This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: cdvviECgSjyv9szbAaftMUfk9aQXl5uL5fCtwLWcNEo= Subject key identifier: E2:42:4B:34:0B:16:D9:56:76:F7:9A:6B:B2:4F:EF:A7:8E:96:B1:8D Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 6FE7774ADD8B1EC3DA24F33B1990E598A23FC208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0254 Signing time: Wed 17 Dec 2025 21:01:39 +0000 Manifest this update: Wed 17 Dec 2025 20:56:39 +0000 Manifest next update: Sun 21 Dec 2025 04:00:39 +0000 Files and hashes: 1: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 2: C70A343932991281F91796DB87B011987603BBF4.crl (hash: 82K4207XTmn4Z2CGkUrVYYGg6l02TnNnod2AnwwWHYw=) 3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e7:77:4a:dd:8b:1e:c3:da:24:f3:3b:19:90:e5:98:a2:3f:c2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Dec 17 20:56:39 2025 GMT Not After : Dec 21 04:00:39 2025 GMT Subject: CN=E2424B340B16D95676F79A6BB24FEFA78E96B18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:37:34:b3:d8:11:bf:a7:c3:c2:7d:33:9c: a3:25:62:d1:be:e7:1a:66:85:37:ec:ac:36:7e:60: 74:1c:bd:66:4f:12:62:ee:49:89:35:0c:cf:15:4a: f4:ee:11:20:1b:6c:5d:90:56:23:d9:13:b0:41:db: 57:7f:88:ca:ea:6e:26:7f:53:23:d1:63:81:39:58: 74:db:47:61:7e:c4:c2:b6:c4:10:3c:f0:28:17:42: 97:5c:de:48:f5:73:de:be:07:2d:f5:c4:6f:b4:96: 15:65:44:45:fc:f6:79:cb:27:6a:c4:2d:0a:ea:7d: 0f:e7:fd:3e:b1:4a:9a:c2:63:2c:e1:75:46:dc:00: 79:12:15:70:04:c5:69:ae:90:9e:cc:54:89:74:ad: db:1a:9a:bf:11:42:c4:1b:3c:42:66:64:61:5e:38: ef:0f:0c:57:ef:4e:82:96:71:46:be:7f:36:aa:38: ae:b1:12:10:2f:68:9c:42:83:41:d6:b6:76:18:57: 96:5e:18:d8:4a:79:b3:9f:0f:82:9e:70:5d:52:ba: 08:a0:48:bc:d5:ce:f6:2b:04:41:80:3f:49:ff:36: b0:6b:ed:e5:6f:8b:65:75:aa:10:04:79:6b:d1:21: a6:20:7b:73:6d:c3:c6:00:03:ed:16:16:da:b6:be: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:42:4B:34:0B:16:D9:56:76:F7:9A:6B:B2:4F:EF:A7:8E:96:B1:8D X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a0:f8:92:17:a4:5a:8d:a5:9b:7f:f0:04:30:01:94:c7:7e: bd:45:4d:35:3a:65:6e:cf:ec:04:de:88:91:15:0e:1e:40:3c: 58:db:89:f9:d6:f2:77:6b:54:57:e0:44:d9:50:ef:b4:e0:4b: 0c:62:1a:73:e9:0f:5d:7b:7c:ab:b8:d5:6e:25:54:dd:f7:57: 41:3b:99:e8:a2:19:18:73:5d:03:b0:4f:32:55:fe:71:4f:b3: aa:b2:b0:93:51:7a:e3:67:62:db:98:36:46:02:e8:79:5f:f3: 7e:e2:be:c2:36:ec:8e:f3:ce:0a:14:78:bf:20:98:1b:62:2e: 20:2e:7b:98:e5:b6:91:5c:69:75:63:79:a9:85:a3:86:80:fb: 45:87:3b:e6:81:d9:9f:65:12:7c:28:45:41:bc:95:2a:d1:b8: 5a:4b:52:ee:be:30:82:96:e4:16:1c:20:2f:25:23:40:1a:35: b5:da:52:f7:dc:86:29:a7:fb:4f:b5:9a:49:0e:ab:6b:e9:36: 51:50:83:a0:1b:0a:3a:42:ce:91:2c:28:cf:1f:02:6e:e8:8e: 84:cc:c2:98:c5:d4:e2:0c:e0:26:8c:6c:5c:15:35:b5:16:02: aa:ff:fe:b8:21:80:81:75:1e:2a:48:a1:04:49:ce:fd:d9:6f: e2:ce:af:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+d3St2LHsPaJPM7GZDlmKI/wggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTEyMTcyMDU2MzlaFw0yNTEyMjEwNDAwMzlaMDMxMTAvBgNV BAMTKEUyNDI0QjM0MEIxNkQ5NTY3NkY3OUE2QkIyNEZFRkE3OEU5NkIxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNTc0s9gRv6fDwn0znKMlYtG+ 5xpmhTfsrDZ+YHQcvWZPEmLuSYk1DM8VSvTuESAbbF2QViPZE7BB21d/iMrqbiZ/ UyPRY4E5WHTbR2F+xMK2xBA88CgXQpdc3kj1c96+By31xG+0lhVlREX89nnLJ2rE LQrqfQ/n/T6xSprCYyzhdUbcAHkSFXAExWmukJ7MVIl0rdsamr8RQsQbPEJmZGFe OO8PDFfvToKWcUa+fzaqOK6xEhAvaJxCg0HWtnYYV5ZeGNhKebOfD4KecF1Sugig SLzVzvYrBEGAP0n/NrBr7eVvi2V1qhAEeWvRIaYge3Ntw8YAA+0WFtq2vlPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kJLNAsW2VZ295prsk/vp46WsY0wHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+g+JIXpFqNpZt/8AQwAZTHfr1FTTU6ZW7P 7ATeiJEVDh5APFjbifnW8ndrVFfgRNlQ77TgSwxiGnPpD117fKu41W4lVN33V0E7 meiiGRhzXQOwTzJV/nFPs6qysJNReuNnYtuYNkYC6Hlf837ivsI27I7zzgoUeL8g mBtiLiAue5jltpFcaXVjeamFo4aA+0WHO+aB2Z9lEnwoRUG8lSrRuFpLUu6+MIKW 5BYcIC8lI0AaNbXaUvfchimn+0+1mkkOq2vpNlFQg6AbCjpCzpEsKM8fAm7ojoTM wpjF1OIM4CaMbFwVNbUWAqr//rghgIF1HipIoQRJzv3Zb+LOr7Y= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:31 2025 by rpki-client