This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: ufIkOaDaRMLU5qgfsUvOFQJHPunnSTwO2OyIwIhWmKA= Subject key identifier: 5C:57:26:8D:B1:E5:79:34:34:5A:FE:03:EE:2B:18:1C:8C:E2:F5:29 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 54F8F8F3326691444AFD981D117603DD87251880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 032E Signing time: Sat 13 Dec 2025 09:21:50 +0000 Manifest this update: Sat 13 Dec 2025 09:16:50 +0000 Manifest next update: Tue 16 Dec 2025 18:16:50 +0000 Files and hashes: 1: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) 2: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) 3: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: 8OmQ8B9wa6FBbsr2EHeR/u/7+9ut8YJhaQ48g4gVOjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 18:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f8:f8:f3:32:66:91:44:4a:fd:98:1d:11:76:03:dd:87:25:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Dec 13 09:16:50 2025 GMT Not After : Dec 16 18:16:50 2025 GMT Subject: CN=5C57268DB1E57934345AFE03EE2B181C8CE2F529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:20:92:31:f5:75:d6:de:86:ed:bc:c3:52: 57:3f:58:fa:5f:57:0f:ab:b6:c9:59:3e:31:28:dd: 92:ca:d4:b3:a2:d9:0e:14:a3:aa:08:7c:d9:64:8d: 1a:c1:cb:fb:e2:cf:c6:b8:63:cb:6d:97:14:4f:67: 6a:83:f7:67:69:94:4a:13:5a:83:51:f9:3d:52:1b: 68:ed:02:6a:12:c6:91:87:5d:c2:f7:3a:93:72:85: a8:a8:04:fa:68:e4:1b:cd:a3:bc:23:96:4f:9b:2b: 66:67:d9:e3:54:1d:42:66:a3:b3:1e:cb:0d:f8:a1: 40:4a:04:1a:87:68:db:4f:6c:db:c5:e6:ad:ad:c4: cc:d9:a8:6c:2f:0c:e5:42:bb:4a:45:5e:b8:ee:ba: b9:a0:b3:63:bb:ff:44:ba:93:d0:bd:5d:42:c8:3b: ed:59:60:e3:b6:18:89:40:2a:17:77:be:c2:4b:17: 3a:78:0f:a6:52:13:28:fe:cf:0f:4b:00:dd:ff:1d: d6:9d:85:27:89:7b:d8:27:0a:5e:51:b5:71:7b:60: b0:d1:2e:30:5c:97:1e:d7:4c:76:3a:79:c1:2d:07: 33:75:85:28:24:f5:d0:70:d0:18:ad:38:f7:5f:8f: 64:8a:a6:34:1c:a5:ce:ad:47:06:21:00:a6:cd:01: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:26:8D:B1:E5:79:34:34:5A:FE:03:EE:2B:18:1C:8C:E2:F5:29 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:da:e7:b5:0a:65:97:35:69:ef:54:64:43:7c:20:11:45:a1: 11:6f:27:a8:22:ad:f3:4b:57:ad:5d:98:24:55:40:67:cb:89: d0:8b:40:e5:09:59:7d:d4:84:70:9a:b7:3b:5e:0f:84:2c:28: ae:f9:10:14:72:f1:99:85:1b:44:0f:86:63:29:49:4b:08:d8: 64:df:38:c7:3e:40:a8:f3:3b:bc:52:84:64:a6:8a:9d:aa:15: 8e:aa:c7:e6:8c:d0:bd:19:e5:63:c7:b9:74:75:27:78:f1:23: bf:bf:04:ac:14:9d:0a:41:5a:3f:18:9b:37:e3:fb:32:e2:5b: 82:b6:d6:6a:d2:9f:b2:17:88:9f:8e:e4:ac:51:b1:5c:82:5e: 72:9e:ed:6d:b9:e3:6e:c5:8d:e0:7e:bb:4d:70:d2:92:4a:67: c3:c9:26:1a:f1:ec:c4:bc:eb:3b:17:f2:e3:c0:b5:4c:65:33: c0:ec:57:8a:8c:60:2f:ef:12:e5:08:52:0c:23:be:70:3f:c1: 1e:27:99:0b:70:4b:8e:dc:14:70:81:8e:fd:c2:55:f0:76:70: 34:fd:34:8c:d6:65:6e:d0:d1:f3:66:af:21:26:74:a6:c2:ca: b5:98:67:e1:39:e6:ef:65:97:6a:b0:6a:98:d4:85:71:08:0c: 37:dc:d7:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPj48zJmkURK/ZgdEXYD3YclGIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNTEyMTMwOTE2NTBaFw0yNTEyMTYxODE2NTBaMDMxMTAvBgNV BAMTKDVDNTcyNjhEQjFFNTc5MzQzNDVBRkUwM0VFMkIxODFDOENFMkY1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+niCSMfV11t6G7bzDUlc/WPpf Vw+rtslZPjEo3ZLK1LOi2Q4Uo6oIfNlkjRrBy/viz8a4Y8ttlxRPZ2qD92dplEoT WoNR+T1SG2jtAmoSxpGHXcL3OpNyhaioBPpo5BvNo7wjlk+bK2Zn2eNUHUJmo7Me yw34oUBKBBqHaNtPbNvF5q2txMzZqGwvDOVCu0pFXrjuurmgs2O7/0S6k9C9XULI O+1ZYOO2GIlAKhd3vsJLFzp4D6ZSEyj+zw9LAN3/HdadhSeJe9gnCl5RtXF7YLDR LjBclx7XTHY6ecEtBzN1hSgk9dBw0BitOPdfj2SKpjQcpc6tRwYhAKbNAWfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFcmjbHleTQ0Wv4D7isYHIzi9SkwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFra57UKZZc1ae9UZEN8IBFFoRFvJ6girfNL V61dmCRVQGfLidCLQOUJWX3UhHCatzteD4QsKK75EBRy8ZmFG0QPhmMpSUsI2GTf OMc+QKjzO7xShGSmip2qFY6qx+aM0L0Z5WPHuXR1J3jxI7+/BKwUnQpBWj8Ymzfj +zLiW4K21mrSn7IXiJ+O5KxRsVyCXnKe7W25427FjeB+u01w0pJKZ8PJJhrx7MS8 6zsX8uPAtUxlM8DsV4qMYC/vEuUIUgwjvnA/wR4nmQtwS47cFHCBjv3CVfB2cDT9 NIzWZW7Q0fNmryEmdKbCyrWYZ+E55u9ll2qwapjUhXEIDDfc11k= -----END CERTIFICATE-----Generated at Sun Dec 14 08:26:57 2025 by rpki-client