This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: QfoOxWAz27YcEWg99n/EOOCP79atUd/krFLv9LU4wVI= Subject key identifier: 4A:C0:A2:7B:2F:6F:2F:7D:F8:D9:59:C5:36:6B:A4:E8:B2:CF:28:06 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 5F36654F5C0F7A8088B6DECFDB403B2F33C25E58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 0214 Signing time: Tue 02 Dec 2025 23:41:52 +0000 Manifest this update: Tue 02 Dec 2025 23:36:52 +0000 Manifest next update: Sat 06 Dec 2025 00:36:52 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 3: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: JHKlD+IOwTaBKbz/BPypYaRpQ4Bb0r5CmXIANZc/zGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:65:4f:5c:0f:7a:80:88:b6:de:cf:db:40:3b:2f:33:c2:5e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Dec 2 23:36:52 2025 GMT Not After : Dec 6 00:36:52 2025 GMT Subject: CN=4AC0A27B2F6F2F7DF8D959C5366BA4E8B2CF2806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:bb:e7:e9:f2:2c:2c:21:5c:d8:69:34:e3: c1:8b:79:2e:a2:b1:ca:5d:31:ce:25:90:f4:fa:f8: 37:93:39:a5:34:0f:3d:0b:1b:ff:83:a3:fa:1a:90: ad:dd:ad:5d:d0:c3:23:a2:a3:21:cc:e7:1a:cf:76: a4:63:c4:25:90:74:90:6c:0e:14:f4:43:e3:11:76: 93:2d:ce:74:38:84:b5:08:f6:2c:a4:ce:f6:d8:79: 7e:3d:83:17:c0:aa:89:c8:ef:0b:8d:bd:2e:09:31: 3f:18:8b:4d:0c:7a:a5:e0:f6:6d:a2:3d:ac:e1:71: 0b:5b:c1:95:63:50:7b:5b:f4:b1:d8:4f:f5:34:23: b3:9f:21:bd:9d:70:bb:2b:01:b2:b2:b9:3c:73:bc: b1:ce:42:d8:3f:7a:1d:aa:76:07:33:02:f1:4e:d6: 87:8a:4a:07:92:9d:a1:15:66:de:2d:c8:c3:87:be: 8b:b6:61:31:2f:79:42:57:33:04:37:14:b0:4e:78: e0:26:d1:7a:c8:a2:94:61:b6:76:dd:a7:fd:69:9a: c2:b0:2d:1a:f5:24:a7:b8:96:c1:eb:ce:f9:63:d9: 22:47:2e:63:fa:28:e2:91:9a:8f:ad:d6:4c:9c:7b: 75:b2:90:09:ae:d5:09:e5:5c:39:bf:5a:82:3a:44: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:A2:7B:2F:6F:2F:7D:F8:D9:59:C5:36:6B:A4:E8:B2:CF:28:06 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:b5:96:83:04:4a:97:9d:15:e5:be:2e:7a:d4:2f:03:08: 24:06:0e:91:a9:34:28:bf:e2:a4:e8:18:4c:fd:a3:3a:80:60: 7a:31:b1:2d:bc:34:00:e5:e9:36:82:4b:2a:e3:3c:37:b3:44: e5:ee:b5:d3:43:63:bb:0d:16:f1:c7:12:6f:59:c0:19:e5:81: b3:54:b7:c4:eb:6b:dd:3b:c5:04:14:11:ed:48:33:3e:b5:77: 22:62:32:f3:b0:c3:e2:d4:6b:63:c3:3c:d9:b9:ca:39:31:a0: e5:f6:7c:6a:4f:57:15:bc:57:3e:95:58:97:96:3a:da:7a:18: 4a:8f:bc:06:85:43:7a:29:3c:f4:32:be:8f:db:31:0e:25:ad: 57:1f:3c:be:db:65:37:bc:aa:63:b2:3d:81:6a:5e:23:09:13: 75:26:e4:c2:75:67:cc:b1:64:20:84:ea:93:d4:bf:9d:af:c1: 9b:1f:d8:26:53:48:3d:96:5e:76:4c:1f:7d:f2:99:e0:7f:ed: 69:c8:1f:db:66:c7:0d:20:3d:5d:41:10:ba:49:c9:3f:1a:23: c2:fa:aa:1d:29:b0:5c:bd:51:30:57:8b:f2:4e:78:ab:17:6c: 25:45:29:29:18:eb:fc:66:97:63:1b:d9:c0:63:0e:79:2d:fb: 16:b0:03:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzZlT1wPeoCItt7P20A7LzPCXlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTEyMDIyMzM2NTJaFw0yNTEyMDYwMDM2NTJaMDMxMTAvBgNV BAMTKDRBQzBBMjdCMkY2RjJGN0RGOEQ5NTlDNTM2NkJBNEU4QjJDRjI4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiLvn6fIsLCFc2Gk048GLeS6i scpdMc4lkPT6+DeTOaU0Dz0LG/+Do/oakK3drV3QwyOioyHM5xrPdqRjxCWQdJBs DhT0Q+MRdpMtznQ4hLUI9iykzvbYeX49gxfAqonI7wuNvS4JMT8Yi00MeqXg9m2i PazhcQtbwZVjUHtb9LHYT/U0I7OfIb2dcLsrAbKyuTxzvLHOQtg/eh2qdgczAvFO 1oeKSgeSnaEVZt4tyMOHvou2YTEveUJXMwQ3FLBOeOAm0XrIopRhtnbdp/1pmsKw LRr1JKe4lsHrzvlj2SJHLmP6KOKRmo+t1kyce3WykAmu1QnlXDm/WoI6REZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsCiey9vL3342VnFNmuk6LLPKAYwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsHtZaDBEqXnRXlvi561C8DCCQGDpGpNCi/ 4qToGEz9ozqAYHoxsS28NADl6TaCSyrjPDezROXutdNDY7sNFvHHEm9ZwBnlgbNU t8Tra907xQQUEe1IMz61dyJiMvOww+LUa2PDPNm5yjkxoOX2fGpPVxW8Vz6VWJeW Otp6GEqPvAaFQ3opPPQyvo/bMQ4lrVcfPL7bZTe8qmOyPYFqXiMJE3Um5MJ1Z8yx ZCCE6pPUv52vwZsf2CZTSD2WXnZMH33ymeB/7WnIH9tmxw0gPV1BELpJyT8aI8L6 qh0psFy9UTBXi/JOeKsXbCVFKSkY6/xml2Mb2cBjDnkt+xawAyY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:51 2025 by rpki-client