This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: 1bTAUPjyX0E7ORCgsRH0sTHbly/Ze/vz7oGHIBYH/Jc= Subject key identifier: 82:70:00:1C:18:B8:B9:CC:14:0A:8F:7B:F7:7B:6C:20:D7:43:70:E6 Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 17212C7FCB706C1602D63F43AC5FCBE607FF4680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: E6 Signing time: Tue 23 Dec 2025 13:13:47 +0000 Manifest this update: Tue 23 Dec 2025 13:08:47 +0000 Manifest next update: Sat 27 Dec 2025 00:07:47 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: D3agx+eV5F22TFqEZIok6pMZ1w88lSl035jHqqiP3s0=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:21:2c:7f:cb:70:6c:16:02:d6:3f:43:ac:5f:cb:e6:07:ff:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Dec 23 13:08:47 2025 GMT Not After : Dec 27 00:07:47 2025 GMT Subject: CN=8270001C18B8B9CC140A8F7BF77B6C20D74370E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:ce:70:96:24:2b:3c:16:64:a7:11:35:86: 95:43:e1:e6:72:96:c3:5a:a4:76:f1:de:dd:07:18: a8:69:dc:40:4f:3e:c4:e8:31:53:53:21:35:94:78: 41:64:ba:cb:f3:99:2e:84:56:bf:36:13:2d:9a:92: f2:b6:f5:c2:ac:38:8e:9b:9e:09:38:24:e2:8b:85: 87:18:26:4a:2b:ad:87:f7:c5:aa:16:48:73:7b:98: f1:59:a2:99:07:6e:c9:b5:7b:07:8b:7c:ce:d9:1b: ef:39:9c:e5:01:2b:cd:8a:2b:0b:2c:e9:79:14:47: fd:0f:57:1e:89:b1:db:49:55:cf:09:8c:72:ec:45: 3c:e7:9a:28:ec:9f:05:a3:e2:47:01:23:3f:6f:9f: f7:43:7e:4a:ef:aa:87:3e:5e:d3:a7:fa:50:d3:ec: 7d:fb:e5:b6:7d:9e:54:05:1e:48:61:e4:44:a8:6f: d3:7d:97:3b:8e:7c:e9:b6:fd:df:4e:62:81:08:5e: 21:01:ee:43:0c:39:f9:78:a6:93:36:60:26:10:5f: a8:bd:23:02:18:5f:ca:80:7a:c0:eb:c2:b0:16:a5: c9:d2:42:14:97:84:d9:6a:b3:f1:d8:38:8a:10:30: 20:ee:ec:0b:fa:a3:90:a1:5d:88:36:c6:e8:69:34: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:00:1C:18:B8:B9:CC:14:0A:8F:7B:F7:7B:6C:20:D7:43:70:E6 X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:28:f8:4a:88:50:e5:e4:e3:df:f7:36:de:12:2d:dc:7c:74: ea:19:79:2e:77:bd:f8:0e:92:6e:8c:d0:b2:f4:c8:ed:e0:07: 8d:7d:24:fe:db:bc:5e:36:43:4b:47:24:78:cd:bf:a7:39:2f: 10:96:b4:ba:63:5a:c1:6c:8d:1c:04:3f:f5:9d:b2:c2:da:e4: 9b:a4:98:e6:9c:bf:3f:1a:52:d3:da:ac:99:cc:3c:c4:fa:5a: 15:bd:27:b0:90:2b:cd:66:51:c3:e2:26:b4:46:15:fe:18:bf: ca:b0:44:79:a4:10:10:9f:7e:7f:9e:6d:e5:ea:aa:dc:23:2d: 79:fd:d3:99:e1:57:a1:c3:22:5c:9d:13:70:77:31:60:8d:8f: 56:6a:9c:67:7f:1b:da:92:09:8c:0c:c4:a9:c7:13:a0:40:0e: 85:71:3e:13:1c:ce:a7:a6:91:08:5d:0e:32:76:5c:6d:49:84: 49:84:fc:0d:35:21:0a:f0:6f:71:18:47:6c:41:e2:34:63:56: 6a:69:06:c7:3d:e8:c4:50:3b:76:6f:4c:09:58:3d:ac:da:11: a7:28:ad:4d:d1:a5:44:c4:82:9e:80:17:55:fc:a4:9c:cd:85: 07:87:44:93:9f:1a:69:bb:4f:24:81:4d:6c:ed:f6:ac:33:af: f8:3d:d2:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyEsf8twbBYC1j9DrF/L5gf/RoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTEyMjMxMzA4NDdaFw0yNTEyMjcwMDA3NDdaMDMxMTAvBgNV BAMTKDgyNzAwMDFDMThCOEI5Q0MxNDBBOEY3QkY3N0I2QzIwRDc0MzcwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfc5wliQrPBZkpxE1hpVD4eZy lsNapHbx3t0HGKhp3EBPPsToMVNTITWUeEFkusvzmS6EVr82Ey2akvK29cKsOI6b ngk4JOKLhYcYJkorrYf3xaoWSHN7mPFZopkHbsm1eweLfM7ZG+85nOUBK82KKwss 6XkUR/0PVx6JsdtJVc8JjHLsRTznmijsnwWj4kcBIz9vn/dDfkrvqoc+XtOn+lDT 7H375bZ9nlQFHkhh5ESob9N9lzuOfOm2/d9OYoEIXiEB7kMMOfl4ppM2YCYQX6i9 IwIYX8qAesDrwrAWpcnSQhSXhNlqs/HYOIoQMCDu7Av6o5ChXYg2xuhpNGpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnAAHBi4ucwUCo9793tsINdDcOYwHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAo+EqIUOXk49/3Nt4SLdx8dOoZeS53vfgO km6M0LL0yO3gB419JP7bvF42Q0tHJHjNv6c5LxCWtLpjWsFsjRwEP/WdssLa5Juk mOacvz8aUtParJnMPMT6WhW9J7CQK81mUcPiJrRGFf4Yv8qwRHmkEBCffn+ebeXq qtwjLXn905nhV6HDIlydE3B3MWCNj1ZqnGd/G9qSCYwMxKnHE6BADoVxPhMczqem kQhdDjJ2XG1JhEmE/A01IQrwb3EYR2xB4jRjVmppBsc96MRQO3ZvTAlYPazaEaco rU3RpUTEgp6AF1X8pJzNhQeHRJOfGmm7TySBTWzt9qwzr/g90pY= -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:25 2025 by rpki-client