This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: AHzZIscsyfAPd7Af/eTGIjaaBF3ptDAJp6GzG59ngr4= Subject key identifier: 0B:48:A2:0F:A5:50:A0:C6:F6:8F:F7:27:53:63:9E:E2:E1:D7:E5:BB Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 369DDB44537625D5740CAEC7F9652F48E1C14391 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 038D Signing time: Tue 02 Dec 2025 13:40:05 +0000 Manifest this update: Tue 02 Dec 2025 13:35:05 +0000 Manifest next update: Fri 05 Dec 2025 19:21:05 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: ec/jj+cK6L2gg9LH5LQ0SNAdQDAtQ/1jH8rBbNbW+XY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9d:db:44:53:76:25:d5:74:0c:ae:c7:f9:65:2f:48:e1:c1:43:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Dec 2 13:35:05 2025 GMT Not After : Dec 5 19:21:05 2025 GMT Subject: CN=0B48A20FA550A0C6F68FF72753639EE2E1D7E5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:98:fa:21:85:2b:96:a1:23:c9:b2:aa:b8: d9:c3:1e:a4:d0:27:0f:e0:65:ed:28:52:b0:7f:b6: 35:66:1d:99:e0:0c:6f:58:cb:31:1e:5b:d7:8f:bc: b4:04:fe:54:29:25:11:af:08:60:b3:32:99:3f:ca: 6d:56:cf:d5:ff:7f:91:8e:d1:bf:4d:4d:1b:88:30: 41:9b:a5:3d:65:bd:56:13:59:99:64:9b:f5:54:b0: bd:fd:d1:ef:84:b1:02:13:ee:4a:90:49:e9:da:8e: 2d:57:f2:75:6f:3d:7e:3f:94:78:88:42:76:a6:e7: 46:32:32:84:88:a3:36:45:6e:19:ff:72:4c:22:76: 63:d8:de:72:49:e9:ab:a8:74:80:05:55:7d:3f:2e: d6:61:4f:31:5a:0a:65:c0:a3:71:5c:a9:23:45:f5: cf:50:03:2a:05:5a:f5:5b:72:64:37:45:ea:bb:88: de:5e:2d:da:24:5b:6c:cd:06:df:61:d8:af:0d:ca: df:34:b4:94:15:8c:54:bd:11:19:1b:00:18:97:6a: fc:d6:05:5b:4b:9d:76:46:67:eb:a1:e2:d0:d8:68: 0c:9b:0f:73:68:1b:f9:15:18:51:c9:a4:78:ab:19: d2:d8:35:e0:c7:96:2a:3d:3c:86:95:c6:47:72:7a: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:48:A2:0F:A5:50:A0:C6:F6:8F:F7:27:53:63:9E:E2:E1:D7:E5:BB X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a5:56:41:21:47:95:7e:6f:45:bc:41:2b:5c:b7:76:7d:eb: 51:85:6c:10:6b:ad:32:b1:40:b8:42:a7:5a:bd:0a:d1:2c:43: 32:6b:da:a3:fd:fa:03:4e:f8:74:5a:5b:f8:d5:5e:66:9d:53: 21:92:57:67:53:80:79:f4:ba:35:9a:fa:9d:9f:57:32:e4:d5: 1d:37:0b:26:18:16:7a:6a:d9:0e:ec:82:66:e3:94:66:8e:02: ff:8d:07:23:0a:17:73:4b:d8:ac:42:57:88:57:e5:bd:8f:9b: 8e:91:3e:a6:0e:16:a6:a2:ac:77:d4:67:f0:a1:c6:38:90:8d: 90:40:ca:d0:6a:2a:f0:ed:64:c0:0c:92:e1:1e:30:4a:32:a4: b1:23:3c:a1:02:12:3a:25:a1:97:1f:a7:1e:34:59:d6:b7:42: 2d:01:1d:95:89:d9:bf:20:f9:c0:65:b6:ee:54:74:1b:34:5c: 88:71:3d:ef:71:33:dd:18:7f:2c:95:fd:99:00:7a:64:f0:7a: 73:c5:86:3d:a7:82:94:f7:6a:27:82:bf:ba:ca:3f:9c:60:29: 6c:35:86:a2:ac:27:33:28:12:e7:9c:f1:3f:f4:c0:03:3b:8c: ec:e3:a8:de:5a:91:af:03:cb:1a:c7:f0:48:88:de:73:fa:da: b6:5f:7f:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNp3bRFN2JdV0DK7H+WUvSOHBQ5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTEyMDIxMzM1MDVaFw0yNTEyMDUxOTIxMDVaMDMxMTAvBgNV BAMTKDBCNDhBMjBGQTU1MEEwQzZGNjhGRjcyNzUzNjM5RUUyRTFEN0U1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QJj6IYUrlqEjybKquNnDHqTQ Jw/gZe0oUrB/tjVmHZngDG9YyzEeW9ePvLQE/lQpJRGvCGCzMpk/ym1Wz9X/f5GO 0b9NTRuIMEGbpT1lvVYTWZlkm/VUsL390e+EsQIT7kqQSenaji1X8nVvPX4/lHiI Qnam50YyMoSIozZFbhn/ckwidmPY3nJJ6auodIAFVX0/LtZhTzFaCmXAo3FcqSNF 9c9QAyoFWvVbcmQ3Req7iN5eLdokW2zNBt9h2K8Nyt80tJQVjFS9ERkbABiXavzW BVtLnXZGZ+uh4tDYaAybD3NoG/kVGFHJpHirGdLYNeDHlio9PIaVxkdyepq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0iiD6VQoMb2j/cnU2Oe4uHX5bswHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOlVkEhR5V+b0W8QStct3Z961GFbBBrrTKx QLhCp1q9CtEsQzJr2qP9+gNO+HRaW/jVXmadUyGSV2dTgHn0ujWa+p2fVzLk1R03 CyYYFnpq2Q7sgmbjlGaOAv+NByMKF3NL2KxCV4hX5b2Pm46RPqYOFqairHfUZ/Ch xjiQjZBAytBqKvDtZMAMkuEeMEoypLEjPKECEjoloZcfpx40Wda3Qi0BHZWJ2b8g +cBltu5UdBs0XIhxPe9xM90YfyyV/ZkAemTwenPFhj2ngpT3aieCv7rKP5xgKWw1 hqKsJzMoEuec8T/0wAM7jOzjqN5aka8DyxrH8EiI3nP62rZffzU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:06 2025 by rpki-client