This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: RkrRtNcm+/0gOevil1E3hB6VNudFTXZItN2G8mofVvY= Subject key identifier: C2:93:15:00:60:61:4F:9D:53:EF:2F:7C:88:2E:54:C5:0C:1B:00:65 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 37DBD1E4025F40C27526A2B9AAAECF30B37F2669 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 028E Signing time: Sun 14 Dec 2025 10:01:51 +0000 Manifest this update: Sun 14 Dec 2025 09:56:51 +0000 Manifest next update: Wed 17 Dec 2025 18:01:51 +0000 Files and hashes: 1: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: W5k9mhO/VgcmcLKTfuijE/Uy2wmiLDuC7Esnr8LtnQc=) 2: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Ov8NRVnVqFMBFhQjGCU710LWI7k2FUziabpa7227XyA=) 3: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: +ZStO4qmRvdLYRUifxrnZ6iCCxDWhq1QC8uZT5sFhJk=) 4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: mFq2b38/RUkUkCh1MVybkTba/DYg5kwfb6uDHIQj6Gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:db:d1:e4:02:5f:40:c2:75:26:a2:b9:aa:ae:cf:30:b3:7f:26:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Dec 14 09:56:51 2025 GMT Not After : Dec 17 18:01:51 2025 GMT Subject: CN=C293150060614F9D53EF2F7C882E54C50C1B0065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:93:92:77:19:ee:45:8f:60:7f:52:7c:61: fc:43:00:df:42:bf:6f:58:78:c8:02:93:cc:27:5e: 81:28:9a:21:2f:c8:93:0f:f8:bb:55:ad:85:43:27: 8f:96:25:98:e2:7c:b7:a4:e0:6e:0d:a9:36:63:12: 53:c1:34:99:6c:db:2a:f5:40:9d:6a:58:66:70:63: 34:cc:92:50:e7:3b:b3:2a:a7:ae:a6:72:77:93:73: bb:37:88:e8:83:97:47:9e:5f:fc:e1:40:6a:f4:78: 72:01:9c:c1:b7:2e:b4:71:20:ea:dc:f2:2e:fc:e7: 9f:60:72:7c:66:7f:f0:c2:22:b4:91:83:fd:b3:d8: dc:36:a4:15:e5:d5:0f:ff:f6:f3:70:b1:4f:79:c0: a4:7e:37:55:ad:80:59:4e:f7:02:1e:9d:2e:7f:a2: d6:e5:ae:f8:b9:16:f6:40:93:e0:73:d6:16:60:43: 30:ec:9e:d3:d1:fc:33:f8:f0:73:cc:43:de:77:a8: ad:43:27:18:97:a8:17:f5:82:ff:ef:e0:2b:2e:de: b2:fc:f9:a6:3c:45:00:56:d8:e4:5f:cd:cc:69:38: 7e:b9:5d:3a:6c:00:d4:f2:31:a1:9e:28:e9:bc:76: 1a:3d:53:38:39:d1:61:62:25:a3:61:df:16:5e:96: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:15:00:60:61:4F:9D:53:EF:2F:7C:88:2E:54:C5:0C:1B:00:65 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:58:f3:94:be:6e:eb:da:78:b3:af:1f:f2:74:0b:11:1a:30: 7f:ee:17:da:bc:39:d8:a5:6e:aa:7e:a7:7f:ae:36:0b:9e:05: 94:e8:13:2b:f1:89:8f:44:d5:65:70:42:13:30:90:65:0b:77: 4f:e1:af:81:fe:21:51:f6:3b:08:fb:13:0a:ec:12:5d:4e:55: 58:2f:bd:b6:5b:22:07:e3:a7:fa:13:dc:03:8d:9d:99:72:d3: 56:27:e6:ab:c2:3a:e6:9c:cf:e8:87:e7:b3:d6:05:45:83:a9: c5:09:14:54:02:3a:63:06:a5:44:da:cc:1f:85:89:7f:6c:c5: a5:a3:e4:5a:41:d1:15:ab:e9:6b:30:db:67:08:ed:14:1a:9e: 2f:71:db:a0:47:fa:e4:23:cd:2b:46:71:9a:a0:90:3a:90:04: 37:8d:80:fc:26:47:71:2d:19:9f:ee:25:8d:35:a6:23:a0:d2: 99:3e:f2:11:ac:eb:18:13:24:8b:59:a5:6a:89:72:64:a4:52: 44:63:84:b1:c5:5a:d1:8a:b4:0c:64:43:cd:87:1d:c8:57:44: 10:22:d9:b1:d6:82:1f:c6:9b:ef:fd:05:09:0a:ff:f7:22:9b: 8f:24:ec:d6:8c:5c:3c:28:1c:40:f8:be:ef:c3:82:6c:ee:ee: c1:02:ea:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9vR5AJfQMJ1JqK5qq7PMLN/JmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTEyMTQwOTU2NTFaFw0yNTEyMTcxODAxNTFaMDMxMTAvBgNV BAMTKEMyOTMxNTAwNjA2MTRGOUQ1M0VGMkY3Qzg4MkU1NEM1MEMxQjAwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDexZOSdxnuRY9gf1J8YfxDAN9C v29YeMgCk8wnXoEomiEvyJMP+LtVrYVDJ4+WJZjifLek4G4NqTZjElPBNJls2yr1 QJ1qWGZwYzTMklDnO7Mqp66mcneTc7s3iOiDl0eeX/zhQGr0eHIBnMG3LrRxIOrc 8i78559gcnxmf/DCIrSRg/2z2Nw2pBXl1Q//9vNwsU95wKR+N1WtgFlO9wIenS5/ otblrvi5FvZAk+Bz1hZgQzDsntPR/DP48HPMQ953qK1DJxiXqBf1gv/v4Csu3rL8 +aY8RQBW2ORfzcxpOH65XTpsANTyMaGeKOm8dho9Uzg50WFiJaNh3xZellDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwpMVAGBhT51T7y98iC5UxQwbAGUwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhY85S+buvaeLOvH/J0CxEaMH/uF9q8Odil bqp+p3+uNgueBZToEyvxiY9E1WVwQhMwkGULd0/hr4H+IVH2Owj7EwrsEl1OVVgv vbZbIgfjp/oT3AONnZly01Yn5qvCOuacz+iH57PWBUWDqcUJFFQCOmMGpUTazB+F iX9sxaWj5FpB0RWr6Wsw22cI7RQani9x26BH+uQjzStGcZqgkDqQBDeNgPwmR3Et GZ/uJY01piOg0pk+8hGs6xgTJItZpWqJcmSkUkRjhLHFWtGKtAxkQ82HHchXRBAi 2bHWgh/Gm+/9BQkK//cim48k7NaMXDwoHED4vu/Dgmzu7sEC6g0= -----END CERTIFICATE-----Generated at Mon Dec 15 21:55:22 2025 by rpki-client