This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: C8+Xn418aCgEzeqHDc0zDoaX3Co/dx3GQdT+xGl8eo4= Subject key identifier: D7:7A:98:47:9D:1A:29:3B:D3:55:6D:53:97:AB:97:15:70:E8:1B:20 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 4EAC2F75BC34A7D821539983F5FCFD3B69524108 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 022D Signing time: Tue 02 Dec 2025 08:51:20 +0000 Manifest this update: Tue 02 Dec 2025 08:46:20 +0000 Manifest next update: Fri 05 Dec 2025 18:11:20 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: BDa1gFPXFrrHCd4ay0W+m/10+rQYAetIcrWfTcydVzQ=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ac:2f:75:bc:34:a7:d8:21:53:99:83:f5:fc:fd:3b:69:52:41:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Dec 2 08:46:20 2025 GMT Not After : Dec 5 18:11:20 2025 GMT Subject: CN=D77A98479D1A293BD3556D5397AB971570E81B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:a8:3b:9f:84:31:21:d1:ce:e9:0b:c3:de: db:70:20:8a:a2:18:0b:c7:05:a4:9b:f6:fd:70:32: 03:07:fe:7f:2b:f7:b5:28:99:18:89:48:c6:22:8d: a6:60:99:38:61:5a:8a:c2:90:57:e6:53:18:63:59: 0f:5c:d2:54:95:ce:2d:68:80:f0:03:56:ff:cf:f3: 45:fb:4e:47:60:69:94:37:f4:3e:6a:7a:4f:c6:9b: 22:c2:6a:50:19:7c:3e:ab:29:4b:5c:46:29:99:ec: d4:ea:fa:c8:d6:65:57:22:a1:5f:72:0b:f3:09:3d: c4:b1:b6:06:56:b8:73:d2:2b:25:0b:3c:02:76:3c: 31:9d:be:54:de:3d:da:79:38:43:62:71:76:78:29: 13:d4:c3:41:fb:6d:03:d5:6f:7a:a1:3c:f9:10:fc: 10:aa:cd:26:1c:be:61:7e:23:1c:4f:83:57:0d:76: dc:95:da:62:05:6e:9a:73:2e:3a:18:a5:38:07:18: 58:a3:a9:6f:85:21:86:75:59:92:e8:bb:3a:59:7c: a9:c6:da:28:e0:cf:8d:98:eb:dc:d9:4c:33:3a:cb: 54:17:5a:1c:1f:48:5b:ec:03:f7:4c:7d:fe:2e:2a: 84:7e:da:4e:1e:a7:eb:41:66:8a:4c:1d:fb:18:44: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:98:47:9D:1A:29:3B:D3:55:6D:53:97:AB:97:15:70:E8:1B:20 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:b3:4d:cb:bb:b8:42:3d:84:2b:ed:f8:67:02:7c:7a:5b: a1:e9:80:bb:1e:db:32:68:22:e0:ff:ac:57:f1:39:9b:dd:ff: c6:ec:1e:0e:a3:ed:84:1b:12:e1:6c:12:4c:d6:34:04:49:4e: 0f:10:05:09:c4:1b:15:45:40:08:70:ca:64:07:c4:33:3c:24: b3:38:c8:ff:79:65:c7:f5:e4:ff:83:c9:c5:c3:a5:e8:c3:9d: 14:b0:31:57:19:cf:2f:14:d3:a8:c7:73:3b:6a:38:de:fc:44: 66:1f:24:c1:63:41:d7:f6:eb:95:d5:a6:88:49:1d:d5:7b:cf: 36:7b:43:cd:85:05:d0:44:bb:f8:fd:db:b5:4b:ee:24:65:a8: 20:e6:97:72:2a:f7:d1:95:92:78:43:4d:6a:0d:72:11:59:61: 75:8f:3e:e8:da:5e:2e:13:d7:14:d5:94:61:a4:6c:b8:1b:68: f1:3d:0d:5c:77:2e:dc:89:62:f1:d6:14:74:6f:41:45:6c:82: 25:ed:08:54:da:af:6f:fc:13:4d:19:3b:35:1f:9c:66:20:41: 1f:92:49:47:26:ff:69:a6:be:b9:12:1e:21:a1:30:40:dd:3d: 1f:e5:a1:d8:77:ff:c4:c4:a8:82:48:49:87:9c:c1:83:87:cf: ec:ec:57:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqwvdbw0p9ghU5mD9fz9O2lSQQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTEyMDIwODQ2MjBaFw0yNTEyMDUxODExMjBaMDMxMTAvBgNV BAMTKEQ3N0E5ODQ3OUQxQTI5M0JEMzU1NkQ1Mzk3QUI5NzE1NzBFODFCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtzag7n4QxIdHO6QvD3ttwIIqi GAvHBaSb9v1wMgMH/n8r97UomRiJSMYijaZgmThhWorCkFfmUxhjWQ9c0lSVzi1o gPADVv/P80X7TkdgaZQ39D5qek/GmyLCalAZfD6rKUtcRimZ7NTq+sjWZVcioV9y C/MJPcSxtgZWuHPSKyULPAJ2PDGdvlTePdp5OENicXZ4KRPUw0H7bQPVb3qhPPkQ /BCqzSYcvmF+IxxPg1cNdtyV2mIFbppzLjoYpTgHGFijqW+FIYZ1WZLouzpZfKnG 2ijgz42Y69zZTDM6y1QXWhwfSFvsA/dMff4uKoR+2k4ep+tBZopMHfsYRPrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13qYR50aKTvTVW1Tl6uXFXDoGyAwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqFs03Lu7hCPYQr7fhnAnx6W6HpgLse2zJo IuD/rFfxOZvd/8bsHg6j7YQbEuFsEkzWNARJTg8QBQnEGxVFQAhwymQHxDM8JLM4 yP95Zcf15P+DycXDpejDnRSwMVcZzy8U06jHcztqON78RGYfJMFjQdf265XVpohJ HdV7zzZ7Q82FBdBEu/j927VL7iRlqCDml3Iq99GVknhDTWoNchFZYXWPPujaXi4T 1xTVlGGkbLgbaPE9DVx3LtyJYvHWFHRvQUVsgiXtCFTar2/8E00ZOzUfnGYgQR+S SUcm/2mmvrkSHiGhMEDdPR/lodh3/8TEqIJISYecwYOHz+zsV54= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:45 2025 by rpki-client