This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: tbenb1mgRm1oA5rcAKQJpvk/soz6e2/3fjg+BX5euvw= Subject key identifier: 67:0D:B8:1A:80:EC:D9:3B:6C:D9:01:27:31:92:54:75:25:50:58:A6 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 1D60D50B09BFCE34375B091C3A530B871DEDC7EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0237 Signing time: Wed 24 Dec 2025 16:32:09 +0000 Manifest this update: Wed 24 Dec 2025 16:27:09 +0000 Manifest next update: Sun 28 Dec 2025 03:13:09 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: q9xHw4jqfMGB7jAGnPeNcpsVE+Mp5u8welpUnM0BkM0=) 3: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:60:d5:0b:09:bf:ce:34:37:5b:09:1c:3a:53:0b:87:1d:ed:c7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Dec 24 16:27:09 2025 GMT Not After : Dec 28 03:13:09 2025 GMT Subject: CN=670DB81A80ECD93B6CD9012731925475255058A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:ca:e2:de:98:ad:84:ec:ba:d9:df:ab:f0: 4f:62:8a:f5:6a:5c:ad:26:09:73:96:00:c8:b6:9c: 8c:1b:21:41:23:36:75:7f:3b:ad:cb:aa:85:fd:22: 61:0c:1a:ae:87:32:76:16:63:b0:28:5d:a6:33:e4: aa:7c:75:23:76:85:db:c9:b2:c4:3d:ff:e1:d3:cc: c8:27:cb:7b:df:e7:ce:19:c8:08:a6:97:de:8b:fa: 03:43:6f:56:cf:06:a1:a0:94:64:93:d0:d3:6f:7e: 58:9f:6b:e4:d0:8d:5a:1f:e2:70:3e:d2:e1:d0:cb: f8:c4:7b:ef:8e:cd:88:58:6b:ad:4d:49:29:12:95: 07:85:cf:c5:40:ca:ad:9f:34:d8:7b:52:a6:b4:88: d6:90:2b:c4:ff:b3:9b:57:bd:17:b8:0d:e6:bf:c2: 58:80:e6:3f:b5:91:5a:e4:86:f6:a1:1e:2c:b6:8d: 3f:eb:23:15:e5:8f:25:79:71:64:2b:2f:85:59:08: cf:91:72:32:15:e7:ff:28:2d:94:c3:b7:1f:bf:d6: 3a:2a:cd:bc:be:d0:dd:ce:76:d1:7f:48:2b:28:2d: 0b:7c:09:b6:a3:a7:48:1a:27:60:21:29:83:9b:91: cf:b4:4f:44:77:9b:b3:3b:3f:0c:12:41:1f:22:fd: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:B8:1A:80:EC:D9:3B:6C:D9:01:27:31:92:54:75:25:50:58:A6 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:cc:4f:78:17:b2:84:db:a1:45:35:6f:71:96:c3:2c:9e: 32:c6:8a:c7:5e:08:0a:e7:13:45:53:24:7d:4c:02:43:04:b6: 2f:ac:7d:57:12:fa:08:f2:81:10:cf:3d:da:57:50:9e:9d:e8: 6c:7f:b3:ed:33:50:ef:e1:4e:90:8c:bc:2b:02:fd:69:0b:b6: 88:69:c1:30:38:ab:85:37:e7:72:7f:9d:62:03:07:6a:b2:9e: 4f:38:eb:84:e7:bc:45:55:41:ee:9c:54:d6:79:d9:b2:9d:30: be:83:8d:2c:ff:19:34:52:d8:3a:2e:1b:e5:c0:4f:24:36:30: e4:ac:1b:3b:3d:1a:2b:79:c4:34:fc:34:89:6f:cc:be:49:00: aa:fd:1a:79:fd:cc:44:66:3c:5c:6a:ad:aa:87:fc:72:4b:78: ea:96:9c:a8:62:5e:e6:0c:2e:c6:5e:5d:79:4d:a5:00:9e:df: ab:30:ec:66:cd:ef:39:bc:9c:ce:9d:8e:99:ed:e8:a7:d2:ed: 10:d8:36:36:dd:c6:cc:6b:67:1c:57:30:04:30:c0:13:9c:a7: b9:7b:63:ee:69:0e:93:9f:d6:a7:35:fa:4c:6b:5d:09:92:aa: 08:c3:df:d2:31:ed:e1:d1:ca:9a:31:12:43:4e:30:33:0d:9c: a2:7f:1d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWDVCwm/zjQ3WwkcOlMLhx3tx+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTEyMjQxNjI3MDlaFw0yNTEyMjgwMzEzMDlaMDMxMTAvBgNV BAMTKDY3MERCODFBODBFQ0Q5M0I2Q0Q5MDEyNzMxOTI1NDc1MjU1MDU4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkMri3pithOy62d+r8E9iivVq XK0mCXOWAMi2nIwbIUEjNnV/O63LqoX9ImEMGq6HMnYWY7AoXaYz5Kp8dSN2hdvJ ssQ9/+HTzMgny3vf584ZyAiml96L+gNDb1bPBqGglGST0NNvflifa+TQjVof4nA+ 0uHQy/jEe++OzYhYa61NSSkSlQeFz8VAyq2fNNh7Uqa0iNaQK8T/s5tXvRe4Dea/ wliA5j+1kVrkhvahHiy2jT/rIxXljyV5cWQrL4VZCM+RcjIV5/8oLZTDtx+/1joq zby+0N3OdtF/SCsoLQt8Cbajp0gaJ2AhKYObkc+0T0R3m7M7PwwSQR8i/UizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZw24GoDs2Tts2QEnMZJUdSVQWKYwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnXzE94F7KE26FFNW9xlsMsnjLGisdeCArn E0VTJH1MAkMEti+sfVcS+gjygRDPPdpXUJ6d6Gx/s+0zUO/hTpCMvCsC/WkLtohp wTA4q4U353J/nWIDB2qynk8464TnvEVVQe6cVNZ52bKdML6DjSz/GTRS2DouG+XA TyQ2MOSsGzs9Git5xDT8NIlvzL5JAKr9Gnn9zERmPFxqraqH/HJLeOqWnKhiXuYM LsZeXXlNpQCe36sw7GbN7zm8nM6djpnt6KfS7RDYNjbdxsxrZxxXMAQwwBOcp7l7 Y+5pDpOf1qc1+kxrXQmSqgjD39Ix7eHRypoxEkNOMDMNnKJ/HdA= -----END CERTIFICATE-----Generated at Wed Dec 24 18:36:16 2025 by rpki-client