This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: mw1NEGQkOnqULZ3Kih5RO+VbFOh6pUGmNoJ040JiOIk= Subject key identifier: 38:77:5E:A8:0A:40:AF:04:7B:4A:23:77:A5:FA:94:B7:4D:6D:0B:3F Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 72D9C473EE49D87828AB8B83775F838BCD7C5634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 032B Signing time: Sat 06 Dec 2025 10:41:51 +0000 Manifest this update: Sat 06 Dec 2025 10:36:51 +0000 Manifest next update: Tue 09 Dec 2025 18:31:51 +0000 Files and hashes: 1: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) 2: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: Q8IhSchYJM8lhfb/XddLY503rL/V9O3yeT0ZwquR7O0=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d9:c4:73:ee:49:d8:78:28:ab:8b:83:77:5f:83:8b:cd:7c:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Dec 6 10:36:51 2025 GMT Not After : Dec 9 18:31:51 2025 GMT Subject: CN=38775EA80A40AF047B4A2377A5FA94B74D6D0B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:5f:00:a9:be:1f:dc:be:fe:4c:4f:e5:2a: 59:57:1a:13:55:af:8b:c6:35:2c:23:5b:0c:5c:4e: e4:df:7d:2c:bc:11:a1:6d:45:2e:a5:31:12:ed:b8: 23:94:28:15:75:e4:9f:7f:c6:09:5a:74:24:ed:be: 60:30:91:6d:d4:26:41:67:28:71:8f:f3:73:91:92: 0c:a1:8c:6d:db:28:17:ac:a9:57:5f:56:e3:69:79: 9b:64:cc:48:c6:0f:25:19:de:3c:ca:c8:37:60:30: d8:13:29:99:9e:83:db:9a:cc:4f:cf:2e:a2:e2:c9: 4d:05:85:a9:de:52:af:c4:cc:38:64:74:43:5e:ed: 60:92:7e:c9:bb:35:33:f3:3c:c6:83:ca:88:98:c0: 85:71:ef:84:58:31:8e:05:50:33:8d:ae:70:c5:26: 96:ff:a3:a9:b3:01:6d:25:ab:39:eb:c8:43:6a:8a: 25:3a:36:6d:6f:c4:f6:c8:7d:f3:f4:95:4b:2a:0f: 55:86:82:bc:7a:55:d5:af:70:9d:64:67:94:c2:09: e4:64:b7:e9:77:44:c0:21:13:58:b9:f1:3e:8a:37: ce:df:ca:0f:64:e1:7c:4b:5b:87:31:d2:7b:e6:43: 46:c9:28:e8:2a:7a:66:b6:f8:ab:88:ef:47:c2:a9: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:77:5E:A8:0A:40:AF:04:7B:4A:23:77:A5:FA:94:B7:4D:6D:0B:3F X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bf:b4:af:bd:b4:60:7f:4a:dc:19:d1:9e:8b:1d:85:7b:c1: 3f:ca:a5:f2:d9:46:b8:35:c3:c6:8a:35:31:d9:70:30:c0:43: 19:ac:19:35:07:56:e2:85:60:af:9b:23:0c:cf:78:59:ac:42: e3:a5:d2:69:00:dd:47:c7:92:05:56:ed:bf:69:df:46:15:46: 6d:3b:10:08:b4:02:0a:f5:2b:9b:7d:81:1a:7e:48:b5:f3:99: 6f:37:d7:89:3b:b6:c7:e0:da:4a:a1:51:26:dc:89:5a:f5:17: 76:89:ed:c6:e9:aa:48:fd:a6:9c:5b:8d:cf:95:71:fc:4f:5b: dc:0b:7d:17:34:eb:ec:16:2c:0c:d1:66:65:8c:2b:51:a5:db: 8c:ef:2d:74:32:56:12:ff:02:47:90:fd:8a:ed:80:e0:c5:4a: 30:a3:cc:56:96:3b:ab:32:cd:b6:bd:46:a3:05:7d:33:3c:a3: e2:7c:d6:76:56:5d:2f:3a:98:1e:c8:ed:16:55:86:a9:ce:f6: bd:e4:6b:0e:66:a7:9f:14:6c:56:f0:f4:59:d3:39:af:f1:bb: 52:d1:5b:b5:3a:5d:38:94:27:ab:cd:ab:c4:d7:09:ea:b6:13: d8:c0:e4:26:b3:1d:ca:e7:3a:6b:29:ba:71:51:1a:b6:d0:31: c2:c6:ea:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctnEc+5J2Hgoq4uDd1+Di818VjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNTEyMDYxMDM2NTFaFw0yNTEyMDkxODMxNTFaMDMxMTAvBgNV BAMTKDM4Nzc1RUE4MEE0MEFGMDQ3QjRBMjM3N0E1RkE5NEI3NEQ2RDBCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6l8Aqb4f3L7+TE/lKllXGhNV r4vGNSwjWwxcTuTffSy8EaFtRS6lMRLtuCOUKBV15J9/xgladCTtvmAwkW3UJkFn KHGP83ORkgyhjG3bKBesqVdfVuNpeZtkzEjGDyUZ3jzKyDdgMNgTKZmeg9uazE/P LqLiyU0FhaneUq/EzDhkdENe7WCSfsm7NTPzPMaDyoiYwIVx74RYMY4FUDONrnDF Jpb/o6mzAW0lqznryENqiiU6Nm1vxPbIffP0lUsqD1WGgrx6VdWvcJ1kZ5TCCeRk t+l3RMAhE1i58T6KN87fyg9k4XxLW4cx0nvmQ0bJKOgqema2+KuI70fCqYqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOHdeqApArwR7SiN3pfqUt01tCz8wHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS/tK+9tGB/StwZ0Z6LHYV7wT/KpfLZRrg1 w8aKNTHZcDDAQxmsGTUHVuKFYK+bIwzPeFmsQuOl0mkA3UfHkgVW7b9p30YVRm07 EAi0Agr1K5t9gRp+SLXzmW8314k7tsfg2kqhUSbciVr1F3aJ7cbpqkj9ppxbjc+V cfxPW9wLfRc06+wWLAzRZmWMK1Gl24zvLXQyVhL/AkeQ/YrtgODFSjCjzFaWO6sy zba9RqMFfTM8o+J81nZWXS86mB7I7RZVhqnO9r3kaw5mp58UbFbw9FnTOa/xu1LR W7U6XTiUJ6vNq8TXCeq2E9jA5CazHcrnOmspunFRGrbQMcLG6tQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:16 2025 by rpki-client