This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: QZXMOsJpDDV6ROfzBDJfDO5wkicfaMArJGPX8R1G+lc= Subject key identifier: E0:EB:19:A6:A0:2C:A3:61:3F:27:5B:E9:E9:8F:DE:B0:AA:B0:73:39 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 792A731138A410F6C2E6DFD43A04CAE4147328E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03B3 Signing time: Fri 19 Dec 2025 03:02:08 +0000 Manifest this update: Fri 19 Dec 2025 02:57:08 +0000 Manifest next update: Mon 22 Dec 2025 10:36:08 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: hyuioWWVLDt+dZNaGjMb/47NKMNyKhFgp6P6D3TBojA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2a:73:11:38:a4:10:f6:c2:e6:df:d4:3a:04:ca:e4:14:73:28:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Dec 19 02:57:08 2025 GMT Not After : Dec 22 10:36:08 2025 GMT Subject: CN=E0EB19A6A02CA3613F275BE9E98FDEB0AAB07339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:06:ba:49:ab:c8:d2:81:34:f0:f6:ca:97: 59:8f:8f:ec:d8:ff:e0:fa:14:a0:8a:10:bf:ae:8f: 68:df:c7:69:5d:19:f6:f3:c7:db:fa:9a:09:22:8e: 1c:b5:11:ec:5c:6e:30:16:a1:f2:1b:e4:de:88:31: e8:ce:c4:0a:b1:e6:90:ef:8b:84:3b:a7:5b:26:32: b3:32:61:96:67:67:2f:32:fc:e1:01:e1:1f:ab:62: b6:ef:5f:f9:1b:93:77:c0:df:28:bc:5e:ef:9c:2f: 0e:ee:51:e1:b6:4d:8b:40:20:fb:b2:9c:2a:af:66: 1b:ed:92:89:05:29:52:02:ca:d8:00:6b:90:0a:ce: 0f:36:2c:fe:0c:87:dd:e0:c8:92:8e:73:18:62:a8: cc:44:d6:d1:40:44:ef:fe:9a:96:6b:b6:25:9c:d0: bc:05:ca:86:4a:08:82:fd:ff:a0:0d:f1:fd:8b:ec: ee:73:b1:a7:2f:8c:af:2d:f7:6c:96:06:63:19:95: fe:1d:a5:5c:56:08:34:b4:c6:1f:ba:97:16:fd:f8: 15:77:60:e8:37:a4:dd:e8:2f:1f:a5:3f:d7:82:d8: 9d:61:52:da:d2:cc:b7:a3:7b:a1:c1:a0:39:6d:0b: 1e:c2:2f:42:d5:74:26:36:43:0d:15:58:28:d4:93: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:19:A6:A0:2C:A3:61:3F:27:5B:E9:E9:8F:DE:B0:AA:B0:73:39 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d1:4b:e3:4e:77:57:7a:41:8d:46:a8:11:d3:47:0c:55:c4: 23:52:aa:11:5f:0b:3b:3a:8e:ce:e9:57:0c:85:2d:89:5e:e4: 0e:46:74:e4:64:5f:94:14:44:a1:23:34:c6:29:1b:ee:56:24: 37:c8:63:86:a1:e0:98:36:8e:45:d4:4f:b6:38:fa:35:41:f9: fc:5c:61:d7:3d:a4:60:49:69:4b:23:76:8e:8f:8d:7b:1a:49: 07:f1:93:41:3d:68:00:1a:e3:77:87:f5:b5:aa:dd:80:fa:93: af:6e:15:d8:9f:ad:bb:d9:eb:6f:81:2c:df:df:7f:58:54:3e: 62:1d:1f:e6:4e:5e:b9:78:55:d6:26:34:cf:5f:58:bc:52:f7: 9b:b4:88:4b:6c:13:9b:cd:88:d2:66:15:35:1f:f4:9c:8c:86: d8:95:1d:a7:c8:a5:8b:29:55:cd:48:fb:77:26:f0:a4:cf:1b: 7e:21:85:b6:0e:4b:9b:df:23:ca:a5:da:b4:26:9f:e3:3e:34: 2b:97:00:ad:c5:59:32:20:79:f9:94:4e:1d:d9:25:73:a0:ff: c8:50:1b:97:62:f7:19:f3:96:b1:bd:d1:e4:2e:bc:9a:c8:f1: 34:b4:ec:19:74:44:8b:d8:fb:ec:9c:48:ec:75:b1:12:20:33: 8d:48:b1:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSpzETikEPbC5t/UOgTK5BRzKOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTEyMTkwMjU3MDhaFw0yNTEyMjIxMDM2MDhaMDMxMTAvBgNV BAMTKEUwRUIxOUE2QTAyQ0EzNjEzRjI3NUJFOUU5OEZERUIwQUFCMDczMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPAa6SavI0oE08PbKl1mPj+zY /+D6FKCKEL+uj2jfx2ldGfbzx9v6mgkijhy1EexcbjAWofIb5N6IMejOxAqx5pDv i4Q7p1smMrMyYZZnZy8y/OEB4R+rYrbvX/kbk3fA3yi8Xu+cLw7uUeG2TYtAIPuy nCqvZhvtkokFKVICytgAa5AKzg82LP4Mh93gyJKOcxhiqMxE1tFARO/+mpZrtiWc 0LwFyoZKCIL9/6AN8f2L7O5zsacvjK8t92yWBmMZlf4dpVxWCDS0xh+6lxb9+BV3 YOg3pN3oLx+lP9eC2J1hUtrSzLeje6HBoDltCx7CL0LVdCY2Qw0VWCjUk2zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OsZpqAso2E/J1vp6Y/esKqwczkwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzRS+NOd1d6QY1GqBHTRwxVxCNSqhFfCzs6 js7pVwyFLYle5A5GdORkX5QURKEjNMYpG+5WJDfIY4ah4Jg2jkXUT7Y4+jVB+fxc Ydc9pGBJaUsjdo6PjXsaSQfxk0E9aAAa43eH9bWq3YD6k69uFdifrbvZ62+BLN/f f1hUPmIdH+ZOXrl4VdYmNM9fWLxS95u0iEtsE5vNiNJmFTUf9JyMhtiVHafIpYsp Vc1I+3cm8KTPG34hhbYOS5vfI8ql2rQmn+M+NCuXAK3FWTIgefmUTh3ZJXOg/8hQ G5di9xnzlrG90eQuvJrI8TS07Bl0RIvY++ycSOx1sRIgM41IsbY= -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:37 2025 by rpki-client