This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: HsRfrZL5gbBA925qtzbCUDKGw5RlS8q7DNjgF1m2rFw= Subject key identifier: F4:C9:68:79:22:E2:11:D0:EE:35:87:B4:89:64:F6:07:76:C9:78:4A Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 31F7074DE822466774D3D9C4C1BD41DB3E118E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0105 Signing time: Fri 26 Dec 2025 12:20:06 +0000 Manifest this update: Fri 26 Dec 2025 12:15:06 +0000 Manifest next update: Mon 29 Dec 2025 19:35:06 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: RnACKIGOZVuE9qYSulNAJUwSBidIGOAPqlwLndp67x0=) 4: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f7:07:4d:e8:22:46:67:74:d3:d9:c4:c1:bd:41:db:3e:11:8e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Dec 26 12:15:06 2025 GMT Not After : Dec 29 19:35:06 2025 GMT Subject: CN=F4C9687922E211D0EE3587B48964F60776C9784A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:5c:73:38:6c:a4:81:7f:b7:f8:a3:2a:e6: 92:45:4b:21:36:c2:f8:65:8f:ac:39:3e:72:d7:f7: dc:10:6e:77:48:42:f8:aa:21:b9:6a:21:f7:e7:93: 81:5b:f6:d2:0b:49:e5:f7:c8:a3:a2:51:67:cd:96: d3:50:dc:3c:77:ea:ae:93:29:5f:ca:d3:1a:68:96: 48:54:f0:48:ef:af:88:3e:51:ae:78:12:f2:5a:a7: d3:ee:ff:85:4a:45:b5:32:f8:43:f8:a6:07:8a:92: 86:58:3d:ae:0c:0f:23:c2:bb:9d:5c:41:ac:22:dd: fb:11:76:97:78:57:76:d9:ae:04:35:d7:6a:8f:8b: 06:22:6e:33:42:37:97:f1:6e:73:e5:2e:da:88:fb: 97:33:fa:ce:69:23:57:4e:0b:0f:48:cf:3b:6e:bc: 20:e5:98:02:54:37:3c:c5:d3:58:8e:06:70:8a:30: f8:de:e5:e8:33:cf:eb:d0:1f:8d:5c:cc:eb:a9:87: 5e:33:64:2c:5c:a7:45:a1:89:9c:2a:d0:da:50:15: 7e:3e:ca:1c:d7:3d:81:c0:4d:cc:82:51:ca:da:31: 73:04:17:76:9c:f6:28:05:ed:3a:7a:65:2e:4b:65: 83:2b:2f:bf:e2:84:c9:31:75:95:e3:d8:7d:d2:59: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C9:68:79:22:E2:11:D0:EE:35:87:B4:89:64:F6:07:76:C9:78:4A X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:05:3e:d3:5a:28:43:f1:45:4f:45:f3:c3:ec:f3:cf:cc:7e: db:fb:89:3e:c2:72:1f:04:3c:f0:4e:ab:3c:cc:5f:ce:6f:a1: 2d:2c:70:3d:b1:5b:0e:e4:c3:2b:fa:01:79:20:53:b2:92:00: 6b:73:87:a2:69:7c:7e:ae:a0:fb:54:75:94:66:9c:a5:ad:1d: 9f:f0:e8:b7:1d:31:f6:d7:5c:dd:f5:bf:3d:12:56:10:dd:06: a9:0d:b2:99:97:70:1a:57:a8:c9:2f:ce:8f:51:2d:2f:fe:a9: 60:71:f1:54:83:00:60:14:09:ab:46:12:53:6a:61:9d:03:ed: 1d:e1:a2:f8:ba:9c:3f:1c:a3:40:65:19:18:9e:53:39:b9:7f: aa:cf:bb:87:10:70:7c:27:1e:ce:dc:0f:0a:ad:3c:01:95:93: 52:be:00:e2:8c:be:60:3d:eb:3d:8f:f0:62:23:af:11:c3:02: d2:83:54:a8:fc:9a:08:59:5b:2b:7b:72:0c:b0:2b:20:3e:df: c3:1e:ee:cd:0b:3d:bc:b8:87:96:b8:1b:cb:c8:db:a2:c7:89: 82:41:d3:e8:e9:18:ee:c3:98:68:34:60:cf:8f:1f:9b:9e:7b: 50:5a:11:c4:e5:88:a4:73:f5:4b:7b:e5:7c:02:64:44:80:87: e3:e3:a3:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfcHTegiRmd009nEwb1B2z4Rjg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTEyMjYxMjE1MDZaFw0yNTEyMjkxOTM1MDZaMDMxMTAvBgNV BAMTKEY0Qzk2ODc5MjJFMjExRDBFRTM1ODdCNDg5NjRGNjA3NzZDOTc4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPlxzOGykgX+3+KMq5pJFSyE2 wvhlj6w5PnLX99wQbndIQviqIblqIffnk4Fb9tILSeX3yKOiUWfNltNQ3Dx36q6T KV/K0xpolkhU8Ejvr4g+Ua54EvJap9Pu/4VKRbUy+EP4pgeKkoZYPa4MDyPCu51c Qawi3fsRdpd4V3bZrgQ112qPiwYibjNCN5fxbnPlLtqI+5cz+s5pI1dOCw9Izztu vCDlmAJUNzzF01iOBnCKMPje5egzz+vQH41czOuph14zZCxcp0WhiZwq0NpQFX4+ yhzXPYHATcyCUcraMXMEF3ac9igF7Tp6ZS5LZYMrL7/ihMkxdZXj2H3SWV9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MloeSLiEdDuNYe0iWT2B3bJeEowHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkFPtNaKEPxRU9F88Ps88/Mftv7iT7Cch8E PPBOqzzMX85voS0scD2xWw7kwyv6AXkgU7KSAGtzh6JpfH6uoPtUdZRmnKWtHZ/w 6LcdMfbXXN31vz0SVhDdBqkNspmXcBpXqMkvzo9RLS/+qWBx8VSDAGAUCatGElNq YZ0D7R3hovi6nD8co0BlGRieUzm5f6rPu4cQcHwnHs7cDwqtPAGVk1K+AOKMvmA9 6z2P8GIjrxHDAtKDVKj8mghZWyt7cgywKyA+38Me7s0LPby4h5a4G8vI26LHiYJB 0+jpGO7DmGg0YM+PH5uee1BaEcTliKRz9Ut75XwCZESAh+Pjo4I= -----END CERTIFICATE-----Generated at Sun Dec 28 07:33:51 2025 by rpki-client