This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft File: 690E7BC726C787991D438BDDB48990A7A17D8D15.mft (raw, json) Hash identifier: 9Ke8DK32+bws96mpr8m6utNWSZgG0pPm9S0X+cafjOU= Subject key identifier: 39:CE:44:F9:6B:F8:39:2D:92:86:64:80:A1:64:20:9E:F2:E7:5F:DC Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 Certificate issuer: /CN=690E7BC726C787991D438BDDB48990A7A17D8D15 Certificate serial: 78F06B00451DF81DDF6A09FC22D06339AC62EF4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft Manifest number: 015A Signing time: Wed 24 Dec 2025 11:13:50 +0000 Manifest this update: Wed 24 Dec 2025 11:08:50 +0000 Manifest next update: Sat 27 Dec 2025 21:46:50 +0000 Files and hashes: 1: 690E7BC726C787991D438BDDB48990A7A17D8D15.crl (hash: YVTBZXApBZ4uiXzOdoV3b/CTodfGNwsCn7F0draPonk=) 2: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:6b:00:45:1d:f8:1d:df:6a:09:fc:22:d0:63:39:ac:62:ef:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15 Validity Not Before: Dec 24 11:08:50 2025 GMT Not After : Dec 27 21:46:50 2025 GMT Subject: CN=39CE44F96BF8392D92866480A164209EF2E75FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:97:03:68:79:d6:fa:dc:af:5b:b8:65:94: 05:83:0f:d2:6e:5d:a8:b7:98:ea:b6:ca:2d:68:76: 30:36:89:4d:ea:6b:d6:a4:a7:ad:cf:0c:b1:98:dd: 2f:06:8c:78:05:5f:61:63:8d:fb:bf:30:19:73:cb: 71:86:00:70:18:84:3d:f5:ef:79:f1:b7:65:4f:d9: 79:6b:3b:80:dc:6d:f0:0b:bc:51:10:19:b1:8a:11: 31:c5:c3:7b:80:6d:f2:0e:e0:ee:5e:c3:15:19:78: 8e:bf:4e:fb:40:0b:bf:34:e8:be:b1:9d:ce:ae:e6: f7:7f:dc:57:b0:2d:35:58:7f:15:f0:42:e5:6d:e1: 79:f6:9d:fe:fe:49:d4:e7:ff:e3:78:e1:02:b0:dd: 45:19:7a:5c:5e:ac:5f:e1:83:d2:71:82:ba:6b:90: ce:71:ac:f2:f8:d3:cc:62:e4:01:16:a4:3c:54:a6: f0:59:3e:8a:ee:d9:3f:1f:c4:0f:7c:7b:70:c9:c3: 9b:bf:34:cc:b7:30:a8:c6:fe:21:28:b9:07:f6:31: 38:00:6a:4f:ae:d7:0e:63:bd:ff:0b:34:b3:94:05: f6:ff:29:5a:bf:e3:65:e5:8d:c4:b3:59:64:49:a1: 01:40:a4:18:8f:2a:22:57:35:d4:8a:5d:ca:15:68: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:44:F9:6B:F8:39:2D:92:86:64:80:A1:64:20:9E:F2:E7:5F:DC X509v3 Authority Key Identifier: keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:25:4f:22:5f:64:80:17:57:8b:f8:56:7c:6a:05:47:56:6e: ec:eb:28:2b:57:37:2a:d4:62:3b:a3:e0:46:8f:8f:5e:cf:32: 02:a9:71:a4:e2:a8:d9:b6:4b:00:85:2f:b4:25:3e:0e:c9:0d: 74:79:dc:30:79:a5:e0:79:2a:e2:6a:eb:3c:02:b3:b7:81:7c: a7:6d:1f:56:7a:8e:c6:fb:cd:eb:32:35:70:a6:21:0a:ae:28: 7a:bd:2c:a4:cd:82:52:b3:fc:a1:7a:dc:e9:3f:c1:d5:ab:db: 6c:07:bc:a0:db:b4:f8:b1:f5:10:69:5a:f6:92:46:a2:ef:87: 67:cb:8f:01:4d:fc:6c:a9:77:1f:8d:e7:12:93:2f:a8:76:9f: b8:e6:71:92:be:d9:9e:6c:c0:29:a8:65:32:c9:54:09:a1:5a: 6e:17:b0:ac:79:be:f6:6d:72:5a:7a:67:0a:76:b6:3f:71:f6: da:5d:3f:86:82:6a:2b:b9:39:65:c4:d9:c4:06:7a:c4:32:22: 8c:27:fb:8f:df:b5:49:a9:51:e2:ab:ba:c5:18:a0:a7:4c:2c: 32:00:20:ad:1b:b4:dc:c0:e5:2a:3c:1c:ab:f9:e3:6f:a5:eb: e7:0f:59:59:d8:5a:73:6e:67:5e:84:e8:68:fc:4b:57:68:b5: 72:64:0a:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePBrAEUd+B3fagn8ItBjOaxi70swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkwRTdCQzcyNkM3ODc5OTFENDM4QkREQjQ4OTkwQTdB MTdEOEQxNTAeFw0yNTEyMjQxMTA4NTBaFw0yNTEyMjcyMTQ2NTBaMDMxMTAvBgNV BAMTKDM5Q0U0NEY5NkJGODM5MkQ5Mjg2NjQ4MEExNjQyMDlFRjJFNzVGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9JcDaHnW+tyvW7hllAWDD9Ju Xai3mOq2yi1odjA2iU3qa9akp63PDLGY3S8GjHgFX2Fjjfu/MBlzy3GGAHAYhD31 73nxt2VP2XlrO4DcbfALvFEQGbGKETHFw3uAbfIO4O5ewxUZeI6/TvtAC7806L6x nc6u5vd/3FewLTVYfxXwQuVt4Xn2nf7+SdTn/+N44QKw3UUZelxerF/hg9Jxgrpr kM5xrPL408xi5AEWpDxUpvBZPoru2T8fxA98e3DJw5u/NMy3MKjG/iEouQf2MTgA ak+u1w5jvf8LNLOUBfb/KVq/42XljcSzWWRJoQFApBiPKiJXNdSKXcoVaJDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOc5E+Wv4OS2ShmSAoWQgnvLnX9wwHwYDVR0j BBgwFoAUaQ57xybHh5kdQ4vdtImQp6F9jRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDQzMTc1MS02NjRiLTQ3YTAtYTUyMC1kOTdmNWMxMjYxOGMvMC82OTBFN0JDNzI2 Qzc4Nzk5MUQ0MzhCRERCNDg5OTBBN0ExN0Q4RDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjkwRTdCQzcyNkM3ODc5OTFENDM4QkREQjQ4OTkwQTdBMTdE OEQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ0MzE3NTEtNjY0Yi00N2EwLWE1 MjAtZDk3ZjVjMTI2MThjLzAvNjkwRTdCQzcyNkM3ODc5OTFENDM4QkREQjQ4OTkw QTdBMTdEOEQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKslTyJfZIAXV4v4VnxqBUdWbuzrKCtXNyrU Yjuj4EaPj17PMgKpcaTiqNm2SwCFL7QlPg7JDXR53DB5peB5KuJq6zwCs7eBfKdt H1Z6jsb7zesyNXCmIQquKHq9LKTNglKz/KF63Ok/wdWr22wHvKDbtPix9RBpWvaS RqLvh2fLjwFN/Gypdx+N5xKTL6h2n7jmcZK+2Z5swCmoZTLJVAmhWm4XsKx5vvZt clp6Zwp2tj9x9tpdP4aCaiu5OWXE2cQGesQyIown+4/ftUmpUeKrusUYoKdMLDIA IK0btNzA5So8HKv542+l6+cPWVnYWnNuZ16E6Gj8S1dotXJkCi4= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:11 2025 by rpki-client