This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: yCoIiqPcCdq9qmHaFa8Ck0KfVfJ+QjfGfm61yvHdTw0= Subject key identifier: 3F:7B:CC:8D:F1:D7:97:4F:1B:29:2D:0D:4A:FF:BA:FB:2B:C5:38:B6 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 1DEAA8282CB24E3C55C1AF57863194A7AB50E393 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0394 Signing time: Thu 18 Dec 2025 02:30:04 +0000 Manifest this update: Thu 18 Dec 2025 02:25:04 +0000 Manifest next update: Sun 21 Dec 2025 03:02:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: 3MALcFJtqGa1UwUTOFoaJT5AQDYg49sHVpLCkUzeDxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ea:a8:28:2c:b2:4e:3c:55:c1:af:57:86:31:94:a7:ab:50:e3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Dec 18 02:25:04 2025 GMT Not After : Dec 21 03:02:04 2025 GMT Subject: CN=3F7BCC8DF1D7974F1B292D0D4AFFBAFB2BC538B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:ec:80:6b:a0:5b:cc:0c:54:1a:cc:80:ae: 7b:aa:b9:6a:23:82:9f:c3:fc:e0:d4:41:e2:84:00: 49:e0:26:5b:17:90:9f:a1:e5:9e:d4:7d:50:d0:c9: 1c:52:fd:0f:4a:cc:98:07:74:a7:e5:d6:fa:f0:99: cd:41:ad:51:99:c0:4b:48:83:2f:7b:3f:9d:5c:47: 5a:96:2c:f8:c6:a4:0e:de:20:3e:7a:dc:4c:38:9a: 3c:d9:cb:a4:aa:08:c7:92:1c:ed:5e:16:2f:1f:c7: 89:d3:19:ed:62:74:a0:47:99:b6:0e:f3:4e:6c:d9: ed:b8:e9:c2:7b:fd:8a:a1:60:27:dc:7b:e7:58:1f: 06:78:a3:30:55:f2:e2:cf:d4:bd:4d:0d:2c:5a:77: 36:e7:c6:cf:d2:e8:1d:f7:85:0c:e4:70:a5:17:6f: 86:91:fa:6b:56:ed:73:02:a4:62:62:10:a8:14:a2: 68:4a:5f:de:9d:82:66:51:36:96:ae:98:3e:18:56: 73:3f:a1:72:73:ae:0e:ef:6b:17:89:a9:79:6b:e4: 40:f5:1a:6a:c2:c4:f3:d6:9c:fb:51:f3:12:9d:46: 6e:9e:7e:50:6e:87:46:c3:8c:6d:14:f8:ad:29:8a: a3:be:b5:60:1e:b6:dc:b4:cc:7e:43:e1:6c:c9:b0: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7B:CC:8D:F1:D7:97:4F:1B:29:2D:0D:4A:FF:BA:FB:2B:C5:38:B6 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ed:24:65:7c:a7:e5:51:b9:d0:d8:98:f4:2b:93:e3:6b:a6: dd:53:0f:4f:f9:28:05:28:7f:e3:66:e2:6a:00:d4:26:e5:bd: 3e:92:e7:79:73:f8:10:22:7a:19:a1:70:10:b7:8e:0e:14:13: d6:4b:46:af:0d:1e:3f:fc:36:91:bd:01:28:5f:2b:aa:49:44: 29:df:86:ef:b4:4e:a9:af:fc:6b:44:c5:e0:9b:99:c7:0f:68: c0:19:0f:cd:6f:4b:3a:56:90:a7:65:64:f3:4f:27:56:af:79: d5:75:09:7b:04:bb:7e:32:ed:25:57:5c:62:90:3c:7f:b7:c8: 6b:69:17:13:4d:91:aa:7c:16:e6:f5:21:ab:f6:77:1e:52:a7: 5c:57:ea:15:5c:fe:ae:17:45:05:1a:93:15:18:7c:c7:21:4d: 91:fc:a2:00:8a:4d:ee:40:d4:a3:f3:f3:56:94:28:c6:0e:78: ed:ee:f6:e3:97:ee:ab:68:06:e1:37:6f:cd:9e:e9:a4:c0:14: f8:82:38:b4:3b:84:ba:68:e7:cf:ed:be:ba:ee:b8:18:00:6d: ec:dd:e8:b8:c3:b6:22:9a:40:7b:07:51:0f:a3:0d:3c:b5:bd: f5:f9:1d:92:de:21:ae:28:d3:8f:91:03:cf:a2:a1:33:4d:3f: 83:93:ed:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeqoKCyyTjxVwa9XhjGUp6tQ45MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTEyMTgwMjI1MDRaFw0yNTEyMjEwMzAyMDRaMDMxMTAvBgNV BAMTKDNGN0JDQzhERjFENzk3NEYxQjI5MkQwRDRBRkZCQUZCMkJDNTM4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp+yAa6BbzAxUGsyArnuquWoj gp/D/ODUQeKEAEngJlsXkJ+h5Z7UfVDQyRxS/Q9KzJgHdKfl1vrwmc1BrVGZwEtI gy97P51cR1qWLPjGpA7eID563Ew4mjzZy6SqCMeSHO1eFi8fx4nTGe1idKBHmbYO 805s2e246cJ7/YqhYCfce+dYHwZ4ozBV8uLP1L1NDSxadzbnxs/S6B33hQzkcKUX b4aR+mtW7XMCpGJiEKgUomhKX96dgmZRNpaumD4YVnM/oXJzrg7vaxeJqXlr5ED1 GmrCxPPWnPtR8xKdRm6eflBuh0bDjG0U+K0piqO+tWAetty0zH5D4WzJsPWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3vMjfHXl08bKS0NSv+6+yvFOLYwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPtJGV8p+VRudDYmPQrk+Nrpt1TD0/5KAUo f+Nm4moA1CblvT6S53lz+BAiehmhcBC3jg4UE9ZLRq8NHj/8NpG9AShfK6pJRCnf hu+0Tqmv/GtExeCbmccPaMAZD81vSzpWkKdlZPNPJ1avedV1CXsEu34y7SVXXGKQ PH+3yGtpFxNNkap8Fub1Iav2dx5Sp1xX6hVc/q4XRQUakxUYfMchTZH8ogCKTe5A 1KPz81aUKMYOeO3u9uOX7qtoBuE3b82e6aTAFPiCOLQ7hLpo58/tvrruuBgAbezd 6LjDtiKaQHsHUQ+jDTy1vfX5HZLeIa4o04+RA8+ioTNNP4OT7QI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:13:19 2025 by rpki-client