This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: bVN58kMpfjLtpu6C5jdHgtInbGT+DY2DMyiFs6dYoc8= Subject key identifier: D5:64:BE:9D:12:97:AC:A6:81:A7:58:52:C3:57:A0:ED:73:39:3E:E8 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 052307F6BE835E15124AB3EAC3DFB8A267D3705E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 03AF Signing time: Wed 10 Dec 2025 01:41:37 +0000 Manifest this update: Wed 10 Dec 2025 01:36:37 +0000 Manifest next update: Sat 13 Dec 2025 05:38:37 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: /wpFKmgtSbsy+ISdNwBsTTycaSma+NHzTt8EPd9vyhI=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 05:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:23:07:f6:be:83:5e:15:12:4a:b3:ea:c3:df:b8:a2:67:d3:70:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Dec 10 01:36:37 2025 GMT Not After : Dec 13 05:38:37 2025 GMT Subject: CN=D564BE9D1297ACA681A75852C357A0ED73393EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:49:68:4e:88:ab:a0:75:7e:9c:23:b6:5b:a8: 4b:3f:af:d9:dd:9d:56:5a:0b:55:4f:ed:82:b8:0a: 4c:46:96:fc:32:91:47:e4:5a:1e:2a:fb:81:5e:33: 01:4e:98:fc:58:72:51:cc:71:d4:20:4b:ba:ab:16: 45:b3:fa:25:b2:37:4b:92:71:c2:6a:ea:73:99:bb: a1:2c:36:26:a0:2d:e9:7b:78:8f:68:50:8e:ae:66: 27:16:05:4a:32:ef:7b:5b:c0:06:2f:4c:51:8e:65: 28:47:7a:26:e8:84:1f:2d:79:fb:9e:05:95:1b:e1: 3b:84:76:45:8c:d7:92:a8:bc:4b:3b:ae:ba:ed:23: db:73:b3:c8:2e:cf:02:3b:25:05:5e:95:d6:17:bf: 26:5b:54:d7:a3:76:52:a1:4d:d7:9a:e9:aa:92:51: a9:69:57:de:e9:d2:40:a4:28:e1:6d:74:16:5a:04: b5:39:ff:1a:60:36:33:66:f5:44:5d:cc:5a:7c:4b: 89:5f:cf:f7:2f:7f:35:41:f9:44:d1:2a:2e:7c:5e: 96:a0:33:ef:76:02:3d:9c:63:a0:4a:24:9e:fd:ed: fb:89:23:7b:1f:4b:94:0f:36:bd:56:78:74:d3:0e: 75:96:b0:cb:63:42:56:a9:a7:60:a9:78:1b:25:ef: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:BE:9D:12:97:AC:A6:81:A7:58:52:C3:57:A0:ED:73:39:3E:E8 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:27:9c:48:26:16:99:84:4a:81:8e:d8:32:53:0c:97:45:2f: a9:6c:78:72:3d:e6:5a:01:3d:c6:f3:31:59:9e:a4:c2:b7:51: c7:94:32:dd:62:7e:0e:e1:52:5f:9c:22:e8:57:7f:17:56:2b: 06:a1:2c:7f:f2:26:72:b1:d6:24:d6:9a:8e:d4:d7:7f:84:f1: 5a:d1:cd:92:3e:e7:1d:22:97:8a:11:1d:72:e6:18:ea:da:2e: fd:f8:5a:af:ab:d4:85:2f:2f:b5:0e:3f:8b:e5:f7:40:5e:65: 83:1a:7b:33:68:06:1d:2d:3f:b6:ce:eb:e6:4b:e0:d8:20:e3: 09:c4:d7:2f:0a:c8:c6:87:a1:6a:38:27:46:3c:77:5d:b7:0b: 78:43:b5:23:03:d5:bf:5b:e6:f8:73:b6:84:09:d5:ea:3e:c1: ca:ff:aa:58:7e:5c:d2:53:56:7a:8e:b8:24:9c:2b:43:96:8b: 37:9f:54:f7:07:a6:d6:99:75:82:f3:39:05:b4:92:03:06:67: a3:90:56:ba:c7:59:e5:29:92:e8:c2:90:82:2c:e4:71:25:e2: 9d:78:a3:57:3f:e4:d3:f9:b0:e4:4b:b3:ec:d8:e0:f8:ae:b4: 6d:6a:37:0b:2e:96:76:e8:d3:07:63:9f:41:5f:f8:c7:da:74: 41:f2:d3:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSMH9r6DXhUSSrPqw9+4omfTcF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTEyMTAwMTM2MzdaFw0yNTEyMTMwNTM4MzdaMDMxMTAvBgNV BAMTKEQ1NjRCRTlEMTI5N0FDQTY4MUE3NTg1MkMzNTdBMEVENzMzOTNFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnSWhOiKugdX6cI7ZbqEs/r9nd nVZaC1VP7YK4CkxGlvwykUfkWh4q+4FeMwFOmPxYclHMcdQgS7qrFkWz+iWyN0uS ccJq6nOZu6EsNiagLel7eI9oUI6uZicWBUoy73tbwAYvTFGOZShHeibohB8tefue BZUb4TuEdkWM15KovEs7rrrtI9tzs8guzwI7JQVeldYXvyZbVNejdlKhTdea6aqS UalpV97p0kCkKOFtdBZaBLU5/xpgNjNm9URdzFp8S4lfz/cvfzVB+UTRKi58Xpag M+92Aj2cY6BKJJ797fuJI3sfS5QPNr1WeHTTDnWWsMtjQlapp2CpeBsl746nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1WS+nRKXrKaBp1hSw1eg7XM5PugwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcnnEgmFpmESoGO2DJTDJdFL6lseHI95loB PcbzMVmepMK3UceUMt1ifg7hUl+cIuhXfxdWKwahLH/yJnKx1iTWmo7U13+E8VrR zZI+5x0il4oRHXLmGOraLv34Wq+r1IUvL7UOP4vl90BeZYMaezNoBh0tP7bO6+ZL 4Ngg4wnE1y8KyMaHoWo4J0Y8d123C3hDtSMD1b9b5vhztoQJ1eo+wcr/qlh+XNJT VnqOuCScK0OWizefVPcHptaZdYLzOQW0kgMGZ6OQVrrHWeUpkujCkIIs5HEl4p14 o1c/5NP5sORLs+zY4PiutG1qNwsulnbo0wdjn0Ff+MfadEHy00U= -----END CERTIFICATE-----Generated at Wed Dec 10 05:18:49 2025 by rpki-client