This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: t53mX2n09RQjBRcfBZSSXQU9QTmVQPKW9d/nSaXAWkE= Subject key identifier: 27:5C:F6:E6:91:30:B5:DC:0D:FF:FC:C8:FB:A0:20:79:11:0A:2C:B0 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 589A2EA1E3AF11F88F316572D2A0893A672A4C8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 049C Signing time: Tue 23 Dec 2025 21:22:06 +0000 Manifest this update: Tue 23 Dec 2025 21:17:06 +0000 Manifest next update: Sat 27 Dec 2025 03:41:06 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: g4MCHQFO3MQThoyM2TjwQb6nRcwAjTBYmahYDBr6bho=) 2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: LmeqzYeHbwqjRvKuIbroVaXCpVEz8bLJBtycTcCFJu4=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: dIEOnxiq7WXoAvLgc1rCuWqA7J1oHVG88vDPBcyj8G0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9a:2e:a1:e3:af:11:f8:8f:31:65:72:d2:a0:89:3a:67:2a:4c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Dec 23 21:17:06 2025 GMT Not After : Dec 27 03:41:06 2025 GMT Subject: CN=275CF6E69130B5DC0DFFFCC8FBA02079110A2CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:d2:8d:fc:55:48:62:7a:d7:56:6b:4f:d9: f4:f3:89:7b:43:4e:4d:8e:2b:d1:79:c2:33:a0:13: 15:1c:3e:5f:67:4a:fb:d5:33:92:9f:eb:51:ab:b9: 9d:db:6f:f3:df:0b:86:48:fa:fa:37:ef:8e:24:eb: dd:f0:c8:1f:a3:50:cd:b9:5b:a4:1b:b1:1c:21:c5: fd:82:9d:1f:00:e6:47:62:b5:55:b0:25:12:e5:f9: 23:3f:31:ef:bc:08:7c:f8:53:14:5a:5b:81:db:29: f0:85:1f:60:76:a2:75:44:96:e8:2b:81:02:7c:65: a4:1c:48:62:ef:73:53:77:fc:31:47:d8:4e:5b:6e: a9:5f:1a:94:34:00:ee:52:22:71:a6:96:54:08:ca: 7d:ef:1c:2b:31:c3:f1:2c:9c:d4:1e:3e:e3:76:a6: 36:f4:89:71:10:5c:66:ff:45:3b:a6:a3:73:09:59: 9c:45:06:ca:ec:f1:ec:a3:ed:da:cf:70:8d:73:0a: 9b:cf:0d:5d:43:80:48:bf:b5:97:20:3b:93:5b:39: 70:96:01:eb:50:ff:24:4c:a0:93:b2:07:5d:7d:30: c2:46:c0:7f:29:f1:ca:e3:e3:f7:58:1e:b5:34:57: 8f:05:00:a4:b3:86:dd:53:f4:2d:68:4d:8c:16:46: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5C:F6:E6:91:30:B5:DC:0D:FF:FC:C8:FB:A0:20:79:11:0A:2C:B0 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:98:39:69:89:c7:4a:2a:17:37:9c:c3:6e:8c:27:14:4e:98: c9:ac:87:cb:83:a1:b4:fb:40:a9:92:c6:8c:b6:aa:b1:f4:44: 3f:ad:b0:4b:8a:9e:f7:5f:d1:53:b9:75:52:cf:5d:9f:d6:ba: f2:ac:f5:e3:33:96:74:65:72:9c:f6:f9:30:57:19:ee:40:15: ae:c9:77:53:89:2c:82:12:08:d7:83:72:17:79:d9:2e:65:57: 00:cd:b1:f8:41:f6:23:cf:fe:44:c5:d9:b2:fd:95:be:e6:cf: 6c:58:44:77:3c:3e:91:ac:2e:f8:fe:9c:c0:5a:4e:02:e1:f1: 95:28:4d:66:d7:e5:49:7a:68:9d:0e:a1:8c:dd:bc:6d:dd:d9: 1e:35:1f:a8:20:31:7b:4b:b1:57:2c:b1:1f:1d:dd:f8:5b:a6: 94:03:f6:fa:1b:4b:af:da:30:b0:55:1b:f5:32:b8:51:12:69: 34:14:34:7a:a3:ff:7e:bd:b3:43:2f:16:e8:ba:71:8b:76:1c: d1:a9:f9:ec:c7:ea:ee:6b:4a:1c:65:69:fb:de:47:bf:88:46: 5e:6e:0d:d1:58:d3:8d:49:ea:6d:b9:bb:80:cf:2b:11:d6:1d: 40:3a:45:d9:9d:51:01:7e:a9:d2:d3:ce:02:44:70:25:85:a6: 87:d7:e7:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJouoeOvEfiPMWVy0qCJOmcqTIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTEyMjMyMTE3MDZaFw0yNTEyMjcwMzQxMDZaMDMxMTAvBgNV BAMTKDI3NUNGNkU2OTEzMEI1REMwREZGRkNDOEZCQTAyMDc5MTEwQTJDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDokdKN/FVIYnrXVmtP2fTziXtD Tk2OK9F5wjOgExUcPl9nSvvVM5Kf61GruZ3bb/PfC4ZI+vo3744k693wyB+jUM25 W6QbsRwhxf2CnR8A5kditVWwJRLl+SM/Me+8CHz4UxRaW4HbKfCFH2B2onVElugr gQJ8ZaQcSGLvc1N3/DFH2E5bbqlfGpQ0AO5SInGmllQIyn3vHCsxw/EsnNQePuN2 pjb0iXEQXGb/RTumo3MJWZxFBsrs8eyj7drPcI1zCpvPDV1DgEi/tZcgO5NbOXCW AetQ/yRMoJOyB119MMJGwH8p8crj4/dYHrU0V48FAKSzht1T9C1oTYwWRoRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ1z25pEwtdwN//zI+6AgeREKLLAwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2YOWmJx0oqFzecw26MJxROmMmsh8uDobT7 QKmSxoy2qrH0RD+tsEuKnvdf0VO5dVLPXZ/WuvKs9eMzlnRlcpz2+TBXGe5AFa7J d1OJLIISCNeDchd52S5lVwDNsfhB9iPP/kTF2bL9lb7mz2xYRHc8PpGsLvj+nMBa TgLh8ZUoTWbX5Ul6aJ0OoYzdvG3d2R41H6ggMXtLsVcssR8d3fhbppQD9vobS6/a MLBVG/UyuFESaTQUNHqj/369s0MvFui6cYt2HNGp+ezH6u5rShxlafveR7+IRl5u DdFY041J6m25u4DPKxHWHUA6RdmdUQF+qdLTzgJEcCWFpofX5yc= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:41 2025 by rpki-client