This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json) Hash identifier: A8LmF+0PnUZ79EQBG+bY4R+uk920CfZ2kvj9ROeI86Q= Subject key identifier: 92:BE:F9:6B:1F:3C:D8:99:BF:8C:A9:06:69:75:A8:46:49:C1:12:63 Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46 Certificate serial: 10B45EE55926BEC74686EE8DDE675F086B895E3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft Manifest number: 0217 Signing time: Wed 17 Dec 2025 00:12:21 +0000 Manifest this update: Wed 17 Dec 2025 00:07:21 +0000 Manifest next update: Sat 20 Dec 2025 03:34:21 +0000 Files and hashes: 1: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=) 2: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: I5tBiXW53g+o5711q+c6sqmDZ0V8yGZ1wPd6GIxulEc=) 3: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: VcrCbLgBDukKMW5ZBQ0I1XV8Jolyk2niZzMP/9xsbYw=) 4: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b4:5e:e5:59:26:be:c7:46:86:ee:8d:de:67:5f:08:6b:89:5e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46 Validity Not Before: Dec 17 00:07:21 2025 GMT Not After : Dec 20 03:34:21 2025 GMT Subject: CN=92BEF96B1F3CD899BF8CA9066975A84649C11263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:f4:35:dd:65:64:e9:a0:04:03:cf:79:ed: 09:ea:53:97:b7:a3:81:f5:9a:6b:ee:89:b7:31:59: 5f:5c:5c:a7:3d:10:00:4c:48:2e:6e:85:1f:06:a0: bd:d3:99:bb:4e:ae:ec:b5:59:e3:44:96:8d:7f:f2: 1a:9f:b7:93:ab:32:3d:41:88:cb:3c:bb:f7:2b:30: c8:f8:ab:88:54:5e:89:36:d6:9e:36:0f:58:42:93: 78:18:6d:86:f2:42:3a:2b:05:3b:e9:cc:f9:ae:bb: 61:c7:29:63:20:08:8c:d9:fd:5f:f8:70:5d:37:be: 80:a3:53:45:14:9b:56:73:c1:e3:f6:b9:61:9d:32: d3:53:16:f1:81:38:d6:02:f5:fd:9f:f5:6a:be:e4: 0d:9a:f6:e1:57:5e:c2:47:83:56:06:f5:f1:85:b7: a9:cc:b8:24:18:fb:02:20:e5:fc:e2:15:8c:85:48: 32:a3:d5:9c:66:7c:15:a8:9d:b3:15:dc:db:80:ab: 49:bf:99:34:33:ac:0e:33:cf:d1:35:d6:c6:59:64: 66:a4:de:f6:f4:87:87:46:01:82:7b:49:dc:d0:dc: eb:90:11:10:56:da:7d:2f:69:b2:c9:2f:d7:13:d0: 50:45:5c:b0:c7:ed:2d:30:ba:76:07:ea:a1:be:0c: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:F9:6B:1F:3C:D8:99:BF:8C:A9:06:69:75:A8:46:49:C1:12:63 X509v3 Authority Key Identifier: keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:5f:19:e2:4f:06:83:a2:45:bc:f5:f7:2c:03:f5:bb:9a: d1:3f:eb:b3:b2:a6:50:ed:4e:40:1b:07:ec:86:da:6c:26:d5: e7:6b:64:ad:1a:05:b7:ac:5f:bd:bd:d4:42:84:a1:5f:c8:a5: 2d:5f:0d:85:4b:f7:49:2e:ea:f1:f5:75:cc:69:06:60:de:dc: 76:51:8a:30:72:2e:4a:b1:17:e7:7c:c7:ee:8f:5e:37:b9:24: cf:7a:a9:01:91:30:95:f9:de:21:55:12:ee:94:0c:88:61:92: 6e:c6:60:b7:54:db:84:5a:b7:5c:f5:e2:02:16:ce:d8:8b:7d: 6a:bc:7d:8c:a8:1c:5b:25:ac:bf:c7:92:fb:25:64:c6:9a:80: ff:1e:8a:27:b3:84:a6:5d:5b:cd:15:18:61:07:c2:2f:e2:ed: 4e:a4:a7:20:33:c1:9d:6a:03:7f:2f:ce:ac:7a:e9:6a:f0:e1: 7b:f0:ec:c7:a6:d1:ce:a1:ef:77:12:bd:01:6e:d1:78:63:bd: 88:93:dc:46:5b:f3:a4:ee:02:31:96:47:23:9d:63:32:de:64: 68:46:ef:2c:70:e5:58:eb:a5:0e:c7:dd:cb:7f:29:7d:24:d1: b3:0e:62:2d:7f:ac:a1:51:dd:96:3c:ea:5e:fe:c9:97:38:89: 86:d7:9f:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELRe5VkmvsdGhu6N3mdfCGuJXjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy OEEzNkE0NjAeFw0yNTEyMTcwMDA3MjFaFw0yNTEyMjAwMzM0MjFaMDMxMTAvBgNV BAMTKDkyQkVGOTZCMUYzQ0Q4OTlCRjhDQTkwNjY5NzVBODQ2NDlDMTEyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQfQ13WVk6aAEA8957QnqU5e3 o4H1mmvuibcxWV9cXKc9EABMSC5uhR8GoL3TmbtOruy1WeNElo1/8hqft5OrMj1B iMs8u/crMMj4q4hUXok21p42D1hCk3gYbYbyQjorBTvpzPmuu2HHKWMgCIzZ/V/4 cF03voCjU0UUm1ZzweP2uWGdMtNTFvGBONYC9f2f9Wq+5A2a9uFXXsJHg1YG9fGF t6nMuCQY+wIg5fziFYyFSDKj1ZxmfBWonbMV3NuAq0m/mTQzrA4zz9E11sZZZGak 3vb0h4dGAYJ7SdzQ3OuQERBW2n0vabLJL9cT0FBFXLDH7S0wunYH6qG+DEMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkr75ax882Jm/jKkGaXWoRknBEmMwHwYDVR0j BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4 NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIoXxniTwaDokW89fcsA/W7mtE/67OyplDt TkAbB+yG2mwm1edrZK0aBbesX7291EKEoV/IpS1fDYVL90ku6vH1dcxpBmDe3HZR ijByLkqxF+d8x+6PXje5JM96qQGRMJX53iFVEu6UDIhhkm7GYLdU24Rat1z14gIW ztiLfWq8fYyoHFslrL/HkvslZMaagP8eiiezhKZdW80VGGEHwi/i7U6kpyAzwZ1q A38vzqx66Wrw4Xvw7Mem0c6h73cSvQFu0XhjvYiT3EZb86TuAjGWRyOdYzLeZGhG 7yxw5VjrpQ7H3ct/KX0k0bMOYi1/rKFR3ZY86l7+yZc4iYbXn8o= -----END CERTIFICATE-----Generated at Fri Dec 19 18:22:36 2025 by rpki-client