This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: OZXS4lmqwrSfgS0P4QDorsRjGhXeuYlwdqLqQCG8Aj0= Subject key identifier: 61:B3:D1:CA:D5:0B:85:9F:65:1F:BA:03:14:E5:85:4E:E2:B9:41:62 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 60EA03F79537741B31853B5273EA931C750340C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0261 Signing time: Tue 02 Dec 2025 04:21:26 +0000 Manifest this update: Tue 02 Dec 2025 04:16:26 +0000 Manifest next update: Fri 05 Dec 2025 08:46:26 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: eRW7U0oQxA7pdlwnMBLhi/6l9O4dU7HWhkYJHYzOUbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:03:f7:95:37:74:1b:31:85:3b:52:73:ea:93:1c:75:03:40:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Dec 2 04:16:26 2025 GMT Not After : Dec 5 08:46:26 2025 GMT Subject: CN=61B3D1CAD50B859F651FBA0314E5854EE2B94162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:9d:e1:91:53:15:2c:3e:fe:bd:ee:d7:f5: 21:b0:9b:51:70:bf:f8:5a:17:c3:70:8e:f8:5b:2d: 10:d8:1b:7f:de:a9:df:fe:50:f0:88:b1:51:51:a0: 0b:76:0a:2f:8f:73:c0:82:a0:0a:92:53:08:3c:bf: f7:4f:ac:6e:3d:02:f9:63:82:17:f1:33:c8:5b:31: 19:d8:b5:31:33:18:a3:91:f8:86:50:93:ff:7f:df: 29:b0:4c:a1:49:d8:24:32:80:f2:ac:c9:75:da:28: c1:bb:9d:01:33:41:0b:96:67:4d:c1:db:47:69:d3: e1:bf:00:3e:99:31:d9:48:65:74:85:6f:ed:7f:d4: 58:a9:21:0e:86:ec:01:ef:8b:18:ef:48:d6:d2:95: 4b:91:45:87:41:b7:c1:b7:b9:34:b8:e2:7c:8f:3f: 63:a7:9c:02:d1:78:40:f1:a3:2f:19:a9:71:5b:97: cb:30:97:6d:aa:cf:f4:2a:cf:91:8c:97:fe:13:52: ed:0f:24:82:38:0e:fc:eb:16:dc:0d:0f:79:68:f6: 26:06:10:ce:96:de:48:84:e2:b6:11:cd:66:42:33: 83:04:2c:c4:56:41:9b:9e:97:3b:fa:c1:38:21:b7: f9:02:49:e1:6c:33:ae:be:a7:ef:db:0f:03:9b:ab: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B3:D1:CA:D5:0B:85:9F:65:1F:BA:03:14:E5:85:4E:E2:B9:41:62 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b2:41:49:41:5d:a0:7c:5a:2a:54:10:f9:05:17:90:9b:4b: 1b:e4:bc:6c:18:93:8b:8a:4d:8c:43:1d:32:c4:ce:7d:c1:ac: 58:45:c2:6c:65:cc:22:aa:8d:c8:43:ee:d5:55:68:6a:8f:0c: 08:1b:78:59:db:0f:02:d7:e2:1b:76:b6:0b:23:2f:8f:1d:a1: ed:45:71:33:3e:34:0c:0b:a5:0b:a3:ad:9a:dd:2a:62:33:24: be:2c:33:ca:bf:d5:d7:73:57:7f:a9:15:ec:31:a4:19:94:11: f4:7d:97:28:ec:c0:e6:a6:c0:e8:5f:00:65:8f:fb:30:16:73: ba:f3:42:93:dc:fd:cf:5b:b0:06:c6:e5:c1:e2:91:1c:a8:27: 73:93:5b:bd:41:b9:19:d6:26:ec:32:3f:56:73:e9:e3:ff:48: 29:f5:d8:5a:e7:01:23:de:31:94:23:69:0f:c0:7f:61:0b:5a: 2a:2e:b6:20:05:90:c7:54:81:d0:ac:1e:0e:fb:00:00:4a:a9: c6:72:fd:ab:15:cc:26:73:66:de:70:a8:30:27:74:32:99:44: cd:70:68:a1:ae:5b:e6:ed:f0:7f:e8:d8:52:c5:0c:c9:78:2a: 5c:3a:7d:c3:36:90:59:3d:45:ce:8b:0e:f6:0e:9a:5d:0a:e0: 74:de:3e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOoD95U3dBsxhTtSc+qTHHUDQMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTEyMDIwNDE2MjZaFw0yNTEyMDUwODQ2MjZaMDMxMTAvBgNV BAMTKDYxQjNEMUNBRDUwQjg1OUY2NTFGQkEwMzE0RTU4NTRFRTJCOTQxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCJ3hkVMVLD7+ve7X9SGwm1Fw v/haF8NwjvhbLRDYG3/eqd/+UPCIsVFRoAt2Ci+Pc8CCoAqSUwg8v/dPrG49Avlj ghfxM8hbMRnYtTEzGKOR+IZQk/9/3ymwTKFJ2CQygPKsyXXaKMG7nQEzQQuWZ03B 20dp0+G/AD6ZMdlIZXSFb+1/1FipIQ6G7AHvixjvSNbSlUuRRYdBt8G3uTS44nyP P2OnnALReEDxoy8ZqXFbl8swl22qz/Qqz5GMl/4TUu0PJII4DvzrFtwND3lo9iYG EM6W3kiE4rYRzWZCM4MELMRWQZuelzv6wTght/kCSeFsM66+p+/bDwObqxhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbPRytULhZ9lH7oDFOWFTuK5QWIwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGyQUlBXaB8WipUEPkFF5CbSxvkvGwYk4uK TYxDHTLEzn3BrFhFwmxlzCKqjchD7tVVaGqPDAgbeFnbDwLX4ht2tgsjL48doe1F cTM+NAwLpQujrZrdKmIzJL4sM8q/1ddzV3+pFewxpBmUEfR9lyjswOamwOhfAGWP +zAWc7rzQpPc/c9bsAbG5cHikRyoJ3OTW71BuRnWJuwyP1Zz6eP/SCn12FrnASPe MZQjaQ/Af2ELWioutiAFkMdUgdCsHg77AABKqcZy/asVzCZzZt5wqDAndDKZRM1w aKGuW+bt8H/o2FLFDMl4Klw6fcM2kFk9Rc6LDvYOml0K4HTePjA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:56 2025 by rpki-client