This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: eJObj/IJNfr9ndPO+rchZofJuasBwGFrm+pkcV06Esk= Subject key identifier: 3E:9E:A4:79:0E:68:51:83:91:A3:DE:E9:6F:E7:71:F4:D4:A1:D9:4F Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 4E75817633C71A62477DF5EE89B4EABB7A575D7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 021B Signing time: Thu 18 Dec 2025 09:21:50 +0000 Manifest this update: Thu 18 Dec 2025 09:16:50 +0000 Manifest next update: Sun 21 Dec 2025 16:54:50 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 2: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: gkdkffce6HdqABOgTjvZYcaJ3OpnEzNr3ZgUKbvfmiY=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:75:81:76:33:c7:1a:62:47:7d:f5:ee:89:b4:ea:bb:7a:57:5d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Dec 18 09:16:50 2025 GMT Not After : Dec 21 16:54:50 2025 GMT Subject: CN=3E9EA4790E68518391A3DEE96FE771F4D4A1D94F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:6f:d7:db:00:ac:79:b0:e2:25:e1:07:6d: 93:05:ce:18:77:8d:3c:ed:48:1b:73:aa:8d:f4:01: 82:39:99:98:e3:f5:3f:5b:17:4c:07:c7:ff:5a:32: 1b:94:ed:a9:78:2e:af:a3:74:f6:71:0c:b1:98:a7: 60:f9:51:61:88:72:63:00:d8:f0:7b:f3:23:4d:38: ac:0c:2b:fd:10:83:9d:dc:e4:61:5c:ca:a2:f0:43: eb:8f:49:ce:96:f3:59:73:dc:32:2d:a2:1d:59:7a: bb:9a:2c:3b:53:65:69:a7:8f:13:f3:8d:55:ee:a3: e7:57:5f:a3:33:04:ba:47:32:16:d4:14:38:9d:91: f2:67:36:0c:b6:38:9d:71:3a:ec:6d:6e:9d:cc:04: c5:83:6b:1c:29:04:14:c0:8b:0e:05:b1:c6:bf:f5: bd:a2:69:e5:eb:51:cb:bf:cb:7d:be:3c:22:e7:74: f5:f2:58:85:db:26:d2:05:db:38:1b:65:61:b4:42: bb:62:ca:b7:17:52:d3:55:09:cf:af:05:a1:ee:04: f5:f2:56:03:f9:c4:1f:09:7a:62:24:12:1a:fc:70: a6:69:bc:f1:25:47:da:d6:ca:a8:2c:92:67:53:f2: 00:f7:4a:24:c5:3b:60:6c:39:05:48:e1:8e:7e:11: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:A4:79:0E:68:51:83:91:A3:DE:E9:6F:E7:71:F4:D4:A1:D9:4F X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0b:be:ca:0e:c0:b5:22:a8:2d:1f:b2:89:32:ea:30:41:7a: 5c:32:95:7a:a1:9d:6c:45:34:b1:87:9b:2c:c1:0c:f7:06:74: c9:01:f6:18:84:15:6b:e4:80:94:e6:a5:a5:5b:e3:48:11:65: c1:0a:a4:bc:f5:00:22:7e:49:05:1b:2f:e4:ad:df:f9:8c:53: c5:22:f1:45:0b:50:c2:d7:06:ef:20:26:ce:51:c3:e7:35:a7: 68:9d:e7:77:a8:ef:dd:8e:c7:8e:3c:49:bd:f8:fc:ab:ba:97: 9e:cb:0d:15:9b:12:7b:6d:ac:c8:af:5b:8a:ea:30:81:46:81: 4a:10:63:8d:17:46:1d:a0:91:fc:01:7f:72:71:d8:f7:7a:e8: b8:cf:3c:e0:eb:64:3f:13:76:dd:af:b0:28:e5:48:88:bf:fb: bd:82:51:11:8f:69:9f:b4:11:f6:f6:cb:79:ea:60:88:a7:7e: af:0e:41:5f:84:2a:e8:27:9d:30:29:83:9c:14:34:be:9c:54: 07:38:e0:c1:08:47:40:e2:a4:f0:71:a8:e9:9e:c4:2a:5a:a1: fa:79:26:cc:b1:30:ba:4c:d7:a7:c0:a8:8e:f4:10:8a:8d:4e: 2e:a0:a9:c0:c3:c9:42:60:c3:ca:76:f4:2b:6b:e5:01:67:dc: 0a:04:a5:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnWBdjPHGmJHffXuibTqu3pXXXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTEyMTgwOTE2NTBaFw0yNTEyMjExNjU0NTBaMDMxMTAvBgNV BAMTKDNFOUVBNDc5MEU2ODUxODM5MUEzREVFOTZGRTc3MUY0RDRBMUQ5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAG/X2wCsebDiJeEHbZMFzhh3 jTztSBtzqo30AYI5mZjj9T9bF0wHx/9aMhuU7al4Lq+jdPZxDLGYp2D5UWGIcmMA 2PB78yNNOKwMK/0Qg53c5GFcyqLwQ+uPSc6W81lz3DItoh1ZeruaLDtTZWmnjxPz jVXuo+dXX6MzBLpHMhbUFDidkfJnNgy2OJ1xOuxtbp3MBMWDaxwpBBTAiw4Fsca/ 9b2iaeXrUcu/y32+PCLndPXyWIXbJtIF2zgbZWG0QrtiyrcXUtNVCc+vBaHuBPXy VgP5xB8JemIkEhr8cKZpvPElR9rWyqgskmdT8gD3SiTFO2BsOQVI4Y5+EZo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPp6keQ5oUYORo97pb+dx9NSh2U8wHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgLvsoOwLUiqC0fsoky6jBBelwylXqhnWxF NLGHmyzBDPcGdMkB9hiEFWvkgJTmpaVb40gRZcEKpLz1ACJ+SQUbL+St3/mMU8Ui 8UULUMLXBu8gJs5Rw+c1p2id53eo792Ox448Sb34/Ku6l57LDRWbEnttrMivW4rq MIFGgUoQY40XRh2gkfwBf3Jx2Pd66LjPPODrZD8Tdt2vsCjlSIi/+72CURGPaZ+0 Efb2y3nqYIinfq8OQV+EKugnnTApg5wUNL6cVAc44MEIR0DipPBxqOmexCpaofp5 JsyxMLpM16fAqI70EIqNTi6gqcDDyUJgw8p29Ctr5QFn3AoEpaY= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:03 2025 by rpki-client