This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json) Hash identifier: LaxaeusLNAbnsh4qRsdTpI3CvPpgMtFvTJnDa0kgN4s= Subject key identifier: 68:7C:58:AB:75:14:C9:D6:64:0C:B8:AE:8E:60:7B:A2:00:E5:E4:D9 Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE Certificate serial: 239866361F6A791BF018E8A998AE0C5AAAC3B7B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft Manifest number: 01F5 Signing time: Tue 02 Dec 2025 05:41:54 +0000 Manifest this update: Tue 02 Dec 2025 05:36:54 +0000 Manifest next update: Fri 05 Dec 2025 05:57:54 +0000 Files and hashes: 1: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=) 2: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: WKukFhTAk9Wfv4/OtDk/a2nJ3JcuJ/OWKwAPnS7JgvA=) 3: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: Gkt2QLrKCd1cPwD3Kw9ZbgXi0ahT2NTcMx8CugzfkjY=) 4: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=) 5: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: 3w+VK+tvKAA1AfC4liESzr0B7Kk6JlTbtXB9BTFuOGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:98:66:36:1f:6a:79:1b:f0:18:e8:a9:98:ae:0c:5a:aa:c3:b7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE Validity Not Before: Dec 2 05:36:54 2025 GMT Not After : Dec 5 05:57:54 2025 GMT Subject: CN=687C58AB7514C9D6640CB8AE8E607BA200E5E4D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:ea:1b:ec:57:af:22:94:bc:31:dd:53:db: 57:53:7b:f5:ca:88:58:89:41:43:7e:6e:09:c2:2d: 7b:6d:b6:eb:0d:2e:f2:a9:38:5d:90:d9:4c:ca:a0: e1:58:62:b8:70:67:16:ca:b7:bf:71:b9:5c:5c:7a: 4c:97:3f:cc:46:07:83:c1:1d:0a:d1:b0:aa:ba:4a: 0b:81:72:cd:cb:c0:9b:e3:5a:0b:4f:c7:63:71:b4: 38:d6:cf:60:87:ce:b1:a4:c8:df:b9:c8:98:50:2f: 33:9b:f9:38:6b:2e:cb:52:5e:d2:78:63:39:19:9e: 04:00:6c:55:c4:04:78:55:03:85:17:80:01:5f:72: cb:a1:b5:3c:d4:7b:71:e9:57:d4:9b:94:b5:b6:7d: 78:0d:14:b8:99:62:ec:a8:c0:04:cb:84:de:2a:1c: fc:87:96:0a:29:ff:48:7e:19:b6:19:d2:1a:b4:20: 08:74:61:98:16:bf:06:be:99:d1:be:79:f2:22:44: 59:fd:4f:50:cf:61:7d:7a:3e:7d:dd:95:47:3f:04: 30:ff:99:34:52:81:dc:22:84:47:ad:e0:8e:91:71: 0a:cf:ce:82:ad:4d:c5:98:0b:81:33:b2:cf:26:af: 04:19:93:6b:a9:aa:df:74:3b:97:1d:44:53:f3:51: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:58:AB:75:14:C9:D6:64:0C:B8:AE:8E:60:7B:A2:00:E5:E4:D9 X509v3 Authority Key Identifier: keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:24:af:e3:01:32:26:69:53:0f:de:be:d0:25:14:8d:76:ad: 6f:64:2f:09:65:b9:e6:24:31:78:40:37:3b:c9:e3:4b:a2:21: 17:88:97:ee:cc:de:28:ce:70:9e:05:7d:4e:1b:b9:c8:7e:3f: f2:99:64:8e:fc:e3:7e:eb:fa:1d:25:77:17:a3:75:dc:93:d9: 4c:72:f0:1d:4e:1f:46:52:9c:2c:25:50:42:00:bb:49:ac:e2: c1:fc:8f:63:46:d6:44:fc:d6:a9:4c:a4:b9:f2:46:3e:8a:3c: 4d:97:5c:c7:68:9e:b4:dc:e0:a2:b8:b1:6b:39:66:ae:1d:62: e2:27:24:74:fe:73:05:80:2e:b2:ae:7e:b0:5e:c2:41:26:a0: 96:09:57:65:5b:c2:4b:00:37:43:dd:9c:a7:01:5e:64:04:e3: 82:31:38:4b:58:4b:7c:4b:7b:83:5d:a0:46:e4:7d:c3:ac:e8: 14:5f:cf:2a:45:17:a5:75:3b:9d:bd:ba:04:6f:a9:19:30:28: 88:84:57:cc:ad:88:9c:54:bf:d9:3e:ed:fb:04:58:19:13:31: f9:fd:fb:d6:21:70:1b:00:b0:61:47:ca:8d:ee:1c:e1:f0:83: 21:67:a1:ec:00:01:a3:35:23:40:00:f5:32:97:47:53:fc:00: 94:f1:67:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5hmNh9qeRvwGOipmK4MWqrDt7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD RTY5MjhGRTAeFw0yNTEyMDIwNTM2NTRaFw0yNTEyMDUwNTU3NTRaMDMxMTAvBgNV BAMTKDY4N0M1OEFCNzUxNEM5RDY2NDBDQjhBRThFNjA3QkEyMDBFNUU0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQuob7FevIpS8Md1T21dTe/XK iFiJQUN+bgnCLXtttusNLvKpOF2Q2UzKoOFYYrhwZxbKt79xuVxcekyXP8xGB4PB HQrRsKq6SguBcs3LwJvjWgtPx2NxtDjWz2CHzrGkyN+5yJhQLzOb+ThrLstSXtJ4 YzkZngQAbFXEBHhVA4UXgAFfcsuhtTzUe3HpV9SblLW2fXgNFLiZYuyowATLhN4q HPyHlgop/0h+GbYZ0hq0IAh0YZgWvwa+mdG+efIiRFn9T1DPYX16Pn3dlUc/BDD/ mTRSgdwihEet4I6RcQrPzoKtTcWYC4Ezss8mrwQZk2upqt90O5cdRFPzUR8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaHxYq3UUydZkDLiujmB7ogDl5NkwHwYDVR0j BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5 QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5 MjhGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3 N0VDRTY5MjhGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYkr+MBMiZpUw/evtAlFI12rW9kLwllueYk MXhANzvJ40uiIReIl+7M3ijOcJ4FfU4buch+P/KZZI78437r+h0ldxejddyT2Uxy 8B1OH0ZSnCwlUEIAu0ms4sH8j2NG1kT81qlMpLnyRj6KPE2XXMdonrTc4KK4sWs5 Zq4dYuInJHT+cwWALrKufrBewkEmoJYJV2VbwksAN0PdnKcBXmQE44IxOEtYS3xL e4NdoEbkfcOs6BRfzypFF6V1O529ugRvqRkwKIiEV8ytiJxUv9k+7fsEWBkTMfn9 +9YhcBsAsGFHyo3uHOHwgyFnoewAAaM1I0AA9TKXR1P8AJTxZ9k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:39 2025 by rpki-client