This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: xt8mQqDU3hxHhvCIdonOTHH04/kTQmMhMbWEiLu0nGo= Subject key identifier: F1:EB:A6:B0:4D:15:0C:58:A8:E1:71:04:60:F2:45:E9:93:29:57:A5 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 433579778DC0AE248D396E4FC8C213E98CDADCE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 014E Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:56:05 +0000 Manifest next update: Wed 10 Dec 2025 01:47:05 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: YLFJQmGiETOAJ8t2gvumhBtQsW7FdRmGN9XxOin4kyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:35:79:77:8d:c0:ae:24:8d:39:6e:4f:c8:c2:13:e9:8c:da:dc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Dec 6 14:56:05 2025 GMT Not After : Dec 10 01:47:05 2025 GMT Subject: CN=F1EBA6B04D150C58A8E1710460F245E9932957A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:9d:91:2e:f4:32:66:ef:95:eb:d0:7a:00: d4:c1:b2:f6:24:36:10:18:6c:f6:0e:ac:53:00:63: 66:31:db:82:15:1a:b9:db:79:35:02:f9:82:79:01: cf:f1:94:a0:3b:44:ad:d8:77:1a:7b:23:d4:85:63: bc:6d:ad:db:db:db:7a:4e:ce:67:d6:f3:03:f2:38: 3e:36:9b:36:b6:06:b4:6c:91:27:fa:27:44:2e:51: bd:71:54:9b:f7:dd:70:ba:77:4e:39:14:c7:70:bc: 16:14:1b:36:70:91:ad:5c:66:a9:6e:69:b1:a2:ad: 4f:6a:27:77:08:46:78:43:8b:27:b7:8f:e6:c3:6b: ac:f9:68:c5:24:1e:dd:ee:65:66:86:56:d2:54:46: 48:68:4d:80:2d:9d:7b:a6:cb:79:fc:9a:08:bf:7a: 04:fc:39:89:8e:89:41:08:2f:8b:a7:5e:57:0c:0a: 1b:91:27:9b:ad:32:fd:bd:3a:48:35:6c:10:57:c9: 83:f6:38:e3:ff:1d:b5:f7:90:62:df:94:79:fe:06: 90:e7:e7:c8:e0:57:d2:fb:8a:c3:4b:56:94:1c:b1: d8:81:cf:48:80:61:8f:87:6b:32:da:0a:a4:e6:dd: db:b4:cd:19:c4:92:0c:ba:42:98:b2:b2:ee:d8:52: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:A6:B0:4D:15:0C:58:A8:E1:71:04:60:F2:45:E9:93:29:57:A5 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ca:29:d4:21:4a:9e:25:85:a9:38:a9:15:55:e2:2c:54:37: f4:a4:39:28:81:db:45:a2:7d:07:3d:f5:e6:40:e3:cc:a1:f4: 58:69:5b:2d:56:8c:9b:62:ce:69:77:8c:d2:57:98:30:3e:c1: 09:eb:f4:f1:2f:0a:e1:71:0a:46:5f:a2:19:b3:65:6f:d1:0b: 8b:a1:55:51:fb:ec:cf:db:45:d6:a6:71:5d:0f:09:88:f9:46: b5:33:92:de:43:b8:8a:56:34:38:f0:20:d8:0a:e1:2c:5d:08: 54:a2:21:df:28:be:c6:d2:fc:e4:2c:6e:af:16:f9:d4:ff:c4: 71:64:40:19:28:75:9b:67:c9:5b:ca:c5:dc:3a:d8:bd:c1:d1: 56:3e:e1:e1:c0:0e:70:bd:c7:0a:67:59:d7:5d:e3:53:7a:49: cf:32:7b:08:f8:ad:0a:cd:29:5d:52:8d:65:e6:8b:78:b5:82: 79:3a:7b:82:ad:0b:a9:c7:c4:e0:7a:ea:c1:f5:a4:83:13:ec: 5b:d1:62:23:27:b2:33:db:6c:09:91:03:3c:53:ee:33:2f:77: f7:ef:b1:b0:f0:03:d3:5c:4f:a9:59:eb:25:66:f3:dd:f6:dd: a0:30:31:32:f8:ee:42:2f:a3:bb:5d:af:ff:cb:40:09:a2:5a: da:0c:a5:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzV5d43AriSNOW5PyMIT6Yza3OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTEyMDYxNDU2MDVaFw0yNTEyMTAwMTQ3MDVaMDMxMTAvBgNV BAMTKEYxRUJBNkIwNEQxNTBDNThBOEUxNzEwNDYwRjI0NUU5OTMyOTU3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0p2RLvQyZu+V69B6ANTBsvYk NhAYbPYOrFMAY2Yx24IVGrnbeTUC+YJ5Ac/xlKA7RK3Ydxp7I9SFY7xtrdvb23pO zmfW8wPyOD42mza2BrRskSf6J0QuUb1xVJv33XC6d045FMdwvBYUGzZwka1cZqlu abGirU9qJ3cIRnhDiye3j+bDa6z5aMUkHt3uZWaGVtJURkhoTYAtnXumy3n8mgi/ egT8OYmOiUEIL4unXlcMChuRJ5utMv29Okg1bBBXyYP2OOP/HbX3kGLflHn+BpDn 58jgV9L7isNLVpQcsdiBz0iAYY+HazLaCqTm3du0zRnEkgy6Qpiysu7YUtVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eumsE0VDFio4XEEYPJF6ZMpV6UwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvKKdQhSp4lhak4qRVV4ixUN/SkOSiB20Wi fQc99eZA48yh9FhpWy1WjJtizml3jNJXmDA+wQnr9PEvCuFxCkZfohmzZW/RC4uh VVH77M/bRdamcV0PCYj5RrUzkt5DuIpWNDjwINgK4SxdCFSiId8ovsbS/OQsbq8W +dT/xHFkQBkodZtnyVvKxdw62L3B0VY+4eHADnC9xwpnWddd41N6Sc8yewj4rQrN KV1SjWXmi3i1gnk6e4KtC6nHxOB66sH1pIMT7FvRYiMnsjPbbAmRAzxT7jMvd/fv sbDwA9NcT6lZ6yVm89323aAwMTL47kIvo7tdr//LQAmiWtoMpew= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:55 2025 by rpki-client