This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: 7AibrcljsoUw/RqkmcyTSXf83I4gQUIh5DJlMkkMyQA= Subject key identifier: 38:C1:75:C7:EF:A6:59:12:E0:54:C3:61:27:CF:D1:CE:35:78:3D:01 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 792DDD20EE8ED8CC9D7FFD791F0DFBA00932EE4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: B0 Signing time: Wed 03 Dec 2025 05:01:08 +0000 Manifest this update: Wed 03 Dec 2025 04:56:08 +0000 Manifest next update: Sat 06 Dec 2025 06:55:08 +0000 Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 2: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: d5nLXCM2HLoG0QXmQG/mRkbrnQKd7M9qylSASMKSXDM=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2d:dd:20:ee:8e:d8:cc:9d:7f:fd:79:1f:0d:fb:a0:09:32:ee:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Dec 3 04:56:08 2025 GMT Not After : Dec 6 06:55:08 2025 GMT Subject: CN=38C175C7EFA65912E054C36127CFD1CE35783D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:55:f7:f1:ad:8d:7d:cf:0d:d8:ca:65:0e: ff:9f:b0:0d:a3:4f:22:12:a3:2b:f9:36:87:af:0e: a7:40:2e:e7:0d:3a:6a:ce:75:c8:f2:f4:c3:0f:64: 2d:4e:8d:fb:13:af:5d:49:72:3c:8c:50:9e:a3:b5: 90:6c:b8:09:42:39:19:a6:36:08:61:22:61:57:30: 17:4c:b0:87:8e:d9:06:4f:b9:85:b4:61:c7:0e:76: 28:b8:ff:ce:ad:05:4f:9e:30:04:32:da:2c:fb:95: b8:45:b9:3c:d8:ca:42:3c:b7:65:1d:9d:7c:cc:9d: cd:06:bd:6a:59:fd:99:8e:6a:c8:77:18:66:8d:9b: 85:f2:f3:a3:33:ad:c9:80:c1:8b:2a:a9:43:4a:88: 7e:4f:1e:82:fc:ae:de:71:7a:dc:c4:f5:02:1b:46: 3d:93:66:08:f8:64:04:97:df:96:c4:73:ab:ca:cc: 34:5c:8d:ed:e5:b8:c5:54:8a:04:43:3e:86:e1:5d: 0f:70:36:69:b2:89:8d:b5:1b:ee:32:13:38:df:a6: ac:74:24:b4:c7:96:e4:4f:00:92:aa:f1:dd:a6:a2: 90:b1:46:d9:83:26:81:fc:d1:d4:c2:7a:3e:a8:cf: 9f:08:c6:99:a2:bd:83:ca:15:fb:3d:46:69:a0:8e: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C1:75:C7:EF:A6:59:12:E0:54:C3:61:27:CF:D1:CE:35:78:3D:01 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:28:85:0d:71:af:d2:c5:ee:37:cd:6f:ff:c6:e3:46:ec: 97:69:86:d4:9d:28:d2:8a:e8:28:03:1f:65:83:9c:b8:bf:d0: 81:08:4c:af:b7:6d:8c:08:84:6a:48:0d:b2:e2:81:06:da:68: ab:37:b9:e6:f6:8a:34:44:6f:e0:b9:41:dd:e6:63:f7:fa:5c: 2d:af:58:7c:66:c4:11:07:59:05:a8:be:4c:01:34:48:e7:0b: cc:1f:b2:c0:d7:66:56:05:4d:e5:d6:2c:03:5d:ba:8f:b6:23: 05:93:7d:d6:ca:dc:13:65:d4:d5:f6:e3:53:c1:b1:37:a7:01: cd:ff:6a:ed:cd:5f:b6:18:81:0c:90:6e:1a:f3:a9:5e:04:95: 76:1a:dd:07:ee:31:0b:12:e2:22:f8:04:3c:58:89:9f:76:72: 10:87:f5:e2:fb:23:a4:f8:97:b3:3c:e1:35:0f:48:11:ce:5e: 93:17:57:1e:87:c6:9f:01:e3:94:a0:c9:5a:fa:44:9c:31:d0: ba:cd:25:d6:88:3e:5b:b8:c6:f3:2a:c6:65:aa:ba:1b:47:b1: 79:8c:a4:48:c8:f0:58:1d:e7:b5:8b:24:99:f7:53:f7:c4:ce: 83:d7:22:27:54:0b:07:19:35:f6:c3:11:88:db:0e:6c:42:f0: 36:88:ee:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeS3dIO6O2Mydf/15Hw37oAky7kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTEyMDMwNDU2MDhaFw0yNTEyMDYwNjU1MDhaMDMxMTAvBgNV BAMTKDM4QzE3NUM3RUZBNjU5MTJFMDU0QzM2MTI3Q0ZEMUNFMzU3ODNEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhVX38a2Nfc8N2MplDv+fsA2j TyISoyv5NoevDqdALucNOmrOdcjy9MMPZC1OjfsTr11JcjyMUJ6jtZBsuAlCORmm NghhImFXMBdMsIeO2QZPuYW0YccOdii4/86tBU+eMAQy2iz7lbhFuTzYykI8t2Ud nXzMnc0GvWpZ/ZmOash3GGaNm4Xy86MzrcmAwYsqqUNKiH5PHoL8rt5xetzE9QIb Rj2TZgj4ZASX35bEc6vKzDRcje3luMVUigRDPobhXQ9wNmmyiY21G+4yEzjfpqx0 JLTHluRPAJKq8d2mopCxRtmDJoH80dTCej6oz58IxpmivYPKFfs9RmmgjhIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOMF1x++mWRLgVMNhJ8/RzjV4PQEwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG4KIUNca/Sxe43zW//xuNG7JdphtSdKNKK 6CgDH2WDnLi/0IEITK+3bYwIhGpIDbLigQbaaKs3ueb2ijREb+C5Qd3mY/f6XC2v WHxmxBEHWQWovkwBNEjnC8wfssDXZlYFTeXWLANduo+2IwWTfdbK3BNl1NX241PB sTenAc3/au3NX7YYgQyQbhrzqV4ElXYa3QfuMQsS4iL4BDxYiZ92chCH9eL7I6T4 l7M84TUPSBHOXpMXVx6Hxp8B45SgyVr6RJwx0LrNJdaIPlu4xvMqxmWquhtHsXmM pEjI8Fgd57WLJJn3U/fEzoPXIidUCwcZNfbDEYjbDmxC8DaI7tE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:01 2025 by rpki-client