This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: OQF+JXWOZBgR9WJNZkiB+CXvpCqT/u5uwtlTMfjCxi0= Subject key identifier: 32:E4:E5:83:95:60:49:9B:F0:48:DB:1C:1E:F1:B4:5A:55:A9:DD:DC Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 09C883FE178E64FB1C38DD72B4EB289BA95CE092 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: BA Signing time: Wed 03 Dec 2025 10:32:20 +0000 Manifest this update: Wed 03 Dec 2025 10:27:20 +0000 Manifest next update: Sat 06 Dec 2025 18:06:20 +0000 Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) 2: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: U4HlSqMAU5svFF7DibCBSbIx6bltU3B8q92DBAvhGXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c8:83:fe:17:8e:64:fb:1c:38:dd:72:b4:eb:28:9b:a9:5c:e0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Dec 3 10:27:20 2025 GMT Not After : Dec 6 18:06:20 2025 GMT Subject: CN=32E4E5839560499BF048DB1C1EF1B45A55A9DDDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:9e:d8:fb:6f:5c:fb:01:ac:f7:58:61:e5: 5f:13:b4:f2:8b:df:59:09:d8:55:b4:f4:c9:c2:bd: 27:3a:76:e1:b8:1d:96:19:67:be:86:6d:61:c1:ea: 2d:71:d0:26:ea:7a:b9:11:a9:8c:33:8f:31:7c:f9: a3:b7:b1:fa:94:77:84:f6:80:c9:a5:da:22:62:4b: c9:e0:2b:45:dd:cc:d8:f4:b1:a7:a5:79:91:85:20: c7:d7:e8:7a:d4:82:b0:28:da:82:3e:15:4a:ce:5e: ba:b5:2d:8e:bd:37:f6:61:60:d3:9c:0b:c8:41:99: 50:c3:74:21:7a:7e:ba:81:b2:0d:2b:4e:e0:6a:f8: 61:3c:bf:16:f7:81:e4:37:10:58:0c:85:cb:18:a3: 4d:fc:10:42:98:5c:93:2e:89:30:f9:42:3c:01:b6: 4d:51:dd:da:fb:24:ab:ad:36:82:4f:c8:2d:55:55: 49:21:e9:cf:c5:45:88:89:ac:29:a2:ea:81:fa:1d: f9:10:eb:d0:2a:93:61:c8:48:be:13:fc:49:19:e2: 16:a5:21:8a:61:d5:4a:67:9a:e6:41:70:79:4f:d9: 62:4c:c3:4b:85:e1:9e:f0:a7:90:bb:1a:90:41:7f: 93:f5:2a:20:b4:3a:6f:1b:a1:20:5a:ef:31:b1:ff: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:E5:83:95:60:49:9B:F0:48:DB:1C:1E:F1:B4:5A:55:A9:DD:DC X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3e:e6:4c:69:6e:eb:bd:aa:b7:d9:4d:92:43:73:13:bd:d0: bc:da:4f:2f:23:09:8f:d6:85:1b:af:d6:ae:ff:40:95:43:3b: 43:4e:1e:33:c1:90:17:49:4c:b1:8b:56:14:77:06:14:0f:64: b8:f5:2f:f3:19:c8:a9:79:a3:3c:ac:d3:3e:7d:ba:cd:69:bf: cb:02:e6:b6:bc:ff:d1:cd:7a:a1:b7:a0:f9:8f:18:99:e7:4f: 83:db:5b:21:52:01:71:6b:7b:a0:03:2c:a4:a0:ae:a2:0e:b0: 76:12:b6:a1:1a:72:05:6d:e6:b9:64:80:2e:ec:2c:d5:ed:db: d4:42:88:fb:1e:c3:51:98:50:bb:df:32:4e:6e:92:03:07:4c: e3:78:36:4c:ee:a7:52:e1:7e:f2:a2:ab:a0:3a:6e:89:83:9e: e5:3b:fe:b1:96:93:8e:39:5d:01:de:28:54:f7:f3:0c:71:bb: 1b:2f:a1:eb:c8:0b:c6:ef:53:fe:a8:eb:ea:60:89:8d:3b:9d: 1a:37:3a:5f:c3:5f:d9:59:14:d4:60:88:91:93:6c:69:9d:d1: 8f:99:bf:46:08:67:93:7d:fe:c5:51:fe:5b:25:f7:e1:0c:71: aa:66:80:8e:e1:c1:f5:27:61:77:0d:53:74:85:3b:de:33:e2: da:66:56:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCciD/heOZPscON1ytOsom6lc4JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTEyMDMxMDI3MjBaFw0yNTEyMDYxODA2MjBaMDMxMTAvBgNV BAMTKDMyRTRFNTgzOTU2MDQ5OUJGMDQ4REIxQzFFRjFCNDVBNTVBOUREREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk57Y+29c+wGs91hh5V8TtPKL 31kJ2FW09MnCvSc6duG4HZYZZ76GbWHB6i1x0CbqerkRqYwzjzF8+aO3sfqUd4T2 gMml2iJiS8ngK0XdzNj0saeleZGFIMfX6HrUgrAo2oI+FUrOXrq1LY69N/ZhYNOc C8hBmVDDdCF6frqBsg0rTuBq+GE8vxb3geQ3EFgMhcsYo038EEKYXJMuiTD5QjwB tk1R3dr7JKutNoJPyC1VVUkh6c/FRYiJrCmi6oH6HfkQ69Aqk2HISL4T/EkZ4hal IYph1UpnmuZBcHlP2WJMw0uF4Z7wp5C7GpBBf5P1KiC0Om8boSBa7zGx/9RjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuTlg5VgSZvwSNscHvG0WlWp3dwwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU+5kxpbuu9qrfZTZJDcxO90LzaTy8jCY/W hRuv1q7/QJVDO0NOHjPBkBdJTLGLVhR3BhQPZLj1L/MZyKl5ozys0z59us1pv8sC 5ra8/9HNeqG3oPmPGJnnT4PbWyFSAXFre6ADLKSgrqIOsHYStqEacgVt5rlkgC7s LNXt29RCiPsew1GYULvfMk5ukgMHTON4Nkzup1LhfvKiq6A6bomDnuU7/rGWk445 XQHeKFT38wxxuxsvoevIC8bvU/6o6+pgiY07nRo3Ol/DX9lZFNRgiJGTbGmd0Y+Z v0YIZ5N9/sVR/lsl9+EMcapmgI7hwfUnYXcNU3SFO94z4tpmViQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:08 2025 by rpki-client