This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: kik7BUcmSR/RJwTlhCZkmxRbnmAmnFHTfw9XTCCUXnY= Subject key identifier: 1A:57:75:5F:A8:E6:53:42:76:F9:71:C5:5B:82:6D:BE:4E:2D:09:E4 Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 6043AA4ADD93A0D32C1CFBE31DB42391C5218757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 019B Signing time: Fri 19 Dec 2025 20:31:52 +0000 Manifest this update: Fri 19 Dec 2025 20:26:52 +0000 Manifest next update: Tue 23 Dec 2025 06:16:52 +0000 Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: +azTMgiKYg+hmsHiwnF4BQUVq670CBq7t6eggCPoXrg=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) 3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:43:aa:4a:dd:93:a0:d3:2c:1c:fb:e3:1d:b4:23:91:c5:21:87:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Dec 19 20:26:52 2025 GMT Not After : Dec 23 06:16:52 2025 GMT Subject: CN=1A57755FA8E6534276F971C55B826DBE4E2D09E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:ab:d6:ab:db:0d:b4:f1:79:be:1b:4d:4f: e8:5b:68:e8:5b:b5:a3:2d:2f:74:36:1b:8c:05:64: bc:48:79:37:04:6f:a6:f1:50:a1:3b:de:57:e0:68: 67:5a:53:5e:93:3a:a9:0f:5d:6b:d4:c7:d0:d5:b8: ef:25:f4:f3:a8:a1:eb:d4:f1:84:3d:99:c7:66:1a: 6c:bd:8a:83:70:e5:e8:d8:cf:ca:80:fc:b2:3e:a0: 11:f1:b6:b3:3d:4c:4f:0c:7b:e2:a8:c6:f6:cf:57: a4:d9:0b:84:e6:78:ff:c0:a6:33:2f:24:68:00:3f: b5:12:4b:8f:b6:e9:90:78:44:bd:56:a5:c3:a9:cb: d3:b8:4e:74:ba:aa:1a:7b:b6:91:d1:4d:80:b1:c3: bd:08:ef:7b:10:7d:cf:1a:1b:81:e6:31:b7:58:84: 8a:b7:ce:05:14:d8:c9:b2:dc:9d:46:70:69:e5:b2: 60:7c:a0:03:ac:13:15:d0:7f:a8:d5:01:dd:2a:fa: fc:de:f9:fe:43:65:3d:d4:71:47:b9:b2:7f:7a:2c: 14:56:db:19:04:d8:ee:87:e0:4e:c9:a3:73:bf:c9: 96:b9:c2:e5:a4:ca:65:3d:5f:73:7a:7f:1c:fe:c2: 84:39:4c:51:99:24:3e:dd:0e:15:05:ad:e5:0c:fc: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:57:75:5F:A8:E6:53:42:76:F9:71:C5:5B:82:6D:BE:4E:2D:09:E4 X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:9f:4b:03:d1:c5:24:22:9e:c7:20:05:c0:5b:99:39:c0: 3b:4d:67:e3:bd:5c:d3:71:f3:6a:6b:8e:da:d9:96:4b:d0:29: 98:7a:8b:f6:29:c0:df:e0:56:9e:27:06:1d:d1:ea:1d:e6:8c: 5e:05:33:d9:f4:75:7c:07:f9:48:ab:2e:67:b4:99:12:e7:88: 75:18:42:52:f6:20:33:19:10:d4:d8:fb:20:13:6b:7b:2d:66: bd:d7:4c:9c:0b:8d:a4:71:5a:69:49:49:99:a2:4e:d5:60:1e: 84:0d:26:71:7c:8a:7a:ed:3b:f3:77:d3:78:73:d9:0d:08:0f: ce:bc:3d:db:6c:bd:58:a3:b5:98:0f:78:4d:2d:7c:ae:e7:36: 04:98:fa:b6:d4:f0:f8:00:92:ef:3f:d0:30:44:0f:6f:e7:5e: 8c:16:fd:a5:db:52:e3:22:fd:d6:1c:e6:c0:c4:4f:8c:71:24: 22:6c:ec:0c:16:66:71:fa:84:f5:1e:97:41:ce:a8:f2:fb:c0: 5c:8b:84:6c:75:9b:e5:aa:37:02:6a:f8:83:d9:8f:71:7b:1d: 3d:21:c7:ac:f1:f9:b3:7d:c4:67:4a:c9:31:fb:b7:ee:81:4c: 70:88:de:35:a9:48:cb:54:3c:9a:ca:a5:c7:be:49:b1:45:98: a1:d4:b5:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEOqSt2ToNMsHPvjHbQjkcUhh1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTEyMTkyMDI2NTJaFw0yNTEyMjMwNjE2NTJaMDMxMTAvBgNV BAMTKDFBNTc3NTVGQThFNjUzNDI3NkY5NzFDNTVCODI2REJFNEUyRDA5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpavWq9sNtPF5vhtNT+hbaOhb taMtL3Q2G4wFZLxIeTcEb6bxUKE73lfgaGdaU16TOqkPXWvUx9DVuO8l9POooevU 8YQ9mcdmGmy9ioNw5ejYz8qA/LI+oBHxtrM9TE8Me+KoxvbPV6TZC4TmeP/ApjMv JGgAP7USS4+26ZB4RL1WpcOpy9O4TnS6qhp7tpHRTYCxw70I73sQfc8aG4HmMbdY hIq3zgUU2Mmy3J1GcGnlsmB8oAOsExXQf6jVAd0q+vze+f5DZT3UcUe5sn96LBRW 2xkE2O6H4E7Jo3O/yZa5wuWkymU9X3N6fxz+woQ5TFGZJD7dDhUFreUM/D7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGld1X6jmU0J2+XHFW4Jtvk4tCeQwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+8n0sD0cUkIp7HIAXAW5k5wDtNZ+O9XNNx 82prjtrZlkvQKZh6i/YpwN/gVp4nBh3R6h3mjF4FM9n0dXwH+UirLme0mRLniHUY QlL2IDMZENTY+yATa3stZr3XTJwLjaRxWmlJSZmiTtVgHoQNJnF8inrtO/N303hz 2Q0ID868PdtsvVijtZgPeE0tfK7nNgSY+rbU8PgAku8/0DBED2/nXowW/aXbUuMi /dYc5sDET4xxJCJs7AwWZnH6hPUel0HOqPL7wFyLhGx1m+WqNwJq+IPZj3F7HT0h x6zx+bN9xGdKyTH7t+6BTHCI3jWpSMtUPJrKpce+SbFFmKHUtSs= -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:09 2025 by rpki-client