This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: phpN+vDbdcK+TVJy1JhqWeEypVjocNdbWIzoeWVj0fo= Subject key identifier: 44:87:FB:7D:D1:09:8F:54:0C:A2:63:08:37:0D:57:AB:80:7E:BC:5C Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 5E17C60DEABC86BA953E0032D40FF4AC9CC4FF74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02CB Signing time: Fri 19 Dec 2025 11:40:41 +0000 Manifest this update: Fri 19 Dec 2025 11:35:41 +0000 Manifest next update: Mon 22 Dec 2025 12:41:41 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: rsvIvSoY9+HlFCVUE0/uunvsh7PLIw9y5Eilgzxa+hk=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:17:c6:0d:ea:bc:86:ba:95:3e:00:32:d4:0f:f4:ac:9c:c4:ff:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Dec 19 11:35:41 2025 GMT Not After : Dec 22 12:41:41 2025 GMT Subject: CN=4487FB7DD1098F540CA26308370D57AB807EBC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:41:00:24:15:bf:d4:4d:5f:33:5a:4d:2a: 23:fa:f2:75:9c:ab:bd:6f:f3:55:aa:d9:ae:a8:d3: 3a:4b:9e:c5:ff:6b:bd:7b:2c:c5:d8:ec:48:6b:3d: 49:01:57:1e:dc:1a:bb:ad:f7:20:f1:a9:42:f8:e7: ab:44:75:16:e6:3f:b2:8c:bd:87:06:80:43:a6:7c: 11:99:b6:bf:88:31:fa:bc:66:0c:ca:c5:99:da:68: c0:d9:57:d4:5b:d0:90:65:20:4d:68:4b:89:7e:4a: 2e:68:99:eb:4d:e5:2a:81:af:0d:e3:4f:52:6f:a1: 6d:50:31:ed:0f:9c:ba:90:7d:d8:49:35:3a:5d:11: 5c:74:23:c0:1c:1b:dc:1a:5c:f1:44:df:aa:83:ca: 85:a0:07:f2:a9:53:bc:d7:c9:e0:c2:7e:4d:c4:a4: f6:30:e4:02:40:1e:79:a0:0f:7f:2d:d3:d1:b3:65: 4c:2f:9c:fa:f5:76:31:67:fb:ec:ae:ff:82:5f:13: 9f:a3:88:06:76:56:6c:00:2e:f1:66:05:d4:0b:a0: 19:d6:2d:8b:f3:9c:be:b7:d3:8e:f7:51:99:34:b4: d8:9f:fc:bc:f2:17:34:51:00:79:39:97:03:69:fe: 7d:80:6d:03:40:49:ec:aa:6b:b4:56:34:62:9f:a9: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:FB:7D:D1:09:8F:54:0C:A2:63:08:37:0D:57:AB:80:7E:BC:5C X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:72:87:d9:c0:24:d4:69:0d:b2:5c:88:57:a0:21:8a:cd:62: 3d:8c:3a:8e:bf:52:19:20:5b:8e:f9:df:32:82:06:27:5e:9d: a1:19:37:4e:14:8e:f5:ec:6e:3d:95:99:c2:e2:38:c9:05:f5: fc:61:55:fa:bc:1f:29:e6:71:64:32:52:15:4f:5e:e3:e5:ce: 88:5e:a2:6c:6a:8c:06:7e:3b:13:d2:ba:7f:3a:a6:de:6d:f8: 5e:cc:85:c4:54:38:d7:75:54:9e:88:68:c9:38:2b:4c:c7:15: c6:58:62:31:f9:37:1c:07:06:ba:6f:6e:de:22:2c:6f:20:bd: 32:b3:a8:9d:84:0f:29:aa:5c:b2:aa:ec:47:de:65:86:02:19: ca:49:be:01:4e:c3:c3:b5:b4:9b:7c:93:71:ef:1e:ff:28:36: 62:4a:21:aa:dc:88:bc:96:b5:89:f1:09:ed:04:45:a5:63:b6: 50:55:d4:5b:c3:94:ea:8b:97:bc:75:50:1c:2c:af:ff:74:ec: d5:f3:61:c6:5e:9a:7d:3a:3e:91:f1:8e:39:e6:a1:76:02:6a: c7:e3:a6:1b:a3:03:9d:3c:81:a4:df:d7:8e:09:9b:91:38:a6: 12:3a:76:33:61:58:a1:c4:2b:f9:ef:eb:2b:f6:55:08:40:6b: 37:d3:87:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhfGDeq8hrqVPgAy1A/0rJzE/3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTEyMTkxMTM1NDFaFw0yNTEyMjIxMjQxNDFaMDMxMTAvBgNV BAMTKDQ0ODdGQjdERDEwOThGNTQwQ0EyNjMwODM3MEQ1N0FCODA3RUJDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOuUEAJBW/1E1fM1pNKiP68nWc q71v81Wq2a6o0zpLnsX/a717LMXY7EhrPUkBVx7cGrut9yDxqUL456tEdRbmP7KM vYcGgEOmfBGZtr+IMfq8ZgzKxZnaaMDZV9Rb0JBlIE1oS4l+Si5ometN5SqBrw3j T1JvoW1QMe0PnLqQfdhJNTpdEVx0I8AcG9waXPFE36qDyoWgB/KpU7zXyeDCfk3E pPYw5AJAHnmgD38t09GzZUwvnPr1djFn++yu/4JfE5+jiAZ2VmwALvFmBdQLoBnW LYvznL630473UZk0tNif/LzyFzRRAHk5lwNp/n2AbQNASeyqa7RWNGKfqeKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIf7fdEJj1QMomMINw1Xq4B+vFwwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9yh9nAJNRpDbJciFegIYrNYj2MOo6/Uhkg W4753zKCBidenaEZN04UjvXsbj2VmcLiOMkF9fxhVfq8HynmcWQyUhVPXuPlzohe omxqjAZ+OxPSun86pt5t+F7MhcRUONd1VJ6IaMk4K0zHFcZYYjH5NxwHBrpvbt4i LG8gvTKzqJ2EDymqXLKq7EfeZYYCGcpJvgFOw8O1tJt8k3HvHv8oNmJKIarciLyW tYnxCe0ERaVjtlBV1FvDlOqLl7x1UBwsr/907NXzYcZemn06PpHxjjnmoXYCasfj phujA508gaTf144Jm5E4phI6djNhWKHEK/nv6yv2VQhAazfTh2M= -----END CERTIFICATE-----Generated at Sat Dec 20 19:47:44 2025 by rpki-client