This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: n25W5QFNMBY+DLLHSFhOOYz5Yeg1iTaBMNGUVXwjC2Q= Subject key identifier: F7:88:81:BB:85:72:AD:39:0D:E6:1B:D3:BF:23:D4:49:A4:46:2F:9C Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 2CB22F81D532DEA78D36044AF9A639754B16A867 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 024D Signing time: Mon 01 Dec 2025 21:51:44 +0000 Manifest this update: Mon 01 Dec 2025 21:46:44 +0000 Manifest next update: Fri 05 Dec 2025 09:27:44 +0000 Files and hashes: 1: C70A343932991281F91796DB87B011987603BBF4.crl (hash: naMtfxoDJOSg1g8Aoi23kH6AFzYffs/hL/Y6rQ9DS2A=) 2: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 3: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) 4: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b2:2f:81:d5:32:de:a7:8d:36:04:4a:f9:a6:39:75:4b:16:a8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Dec 1 21:46:44 2025 GMT Not After : Dec 5 09:27:44 2025 GMT Subject: CN=F78881BB8572AD390DE61BD3BF23D449A4462F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:7b:25:db:7a:0d:9d:45:f1:bc:da:65:b1: ee:3e:01:e7:31:93:48:ad:a1:c0:fd:1b:5c:6e:5f: ba:34:7a:8f:3c:78:10:61:b2:c3:8e:c8:29:31:cd: d6:21:8f:4a:93:01:dd:78:19:bd:47:0f:68:96:e9: 66:55:ea:12:c7:84:1f:c0:a1:26:5c:75:1f:28:c8: 21:5d:18:6c:cf:e3:2f:58:12:7b:c4:3d:ae:9b:23: 1a:60:fa:60:61:99:a3:ed:f5:53:ca:56:ea:3f:36: da:45:07:6c:00:75:28:83:bd:ba:7f:86:78:bd:0c: 1c:6c:6f:c9:a7:bc:53:1a:96:dd:16:e6:ec:fe:f5: af:fc:0d:02:4f:76:5f:93:8d:6b:3e:57:0e:e6:d2: e1:93:e5:29:82:70:cd:aa:22:72:59:b5:f4:8a:f4: 03:06:87:fc:b6:80:e0:2b:95:2f:e7:4d:54:ce:d3: 19:d9:af:df:09:a6:24:e4:69:82:94:d8:bc:3c:a5: dc:3a:a6:3d:78:f6:bf:b7:0d:4a:bf:eb:46:1b:b1: 3c:20:61:63:fa:95:c9:4b:88:17:82:8f:34:5b:da: f3:ae:ba:18:f0:a9:e9:8a:a9:c9:f5:d1:cf:fb:e6: 44:9e:0d:3c:e8:7c:3f:9e:e7:c6:a0:8c:16:79:65: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:81:BB:85:72:AD:39:0D:E6:1B:D3:BF:23:D4:49:A4:46:2F:9C X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e2:b6:ab:80:8e:99:b9:84:31:76:93:d0:ee:44:c9:f3:6f: f7:f4:65:96:c1:f2:75:5c:9c:b9:bb:83:2c:47:2f:91:7d:2c: 95:ba:90:6a:8c:15:25:ef:8b:d4:b8:24:ed:a0:f8:fd:d3:12: 75:37:cb:a8:25:40:6f:47:82:41:2a:cf:f7:dd:dc:7f:5f:de: b7:bf:ff:78:21:ea:c3:e7:6c:9d:61:40:af:a9:db:04:88:9e: b7:6b:12:ae:bb:2b:88:50:d1:ab:e4:e8:2b:99:b0:3e:6a:26: 62:0b:80:e8:eb:5b:2f:d1:52:a1:7c:97:c9:54:ac:2f:32:06: a6:27:fe:cf:99:e0:1e:a5:a7:70:bd:13:b4:24:d6:3f:3a:73: 25:d4:8a:fe:d0:59:fe:32:95:cb:20:e8:fb:d2:63:f0:ab:17: 42:8a:49:1d:47:f3:00:23:d2:a6:eb:1d:a8:45:d9:75:97:6e: 17:5c:7e:89:ee:06:42:5c:b2:88:e7:f5:a9:19:b0:6f:b7:15: 60:93:ab:a2:50:84:9b:2b:5d:fa:9c:11:56:3c:cc:c8:41:cf: ff:3e:2d:01:cc:b5:24:2c:8c:7e:a2:1d:b9:39:2c:32:41:90: b7:8a:0f:f5:a2:f4:39:1d:35:bd:08:17:c4:82:52:4a:22:fc: 27:40:6e:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLIvgdUy3qeNNgRK+aY5dUsWqGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTEyMDEyMTQ2NDRaFw0yNTEyMDUwOTI3NDRaMDMxMTAvBgNV BAMTKEY3ODg4MUJCODU3MkFEMzkwREU2MUJEM0JGMjNENDQ5QTQ0NjJGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChP3sl23oNnUXxvNplse4+Aecx k0itocD9G1xuX7o0eo88eBBhssOOyCkxzdYhj0qTAd14Gb1HD2iW6WZV6hLHhB/A oSZcdR8oyCFdGGzP4y9YEnvEPa6bIxpg+mBhmaPt9VPKVuo/NtpFB2wAdSiDvbp/ hni9DBxsb8mnvFMalt0W5uz+9a/8DQJPdl+TjWs+Vw7m0uGT5SmCcM2qInJZtfSK 9AMGh/y2gOArlS/nTVTO0xnZr98JpiTkaYKU2Lw8pdw6pj149r+3DUq/60YbsTwg YWP6lclLiBeCjzRb2vOuuhjwqemKqcn10c/75kSeDTzofD+e58agjBZ5ZbeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94iBu4VyrTkN5hvTvyPUSaRGL5wwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPitquAjpm5hDF2k9DuRMnzb/f0ZZbB8nVc nLm7gyxHL5F9LJW6kGqMFSXvi9S4JO2g+P3TEnU3y6glQG9HgkEqz/fd3H9f3re/ /3gh6sPnbJ1hQK+p2wSInrdrEq67K4hQ0avk6CuZsD5qJmILgOjrWy/RUqF8l8lU rC8yBqYn/s+Z4B6lp3C9E7Qk1j86cyXUiv7QWf4ylcsg6PvSY/CrF0KKSR1H8wAj 0qbrHahF2XWXbhdcfonuBkJcsojn9akZsG+3FWCTq6JQhJsrXfqcEVY8zMhBz/8+ LQHMtSQsjH6iHbk5LDJBkLeKD/Wi9DkdNb0IF8SCUkoi/CdAbnI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:26 2025 by rpki-client