This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: F7s1f/zY8FDqSAIEYY6V6qyFjVhfQyqvhqxaCLbkeuE= Subject key identifier: 8E:12:B0:B6:83:2A:A1:EF:AB:2B:C9:D1:93:5F:CC:8E:95:71:4C:B3 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 771D80D10B849D238E5F1D6CA983A5DA8CD4640F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01C2 Signing time: Wed 17 Dec 2025 10:20:47 +0000 Manifest this update: Wed 17 Dec 2025 10:15:47 +0000 Manifest next update: Sat 20 Dec 2025 21:33:47 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: xEb8QxBSrKeKCnaaYfuu6ucVKSlKPADRDUPq/vS6K2U=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1d:80:d1:0b:84:9d:23:8e:5f:1d:6c:a9:83:a5:da:8c:d4:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Dec 17 10:15:47 2025 GMT Not After : Dec 20 21:33:47 2025 GMT Subject: CN=8E12B0B6832AA1EFAB2BC9D1935FCC8E95714CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:cd:20:f6:61:c9:88:1e:5f:dc:9e:14:f8: 78:f9:b6:ab:4c:db:68:42:9b:bf:e2:ec:0b:b0:d0: 43:d0:ce:99:0e:53:82:aa:f9:87:86:bd:a2:82:60: 87:fa:9e:99:ea:d8:56:a1:0b:28:6f:c4:7b:40:fd: 39:d4:7c:b5:69:3a:5f:77:a9:56:cb:bf:18:7c:81: b6:d4:75:f8:e1:51:80:4a:ea:21:0e:ab:f0:aa:a5: 7b:e5:46:0d:13:e1:c7:0f:56:dc:c1:1c:18:12:23: c8:ed:10:eb:cc:43:1c:f5:45:d8:df:74:27:ec:62: 58:86:b0:9e:f0:95:c0:2d:91:e2:0b:f7:f8:d8:60: f0:bc:d1:30:f1:9e:d4:3f:d3:c3:d4:81:3d:b7:ab: 49:24:2e:f4:3f:b5:90:fb:ec:7d:b1:29:d2:ac:14: 54:f4:7f:60:05:94:c8:49:04:4f:fd:28:0f:61:81: f2:12:28:d3:00:31:2f:1e:06:e8:e5:a4:a3:6b:df: d7:0d:7f:b6:56:5c:0a:f9:12:ab:bf:ac:c4:95:9a: f0:67:85:df:e7:b3:36:bc:af:af:75:7b:99:fc:de: b5:11:1c:1f:ad:8b:22:a1:0a:6c:70:07:a5:9c:1c: 3a:cb:68:b7:ce:e3:87:9a:6b:30:5e:a5:1f:9f:e6: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:B0:B6:83:2A:A1:EF:AB:2B:C9:D1:93:5F:CC:8E:95:71:4C:B3 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:88:c3:94:4d:06:50:c6:7e:94:27:63:18:d6:5a:24:3c: e3:c7:3d:11:4e:99:64:51:c7:be:ae:44:11:ec:94:67:f9:c8: 03:b5:7a:27:8a:41:1f:1b:3b:36:a8:04:65:a2:e8:b2:c3:33: 14:0e:28:32:c4:5f:64:87:9b:96:fe:d7:67:72:79:96:54:c3: 0c:90:f2:ec:ac:70:77:40:38:c7:26:34:7b:9b:85:aa:69:98: 61:45:9b:e7:32:91:87:88:cb:84:29:a5:05:c1:e4:8e:1f:34: 65:34:aa:ae:8b:dc:f1:cd:4a:48:6d:37:b0:e8:ab:1e:8e:10: 30:e2:74:80:96:63:e9:4a:e1:b6:dc:62:39:2a:9e:43:dc:42: 4e:50:bf:a9:8a:4f:f7:ec:dd:8b:5b:d8:52:35:9f:c7:b7:92: ac:d4:d9:50:cc:4c:d7:b1:87:64:1e:2a:4f:42:3f:44:aa:01: af:c8:ee:53:87:1e:4d:5b:76:90:29:2b:a1:db:7a:83:dc:87: fa:e0:b9:8e:5c:15:40:0e:87:af:aa:2c:e8:95:ce:e4:ef:fc: 6c:fd:ba:9f:a1:77:57:58:51:77:82:c3:bd:97:ea:95:37:e6: cc:19:34:ed:5f:77:7f:07:5f:81:58:0b:12:07:fe:3e:2f:4f: 01:e9:c5:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx2A0QuEnSOOXx1sqYOl2ozUZA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTEyMTcxMDE1NDdaFw0yNTEyMjAyMTMzNDdaMDMxMTAvBgNV BAMTKDhFMTJCMEI2ODMyQUExRUZBQjJCQzlEMTkzNUZDQzhFOTU3MTRDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLs0g9mHJiB5f3J4U+Hj5tqtM 22hCm7/i7Auw0EPQzpkOU4Kq+YeGvaKCYIf6npnq2FahCyhvxHtA/TnUfLVpOl93 qVbLvxh8gbbUdfjhUYBK6iEOq/CqpXvlRg0T4ccPVtzBHBgSI8jtEOvMQxz1Rdjf dCfsYliGsJ7wlcAtkeIL9/jYYPC80TDxntQ/08PUgT23q0kkLvQ/tZD77H2xKdKs FFT0f2AFlMhJBE/9KA9hgfISKNMAMS8eBujlpKNr39cNf7ZWXAr5Equ/rMSVmvBn hd/nsza8r691e5n83rURHB+tiyKhCmxwB6WcHDrLaLfO44eaazBepR+f5m1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhKwtoMqoe+rK8nRk1/MjpVxTLMwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLOiMOUTQZQxn6UJ2MY1lokPOPHPRFOmWRR x76uRBHslGf5yAO1eieKQR8bOzaoBGWi6LLDMxQOKDLEX2SHm5b+12dyeZZUwwyQ 8uyscHdAOMcmNHubhappmGFFm+cykYeIy4QppQXB5I4fNGU0qq6L3PHNSkhtN7Do qx6OEDDidICWY+lK4bbcYjkqnkPcQk5Qv6mKT/fs3Ytb2FI1n8e3kqzU2VDMTNex h2QeKk9CP0SqAa/I7lOHHk1bdpApK6HbeoPch/rguY5cFUAOh6+qLOiVzuTv/Gz9 up+hd1dYUXeCw72X6pU35swZNO1fd38HX4FYCxIH/j4vTwHpxag= -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:30 2025 by rpki-client