This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: /tjbOBo9JvTeAs/uVnSjI3fgVt5XAiPobTVb5a2DCl0= Subject key identifier: 1A:BD:D7:33:8D:9F:5B:4F:6E:1F:62:2A:8F:CE:13:79:4D:95:56:3F Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 0A50DF59B7965675D3C4B389638B681A0D29BC69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0226 Signing time: Thu 18 Dec 2025 00:40:06 +0000 Manifest this update: Thu 18 Dec 2025 00:35:06 +0000 Manifest next update: Sun 21 Dec 2025 02:07:06 +0000 Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 3: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: ba3E4stV6MqC07Oe7KKYjFoxnZIwW9H+ABtvNdUu3pU=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:50:df:59:b7:96:56:75:d3:c4:b3:89:63:8b:68:1a:0d:29:bc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Dec 18 00:35:06 2025 GMT Not After : Dec 21 02:07:06 2025 GMT Subject: CN=1ABDD7338D9F5B4F6E1F622A8FCE13794D95563F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:10:b4:fe:bb:86:aa:e1:f5:e4:15:50:d2: 16:22:30:de:c3:01:83:1b:bf:40:22:f9:f7:e0:50: bc:88:4f:fd:18:a7:f9:43:9c:a3:5c:ec:e3:db:5b: 8e:50:8d:9f:6e:9f:77:10:df:08:89:8b:4a:4f:16: b2:ac:37:af:5a:ce:3c:bc:99:5a:15:a0:fe:ef:fc: 2e:92:57:b3:ae:19:d5:e3:83:dd:da:4d:17:f3:ea: 1d:7f:53:98:b3:c8:47:66:4e:40:97:07:f1:04:d0: d9:93:51:9c:c0:b0:d9:98:1e:c9:2a:c7:53:3e:e4: ec:72:78:3b:a2:be:cf:9b:06:bb:13:47:05:80:86: e6:da:a1:5d:f2:2a:83:cb:49:af:f8:8c:34:c0:13: bc:65:51:bd:31:1a:1f:9a:20:bf:f3:6c:75:dc:f2: f6:5c:f8:03:c1:99:d5:bd:0a:24:3e:f8:b9:37:6f: 6f:36:f9:60:86:6d:0c:b1:63:f4:82:a1:15:be:1b: 1f:a2:de:12:6d:02:8d:be:18:3b:59:a3:6f:c1:3c: 9c:b9:6d:6a:60:48:3c:f5:16:fb:7c:43:ee:38:c4: ac:b4:8b:1b:cb:7f:66:81:15:94:85:2a:13:c5:b0: d6:11:e2:9e:fc:e5:b4:10:05:42:82:43:1b:b4:5f: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BD:D7:33:8D:9F:5B:4F:6E:1F:62:2A:8F:CE:13:79:4D:95:56:3F X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:bd:9b:53:f6:ef:3d:62:96:6e:81:45:09:4f:1a:47:46:de: d1:1b:34:e9:69:a2:0b:c6:88:62:10:9a:c8:a1:2d:7f:ad:82: dd:e1:31:bd:66:ac:2a:8b:8f:15:8b:56:9e:cb:05:bc:88:19: 98:16:0b:6d:aa:0a:7b:62:96:e6:e6:ac:7f:20:76:95:be:e4: 86:72:73:ba:84:11:b9:82:33:1d:e5:28:76:89:98:8c:c5:96: cf:d0:47:30:b8:fc:ce:1e:0f:0a:dc:de:ab:c2:63:c7:0f:19: 57:69:57:b8:aa:6d:d5:c6:d2:c8:ab:3f:6c:05:ff:15:f1:5a: 73:84:35:01:94:20:c9:59:a2:c3:f4:27:02:b0:e7:12:05:af: cf:8a:83:6d:26:09:92:8a:7e:12:4b:81:05:30:f9:a6:f1:47: 0b:20:b8:19:ad:7a:cc:1e:e2:7e:a3:f5:32:cd:3e:15:41:39: d7:c6:34:b0:92:89:60:f0:d3:0f:e3:62:82:4e:e8:84:dc:c3: 1e:55:64:29:4c:8b:fa:d6:22:d5:df:46:9a:45:b5:0e:bd:bb: 31:01:a8:33:cf:91:ef:b8:79:e9:d6:a2:c9:38:ef:04:38:34: 2d:14:83:cf:1e:9e:d7:93:15:99:c1:bb:a6:77:47:30:b5:1f: 16:79:23:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClDfWbeWVnXTxLOJY4toGg0pvGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTEyMTgwMDM1MDZaFw0yNTEyMjEwMjA3MDZaMDMxMTAvBgNV BAMTKDFBQkRENzMzOEQ5RjVCNEY2RTFGNjIyQThGQ0UxMzc5NEQ5NTU2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IxC0/ruGquH15BVQ0hYiMN7D AYMbv0Ai+ffgULyIT/0Yp/lDnKNc7OPbW45QjZ9un3cQ3wiJi0pPFrKsN69azjy8 mVoVoP7v/C6SV7OuGdXjg93aTRfz6h1/U5izyEdmTkCXB/EE0NmTUZzAsNmYHskq x1M+5OxyeDuivs+bBrsTRwWAhubaoV3yKoPLSa/4jDTAE7xlUb0xGh+aIL/zbHXc 8vZc+APBmdW9CiQ++Lk3b282+WCGbQyxY/SCoRW+Gx+i3hJtAo2+GDtZo2/BPJy5 bWpgSDz1Fvt8Q+44xKy0ixvLf2aBFZSFKhPFsNYR4p785bQQBUKCQxu0X+MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGr3XM42fW09uH2Iqj84TeU2VVj8wHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm9m1P27z1ilm6BRQlPGkdG3tEbNOlpogvG iGIQmsihLX+tgt3hMb1mrCqLjxWLVp7LBbyIGZgWC22qCntilubmrH8gdpW+5IZy c7qEEbmCMx3lKHaJmIzFls/QRzC4/M4eDwrc3qvCY8cPGVdpV7iqbdXG0sirP2wF /xXxWnOENQGUIMlZosP0JwKw5xIFr8+Kg20mCZKKfhJLgQUw+abxRwsguBmteswe 4n6j9TLNPhVBOdfGNLCSiWDw0w/jYoJO6ITcwx5VZClMi/rWItXfRppFtQ69uzEB qDPPke+4eenWosk47wQ4NC0Ug88enteTFZnBu6Z3RzC1HxZ5I5A= -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:19 2025 by rpki-client