This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: GWI9+oF686QlzTBbfADq+1jcybvTveruec27uwd1BGY= Subject key identifier: 00:CC:C0:BC:EE:7B:80:75:30:02:1C:9B:1D:90:66:1F:FB:92:8A:35 Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 2B0647D9C54AED1C43167A3C67DA401F6296B917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 0382 Signing time: Wed 24 Dec 2025 02:50:52 +0000 Manifest this update: Wed 24 Dec 2025 02:45:52 +0000 Manifest next update: Sat 27 Dec 2025 12:25:52 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=) 2: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: 8FmCCekHtVyykeTesibiMJO2Pj0TzMihCVSnuHxQRe0=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=) 4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:06:47:d9:c5:4a:ed:1c:43:16:7a:3c:67:da:40:1f:62:96:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Dec 24 02:45:52 2025 GMT Not After : Dec 27 12:25:52 2025 GMT Subject: CN=00CCC0BCEE7B807530021C9B1D90661FFB928A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:2b:ba:ef:eb:94:e3:4d:8a:c0:43:9c:7f: 72:68:2c:93:28:84:5e:00:61:9d:7e:e3:92:9f:69: ee:4d:81:0e:61:24:79:b6:a0:ca:1c:43:bc:7d:8b: 33:d7:7e:13:45:ac:65:ce:d2:e4:c8:b8:1c:8b:c5: f8:19:14:d8:79:e5:34:6e:6a:24:cb:ff:8a:cd:c2: 3a:b1:24:10:ea:21:0d:b5:62:54:5a:69:ef:ae:67: 29:83:54:e2:59:b0:65:ae:6d:29:a3:2a:2b:a6:c7: 98:c7:34:9e:b9:9a:96:da:e8:a0:0a:88:99:51:22: 9a:69:7c:11:64:b4:f6:b8:56:07:4d:e0:b6:45:c8: b9:05:73:ad:f3:9c:69:af:3b:8e:15:73:bb:fb:ec: 5e:0a:0c:a4:4d:92:af:59:86:75:18:32:40:f6:d8: 74:70:13:bb:ae:73:f7:1e:e2:1f:41:e4:48:0d:f0: d3:c9:6a:f5:d6:5d:27:fe:e5:3c:fc:43:72:67:64: a6:6a:51:55:16:d0:5f:9b:01:6d:96:7d:b8:cc:c0: 83:b8:a2:61:54:25:64:a0:15:95:8c:cb:6c:94:19: c1:64:d1:26:d6:98:58:4b:58:6f:33:e2:39:f6:cf: 48:57:cf:29:60:30:2f:57:94:d4:de:d2:88:8b:86: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:C0:BC:EE:7B:80:75:30:02:1C:9B:1D:90:66:1F:FB:92:8A:35 X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:44:dc:7e:f1:fb:6c:c5:9a:95:15:b8:5b:70:b5:12:f5:60: 69:0f:f3:1a:77:e7:f9:f7:6c:5e:50:9d:ca:fd:24:73:43:eb: f9:3f:88:d6:8d:f8:65:72:b5:68:1e:eb:d4:99:f8:8b:98:f6: f0:99:ac:95:4e:1c:63:dd:b4:9f:2c:50:dd:5f:bb:15:e1:5d: f9:4c:5e:4e:4e:cc:72:e1:a4:6b:b7:98:29:2f:af:37:51:e2: 17:7a:33:2c:dd:e4:fa:12:13:65:9d:b2:3f:dd:68:ef:0a:6b: 52:bd:3f:3a:35:9b:61:40:82:9f:72:1e:7b:dc:c4:77:e7:82: f2:4b:2d:af:64:5d:01:4f:04:bf:c0:56:15:85:da:eb:13:1c: 6d:90:03:c9:cf:0c:30:35:36:97:3c:d1:71:a4:20:8d:14:fa: 24:af:41:c4:d1:4a:be:70:ab:f5:5d:b9:22:16:54:f8:d9:83: 93:bc:49:7e:95:c0:c8:ee:ae:17:00:07:97:e1:77:1b:91:f0: 57:85:c6:7d:be:3e:8e:38:ba:73:08:42:26:ee:b5:b6:e1:8f: e5:3e:63:22:1d:a1:23:da:4c:16:b5:20:78:a1:19:6f:f8:ba: b9:48:8d:73:74:59:25:2d:91:d2:29:0f:fa:1f:62:10:f3:42: 66:d3:47:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwZH2cVK7RxDFno8Z9pAH2KWuRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNTEyMjQwMjQ1NTJaFw0yNTEyMjcxMjI1NTJaMDMxMTAvBgNV BAMTKDAwQ0NDMEJDRUU3QjgwNzUzMDAyMUM5QjFEOTA2NjFGRkI5MjhBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mSu67+uU402KwEOcf3JoLJMo hF4AYZ1+45Kfae5NgQ5hJHm2oMocQ7x9izPXfhNFrGXO0uTIuByLxfgZFNh55TRu aiTL/4rNwjqxJBDqIQ21YlRaae+uZymDVOJZsGWubSmjKiumx5jHNJ65mpba6KAK iJlRIpppfBFktPa4VgdN4LZFyLkFc63znGmvO44Vc7v77F4KDKRNkq9ZhnUYMkD2 2HRwE7uuc/ce4h9B5EgN8NPJavXWXSf+5Tz8Q3JnZKZqUVUW0F+bAW2WfbjMwIO4 omFUJWSgFZWMy2yUGcFk0SbWmFhLWG8z4jn2z0hXzylgMC9XlNTe0oiLhjtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMzAvO57gHUwAhybHZBmH/uSijUwHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtE3H7x+2zFmpUVuFtwtRL1YGkP8xp35/n3 bF5Qncr9JHND6/k/iNaN+GVytWge69SZ+IuY9vCZrJVOHGPdtJ8sUN1fuxXhXflM Xk5OzHLhpGu3mCkvrzdR4hd6Myzd5PoSE2Wdsj/daO8Ka1K9Pzo1m2FAgp9yHnvc xHfngvJLLa9kXQFPBL/AVhWF2usTHG2QA8nPDDA1Npc80XGkII0U+iSvQcTRSr5w q/VduSIWVPjZg5O8SX6VwMjurhcAB5fhdxuR8FeFxn2+Po44unMIQibutbbhj+U+ YyIdoSPaTBa1IHihGW/4urlIjXN0WSUtkdIpD/ofYhDzQmbTRxc= -----END CERTIFICATE-----Generated at Wed Dec 24 23:31:35 2025 by rpki-client