This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: qwmHTb9f5WvpHvB8tRx52lXpnbg/OppLbHlu15FCHLg= Subject key identifier: 7B:18:4C:EF:35:8C:35:DA:8A:93:82:60:5E:6E:C5:14:B6:50:A5:02 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 2AB09A0387902A9380B5F41CC95D9DE5EAFC019B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 01CE Signing time: Tue 02 Dec 2025 05:42:23 +0000 Manifest this update: Tue 02 Dec 2025 05:37:23 +0000 Manifest next update: Fri 05 Dec 2025 17:26:23 +0000 Files and hashes: 1: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: 2paL+Jb4PqqV8C6q71cF1wtay5HoQ9xxUuWLUdkzoLs=) 2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: DU0fCsxoRXxLuGIvLie3IhsmUfNJhRn0zykqF5A0jpc=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: uz+mWVTVia+vitlv373HGRqQqyhynrWuHzLw/EVOgos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b0:9a:03:87:90:2a:93:80:b5:f4:1c:c9:5d:9d:e5:ea:fc:01:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Dec 2 05:37:23 2025 GMT Not After : Dec 5 17:26:23 2025 GMT Subject: CN=7B184CEF358C35DA8A9382605E6EC514B650A502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fe:38:b5:92:1f:82:06:46:40:aa:b2:02:3d: a1:cd:97:8b:49:33:85:6e:74:8c:48:33:ee:87:8b: 1d:97:1e:04:d5:c4:b0:43:4d:62:61:42:b4:33:2b: 50:38:b2:87:80:d4:39:1b:38:b3:d1:3f:03:e4:8a: 60:76:68:51:24:0c:e9:80:55:f9:c0:a8:01:f6:8f: f2:b9:e9:60:3b:2a:78:da:a1:1b:83:9b:0b:c0:3f: 55:bf:e2:96:29:97:78:ec:d9:7c:76:36:9d:c9:be: d7:5d:1f:50:14:3c:e4:ae:19:26:55:8b:8d:d8:3e: af:d3:6c:74:b7:65:ba:49:6e:f0:69:10:c4:b9:c2: 29:d8:27:b0:80:c7:b8:cf:92:31:72:91:a0:0f:f9: b7:da:a5:ca:74:1c:a9:2d:de:25:8e:87:60:ff:f0: 8f:dd:fa:2a:03:3f:67:ea:e6:fa:6c:22:7b:b9:10: 03:3d:8a:80:89:6a:2c:f4:c9:d4:a9:83:15:65:cf: 4a:2f:03:21:6e:55:d5:85:e0:fc:c1:65:49:12:f7: 96:8b:73:88:02:7b:3d:e0:f4:09:34:f5:56:dc:45: ba:d4:36:e4:53:30:d5:a6:50:26:e9:d1:fb:5e:e4: 4a:09:99:59:d2:4d:fe:69:6c:c6:3f:9e:9a:f7:c1: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:18:4C:EF:35:8C:35:DA:8A:93:82:60:5E:6E:C5:14:B6:50:A5:02 X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7d:b1:ff:83:8b:cf:fd:6d:8e:82:3c:e0:78:94:27:9c:f1: 33:33:5c:9f:32:15:d0:ce:c8:55:bc:4b:d4:24:3a:b0:af:06: 06:aa:35:df:e5:39:c9:78:15:37:ed:78:07:c0:d4:3f:07:aa: 28:32:89:4e:ab:95:49:b9:23:6c:7e:f3:ba:bd:22:4a:11:7f: 78:fa:f1:92:40:43:67:f0:8e:0e:fc:3d:fe:79:3e:dd:8e:c5: 96:e9:7e:d7:0e:49:b6:de:b7:f6:f4:53:ba:af:08:b7:47:55: b7:96:e5:26:2d:7a:4f:8f:f9:80:d0:4c:ee:71:59:fe:77:6e: b2:d5:2b:35:c8:ea:f7:ea:d7:ce:4d:ee:41:9c:25:58:ff:a5: 01:a6:e9:56:d6:d2:e6:a4:f2:92:9f:e0:7b:8f:7b:ec:12:e3: 33:f0:71:3d:d6:21:e1:f2:de:c1:17:7a:4c:97:92:6b:98:fb: 8a:ea:be:4f:ed:d6:43:f5:c9:d4:83:7a:76:f1:5f:73:6b:81: 8c:85:77:4f:73:6d:95:93:63:b8:0c:89:d0:58:51:7a:3e:3f: bf:e7:81:06:d5:18:19:19:b5:cd:96:9b:d7:50:e9:b9:4e:e4: ae:b5:54:ef:b7:99:82:bd:10:06:0f:f2:a5:97:1a:73:f6:ea: 6c:c5:33:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrCaA4eQKpOAtfQcyV2d5er8AZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTEyMDIwNTM3MjNaFw0yNTEyMDUxNzI2MjNaMDMxMTAvBgNV BAMTKDdCMTg0Q0VGMzU4QzM1REE4QTkzODI2MDVFNkVDNTE0QjY1MEE1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/ji1kh+CBkZAqrICPaHNl4tJ M4VudIxIM+6Hix2XHgTVxLBDTWJhQrQzK1A4soeA1DkbOLPRPwPkimB2aFEkDOmA VfnAqAH2j/K56WA7KnjaoRuDmwvAP1W/4pYpl3js2Xx2Np3JvtddH1AUPOSuGSZV i43YPq/TbHS3ZbpJbvBpEMS5winYJ7CAx7jPkjFykaAP+bfapcp0HKkt3iWOh2D/ 8I/d+ioDP2fq5vpsInu5EAM9ioCJaiz0ydSpgxVlz0ovAyFuVdWF4PzBZUkS95aL c4gCez3g9Ak09VbcRbrUNuRTMNWmUCbp0fte5EoJmVnSTf5pbMY/npr3wbqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexhM7zWMNdqKk4JgXm7FFLZQpQIwHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR9sf+Di8/9bY6CPOB4lCec8TMzXJ8yFdDO yFW8S9QkOrCvBgaqNd/lOcl4FTfteAfA1D8HqigyiU6rlUm5I2x+87q9IkoRf3j6 8ZJAQ2fwjg78Pf55Pt2OxZbpftcOSbbet/b0U7qvCLdHVbeW5SYtek+P+YDQTO5x Wf53brLVKzXI6vfq185N7kGcJVj/pQGm6VbW0uak8pKf4HuPe+wS4zPwcT3WIeHy 3sEXekyXkmuY+4rqvk/t1kP1ydSDenbxX3NrgYyFd09zbZWTY7gMidBYUXo+P7/n gQbVGBkZtc2Wm9dQ6blO5K61VO+3mYK9EAYP8qWXGnP26mzFMzY= -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:51 2025 by rpki-client