1:e4:a2:16:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Dec 4 18:06:20 2025 GMT Not After : Dec 8 04:40:20 2025 GMT Subject: CN=A139E54EFF73A5D9F2259BDD0A9F9A039E13BB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:d7:31:85:4a:b1:5d:17:8e:cf:ca:cb:32: 9f:fd:0b:60:37:d0:58:f9:3f:c9:fe:a2:1a:ea:05: bc:a4:21:46:7a:1a:b7:d5:c9:b0:c4:6c:49:15:cf: 68:9d:54:ed:af:c0:e5:82:63:38:33:0f:04:88:0c: d2:cb:e6:e0:bb:dd:22:4b:43:97:ec:5e:50:18:db: 81:7e:e9:35:74:ea:15:96:e4:98:b6:03:2c:ea:36: 99:e2:be:43:af:b3:d4:31:11:38:55:bf:af:57:14: 8c:1b:91:34:1c:96:e6:75:91:ec:6b:c3:65:ee:69: b0:6c:2c:9c:80:9b:58:7b:3b:65:b9:84:2b:69:e8: 93:a3:54:07:c9:c1:b6:b8:39:29:0a:6f:bd:8a:c8: bf:ef:26:91:47:ea:00:5f:01:8c:b0:d8:d0:1e:24: d0:fd:f1:33:d2:d4:82:ac:ac:b0:86:6b:dc:8e:e3: 36:8b:68:b3:7b:91:5b:f8:82:38:d9:45:11:7f:55: 1b:48:ab:c2:7e:6f:24:03:96:d0:64:9e:8c:89:f2: 81:f2:22:f8:76:0f:39:d9:74:64:09:44:4a:53:5d: c8:dd:86:06:3d:96:74:c7:a1:7e:c3:ea:8d:6a:bc: 8f:49:99:7a:1b:10:fb:53:e1:7e:14:79:a8:6e:45: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:39:E5:4E:FF:73:A5:D9:F2:25:9B:DD:0A:9F:9A:03:9E:13:BB:60 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:73:ec:6a:77:21:84:b9:36:47:36:f0:8e:cd:f3:9f:e7: e0:d3:8b:54:1e:df:54:0c:53:77:35:48:f6:f7:b5:9f:ca:fa: e3:36:16:17:74:03:df:3b:65:1b:17:fa:34:e4:5f:e6:a9:b6: 4c:9c:c9:e0:ae:ef:3b:56:48:b3:40:b8:49:b3:9a:8c:8f:ab: 9e:4f:d4:2d:17:f3:73:09:88:1f:87:ad:c2:eb:8f:ee:19:a1: bb:a5:84:45:64:cc:29:06:c8:01:3d:2b:26:13:cd:e4:70:fe: b9:74:ee:17:d2:83:9d:6e:ff:51:dc:61:ed:91:ed:c2:3c:40: 7d:1c:27:c1:ec:19:3a:87:76:83:7d:5a:2a:dc:2c:37:fa:37: ec:18:81:de:c0:6f:49:68:4d:1f:e8:77:df:fb:ae:d4:4c:32: c8:e2:08:58:5d:95:8d:48:14:24:13:77:5e:a4:a1:44:fc:de: 51:cf:6a:8f:69:24:f2:7e:09:62:f0:04:45:d7:c0:81:70:b5: b3:b3:22:cf:e7:c9:6b:a9:7d:50:07:e3:83:98:7a:9b:81:53: 83:83:d7:63:2d:7e:15:aa:35:d8:ae:68:c8:d2:7e:24:6e:9c: cf:e0:be:3a:63:73:c2:17:8e:1d:c8:c1:0b:58:b2:f0:8a:fd: 18:01:7b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETU9FaPZvt/X2ha0ABKaweSiFjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTEyMDQxODA2MjBaFw0yNTEyMDgwNDQwMjBaMDMxMTAvBgNV BAMTKEExMzlFNTRFRkY3M0E1RDlGMjI1OUJERDBBOUY5QTAzOUUxM0JCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrtcxhUqxXReOz8rLMp/9C2A3 0Fj5P8n+ohrqBbykIUZ6GrfVybDEbEkVz2idVO2vwOWCYzgzDwSIDNLL5uC73SJL Q5fsXlAY24F+6TV06hWW5Ji2AyzqNpnivkOvs9QxEThVv69XFIwbkTQcluZ1kexr w2XuabBsLJyAm1h7O2W5hCtp6JOjVAfJwba4OSkKb72KyL/vJpFH6gBfAYyw2NAe JND98TPS1IKsrLCGa9yO4zaLaLN7kVv4gjjZRRF/VRtIq8J+byQDltBknoyJ8oHy Ivh2DznZdGQJREpTXcjdhgY9lnTHoX7D6o1qvI9JmXobEPtT4X4UeahuRXJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTnlTv9zpdnyJZvdCp+aA54Tu2AwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRMc+xqdyGEuTZHNvCOzfOf5+DTi1Qe31QM U3c1SPb3tZ/K+uM2Fhd0A987ZRsX+jTkX+aptkycyeCu7ztWSLNAuEmzmoyPq55P 1C0X83MJiB+HrcLrj+4ZobulhEVkzCkGyAE9KyYTzeRw/rl07hfSg51u/1HcYe2R 7cI8QH0cJ8HsGTqHdoN9WircLDf6N+wYgd7Ab0loTR/od9/7rtRMMsjiCFhdlY1I FCQTd16koUT83lHPao9pJPJ+CWLwBEXXwIFwtbOzIs/nyWupfVAH44OYepuBU4OD 12MtfhWqNdiuaMjSfiRunM/gvjpjc8IXjh3IwQtYsvCK/RgBe+M= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:41 2025 by rpki-client