This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: 1XwqyU2Wq+Dm6I/bGWuz90oDzT8FK8LpDgRatFhpwJY= Subject key identifier: B2:97:F2:FC:4A:2F:9B:48:92:87:5E:CD:ED:E0:EA:1D:12:93:AC:34 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 46710EE55BAACD6B259B7E1E724F3A3C7A2E04A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01FD Signing time: Wed 17 Dec 2025 21:11:42 +0000 Manifest this update: Wed 17 Dec 2025 21:06:42 +0000 Manifest next update: Sun 21 Dec 2025 01:34:42 +0000 Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: +xk0mLbD8cYMR0IWaK8n8wjh+C1Ewsh8QpPaKmoHTK0=) 2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:71:0e:e5:5b:aa:cd:6b:25:9b:7e:1e:72:4f:3a:3c:7a:2e:04:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Dec 17 21:06:42 2025 GMT Not After : Dec 21 01:34:42 2025 GMT Subject: CN=B297F2FC4A2F9B4892875ECDEDE0EA1D1293AC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:62:a5:47:d9:09:f6:38:b9:93:4e:38:bc: ee:aa:50:0d:af:85:e4:10:99:46:96:bb:62:59:ec: e8:ef:e4:d2:27:d7:18:6e:a9:a5:c4:20:b8:b5:9d: 4f:6f:eb:4f:f6:de:0e:71:65:59:99:ef:1f:15:aa: a1:7f:9d:19:ce:45:37:d0:f7:c9:a9:03:fe:11:7f: 4d:97:8a:00:cb:7f:b0:66:3c:ea:5c:9a:dc:ce:23: a2:eb:28:34:02:b6:64:0d:96:d6:6d:c2:cb:12:7e: b9:d1:bb:81:ea:08:d6:eb:ef:a1:4b:73:28:f8:b7: 66:fa:12:5a:81:3b:b3:98:0c:c9:56:c5:8e:46:a7: 43:ad:45:9a:e4:ac:18:da:83:bf:0b:ea:fe:72:56: ae:65:e9:f8:56:a4:8b:42:7d:29:e3:15:f7:a8:68: 98:3e:21:78:62:a1:04:07:29:cb:8d:af:8a:11:7d: 6f:27:ce:92:81:5f:6d:08:07:b7:fe:bd:29:a6:28: 38:f1:40:9d:08:a0:27:2b:77:b8:bd:7c:73:4a:52: 8c:2d:64:44:4e:01:40:92:94:db:db:95:f5:95:44: 4f:fc:5a:43:8e:0c:83:cb:cc:e0:63:2d:54:31:97: f9:d2:89:06:1a:21:15:fc:d4:03:24:ba:02:fa:ac: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:97:F2:FC:4A:2F:9B:48:92:87:5E:CD:ED:E0:EA:1D:12:93:AC:34 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:ac:b2:62:aa:aa:3b:65:c0:c5:8a:7d:fd:b0:31:3b:61: e5:10:90:33:f1:56:70:7c:da:40:2d:93:7d:df:ec:4e:6d:f3: 6f:79:95:f9:3e:22:27:e7:3e:f0:65:02:97:df:1c:50:25:52: c2:07:d8:25:08:2f:56:41:b4:50:62:2e:76:bd:5e:3e:10:7f: 1d:23:c9:34:27:6e:2e:11:1e:82:30:02:27:53:33:00:a5:86: cf:db:e7:ce:3b:d2:20:98:89:ea:c4:c6:a4:82:1f:dc:92:9f: d9:8e:04:21:36:81:67:53:21:f7:df:00:ab:03:52:c5:ab:18: 9b:b4:c2:f5:ce:8a:d5:9f:05:59:2f:3f:30:eb:a8:96:3a:d5: 7c:8c:94:6d:37:0f:e1:a0:83:70:ab:86:9a:26:b1:44:d7:e9: b0:24:76:5b:a2:bb:40:9f:51:a7:87:30:c2:67:f1:21:97:b5: 5e:03:e3:44:fa:f3:6b:1f:ec:dd:4a:9a:23:cb:29:54:8c:26: fc:04:39:8e:7b:34:94:29:90:d2:61:ea:1a:fb:96:8c:8a:04: a9:7c:ab:b5:1e:d8:bb:12:64:b4:2b:b8:f5:74:80:63:90:e6: 38:bf:18:4f:6d:48:12:24:da:26:ab:b0:3e:4a:e3:45:f6:f3: 80:58:89:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnEO5VuqzWslm34eck86PHouBKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTEyMTcyMTA2NDJaFw0yNTEyMjEwMTM0NDJaMDMxMTAvBgNV BAMTKEIyOTdGMkZDNEEyRjlCNDg5Mjg3NUVDREVERTBFQTFEMTI5M0FDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfH2KlR9kJ9ji5k044vO6qUA2v heQQmUaWu2JZ7Ojv5NIn1xhuqaXEILi1nU9v60/23g5xZVmZ7x8VqqF/nRnORTfQ 98mpA/4Rf02XigDLf7BmPOpcmtzOI6LrKDQCtmQNltZtwssSfrnRu4HqCNbr76FL cyj4t2b6ElqBO7OYDMlWxY5Gp0OtRZrkrBjag78L6v5yVq5l6fhWpItCfSnjFfeo aJg+IXhioQQHKcuNr4oRfW8nzpKBX20IB7f+vSmmKDjxQJ0IoCcrd7i9fHNKUowt ZEROAUCSlNvblfWVRE/8WkOODIPLzOBjLVQxl/nSiQYaIRX81AMkugL6rH4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspfy/Eovm0iSh17N7eDqHRKTrDQwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaJrLJiqqo7ZcDFin39sDE7YeUQkDPxVnB8 2kAtk33f7E5t8295lfk+IifnPvBlApffHFAlUsIH2CUIL1ZBtFBiLna9Xj4Qfx0j yTQnbi4RHoIwAidTMwClhs/b58470iCYierExqSCH9ySn9mOBCE2gWdTIfffAKsD UsWrGJu0wvXOitWfBVkvPzDrqJY61XyMlG03D+Ggg3CrhpomsUTX6bAkdluiu0Cf UaeHMMJn8SGXtV4D40T682sf7N1KmiPLKVSMJvwEOY57NJQpkNJh6hr7loyKBKl8 q7Ue2LsSZLQruPV0gGOQ5ji/GE9tSBIk2iarsD5K40X284BYiTo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:00 2025 by rpki-client