This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: 8fPhqA47M9OW9emB6mz2Q1nHzVPe6l1DcjOVO95yquc= Subject key identifier: 11:32:5F:41:CF:81:D0:9B:0A:D3:8F:01:B9:E6:DA:72:A4:8F:79:ED Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 34F77068D32F6ED2E815E823BC341B10F4EDC034 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0283 Signing time: Thu 18 Dec 2025 09:01:22 +0000 Manifest this update: Thu 18 Dec 2025 08:56:22 +0000 Manifest next update: Sun 21 Dec 2025 20:36:22 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: TqZZfxjlFUUZ5baDEPIGCdzdeziSbZ779Sp3f9jSVD8=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f7:70:68:d3:2f:6e:d2:e8:15:e8:23:bc:34:1b:10:f4:ed:c0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Dec 18 08:56:22 2025 GMT Not After : Dec 21 20:36:22 2025 GMT Subject: CN=11325F41CF81D09B0AD38F01B9E6DA72A48F79ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:4d:70:23:24:3a:e4:e4:e9:62:ba:bb:69: 87:c6:21:9f:ea:8e:76:81:d0:e8:97:f1:bb:29:5f: a3:3d:f4:89:0d:99:27:f5:11:76:23:dd:7b:1e:38: ef:f0:a3:33:bb:67:ad:42:4f:a4:c0:86:4b:89:ce: 90:e9:da:d2:32:7d:50:39:43:f2:69:31:13:a3:12: 60:bb:1e:f6:cf:42:28:db:81:97:2c:60:eb:26:cf: 60:eb:df:9e:9f:26:8d:9f:8c:4e:be:c7:ac:03:be: 49:4b:13:2c:fd:ac:c2:ef:6c:93:19:b5:d0:c8:45: 8a:3a:bc:a1:ed:54:e9:3b:6b:02:66:5d:19:b6:d5: 7e:52:a3:cb:95:95:e8:95:d8:09:50:79:42:7e:91: 64:b0:c6:08:81:e4:3f:aa:cb:92:60:87:61:7a:4d: 52:c6:6e:61:3d:d2:87:1d:df:02:21:a6:a5:42:f7: d4:59:ab:da:0d:2a:bb:10:e2:78:56:52:3e:ca:fe: 5d:35:29:36:5a:69:d2:d5:92:34:45:ea:9a:50:88: ea:82:a1:f5:29:ba:ae:35:a3:f7:de:31:aa:6a:bd: 69:07:86:03:dc:e3:34:c5:49:95:17:11:d5:a3:34: 8c:f6:35:8d:ad:fc:7d:74:52:96:3f:92:f8:6a:10: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:5F:41:CF:81:D0:9B:0A:D3:8F:01:B9:E6:DA:72:A4:8F:79:ED X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7a:95:97:fa:4b:cb:d4:9d:60:df:6e:85:8d:42:fc:31:8c: 55:ad:79:5a:05:2c:0d:b7:87:c9:50:36:4c:62:f6:9c:bf:ad: fb:da:cc:db:3f:dd:83:06:bb:b8:04:0d:74:18:f7:60:8c:d6: 1c:26:b8:16:fb:35:bb:f6:f2:80:ac:29:53:00:e0:af:bf:18: 38:05:dc:c1:5a:bb:30:13:bf:ff:d8:48:12:f5:14:c1:16:a1: a6:a5:c2:07:09:ff:a0:f0:40:a6:5b:1d:a9:fd:c5:35:b3:85: f7:25:e7:1a:56:7e:b1:e2:ea:22:9e:10:68:2a:dd:74:ce:a4: 75:81:53:4b:5e:5e:02:0b:be:09:3f:81:1e:98:6f:b8:e8:0d: 5a:f7:55:4f:d1:f9:97:81:5e:44:75:3f:7f:bb:98:be:f8:ac: 55:2f:bc:66:e6:73:a2:e9:06:57:26:43:e1:2a:c7:c9:8c:8e: 72:33:9a:ce:ce:6a:a7:94:5e:4b:b2:cd:17:d8:ff:a2:57:bd: 69:a2:a6:ac:56:72:0e:02:e1:e2:44:5b:f4:4c:02:de:1b:45: 72:07:d7:8c:ea:c6:f5:54:f5:9e:72:96:30:7e:ee:5a:5f:ac: d4:41:6e:82:7d:a8:36:db:b1:fb:10:e1:97:68:35:e7:15:dd: a0:2e:2e:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPdwaNMvbtLoFegjvDQbEPTtwDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTEyMTgwODU2MjJaFw0yNTEyMjEyMDM2MjJaMDMxMTAvBgNV BAMTKDExMzI1RjQxQ0Y4MUQwOUIwQUQzOEYwMUI5RTZEQTcyQTQ4Rjc5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPok1wIyQ65OTpYrq7aYfGIZ/q jnaB0OiX8bspX6M99IkNmSf1EXYj3XseOO/wozO7Z61CT6TAhkuJzpDp2tIyfVA5 Q/JpMROjEmC7HvbPQijbgZcsYOsmz2Dr356fJo2fjE6+x6wDvklLEyz9rMLvbJMZ tdDIRYo6vKHtVOk7awJmXRm21X5So8uVleiV2AlQeUJ+kWSwxgiB5D+qy5Jgh2F6 TVLGbmE90ocd3wIhpqVC99RZq9oNKrsQ4nhWUj7K/l01KTZaadLVkjRF6ppQiOqC ofUpuq41o/feMapqvWkHhgPc4zTFSZUXEdWjNIz2NY2t/H10UpY/kvhqEBGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETJfQc+B0JsK048BuebacqSPee0wHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp6lZf6S8vUnWDfboWNQvwxjFWteVoFLA23 h8lQNkxi9py/rfvazNs/3YMGu7gEDXQY92CM1hwmuBb7Nbv28oCsKVMA4K+/GDgF 3MFauzATv//YSBL1FMEWoaalwgcJ/6DwQKZbHan9xTWzhfcl5xpWfrHi6iKeEGgq 3XTOpHWBU0teXgILvgk/gR6Yb7joDVr3VU/R+ZeBXkR1P3+7mL74rFUvvGbmc6Lp BlcmQ+Eqx8mMjnIzms7OaqeUXkuyzRfY/6JXvWmipqxWcg4C4eJEW/RMAt4bRXIH 14zqxvVU9Z5yljB+7lpfrNRBboJ9qDbbsfsQ4ZdoNecV3aAuLmI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:35 2025 by rpki-client