This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: bzlBlsR9rPL0SIqmmvIJm23V4Lt5/O1ZspEU5VCu+W0= Subject key identifier: 37:7B:7B:F6:C0:43:A6:99:8A:84:E5:F6:22:45:F2:F3:14:B8:27:FE Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 084E1F2B390CF058951C27A8E0051141832CCCFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0225 Signing time: Mon 15 Dec 2025 20:10:07 +0000 Manifest this update: Mon 15 Dec 2025 20:05:07 +0000 Manifest next update: Fri 19 Dec 2025 00:33:07 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 2: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 3: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 4: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 5: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: dyMZEU2TLl2kLZhXHgtS59oKG3YriOUwSXbBd4C7sF8=) 6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4e:1f:2b:39:0c:f0:58:95:1c:27:a8:e0:05:11:41:83:2c:cc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Dec 15 20:05:07 2025 GMT Not After : Dec 19 00:33:07 2025 GMT Subject: CN=377B7BF6C043A6998A84E5F62245F2F314B827FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:03:7d:21:79:f3:04:ed:82:aa:d9:61:06: fc:d3:a4:df:b5:75:dc:d0:ee:b4:b8:3e:c9:e4:48: b4:37:56:ee:b8:09:59:b5:45:52:53:da:00:98:db: e2:fc:4d:53:0e:43:8c:64:f5:c1:6a:a4:ee:6b:28: 57:14:d3:42:b8:d7:6b:1f:ef:89:3a:4e:12:e1:83: 65:28:14:51:d4:ee:a4:09:8f:e8:19:82:88:fd:d8: 57:09:a5:48:b4:8e:62:b7:79:1e:e8:68:89:ea:0e: 95:98:f6:82:ef:cf:8a:db:54:53:67:02:27:63:a9: f2:54:77:f9:06:9f:18:6d:99:b2:a5:73:cf:dd:94: 21:b4:69:51:0e:60:e5:49:8b:f5:79:d3:a4:ff:df: 51:26:b1:c4:2c:33:1b:4d:eb:e7:b7:d8:3c:55:da: 59:49:c8:c1:ab:dc:47:18:c5:dd:1f:3f:ce:d9:8a: 2b:04:f0:b7:1c:f3:e3:f6:21:61:46:0a:99:bb:48: 4c:68:76:11:f6:d5:a6:ad:dd:c4:f9:6e:0c:42:10: f2:ad:9a:92:e7:33:0a:79:a1:a7:26:9e:a3:36:89: 33:46:6a:70:c2:3e:fb:86:ae:bc:f9:3a:29:ac:3a: 91:07:42:6f:e1:e6:b0:e8:41:c3:4c:b2:8f:0b:b0: 30:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7B:7B:F6:C0:43:A6:99:8A:84:E5:F6:22:45:F2:F3:14:B8:27:FE X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:15:af:30:b9:5e:8b:ec:f6:5f:f3:1f:8f:c8:08:fc:55:14: fa:d4:95:93:40:c4:b9:b0:b6:41:3a:e4:9b:06:4b:66:8d:16: 1e:f4:b6:bc:41:df:a6:7b:b1:99:2a:13:f8:f3:c1:70:24:d9: c6:c0:dd:ef:e8:40:6d:78:02:dd:ee:69:66:8f:eb:91:6b:62: 93:db:24:47:26:0d:2c:28:41:0b:76:20:c4:c4:a3:12:65:5f: cc:4f:d0:37:f5:6d:3c:ad:fc:87:c5:df:4c:a4:56:fd:a3:2b: 95:38:88:84:6b:93:e3:de:c6:48:63:ec:75:b5:d9:c0:92:58: 94:8a:46:cd:ec:02:36:64:36:17:65:11:ac:93:4a:37:e8:e0: df:70:aa:0b:36:dc:1c:e6:70:0b:44:de:2c:86:b6:a6:a5:f8: ec:ef:53:86:77:e4:e2:2b:c8:04:de:e5:d2:b7:7d:8c:ad:69: d1:f7:c5:7b:de:25:a0:e6:5d:c4:a5:17:ff:17:bc:42:29:44: a8:79:ad:3d:93:42:51:f1:37:0b:35:44:9b:93:01:33:d7:e2: ee:2a:85:60:9d:e3:11:34:f1:20:6a:c8:30:92:84:03:d2:38: f6:69:17:40:02:73:33:76:2e:c6:2a:89:2e:54:7d:b2:0a:66: 22:6b:07:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCE4fKzkM8FiVHCeo4AURQYMszP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTEyMTUyMDA1MDdaFw0yNTEyMTkwMDMzMDdaMDMxMTAvBgNV BAMTKDM3N0I3QkY2QzA0M0E2OTk4QTg0RTVGNjIyNDVGMkYzMTRCODI3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZgN9IXnzBO2CqtlhBvzTpN+1 ddzQ7rS4PsnkSLQ3Vu64CVm1RVJT2gCY2+L8TVMOQ4xk9cFqpO5rKFcU00K412sf 74k6ThLhg2UoFFHU7qQJj+gZgoj92FcJpUi0jmK3eR7oaInqDpWY9oLvz4rbVFNn AidjqfJUd/kGnxhtmbKlc8/dlCG0aVEOYOVJi/V506T/31EmscQsMxtN6+e32DxV 2llJyMGr3EcYxd0fP87ZiisE8Lcc8+P2IWFGCpm7SExodhH21aat3cT5bgxCEPKt mpLnMwp5oacmnqM2iTNGanDCPvuGrrz5OimsOpEHQm/h5rDoQcNMso8LsDCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3t79sBDppmKhOX2IkXy8xS4J/4wHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4VrzC5Xovs9l/zH4/ICPxVFPrUlZNAxLmw tkE65JsGS2aNFh70trxB36Z7sZkqE/jzwXAk2cbA3e/oQG14At3uaWaP65FrYpPb JEcmDSwoQQt2IMTEoxJlX8xP0Df1bTyt/IfF30ykVv2jK5U4iIRrk+Pexkhj7HW1 2cCSWJSKRs3sAjZkNhdlEayTSjfo4N9wqgs23BzmcAtE3iyGtqal+OzvU4Z35OIr yATe5dK3fYytadH3xXveJaDmXcSlF/8XvEIpRKh5rT2TQlHxNws1RJuTATPX4u4q hWCd4xE08SBqyDCShAPSOPZpF0ACczN2LsYqiS5UfbIKZiJrB9o= -----END CERTIFICATE-----Generated at Wed Dec 17 04:14:31 2025 by rpki-client