This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: m0mAMg+KxqVqbu6e3gBoID8R9vwH5/gln1vXEXV4tGA= Subject key identifier: 2E:86:45:81:67:F7:C1:9B:77:58:A1:7B:69:69:D1:20:9F:A7:1C:B1 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 0C36DC89D068E8A60770165BDA33830CA660DA3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04D5 Signing time: Wed 24 Dec 2025 02:32:34 +0000 Manifest this update: Wed 24 Dec 2025 02:27:34 +0000 Manifest next update: Sat 27 Dec 2025 06:11:34 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: LzreeWV7Scaob59YzyretIGlXWzzyQtbFwvlHESSMrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 06:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:36:dc:89:d0:68:e8:a6:07:70:16:5b:da:33:83:0c:a6:60:da:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Dec 24 02:27:34 2025 GMT Not After : Dec 27 06:11:34 2025 GMT Subject: CN=2E86458167F7C19B7758A17B6969D1209FA71CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:0c:c8:2a:b7:ec:4a:96:19:5a:97:4f:26: 11:3f:13:df:f2:cf:71:89:f7:fd:c8:e4:35:37:ff: b7:60:0d:e8:61:5f:e2:69:20:8b:09:af:24:25:d3: c6:10:e7:b9:d7:74:60:35:2e:6c:0f:c6:67:d4:32: 28:f5:31:4e:69:66:ec:89:db:d6:98:50:3e:2f:e9: 55:59:93:69:d0:83:72:d1:19:aa:1d:a5:01:00:c0: 8b:fa:7b:56:a8:11:07:5d:49:05:c3:b6:5a:3c:92: 03:26:01:ca:c9:fd:7c:98:04:3b:04:6b:a0:90:0c: 0a:35:65:60:7c:54:c1:98:0d:71:76:8f:05:6b:2c: 51:73:40:11:8f:ba:a5:8f:9d:ab:6a:b2:ca:54:dc: ed:38:aa:72:ee:2b:1c:ad:a5:64:6a:c4:b3:f4:e7: 36:67:3a:8a:cb:f9:fc:95:d1:c1:5a:ce:01:9b:29: f7:76:e2:c4:3a:f4:62:59:3d:38:d8:72:e0:f1:0f: b9:e7:8f:e5:b2:f8:64:7c:d2:f9:56:33:52:f9:a1: 1f:9a:bc:25:cf:47:d3:29:8c:af:10:42:f1:4c:4a: bf:fb:6e:ed:59:54:0a:f2:bc:34:90:b9:37:15:23: ab:52:3c:85:b7:da:fc:86:da:19:03:8f:e1:4e:da: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:45:81:67:F7:C1:9B:77:58:A1:7B:69:69:D1:20:9F:A7:1C:B1 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:00:b5:b2:43:72:b8:c4:e2:ab:59:09:78:7f:c2:1a:9c:d8: 73:b2:ab:52:b8:b4:ae:d6:f8:3a:8e:be:a5:04:81:af:57:c7: 22:d8:2f:4a:d6:06:25:e6:f5:c7:4b:e7:df:7d:da:49:93:64: 37:72:df:cf:c9:91:c9:75:07:8b:dc:0e:6f:15:0b:a2:9f:1f: 60:d8:72:2e:32:07:85:65:25:cb:86:f5:82:98:5d:31:95:48: e2:63:75:c8:45:54:13:32:b9:23:0b:a4:4b:6f:e1:18:e1:e1: b9:24:a6:2e:f0:49:0e:03:c4:3e:a7:25:b0:ce:eb:89:71:37: 52:e4:20:c7:55:01:d0:54:56:4c:cc:bf:93:a8:ad:fb:8a:c6: 13:e3:86:c6:0d:35:e0:1e:f0:a0:8a:f6:7d:c4:29:03:86:a9: 8a:47:d8:d9:96:cd:78:9d:e0:e9:dd:3a:18:b6:95:61:ef:21: 75:d6:11:08:14:79:bd:47:a4:56:c6:72:dd:93:8a:86:2c:b0: 44:31:40:d0:4c:04:d7:9d:08:07:0b:6c:4b:c1:fd:c6:5b:51: 51:b2:e3:6b:de:95:a9:ed:00:d0:58:87:fe:87:be:75:1a:0e: 41:9e:6a:97:f3:ad:96:4f:58:bd:de:81:65:09:47:df:b9:08: 3b:5d:8d:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDbcidBo6KYHcBZb2jODDKZg2jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTEyMjQwMjI3MzRaFw0yNTEyMjcwNjExMzRaMDMxMTAvBgNV BAMTKDJFODY0NTgxNjdGN0MxOUI3NzU4QTE3QjY5NjlEMTIwOUZBNzFDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9wzIKrfsSpYZWpdPJhE/E9/y z3GJ9/3I5DU3/7dgDehhX+JpIIsJryQl08YQ57nXdGA1LmwPxmfUMij1MU5pZuyJ 29aYUD4v6VVZk2nQg3LRGaodpQEAwIv6e1aoEQddSQXDtlo8kgMmAcrJ/XyYBDsE a6CQDAo1ZWB8VMGYDXF2jwVrLFFzQBGPuqWPnatqsspU3O04qnLuKxytpWRqxLP0 5zZnOorL+fyV0cFazgGbKfd24sQ69GJZPTjYcuDxD7nnj+Wy+GR80vlWM1L5oR+a vCXPR9MpjK8QQvFMSr/7bu1ZVAryvDSQuTcVI6tSPIW32vyG2hkDj+FO2iufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULoZFgWf3wZt3WKF7aWnRIJ+nHLEwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsAtbJDcrjE4qtZCXh/whqc2HOyq1K4tK7W +DqOvqUEga9XxyLYL0rWBiXm9cdL59992kmTZDdy38/Jkcl1B4vcDm8VC6KfH2DY ci4yB4VlJcuG9YKYXTGVSOJjdchFVBMyuSMLpEtv4Rjh4bkkpi7wSQ4DxD6nJbDO 64lxN1LkIMdVAdBUVkzMv5OorfuKxhPjhsYNNeAe8KCK9n3EKQOGqYpH2NmWzXid 4OndOhi2lWHvIXXWEQgUeb1HpFbGct2TioYssEQxQNBMBNedCAcLbEvB/cZbUVGy 42velantANBYh/6HvnUaDkGeapfzrZZPWL3egWUJR9+5CDtdjes= -----END CERTIFICATE-----Generated at Wed Dec 24 12:28:56 2025 by rpki-client