This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: jKV2wv7vu7o7O7KdGxcTGIvCvQ71w84L7WAx6DrKgfg= Subject key identifier: 99:DE:25:FD:68:74:AA:F6:98:C7:07:64:50:CE:C1:52:C3:25:52:9A Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 129F7DE4819413D11CDD6CF8054BE44C4F966D01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0101 Signing time: Tue 16 Dec 2025 15:40:06 +0000 Manifest this update: Tue 16 Dec 2025 15:35:06 +0000 Manifest next update: Sat 20 Dec 2025 02:15:06 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 4: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: FKq5ztkc9euDF1SETeRC5J3ETGZyBfrTXxsYreSvBuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:7d:e4:81:94:13:d1:1c:dd:6c:f8:05:4b:e4:4c:4f:96:6d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Dec 16 15:35:06 2025 GMT Not After : Dec 20 02:15:06 2025 GMT Subject: CN=99DE25FD6874AAF698C7076450CEC152C325529A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:47:c0:36:16:af:a8:cc:44:e9:1f:72:f2: c3:1e:c5:3e:97:bb:4e:88:92:f8:5a:e3:06:c1:40: 6f:25:61:27:b6:cb:fe:aa:1b:22:c3:4e:12:8c:f6: ed:47:c1:e1:d0:b1:c2:c5:33:f4:1f:92:30:a3:ca: d3:c4:c2:02:08:00:dd:ec:52:2f:15:53:f6:5c:2c: 7e:34:e7:71:4f:54:7e:b0:a2:fc:fe:1f:bc:92:9a: 57:c3:6a:1a:a8:f9:e0:90:1d:03:d5:1d:52:c4:62: 19:d3:0f:5d:36:a3:9b:3a:5a:0f:25:f9:3a:de:47: 55:f3:ed:a6:a4:7d:74:f5:ae:64:9b:5e:fc:3e:d3: 79:41:0b:e6:c6:e9:7a:7c:f5:19:06:ac:7c:f8:f3: 85:ae:b3:46:8e:30:4c:0c:9b:30:f1:2b:c1:8f:c7: 8c:da:ec:a4:f5:c0:c7:dd:46:e3:37:89:30:58:59: 44:e8:bc:0c:23:83:95:52:a7:ee:22:6e:9e:10:dc: 5b:ed:df:65:5e:14:9a:65:3b:05:ea:f5:07:29:26: a0:9b:51:57:66:b8:6f:cc:d1:7a:66:33:0c:52:e4: cb:44:14:fd:28:b1:89:11:8a:8a:26:e5:a1:11:98: f8:e6:2a:4a:ab:d6:ee:af:a7:9c:01:1c:61:8b:79: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DE:25:FD:68:74:AA:F6:98:C7:07:64:50:CE:C1:52:C3:25:52:9A X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d2:09:8c:27:bb:a4:88:3e:23:7c:ba:a0:7f:f7:31:6d:18: 80:ec:32:51:b3:a7:d0:7c:23:db:81:07:86:8b:da:d9:d8:c2: 2a:4f:99:ae:59:2a:22:27:34:59:4d:f6:8d:e6:d7:5c:a1:2d: 0c:ed:5d:4f:86:cd:b3:fb:f3:93:53:71:f9:7d:f5:d3:ee:19: 26:64:83:86:e0:63:24:b5:81:b7:cc:37:8b:02:90:5d:2f:9d: 76:12:43:8b:b6:44:d4:0d:6d:76:6b:9a:35:78:d5:d1:c5:f9: 34:b3:ca:6d:6d:84:9d:b4:f8:fa:4b:e8:15:51:4a:23:3c:5c: 24:ff:75:b8:0a:74:66:f9:1c:fe:f6:bb:cb:5d:7d:66:52:a2: 18:15:c6:70:e5:53:2c:0f:53:6d:33:f5:49:4d:a6:f3:59:cf: f7:d3:0c:07:bb:af:f4:fd:e6:41:7c:89:8a:e2:58:3c:37:49: 2f:3f:6d:e5:77:73:2d:80:a9:9f:e2:7e:46:22:5e:58:59:c2: b2:54:fa:f9:9f:20:52:35:55:4e:71:d9:73:68:fd:d3:2d:55: 28:32:18:94:e9:e5:5d:9d:65:73:3a:79:4f:30:cd:6c:1f:7b: c0:be:bc:86:0c:98:ee:d1:27:90:2f:dc:1c:a3:00:7a:d0:d5: 83:9d:a6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp995IGUE9Ec3Wz4BUvkTE+WbQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTEyMTYxNTM1MDZaFw0yNTEyMjAwMjE1MDZaMDMxMTAvBgNV BAMTKDk5REUyNUZENjg3NEFBRjY5OEM3MDc2NDUwQ0VDMTUyQzMyNTUyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNE0fANhavqMxE6R9y8sMexT6X u06Ikvha4wbBQG8lYSe2y/6qGyLDThKM9u1HweHQscLFM/QfkjCjytPEwgIIAN3s Ui8VU/ZcLH4053FPVH6wovz+H7ySmlfDahqo+eCQHQPVHVLEYhnTD102o5s6Wg8l +TreR1Xz7aakfXT1rmSbXvw+03lBC+bG6Xp89RkGrHz484Wus0aOMEwMmzDxK8GP x4za7KT1wMfdRuM3iTBYWUTovAwjg5VSp+4ibp4Q3Fvt32VeFJplOwXq9QcpJqCb UVdmuG/M0XpmMwxS5MtEFP0osYkRioom5aERmPjmKkqr1u6vp5wBHGGLeQI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmd4l/Wh0qvaYxwdkUM7BUsMlUpowHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvSCYwnu6SIPiN8uqB/9zFtGIDsMlGzp9B8 I9uBB4aL2tnYwipPma5ZKiInNFlN9o3m11yhLQztXU+GzbP785NTcfl99dPuGSZk g4bgYyS1gbfMN4sCkF0vnXYSQ4u2RNQNbXZrmjV41dHF+TSzym1thJ20+PpL6BVR SiM8XCT/dbgKdGb5HP72u8tdfWZSohgVxnDlUywPU20z9UlNpvNZz/fTDAe7r/T9 5kF8iYriWDw3SS8/beV3cy2AqZ/ifkYiXlhZwrJU+vmfIFI1VU5x2XNo/dMtVSgy GJTp5V2dZXM6eU8wzWwfe8C+vIYMmO7RJ5Av3ByjAHrQ1YOdpmk= -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:18 2025 by rpki-client