This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: Yv+BjlmJzL9YQSUkLEYPV6ARo8fOvwbjpc9V+LRFIbI= Subject key identifier: DD:FB:96:9B:B5:DC:AC:6E:C8:43:58:C2:BB:69:E8:A5:CF:40:5B:2C Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 5F674DDF79B42A7401C3DD3E8182A5F02145CBDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 0269 Signing time: Fri 19 Dec 2025 06:34:26 +0000 Manifest this update: Fri 19 Dec 2025 06:29:26 +0000 Manifest next update: Mon 22 Dec 2025 13:02:26 +0000 Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: EEhYxUW7iC+uUUb9KNgLdo+C3xvRhIfTNmTTbdqdAMo=) 2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: Tr9Xm455VVFwcMWVKgFVkQjW4pXUazCaoGIyqlMivog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:67:4d:df:79:b4:2a:74:01:c3:dd:3e:81:82:a5:f0:21:45:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Dec 19 06:29:26 2025 GMT Not After : Dec 22 13:02:26 2025 GMT Subject: CN=DDFB969BB5DCAC6EC84358C2BB69E8A5CF405B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:10:82:9b:eb:a5:11:01:07:6d:28:4a:0d: 83:33:57:cf:3b:52:66:cd:82:4f:6d:3a:8c:f7:65: 94:06:c5:ac:c0:f0:50:83:41:f9:fc:6d:a6:25:bc: bb:ab:8b:15:4a:19:0e:18:9b:6c:ed:2d:de:f3:13: 97:7d:61:64:61:47:5b:89:25:e8:3a:fe:84:ea:28: df:0d:c2:26:27:64:cd:8d:cb:df:b1:a8:4e:7f:cf: 53:0c:b6:d6:0e:79:dd:0f:ab:3d:53:19:e9:15:28: 9b:be:8c:8a:c1:e7:11:dc:41:57:62:84:e6:42:6f: 1d:bb:c6:29:39:d5:27:c6:b4:ad:ba:5a:2c:1f:2e: b6:59:41:01:5f:ef:ac:54:ab:7c:d1:65:29:66:38: 4d:36:f1:f3:1c:db:f8:32:db:34:10:41:a0:9c:02: 20:d8:4e:d1:85:3f:49:25:31:44:23:93:fe:c3:cc: 59:c3:33:1b:31:f0:96:e7:f2:79:aa:4b:89:8c:8b: a5:4e:4e:ca:77:14:f6:fe:1b:fb:9b:24:aa:ca:72: 98:44:2d:56:45:25:13:27:6e:b3:fa:0a:d5:00:29: 84:ec:67:1f:60:0b:c6:f3:d3:d4:25:e7:50:99:8f: 46:08:e2:d8:86:e2:6a:81:e7:27:06:2b:39:0e:4c: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:96:9B:B5:DC:AC:6E:C8:43:58:C2:BB:69:E8:A5:CF:40:5B:2C X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e7:8c:f4:2c:0b:5a:67:7d:2b:9c:a2:e4:2b:2a:e2:2b:23: be:6f:2f:68:24:64:48:04:da:ef:44:b7:ea:45:41:c6:c9:46: 37:57:eb:d6:ed:b0:02:4a:af:37:9d:48:bf:ca:3a:92:68:6e: b2:7b:c5:e2:31:53:72:3e:e7:1e:2b:55:3b:0e:4b:f9:f5:e4: 79:47:f7:da:04:7d:73:b9:89:c2:5c:7c:08:e7:cd:28:ef:85: 02:24:24:54:19:ab:3f:11:23:2d:4e:db:4a:4a:bf:26:3f:d7: 6a:eb:fd:44:fc:dc:37:49:3c:52:69:40:b2:97:4a:39:15:0a: 8a:83:15:fd:b7:a9:1a:e7:3f:7a:36:89:92:9e:b3:ce:f7:f7: 9d:51:e6:2e:43:56:01:8d:18:9d:0a:85:31:e2:fa:9c:5d:3d: 73:85:d5:1e:fb:05:ea:b9:f9:8f:37:60:98:e7:1c:ba:c1:84: 15:a3:6e:64:c0:4d:69:8b:36:1d:8b:2e:fa:a6:84:44:b6:ff: 7d:9c:f5:17:32:f6:9f:e5:8f:2a:b7:1c:df:78:85:ff:f7:b8: 1e:25:9f:33:2e:48:2d:5d:8b:d4:bd:b9:53:54:6c:47:c9:fb: 2b:08:8c:d5:cc:fd:b3:92:91:67:43:51:87:86:52:79:6c:30: e3:05:1a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2dN33m0KnQBw90+gYKl8CFFy98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTEyMTkwNjI5MjZaFw0yNTEyMjIxMzAyMjZaMDMxMTAvBgNV BAMTKERERkI5NjlCQjVEQ0FDNkVDODQzNThDMkJCNjlFOEE1Q0Y0MDVCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbRCCm+ulEQEHbShKDYMzV887 UmbNgk9tOoz3ZZQGxazA8FCDQfn8baYlvLurixVKGQ4Ym2ztLd7zE5d9YWRhR1uJ Jeg6/oTqKN8NwiYnZM2Ny9+xqE5/z1MMttYOed0Pqz1TGekVKJu+jIrB5xHcQVdi hOZCbx27xik51SfGtK26WiwfLrZZQQFf76xUq3zRZSlmOE028fMc2/gy2zQQQaCc AiDYTtGFP0klMUQjk/7DzFnDMxsx8Jbn8nmqS4mMi6VOTsp3FPb+G/ubJKrKcphE LVZFJRMnbrP6CtUAKYTsZx9gC8bz09Ql51CZj0YI4tiG4mqB5ycGKzkOTILlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3fuWm7XcrG7IQ1jCu2nopc9AWywwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLnjPQsC1pnfSucouQrKuIrI75vL2gkZEgE 2u9Et+pFQcbJRjdX69btsAJKrzedSL/KOpJobrJ7xeIxU3I+5x4rVTsOS/n15HlH 99oEfXO5icJcfAjnzSjvhQIkJFQZqz8RIy1O20pKvyY/12rr/UT83DdJPFJpQLKX SjkVCoqDFf23qRrnP3o2iZKes873951R5i5DVgGNGJ0KhTHi+pxdPXOF1R77Beq5 +Y83YJjnHLrBhBWjbmTATWmLNh2LLvqmhES2/32c9Rcy9p/ljyq3HN94hf/3uB4l nzMuSC1di9S9uVNUbEfJ+ysIjNXM/bOSkWdDUYeGUnlsMOMFGkY= -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:57 2025 by rpki-client