This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: VFkIKGIuL0jwtpmSxKcVEr4UnSbHB7LFGjLBI52IA04= Subject key identifier: 32:4A:29:97:63:EF:45:B2:21:41:16:93:20:5C:D0:09:0D:81:C8:1C Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 5C94A5040B3D50A70239E05C3761C51E8A08E3B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 023E Signing time: Sat 20 Dec 2025 10:11:24 +0000 Manifest this update: Sat 20 Dec 2025 10:06:24 +0000 Manifest next update: Tue 23 Dec 2025 20:20:24 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 3: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 4: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: RWYUNlAo/lXCPQV4Df7eTf43R8ugt5cK0ZqZeMj4IiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:94:a5:04:0b:3d:50:a7:02:39:e0:5c:37:61:c5:1e:8a:08:e3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Dec 20 10:06:24 2025 GMT Not After : Dec 23 20:20:24 2025 GMT Subject: CN=324A299763EF45B221411693205CD0090D81C81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:c9:1b:84:25:ff:0d:e2:64:51:b5:b0:b3: dd:6d:41:61:8b:f0:d7:ac:8b:5d:b3:01:3c:fa:b7: cf:06:72:bc:b0:30:b2:7d:86:dd:c5:ac:b4:e4:30: 29:65:4a:7a:d6:52:bf:0b:ca:c7:46:a5:bf:2c:f7: 72:c1:32:98:31:5a:e4:96:01:58:e0:7b:fd:e2:1b: bf:f2:4c:89:ab:dd:a8:68:1e:70:1e:a5:bc:e0:c0: 84:84:43:b5:6d:96:2e:d9:0b:09:fe:fe:d0:c7:e6: 80:3a:87:26:bc:83:32:e4:4c:e6:07:ac:17:4d:6e: 80:a6:2a:66:7d:89:38:2e:20:6b:ef:72:4f:a3:61: 41:42:1e:90:8f:72:2f:77:25:53:18:a6:a1:14:13: cf:b4:b6:a2:b9:fa:78:99:e6:63:eb:0c:7c:d4:21: 9c:7f:61:24:54:0a:49:b1:19:70:50:66:fe:c6:fb: 27:54:93:5c:fe:a7:1c:63:13:66:aa:e8:aa:03:31: 15:fc:7a:aa:e2:69:76:06:24:d9:58:f9:f2:5d:98: 22:44:e7:ae:d3:0b:36:c2:30:20:a7:49:27:5d:15: 24:66:a0:11:9d:8d:d1:05:e1:67:40:48:28:76:e3: d2:76:a0:a6:b5:c7:ea:2b:ca:81:cf:84:f1:01:c2: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:29:97:63:EF:45:B2:21:41:16:93:20:5C:D0:09:0D:81:C8:1C X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c4:a8:e2:8c:30:58:08:87:ad:fe:83:9e:15:cc:89:45:d3: f5:4e:55:1c:71:bb:b0:89:2f:c6:df:57:c3:81:6e:36:32:28: 82:d3:c5:77:49:77:8f:e2:6c:92:20:50:4a:a4:50:88:50:0e: a0:b3:fb:f2:ae:d4:a7:91:24:ca:14:e2:2b:08:39:bb:7c:dd: 02:ee:cf:38:b5:37:44:79:4e:e4:0d:0b:8c:34:5d:2a:7e:14: 79:db:af:c4:7f:ff:5c:48:64:81:22:1d:9d:0b:d1:6b:40:cf: 09:8e:ae:7b:9a:54:9e:53:b1:b6:ba:33:8a:7b:60:68:18:0d: 77:b0:68:b2:48:3c:a9:53:4d:a1:f2:81:31:77:de:b6:af:3b: c9:7f:b4:25:fd:a5:fc:8f:5a:d7:36:e2:28:92:37:a7:7d:40: e8:0f:d0:55:e1:48:ff:91:16:8b:ab:7f:fb:da:42:c9:a1:b1: 4f:90:e1:62:85:36:74:e3:0a:1a:c8:ef:a0:04:8b:cf:b2:c5: 44:fa:1d:51:9f:75:6d:24:af:5e:81:ec:c5:19:5d:7f:f4:c0: 3c:7b:53:a0:6c:6d:d6:3a:e6:5e:06:47:4c:1d:54:5f:f9:d5: d6:a0:d0:68:06:0d:c2:de:a0:20:98:a9:9e:9b:99:26:ba:b6: 20:4a:29:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJSlBAs9UKcCOeBcN2HFHooI47YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTEyMjAxMDA2MjRaFw0yNTEyMjMyMDIwMjRaMDMxMTAvBgNV BAMTKDMyNEEyOTk3NjNFRjQ1QjIyMTQxMTY5MzIwNUNEMDA5MEQ4MUM4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwckbhCX/DeJkUbWws91tQWGL 8Nesi12zATz6t88GcrywMLJ9ht3FrLTkMCllSnrWUr8LysdGpb8s93LBMpgxWuSW AVjge/3iG7/yTImr3ahoHnAepbzgwISEQ7Vtli7ZCwn+/tDH5oA6hya8gzLkTOYH rBdNboCmKmZ9iTguIGvvck+jYUFCHpCPci93JVMYpqEUE8+0tqK5+niZ5mPrDHzU IZx/YSRUCkmxGXBQZv7G+ydUk1z+pxxjE2aq6KoDMRX8eqriaXYGJNlY+fJdmCJE 567TCzbCMCCnSSddFSRmoBGdjdEF4WdASCh249J2oKa1x+oryoHPhPEBwt4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMkopl2PvRbIhQRaTIFzQCQ2ByBwwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfEqOKMMFgIh63+g54VzIlF0/VOVRxxu7CJ L8bfV8OBbjYyKILTxXdJd4/ibJIgUEqkUIhQDqCz+/Ku1KeRJMoU4isIObt83QLu zzi1N0R5TuQNC4w0XSp+FHnbr8R//1xIZIEiHZ0L0WtAzwmOrnuaVJ5Tsba6M4p7 YGgYDXewaLJIPKlTTaHygTF33ravO8l/tCX9pfyPWtc24iiSN6d9QOgP0FXhSP+R Fourf/vaQsmhsU+Q4WKFNnTjChrI76AEi8+yxUT6HVGfdW0kr16B7MUZXX/0wDx7 U6BsbdY65l4GR0wdVF/51dag0GgGDcLeoCCYqZ6bmSa6tiBKKX8= -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:39 2025 by rpki-client