This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: 6dk/YwWpRrtg2Ow939WNiwtIr58YpZghVmSl/cg+i2U= Subject key identifier: C4:77:0C:87:83:F0:35:3E:2A:E8:2E:4B:5A:90:FF:59:7B:6F:B7:52 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 759D19AA3BA0D0AD8AC4E4EB5260F2813A1104C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0151 Signing time: Tue 02 Dec 2025 04:21:33 +0000 Manifest this update: Tue 02 Dec 2025 04:16:33 +0000 Manifest next update: Fri 05 Dec 2025 07:06:33 +0000 Files and hashes: 1: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=) 2: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=) 3: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: FSZwr+nx4V96dVdrTPf61l5nNY04YMw/Xzgp0R5cQfc=) 4: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9d:19:aa:3b:a0:d0:ad:8a:c4:e4:eb:52:60:f2:81:3a:11:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Dec 2 04:16:33 2025 GMT Not After : Dec 5 07:06:33 2025 GMT Subject: CN=C4770C8783F0353E2AE82E4B5A90FF597B6FB752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:0c:c0:fd:16:73:89:b3:5b:1f:09:6c:a3: 80:5c:d3:b9:b7:3d:6e:6d:f1:e4:ed:e0:cc:34:05: f1:77:09:de:06:9a:97:df:1f:78:2f:90:ce:fd:82: 9f:be:1b:2a:27:6f:a3:9c:d0:a2:d2:90:63:38:b1: 71:9b:79:8a:14:f0:52:d9:c2:5c:47:99:79:7d:4a: 4f:46:dc:b7:13:b9:47:cf:fc:6b:ec:40:c4:4b:df: cb:aa:ca:a9:af:62:df:6c:1e:bf:40:5e:c0:63:02: e2:8c:8a:ff:d3:c6:2f:a9:9d:1a:92:41:72:be:c5: 1f:45:c0:8c:1a:fb:90:3a:34:7d:5f:e1:82:f8:f1: 67:5e:30:49:97:45:7f:d2:3b:7f:ff:72:be:d6:a7: 53:f3:75:4e:26:54:36:bc:ab:47:8b:a4:ff:45:3e: 9d:4e:66:dc:b3:69:13:23:01:c0:9a:c7:e2:ea:c7: b9:98:cd:6f:55:b0:9c:36:eb:c7:eb:d3:29:c8:80: 5c:1d:dc:66:2a:3e:c1:9b:7c:a1:8a:c0:b5:63:a4: 36:e1:3b:38:18:e6:a3:cc:38:a8:9b:00:aa:05:2b: 7d:68:9e:41:67:0b:1b:6b:48:8d:06:47:49:bc:dd: 7b:89:c4:43:4b:31:b7:9a:fa:0a:a3:f9:d6:84:35: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:0C:87:83:F0:35:3E:2A:E8:2E:4B:5A:90:FF:59:7B:6F:B7:52 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:53:7b:0e:64:0e:fe:7d:90:b9:16:68:9b:e3:cb:c2:06:66: 56:18:1b:5e:96:2a:f0:f9:a0:02:da:02:80:5f:8a:47:38:c8: 88:75:11:f3:7b:10:95:34:3e:aa:dd:99:da:6a:09:fa:e5:b3: 90:07:e5:c1:ef:cb:93:c1:89:f1:a1:08:b1:1c:ac:f2:5e:79: fa:bc:4a:cf:48:19:ef:4c:48:53:2a:4d:79:e2:b6:17:c5:2f: 28:a3:10:2b:c7:4d:a1:56:72:99:96:90:84:3c:c2:0f:9a:5c: 44:e4:5c:0d:ce:a1:ba:e2:aa:00:8f:e4:65:14:d7:37:15:4a: f1:b8:9b:21:26:62:af:69:de:22:90:67:40:69:3c:52:a6:90: f7:da:05:3a:fb:60:6d:c0:38:fa:70:2b:09:d0:f6:da:62:cc: 52:5e:59:3d:cb:67:67:c8:43:f5:53:39:ce:1d:95:b4:ab:e6: d6:94:6c:06:b2:0e:03:51:32:00:a5:2a:3b:7b:38:d3:6c:a2: a9:8d:c6:3e:ef:d1:4d:d3:cd:bb:b8:f2:23:48:98:95:8e:2a: 84:24:03:e3:9b:50:fb:18:e5:99:a3:f9:85:fb:d9:0b:b8:95: 1d:02:eb:11:76:d8:a9:48:1c:f8:43:cf:71:e1:ba:4e:95:97: ec:d8:9c:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZ0Zqjug0K2KxOTrUmDygToRBMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTEyMDIwNDE2MzNaFw0yNTEyMDUwNzA2MzNaMDMxMTAvBgNV BAMTKEM0NzcwQzg3ODNGMDM1M0UyQUU4MkU0QjVBOTBGRjU5N0I2RkI3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjwzA/RZzibNbHwlso4Bc07m3 PW5t8eTt4Mw0BfF3Cd4GmpffH3gvkM79gp++Gyonb6Oc0KLSkGM4sXGbeYoU8FLZ wlxHmXl9Sk9G3LcTuUfP/GvsQMRL38uqyqmvYt9sHr9AXsBjAuKMiv/Txi+pnRqS QXK+xR9FwIwa+5A6NH1f4YL48WdeMEmXRX/SO3//cr7Wp1PzdU4mVDa8q0eLpP9F Pp1OZtyzaRMjAcCax+Lqx7mYzW9VsJw268fr0ynIgFwd3GYqPsGbfKGKwLVjpDbh OzgY5qPMOKibAKoFK31onkFnCxtrSI0GR0m83XuJxENLMbea+gqj+daENbrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHcMh4PwNT4q6C5LWpD/WXtvt1IwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlTew5kDv59kLkWaJvjy8IGZlYYG16WKvD5 oALaAoBfikc4yIh1EfN7EJU0PqrdmdpqCfrls5AH5cHvy5PBifGhCLEcrPJeefq8 Ss9IGe9MSFMqTXnithfFLyijECvHTaFWcpmWkIQ8wg+aXETkXA3OobriqgCP5GUU 1zcVSvG4myEmYq9p3iKQZ0BpPFKmkPfaBTr7YG3AOPpwKwnQ9tpizFJeWT3LZ2fI Q/VTOc4dlbSr5taUbAayDgNRMgClKjt7ONNsoqmNxj7v0U3Tzbu48iNImJWOKoQk A+ObUPsY5Zmj+YX72Qu4lR0C6xF22KlIHPhDz3Hhuk6Vl+zYnHg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:51 2025 by rpki-client