This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: SNdEeJQg0yXQmKxv0uqx17iT2hxH5xzFWq+vHLUhw3U= Subject key identifier: 26:F1:9E:AE:11:C0:72:50:D5:F1:24:FF:EC:EF:EE:D7:B6:C1:8C:10 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 4C85B3C3CCF1FC8DDCCF6BCA6266586142E37AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0290 Signing time: Thu 18 Dec 2025 22:42:00 +0000 Manifest this update: Thu 18 Dec 2025 22:37:00 +0000 Manifest next update: Mon 22 Dec 2025 10:08:00 +0000 Files and hashes: 1: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: +ZStO4qmRvdLYRUifxrnZ6iCCxDWhq1QC8uZT5sFhJk=) 2: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: cKrvFeJHcg1hkAVcb4LGoo52M7oz7lM94RQOQw45Nm8=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: mFq2b38/RUkUkCh1MVybkTba/DYg5kwfb6uDHIQj6Gk=) 4: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Ov8NRVnVqFMBFhQjGCU710LWI7k2FUziabpa7227XyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:85:b3:c3:cc:f1:fc:8d:dc:cf:6b:ca:62:66:58:61:42:e3:7a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Dec 18 22:37:00 2025 GMT Not After : Dec 22 10:08:00 2025 GMT Subject: CN=26F19EAE11C07250D5F124FFECEFEED7B6C18C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8a:07:74:24:03:eb:ba:55:1d:8d:c6:f2:a3: 93:69:d6:40:9e:11:0b:33:c0:88:e9:8d:bd:50:4c: 73:9a:4b:73:23:98:0f:e1:ab:4d:c7:58:02:28:22: 9b:e6:d3:ef:8c:b3:23:54:62:ba:3b:a6:b1:c0:b3: b9:55:6f:c2:a1:59:ae:03:10:72:3c:6f:4c:29:ca: 14:c6:76:a9:78:38:2f:17:ea:39:a9:cf:c7:b4:d3: de:c9:e4:b1:fe:1f:a7:38:3a:df:28:7b:00:f1:6b: 65:05:4a:c3:24:0c:ff:f1:61:6f:f0:8a:be:6f:f0: 6a:1e:23:ee:2c:af:a3:ab:d1:9e:80:27:19:f1:eb: 69:4d:74:fd:42:e7:07:f1:eb:be:8a:7a:12:d4:62: 86:eb:08:f5:9e:46:6c:ce:2b:97:67:15:7d:84:d7: 00:f0:b2:a3:ec:98:b1:20:e0:06:b9:d0:8a:15:7c: 83:b4:4f:48:18:65:ff:bd:a4:0c:9a:dd:25:3c:58: 2b:57:71:06:d7:5c:78:3d:ef:02:59:be:6e:8d:4c: bc:60:d1:c0:c5:58:60:46:03:cf:20:23:b0:ce:10: 0b:54:f2:4d:a7:6b:d9:e7:fc:6d:83:bc:50:3d:a7: ea:f2:97:cf:1c:a0:ff:08:cc:05:22:19:e0:ba:0f: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F1:9E:AE:11:C0:72:50:D5:F1:24:FF:EC:EF:EE:D7:B6:C1:8C:10 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b2:5e:4a:3a:22:24:8d:2e:6b:12:c3:c0:49:91:ed:77:9e: 28:7a:ee:2f:cf:af:60:16:68:8e:02:79:cd:35:35:7e:0c:45: 7b:2b:3f:d0:be:07:5d:06:00:71:f2:9c:03:61:44:b3:ac:3a: f7:22:0b:26:2c:f6:f4:73:59:31:5c:75:45:fe:93:0f:57:70: 27:a3:37:90:fe:da:88:22:a1:5f:09:dd:7f:0e:1d:60:c5:ee: 96:d9:f0:7c:bb:fe:03:29:38:28:07:6e:54:7c:c8:b0:3d:34: e5:fe:89:be:98:11:9f:4e:79:59:a8:03:6d:d9:b8:b1:c2:7f: 60:ea:99:93:24:45:0c:fa:d8:57:20:34:1b:fe:c8:69:c0:89: 63:c7:a2:87:2c:36:38:28:4c:07:0e:f6:2e:e9:cd:6e:3f:10: c5:e4:a3:22:5a:3e:2b:9f:ed:22:44:c2:ab:e8:a5:34:8b:77: 45:34:39:17:69:7c:a4:62:dc:cd:e4:e5:71:f1:1b:c9:0e:95: 89:0c:0a:39:03:b7:86:bb:90:77:4d:da:02:cb:7d:cd:58:9d: 66:78:f5:fd:d9:cd:d7:de:4c:f7:66:dc:2b:f7:0b:e0:c2:ac: 44:f3:3f:90:4c:e3:c5:ce:1c:dc:ef:3c:18:04:bd:12:22:d8: ab:63:ba:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIWzw8zx/I3cz2vKYmZYYULjergwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTEyMTgyMjM3MDBaFw0yNTEyMjIxMDA4MDBaMDMxMTAvBgNV BAMTKDI2RjE5RUFFMTFDMDcyNTBENUYxMjRGRkVDRUZFRUQ3QjZDMThDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjigd0JAPrulUdjcbyo5Np1kCe EQszwIjpjb1QTHOaS3MjmA/hq03HWAIoIpvm0++MsyNUYro7prHAs7lVb8KhWa4D EHI8b0wpyhTGdql4OC8X6jmpz8e0097J5LH+H6c4Ot8oewDxa2UFSsMkDP/xYW/w ir5v8GoeI+4sr6Or0Z6AJxnx62lNdP1C5wfx676KehLUYobrCPWeRmzOK5dnFX2E 1wDwsqPsmLEg4Aa50IoVfIO0T0gYZf+9pAya3SU8WCtXcQbXXHg97wJZvm6NTLxg 0cDFWGBGA88gI7DOEAtU8k2na9nn/G2DvFA9p+ryl88coP8IzAUiGeC6D2UfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJvGerhHAclDV8ST/7O/u17bBjBAwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyyXko6IiSNLmsSw8BJke13nih67i/Pr2AW aI4Cec01NX4MRXsrP9C+B10GAHHynANhRLOsOvciCyYs9vRzWTFcdUX+kw9XcCej N5D+2ogioV8J3X8OHWDF7pbZ8Hy7/gMpOCgHblR8yLA9NOX+ib6YEZ9OeVmoA23Z uLHCf2DqmZMkRQz62FcgNBv+yGnAiWPHoocsNjgoTAcO9i7pzW4/EMXkoyJaPiuf 7SJEwqvopTSLd0U0ORdpfKRi3M3k5XHxG8kOlYkMCjkDt4a7kHdN2gLLfc1YnWZ4 9f3ZzdfeTPdm3Cv3C+DCrETzP5BM48XOHNzvPBgEvRIi2KtjuvE= -----END CERTIFICATE-----Generated at Sun Dec 21 12:19:28 2025 by rpki-client