This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: HkCeSZZf4hQrtMA58pfsovQVCmJs8Df93aWLsTcAHd0= Subject key identifier: 55:B2:93:B6:AC:68:F0:8A:CD:F6:1D:FB:A7:D9:22:9F:02:1A:DD:E0 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 4DEA62F2E57F61A13EBBF1F9567344FBF5E064FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0153 Signing time: Sat 06 Dec 2025 08:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:56:32 +0000 Manifest next update: Tue 09 Dec 2025 14:49:32 +0000 Files and hashes: 1: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=) 2: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=) 3: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=) 4: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: FxwUXE1NcvyaFm9mXwvT5kpOy9kSrAO1PiqMRmWE5GQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ea:62:f2:e5:7f:61:a1:3e:bb:f1:f9:56:73:44:fb:f5:e0:64:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Dec 6 07:56:32 2025 GMT Not After : Dec 9 14:49:32 2025 GMT Subject: CN=55B293B6AC68F08ACDF61DFBA7D9229F021ADDE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:5a:9a:29:88:07:ab:ea:e2:47:89:ce:ac: 81:eb:a9:bf:f1:3d:57:2f:c5:1a:aa:df:af:08:f6: eb:29:e2:9f:0d:5d:93:ff:1d:bf:e3:7b:6e:05:d4: 73:a7:d7:53:bb:85:79:c5:5f:56:82:cd:34:83:1b: 0b:08:f3:34:52:7e:16:7c:48:61:56:27:ac:a2:a0: ee:8d:1b:66:93:d2:88:83:8a:25:3b:cf:1e:dd:a5: 06:5f:ae:d6:f6:09:3a:f9:57:24:15:25:9b:8c:e7: 0c:a3:74:f2:bc:f4:98:83:d2:35:81:b3:4d:94:81: de:53:b4:5e:37:16:08:b6:0d:e4:a3:2d:7e:f8:04: 54:27:a5:8b:f4:25:0d:3e:fe:6b:d4:68:59:2e:77: fc:ab:41:0a:06:1f:ca:ac:9a:6b:d4:0c:8a:6e:24: 30:85:28:8d:35:ec:48:3d:3a:ab:d7:ef:1c:98:79: 1e:5a:e6:0a:fa:48:10:0f:eb:ce:98:96:f6:27:65: 7a:04:a8:b3:6d:ec:78:f2:3a:e2:a3:d1:73:6a:be: 87:cc:72:3e:81:b8:b6:51:55:23:9b:fc:e7:ca:55: 0d:5a:f0:e7:5f:1c:27:21:19:20:27:4b:f4:82:e7: c9:f6:e0:8e:43:bd:ae:e5:fa:68:4d:d8:5e:6c:52: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B2:93:B6:AC:68:F0:8A:CD:F6:1D:FB:A7:D9:22:9F:02:1A:DD:E0 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0c:1c:38:35:75:7c:ef:c3:40:45:ea:80:99:cf:b8:04:9f: ce:88:2b:20:de:89:6f:af:cd:9b:09:bf:39:b5:a6:4b:00:cb: ad:55:76:ac:60:a6:97:6c:60:13:9f:a3:90:87:4d:dd:a8:80: e3:31:36:0e:cc:c1:58:50:bd:45:8b:29:65:c9:a8:99:6c:d3: 7d:e4:cd:ac:a9:25:63:64:72:3e:1a:93:68:fc:3a:af:2c:df: b5:e6:e9:2c:06:69:d6:c9:62:68:1b:bb:c1:f7:d7:c2:b3:2b: 0e:06:93:4e:77:1c:6c:f7:92:34:42:1b:d9:ab:10:72:80:3f: 1e:e0:f3:b4:bc:e8:f8:dc:f0:e8:7f:d2:d7:d6:5d:3c:92:57: 7b:7d:45:6f:f3:48:70:37:85:c3:42:ea:a9:f2:a3:5c:cb:c3: fb:17:4c:1e:08:f7:7d:d8:ba:64:16:23:ee:51:d9:62:f2:06: 36:ce:e5:66:1b:5b:6d:53:45:fc:35:a6:c2:7f:51:f6:49:ff: 21:f6:78:81:dc:2e:0b:f8:fb:81:c8:b4:fa:a0:9b:87:88:93: b3:bc:5d:23:81:41:e8:26:fd:1e:69:bb:31:a6:2c:c4:2e:d2: 0c:00:63:cc:8e:e1:e2:ac:ab:1e:06:fc:b6:bb:98:03:14:c0: 11:07:ff:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTepi8uV/YaE+u/H5VnNE+/XgZPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTEyMDYwNzU2MzJaFw0yNTEyMDkxNDQ5MzJaMDMxMTAvBgNV BAMTKDU1QjI5M0I2QUM2OEYwOEFDREY2MURGQkE3RDkyMjlGMDIxQURERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvVqaKYgHq+riR4nOrIHrqb/x PVcvxRqq368I9usp4p8NXZP/Hb/je24F1HOn11O7hXnFX1aCzTSDGwsI8zRSfhZ8 SGFWJ6yioO6NG2aT0oiDiiU7zx7dpQZfrtb2CTr5VyQVJZuM5wyjdPK89JiD0jWB s02Ugd5TtF43Fgi2DeSjLX74BFQnpYv0JQ0+/mvUaFkud/yrQQoGH8qsmmvUDIpu JDCFKI017Eg9OqvX7xyYeR5a5gr6SBAP686YlvYnZXoEqLNt7HjyOuKj0XNqvofM cj6BuLZRVSOb/OfKVQ1a8OdfHCchGSAnS/SC58n24I5Dva7l+mhN2F5sUupPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVbKTtqxo8IrN9h37p9kinwIa3eAwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0MHDg1dXzvw0BF6oCZz7gEn86IKyDeiW+v zZsJvzm1pksAy61VdqxgppdsYBOfo5CHTd2ogOMxNg7MwVhQvUWLKWXJqJls033k zaypJWNkcj4ak2j8Oq8s37Xm6SwGadbJYmgbu8H318KzKw4Gk053HGz3kjRCG9mr EHKAPx7g87S86Pjc8Oh/0tfWXTySV3t9RW/zSHA3hcNC6qnyo1zLw/sXTB4I933Y umQWI+5R2WLyBjbO5WYbW21TRfw1psJ/UfZJ/yH2eIHcLgv4+4HItPqgm4eIk7O8 XSOBQegm/R5puzGmLMQu0gwAY8yO4eKsqx4G/La7mAMUwBEH/+U= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:04 2025 by rpki-client