This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json) Hash identifier: JIV+QXq+eTON+AcmHIZki9fVwZVhhwv3W1oz/7qwo68= Subject key identifier: 84:55:85:83:13:20:47:BD:3C:BF:C4:2E:9E:10:7F:C5:75:CA:CB:D2 Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46 Certificate serial: 66AD01A81F7763AF9B1CDC21C6381BCE6ED6F4C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft Manifest number: 0216 Signing time: Sun 14 Dec 2025 19:22:28 +0000 Manifest this update: Sun 14 Dec 2025 19:17:28 +0000 Manifest next update: Thu 18 Dec 2025 00:07:28 +0000 Files and hashes: 1: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: +hde7m2fgvsQKWa8Y/SvIl/HaqND/233w9td6rG5gfM=) 2: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=) 3: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=) 4: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: I5tBiXW53g+o5711q+c6sqmDZ0V8yGZ1wPd6GIxulEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 00:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ad:01:a8:1f:77:63:af:9b:1c:dc:21:c6:38:1b:ce:6e:d6:f4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46 Validity Not Before: Dec 14 19:17:28 2025 GMT Not After : Dec 18 00:07:28 2025 GMT Subject: CN=84558583132047BD3CBFC42E9E107FC575CACBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:61:0a:b1:04:5c:c6:40:c5:0a:c4:92:0e: f1:5f:93:27:51:b7:69:d4:42:37:29:0f:b0:ad:81: 05:71:b9:08:bf:f4:75:c5:19:f0:88:43:5f:fd:69: 00:e3:75:87:36:df:95:e9:b8:15:2e:48:c6:b0:08: 78:30:33:c2:de:dc:7f:4a:c8:f9:81:95:5a:de:6c: 5a:16:47:39:1b:bb:c8:db:96:7c:c9:a1:dc:01:10: e1:18:72:38:e2:ae:19:f1:91:20:5f:5a:8f:17:cc: f8:70:b8:91:dd:19:0b:f1:4d:82:57:9d:ef:8e:c6: 17:80:9f:95:2d:45:6f:70:c4:4e:13:16:0c:ac:ad: 76:2e:05:66:c6:a0:b0:cf:39:9a:ee:bc:06:9c:e9: 4d:a7:9f:32:b0:e0:67:b8:e6:58:42:c0:a3:4f:9b: 79:bc:38:f4:4d:11:25:45:2b:bb:61:7c:94:b2:ba: 49:d6:9c:46:10:c9:9e:db:bd:93:a7:eb:4d:4c:18: d4:f4:a9:1c:c6:b5:27:8f:f9:01:55:c3:22:a7:53: 1c:d6:54:2f:ad:e3:0c:b5:3f:e9:e7:cc:01:82:6f: 89:28:05:8c:78:66:ac:f6:9d:8e:eb:aa:03:8b:67: 88:68:9b:25:7d:6a:b9:e3:a7:11:51:d8:fa:ba:9f: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:55:85:83:13:20:47:BD:3C:BF:C4:2E:9E:10:7F:C5:75:CA:CB:D2 X509v3 Authority Key Identifier: keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:20:49:b6:35:5b:a3:67:5c:ed:f7:35:df:7a:5a:3e:36:bd: 3e:54:3a:3e:1a:76:d4:32:b1:14:ee:4e:ac:57:0c:e5:31:29: c1:fa:5d:7c:ea:d6:22:cd:0f:08:c0:ef:a5:d5:ef:ed:ba:8a: 39:3a:35:cf:34:fb:1a:c5:66:0e:d8:23:df:a4:a2:43:1f:70: 58:fd:84:52:84:50:1e:e9:4c:25:b5:f5:9a:29:e2:3d:cf:18: 02:de:11:29:00:05:54:48:cb:27:5f:47:ef:ed:d1:37:b9:b1: 5d:f7:57:96:9d:aa:c2:b2:82:40:8f:4c:b0:71:b8:9f:90:23: 13:2d:25:8c:8a:92:98:ab:72:6b:af:56:80:a3:07:cc:99:f4: 2c:26:a4:b5:a9:3c:9e:04:db:3e:ab:8b:4c:c8:42:00:12:61: 63:94:e0:29:90:13:20:15:bf:4a:a6:79:96:fe:1b:bf:ea:4f: e6:af:35:a6:37:c4:d7:4b:80:3d:e1:51:68:3c:8f:96:82:e4: a9:fa:61:20:bc:18:c0:69:38:dc:1a:d1:e9:2e:be:7a:4c:4c: 15:ac:7b:6c:6c:1f:de:a6:5e:8a:4a:33:36:b9:fb:a8:69:cf: 07:a3:ee:7a:a4:df:d0:a6:48:2e:ae:de:12:d1:56:5e:8b:3a: 01:1d:d5:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZq0BqB93Y6+bHNwhxjgbzm7W9MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy OEEzNkE0NjAeFw0yNTEyMTQxOTE3MjhaFw0yNTEyMTgwMDA3MjhaMDMxMTAvBgNV BAMTKDg0NTU4NTgzMTMyMDQ3QkQzQ0JGQzQyRTlFMTA3RkM1NzVDQUNCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1GEKsQRcxkDFCsSSDvFfkydR t2nUQjcpD7CtgQVxuQi/9HXFGfCIQ1/9aQDjdYc235XpuBUuSMawCHgwM8Le3H9K yPmBlVrebFoWRzkbu8jblnzJodwBEOEYcjjirhnxkSBfWo8XzPhwuJHdGQvxTYJX ne+OxheAn5UtRW9wxE4TFgysrXYuBWbGoLDPOZruvAac6U2nnzKw4Ge45lhCwKNP m3m8OPRNESVFK7thfJSyuknWnEYQyZ7bvZOn601MGNT0qRzGtSeP+QFVwyKnUxzW VC+t4wy1P+nnzAGCb4koBYx4Zqz2nY7rqgOLZ4homyV9arnjpxFR2Pq6nz6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhFWFgxMgR708v8QunhB/xXXKy9IwHwYDVR0j BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4 NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsgSbY1W6NnXO33Nd96Wj42vT5UOj4adtQy sRTuTqxXDOUxKcH6XXzq1iLNDwjA76XV7+26ijk6Nc80+xrFZg7YI9+kokMfcFj9 hFKEUB7pTCW19Zop4j3PGALeESkABVRIyydfR+/t0Te5sV33V5adqsKygkCPTLBx uJ+QIxMtJYyKkpircmuvVoCjB8yZ9CwmpLWpPJ4E2z6ri0zIQgASYWOU4CmQEyAV v0qmeZb+G7/qT+avNaY3xNdLgD3hUWg8j5aC5Kn6YSC8GMBpONwa0ekuvnpMTBWs e2xsH96mXopKMza5+6hpzwej7nqk39CmSC6u3hLRVl6LOgEd1Z4= -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:53 2025 by rpki-client