This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: ZQjYUj9h6OFiqxXoJY63GbkB6u1lqa0TZVRvaHwustQ= Subject key identifier: A0:E5:EC:2F:68:CC:F3:7E:47:1D:E5:98:D9:1F:A7:4F:D0:5A:82:DE Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 56D5DEB8BD268FD595F74C859F8A5A9399767947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 00:01:58 +0000 Manifest this update: Fri 05 Dec 2025 23:56:58 +0000 Manifest next update: Tue 09 Dec 2025 07:45:58 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: PZXlFULS401XdW/kPcmLH0AGv/AOf4fNhDOpyOKEjmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d5:de:b8:bd:26:8f:d5:95:f7:4c:85:9f:8a:5a:93:99:76:79:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Dec 5 23:56:58 2025 GMT Not After : Dec 9 07:45:58 2025 GMT Subject: CN=A0E5EC2F68CCF37E471DE598D91FA74FD05A82DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:88:33:fd:66:d8:ba:e5:47:b8:2b:59:c5: fb:1c:12:31:ff:89:16:27:47:29:42:84:0f:d6:c4: 59:ee:41:40:03:e6:12:61:0f:b2:93:01:be:3a:90: d3:a4:0e:99:eb:15:47:df:50:a8:e8:b0:e4:86:3c: 01:a4:27:a5:39:b6:92:24:ec:fc:e6:9f:c8:89:0f: ba:81:7b:32:f8:ac:78:f2:dd:18:71:d4:3e:b4:fc: 24:fb:01:e1:b8:e5:f7:a8:41:46:4e:f7:c9:c7:0f: 4a:50:31:5a:41:9e:00:5c:f6:12:71:ff:5b:8c:6d: 60:28:78:44:8a:38:48:95:58:01:a1:86:6f:88:06: 56:73:fd:c6:b6:6f:11:d3:3c:b3:e8:b2:7e:b6:70: e0:5e:de:ef:0a:c7:51:97:3d:fd:6c:b5:df:cb:4b: 85:22:6c:85:f9:c5:01:76:0a:a1:ce:19:01:5a:3c: 4b:54:ec:1f:83:e1:f2:70:91:d0:d5:a3:dc:a7:01: 3b:68:79:16:ed:63:19:44:ec:fc:0d:42:48:60:ba: 7b:a0:de:4e:12:72:ca:db:4d:8c:f9:5b:39:d2:35: f1:8a:14:e9:90:58:11:e2:5b:f9:12:9a:90:60:67: 42:92:ae:29:56:a4:0d:a6:a0:96:c6:12:eb:f9:46: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:EC:2F:68:CC:F3:7E:47:1D:E5:98:D9:1F:A7:4F:D0:5A:82:DE X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:41:38:4e:70:14:f2:86:66:0e:5c:b7:52:d4:d5:54:d3:70: 02:ee:a9:09:a7:5c:5f:2e:16:bf:96:8f:33:97:86:29:9f:fc: cc:f7:9a:f3:d7:2b:48:99:7a:be:20:cd:72:a1:ef:9d:fa:5f: 4f:5c:ba:db:e3:93:2c:63:39:70:49:73:e0:a7:4f:36:7e:38: 13:a7:04:0e:c4:71:d5:80:d9:b6:ad:8d:57:6c:97:67:b3:e2: 29:b3:d2:c8:3d:c8:22:27:ad:f3:44:3a:a8:75:29:c5:ff:1a: 28:24:48:0b:f9:30:90:2d:3c:d8:f1:97:87:06:26:91:53:15: a6:2d:63:2b:3c:57:cc:62:69:79:65:21:72:e2:79:55:ef:0f: 29:da:89:de:bc:2e:ab:a2:35:c1:ca:64:34:33:1e:a1:ca:8c: 4c:ef:5d:0e:d2:7b:fc:bf:0f:9f:0f:e5:bd:f2:bc:20:8f:77: 79:45:5b:e6:42:63:0a:78:3b:9f:51:66:f1:34:8c:88:fc:40: 74:23:0c:70:ea:46:85:3a:df:7e:70:d2:4d:65:76:52:43:13: 80:70:27:d9:34:d5:16:d6:3e:e0:e3:9d:de:8e:ec:7f:74:36: 7e:77:72:8f:0d:fe:58:ad:b0:93:c2:9d:42:fd:2b:89:5b:5d: d8:b0:1a:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtXeuL0mj9WV90yFn4pak5l2eUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTEyMDUyMzU2NThaFw0yNTEyMDkwNzQ1NThaMDMxMTAvBgNV BAMTKEEwRTVFQzJGNjhDQ0YzN0U0NzFERTU5OEQ5MUZBNzRGRDA1QTgyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/Igz/WbYuuVHuCtZxfscEjH/ iRYnRylChA/WxFnuQUAD5hJhD7KTAb46kNOkDpnrFUffUKjosOSGPAGkJ6U5tpIk 7Pzmn8iJD7qBezL4rHjy3Rhx1D60/CT7AeG45feoQUZO98nHD0pQMVpBngBc9hJx /1uMbWAoeESKOEiVWAGhhm+IBlZz/ca2bxHTPLPosn62cOBe3u8Kx1GXPf1std/L S4UibIX5xQF2CqHOGQFaPEtU7B+D4fJwkdDVo9ynATtoeRbtYxlE7PwNQkhgunug 3k4ScsrbTYz5WznSNfGKFOmQWBHiW/kSmpBgZ0KSrilWpA2moJbGEuv5RtqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOXsL2jM835HHeWY2R+nT9Bagt4wHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtBOE5wFPKGZg5ct1LU1VTTcALuqQmnXF8u Fr+WjzOXhimf/Mz3mvPXK0iZer4gzXKh7536X09cutvjkyxjOXBJc+CnTzZ+OBOn BA7EcdWA2batjVdsl2ez4imz0sg9yCInrfNEOqh1KcX/GigkSAv5MJAtPNjxl4cG JpFTFaYtYys8V8xiaXllIXLieVXvDynaid68LquiNcHKZDQzHqHKjEzvXQ7Se/y/ D58P5b3yvCCPd3lFW+ZCYwp4O59RZvE0jIj8QHQjDHDqRoU6335w0k1ldlJDE4Bw J9k01RbWPuDjnd6O7H90Nn53co8N/litsJPCnUL9K4lbXdiwGk0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:34 2025 by rpki-client