This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: sAgVzKbfqCp1KbXY/3Z4HEnx45x5U4EBzzParCHAiSU= Subject key identifier: AD:20:DB:27:AA:7D:A8:9D:20:58:CF:00:E7:F3:1D:9F:67:91:F3:93 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 5AB6E707AA9E72C5B4B71BED09AAD3298B95D0BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0153 Signing time: Wed 17 Dec 2025 18:51:05 +0000 Manifest this update: Wed 17 Dec 2025 18:46:05 +0000 Manifest next update: Sun 21 Dec 2025 00:05:05 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: XATC7oK0ShUucBRfuxympqxShwFhwb0aCc3fYbZYu4k=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b6:e7:07:aa:9e:72:c5:b4:b7:1b:ed:09:aa:d3:29:8b:95:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Dec 17 18:46:05 2025 GMT Not After : Dec 21 00:05:05 2025 GMT Subject: CN=AD20DB27AA7DA89D2058CF00E7F31D9F6791F393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:47:a8:4c:f8:ab:97:bb:cc:fa:55:45:0e: 33:35:e9:9b:1c:5a:39:7d:c2:07:8f:8e:0f:71:44: 72:bd:a9:0c:89:74:56:39:69:5c:4e:dd:3d:d4:f6: 8c:f9:cd:31:e3:95:27:62:da:fd:a7:2f:1b:13:85: 64:ff:29:4c:09:dc:03:b3:6d:3c:9f:1d:8e:7d:27: 01:4a:88:b7:82:88:67:3e:42:52:0d:3a:ee:65:87: 53:5b:55:69:16:ff:2a:33:40:78:44:92:81:2e:59: 42:cb:79:67:97:03:e6:f0:46:a1:99:4f:8e:43:65: 53:99:89:e6:4d:9f:52:07:26:c8:24:20:83:c7:e4: 95:27:9b:a5:6e:68:28:91:f3:90:47:1f:cd:3d:03: 87:d2:cf:b7:64:5c:36:ef:2e:c5:3f:3b:49:0d:4b: 04:eb:dc:94:2a:77:39:70:0d:3e:02:40:87:2f:01: cc:ba:92:71:cc:dd:8c:49:0c:3d:cf:94:74:34:48: 02:75:1a:a6:ce:cc:31:07:77:b4:79:b1:a8:19:55: 0f:f0:41:61:bb:45:f0:be:3b:e3:7f:fc:3d:97:b2: 0b:6a:61:35:55:3d:d2:fd:ea:3b:ce:22:0f:71:fd: aa:a2:20:45:c4:ba:b8:ff:ec:8c:7e:29:3c:4a:80: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:DB:27:AA:7D:A8:9D:20:58:CF:00:E7:F3:1D:9F:67:91:F3:93 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:52:2a:9d:d1:07:f4:5e:cb:4e:6d:94:9c:3d:4d:d2:28:3d: 8c:38:ce:e3:4a:58:09:dc:5d:ad:95:a6:14:01:d9:33:16:c7: 04:4b:07:f5:00:0e:c1:8a:07:17:34:4c:b3:29:f5:1d:50:b1: 70:73:ac:e5:75:1d:3f:2a:76:2e:68:bb:df:cd:cf:ed:50:73: f0:98:92:6a:1f:01:d8:3e:7f:dd:55:4c:f6:57:64:ff:ba:02: 6b:b0:2c:51:60:cf:a0:bc:3b:ce:84:9f:a3:2e:12:0e:08:2e: 71:97:9f:8b:2c:dd:1a:88:e5:7e:78:63:95:34:55:9f:d5:5f: 97:34:05:a5:b0:70:5b:5e:ea:0c:99:5b:88:f9:0a:a3:41:a7: 80:13:4d:e9:2e:d0:7e:1e:ae:7f:63:4a:a5:7f:7e:15:8c:20: 08:b7:0c:c2:37:14:f3:07:39:a3:e5:64:e0:fe:8c:dc:f0:96: 06:99:7f:72:7a:f1:0b:a3:d7:c1:fe:18:7b:aa:8a:7d:7b:7a: 65:43:7a:54:01:b7:20:1f:ea:cd:3a:57:8f:1e:f5:c7:cc:6c: 68:86:3e:33:b0:31:f8:32:48:7f:29:9b:de:b0:ad:36:ab:22: dc:71:db:9c:17:d3:09:80:2c:55:b8:94:7a:f1:92:41:82:69: 31:1e:09:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrbnB6qecsW0txvtCarTKYuV0L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTEyMTcxODQ2MDVaFw0yNTEyMjEwMDA1MDVaMDMxMTAvBgNV BAMTKEFEMjBEQjI3QUE3REE4OUQyMDU4Q0YwMEU3RjMxRDlGNjc5MUYzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK0eoTPirl7vM+lVFDjM16Zsc Wjl9wgePjg9xRHK9qQyJdFY5aVxO3T3U9oz5zTHjlSdi2v2nLxsThWT/KUwJ3AOz bTyfHY59JwFKiLeCiGc+QlINOu5lh1NbVWkW/yozQHhEkoEuWULLeWeXA+bwRqGZ T45DZVOZieZNn1IHJsgkIIPH5JUnm6VuaCiR85BHH809A4fSz7dkXDbvLsU/O0kN SwTr3JQqdzlwDT4CQIcvAcy6knHM3YxJDD3PlHQ0SAJ1GqbOzDEHd7R5sagZVQ/w QWG7RfC+O+N//D2XsgtqYTVVPdL96jvOIg9x/aqiIEXEurj/7Ix+KTxKgPT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrSDbJ6p9qJ0gWM8A5/Mdn2eR85MwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARSKp3RB/Rey05tlJw9TdIoPYw4zuNKWAnc Xa2VphQB2TMWxwRLB/UADsGKBxc0TLMp9R1QsXBzrOV1HT8qdi5ou9/Nz+1Qc/CY kmofAdg+f91VTPZXZP+6AmuwLFFgz6C8O86En6MuEg4ILnGXn4ss3RqI5X54Y5U0 VZ/VX5c0BaWwcFte6gyZW4j5CqNBp4ATTeku0H4ern9jSqV/fhWMIAi3DMI3FPMH OaPlZOD+jNzwlgaZf3J68Quj18H+GHuqin17emVDelQBtyAf6s06V48e9cfMbGiG PjOwMfgySH8pm96wrTarItxx25wX0wmALFW4lHrxkkGCaTEeCcM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:14 2025 by rpki-client