This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: HCsc97VSZf+uxMgUr6BeTZVwNCwjIQoP8UGCXyMzl+Y= Subject key identifier: 5A:31:38:3C:7C:E8:CD:D2:57:23:E5:A9:A5:62:B9:66:C3:4D:36:D9 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 4C3B8962A5B57CEDD73A2B94AA249D4523150CCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0483 Signing time: Sat 20 Dec 2025 10:41:00 +0000 Manifest this update: Sat 20 Dec 2025 10:36:00 +0000 Manifest next update: Tue 23 Dec 2025 13:21:00 +0000 Files and hashes: 1: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: IC7DIZjhtEBcOkervVnbzGyaz747gty2vcV3dl8yX1Q=) 2: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 3: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 5: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 6: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) 7: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 8: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) 9: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 13:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3b:89:62:a5:b5:7c:ed:d7:3a:2b:94:aa:24:9d:45:23:15:0c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Dec 20 10:36:00 2025 GMT Not After : Dec 23 13:21:00 2025 GMT Subject: CN=5A31383C7CE8CDD25723E5A9A562B966C34D36D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:29:20:da:6f:6f:82:be:1f:91:af:fe:3f: 88:77:09:f0:e4:39:90:3e:dc:36:65:a0:81:b1:19: 90:44:20:ed:44:01:e2:bc:46:41:c9:1a:b4:b5:07: 3e:59:0b:aa:83:ee:f8:1b:e3:4e:b5:05:45:27:ab: f2:7d:13:5f:a1:e7:3b:69:41:de:c7:f3:33:8a:52: 1d:27:23:3c:1e:fc:5d:c8:b3:90:5c:50:10:b8:8c: 67:61:ac:62:cc:5e:a3:f4:fa:ef:aa:42:15:2e:3e: 4c:af:49:a3:65:dd:dd:91:60:39:f5:cf:26:91:8e: c6:20:7a:ab:0f:3a:a6:4b:0d:a9:fc:30:9a:03:bf: fc:0d:37:7c:b3:b9:66:03:b0:95:8a:39:00:e8:84: f1:39:f9:a3:d5:d1:82:d0:42:67:cc:5f:74:ff:ec: 7e:ec:22:2e:56:17:33:18:e7:a4:84:31:4c:6d:e8: 16:af:ed:d3:a2:7d:38:b5:cc:24:9c:96:fa:35:28: 06:10:6e:31:ef:d4:90:6b:80:65:a4:49:4e:2c:75: 9b:ad:b7:d1:f4:f1:92:a8:d2:e0:af:ea:28:f0:52: 13:fe:a8:aa:98:b5:12:d3:ff:76:06:89:e1:11:29: 00:48:66:4e:8c:c7:c1:fc:a2:b6:19:19:8e:ed:56: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:38:3C:7C:E8:CD:D2:57:23:E5:A9:A5:62:B9:66:C3:4D:36:D9 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2a:f8:1d:bf:b1:3c:22:bc:54:1a:f6:4b:18:47:8e:51:f2: 4a:a4:27:68:c5:20:0e:ce:6a:5c:1a:72:87:3a:09:42:20:ef: 75:e1:d3:66:80:a3:3d:af:b2:38:73:ae:83:98:fd:72:e3:6f: 0c:ee:e4:0f:75:73:eb:b8:45:71:11:d1:fb:46:f9:58:a9:f9: 63:08:ab:4b:07:17:52:e4:74:24:ca:d9:64:5d:21:81:74:40: 12:21:21:5e:d3:eb:16:63:59:37:36:dc:e0:23:cc:36:a8:11: c8:9c:1f:c9:c9:10:09:2e:83:bf:11:0e:48:15:1a:8c:6f:c7: e9:df:7b:57:fc:cf:99:6b:7b:8d:af:67:5a:7e:f4:9b:04:f4: d0:aa:82:20:41:1c:e8:41:47:3e:75:b5:0d:94:ec:87:88:91: 10:9a:fb:aa:d3:5f:5a:76:44:61:ef:3c:4a:f2:ee:1f:f5:80: 7f:14:52:a4:65:7c:d2:96:95:33:eb:5b:96:a6:90:b5:9a:6e: 4e:b8:f7:c3:76:45:57:ab:64:04:23:6d:0d:77:9a:3d:86:de: 1c:f9:bd:8a:a0:7a:ea:5f:24:61:9e:c3:00:11:2f:c4:06:78: a1:b7:3f:d9:64:11:f7:e2:7c:3d:c8:9a:7a:ff:3a:3b:c3:27: fd:9a:08:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDuJYqW1fO3XOiuUqiSdRSMVDMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTEyMjAxMDM2MDBaFw0yNTEyMjMxMzIxMDBaMDMxMTAvBgNV BAMTKDVBMzEzODNDN0NFOENERDI1NzIzRTVBOUE1NjJCOTY2QzM0RDM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rykg2m9vgr4fka/+P4h3CfDk OZA+3DZloIGxGZBEIO1EAeK8RkHJGrS1Bz5ZC6qD7vgb4061BUUnq/J9E1+h5ztp Qd7H8zOKUh0nIzwe/F3Is5BcUBC4jGdhrGLMXqP0+u+qQhUuPkyvSaNl3d2RYDn1 zyaRjsYgeqsPOqZLDan8MJoDv/wNN3yzuWYDsJWKOQDohPE5+aPV0YLQQmfMX3T/ 7H7sIi5WFzMY56SEMUxt6Bav7dOifTi1zCSclvo1KAYQbjHv1JBrgGWkSU4sdZut t9H08ZKo0uCv6ijwUhP+qKqYtRLT/3YGieERKQBIZk6Mx8H8orYZGY7tVhXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjE4PHzozdJXI+WppWK5ZsNNNtkwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwq+B2/sTwivFQa9ksYR45R8kqkJ2jFIA7O alwacoc6CUIg73Xh02aAoz2vsjhzroOY/XLjbwzu5A91c+u4RXER0ftG+Vip+WMI q0sHF1LkdCTK2WRdIYF0QBIhIV7T6xZjWTc23OAjzDaoEcicH8nJEAkug78RDkgV Goxvx+nfe1f8z5lre42vZ1p+9JsE9NCqgiBBHOhBRz51tQ2U7IeIkRCa+6rTX1p2 RGHvPEry7h/1gH8UUqRlfNKWlTPrW5amkLWabk6498N2RVerZAQjbQ13mj2G3hz5 vYqgeupfJGGewwARL8QGeKG3P9lkEffifD3Imnr/OjvDJ/2aCKI= -----END CERTIFICATE-----Generated at Sun Dec 21 15:18:26 2025 by rpki-client