This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: iqCVkiZSJ67VvpzAHjxEumvaGXmvZIne1DUcFavmjR8= Subject key identifier: 87:70:F4:49:24:DF:0A:53:B4:A9:BF:59:A4:98:DB:06:01:A0:56:D0 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 1255E8DC4EA1861ECF278E50C00A08951FBE1A20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0234 Signing time: Wed 17 Dec 2025 23:21:22 +0000 Manifest this update: Wed 17 Dec 2025 23:16:22 +0000 Manifest next update: Sun 21 Dec 2025 06:04:22 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: CSdUJ5gygqRDqHV1+QXcMeIOe8axXSFOqTNQcznr1hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:55:e8:dc:4e:a1:86:1e:cf:27:8e:50:c0:0a:08:95:1f:be:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Dec 17 23:16:22 2025 GMT Not After : Dec 21 06:04:22 2025 GMT Subject: CN=8770F44924DF0A53B4A9BF59A498DB0601A056D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:37:88:6b:cb:49:ed:f4:e7:58:5f:e1:d8: f8:51:f9:78:03:93:0e:01:07:74:78:8c:da:4e:f3: 9a:8d:5d:0a:3f:1b:a3:c1:17:2c:f9:f2:b1:08:94: 4f:bf:80:e9:5c:28:0d:f7:9a:43:42:89:ed:66:0b: 69:48:5a:bb:59:72:ca:de:f6:17:fa:4f:61:6a:16: 8b:3e:57:87:6e:92:97:38:e9:e2:c1:3d:96:74:99: f9:09:c8:2c:9d:45:99:06:25:99:cf:f9:05:85:91: fd:8a:42:5c:a5:38:08:2f:5f:70:ff:9a:9d:7e:7f: 6c:a9:74:1b:1a:ad:17:5c:2b:1a:59:ae:f5:87:09: d5:4a:fe:79:f7:45:f5:69:dc:25:dc:d6:ea:48:59: 03:81:a6:06:4c:77:15:78:2e:72:9d:ed:08:a3:58: ed:b0:c8:80:da:37:0b:fe:72:59:d6:d3:cf:e7:07: d4:7a:54:1e:bb:b9:33:d5:8b:17:65:10:e8:41:79: c6:ed:1f:50:49:f9:a2:a5:99:71:36:24:e8:bd:d8: 3f:ab:e0:6d:69:1f:63:05:18:bd:0f:1d:84:12:e6: ad:e0:08:61:42:76:fb:74:9a:3b:1a:38:1a:df:a3: 6a:fe:0d:31:87:9f:ff:2d:af:89:2d:d4:43:78:a2: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:70:F4:49:24:DF:0A:53:B4:A9:BF:59:A4:98:DB:06:01:A0:56:D0 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ae:57:4a:31:3c:0c:24:78:a3:56:22:78:fc:d9:30:3d:d0: d0:65:7c:47:35:a6:ba:5e:f9:01:2a:c7:5e:99:3f:7c:8e:cb: a6:e3:05:eb:c7:68:c6:bc:e0:d9:75:09:3b:72:23:69:65:cf: 10:fe:90:76:b2:98:a4:09:6e:e0:53:f4:ba:a3:e2:c3:b9:8d: 92:2d:b2:1d:10:00:dd:4d:ee:00:9c:66:eb:2b:00:72:72:7f: 7d:d5:0e:bb:7e:a2:f4:e8:55:74:9e:42:e5:20:cd:44:a4:66: 2e:a9:fa:8d:2b:90:84:62:b8:d4:19:08:7e:0d:06:30:a2:66: db:5c:b6:33:e7:f7:00:4e:fb:18:f6:a0:2b:79:1b:ad:7d:10: ca:b3:bc:8e:f1:6f:70:54:e6:1c:a8:2d:17:c1:d0:84:5d:13: ea:cd:74:bc:76:dc:f0:ca:15:67:db:fd:4c:e5:e4:4d:e2:98: b3:b9:53:bf:37:fd:16:54:15:c6:74:96:6b:1d:49:9b:19:39: 9c:e3:d5:e8:7e:89:98:d4:9b:cb:34:81:8c:51:59:f0:01:4b: af:fd:0a:03:1e:88:13:f7:41:8e:d4:3a:60:81:80:34:cb:f7: d1:c2:c1:7f:0f:e2:db:a2:54:cb:db:d1:b3:ac:f9:0d:68:37: 62:d3:1f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElXo3E6hhh7PJ45QwAoIlR++GiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTEyMTcyMzE2MjJaFw0yNTEyMjEwNjA0MjJaMDMxMTAvBgNV BAMTKDg3NzBGNDQ5MjRERjBBNTNCNEE5QkY1OUE0OThEQjA2MDFBMDU2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHzeIa8tJ7fTnWF/h2PhR+XgD kw4BB3R4jNpO85qNXQo/G6PBFyz58rEIlE+/gOlcKA33mkNCie1mC2lIWrtZcsre 9hf6T2FqFos+V4dukpc46eLBPZZ0mfkJyCydRZkGJZnP+QWFkf2KQlylOAgvX3D/ mp1+f2ypdBsarRdcKxpZrvWHCdVK/nn3RfVp3CXc1upIWQOBpgZMdxV4LnKd7Qij WO2wyIDaNwv+clnW08/nB9R6VB67uTPVixdlEOhBecbtH1BJ+aKlmXE2JOi92D+r 4G1pH2MFGL0PHYQS5q3gCGFCdvt0mjsaOBrfo2r+DTGHn/8tr4kt1EN4oqpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3D0SSTfClO0qb9ZpJjbBgGgVtAwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2uV0oxPAwkeKNWInj82TA90NBlfEc1prpe +QEqx16ZP3yOy6bjBevHaMa84Nl1CTtyI2llzxD+kHaymKQJbuBT9Lqj4sO5jZIt sh0QAN1N7gCcZusrAHJyf33VDrt+ovToVXSeQuUgzUSkZi6p+o0rkIRiuNQZCH4N BjCiZttctjPn9wBO+xj2oCt5G619EMqzvI7xb3BU5hyoLRfB0IRdE+rNdLx23PDK FWfb/Uzl5E3imLO5U783/RZUFcZ0lmsdSZsZOZzj1eh+iZjUm8s0gYxRWfABS6/9 CgMeiBP3QY7UOmCBgDTL99HCwX8P4tuiVMvb0bOs+Q1oN2LTH6w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:41 2025 by rpki-client