This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json) Hash identifier: H6k283ShpRohDWYOD/aUVYIg6ByYKw6btkLLZ9zwIc4= Subject key identifier: D4:50:D2:D5:C1:5B:74:B7:17:17:78:97:1F:24:5F:47:84:F8:D0:21 Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809 Certificate serial: 3307036CF98FF2DFD20569D3BF8195519EB52C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft Manifest number: C7 Signing time: Sat 06 Dec 2025 18:22:22 +0000 Manifest this update: Sat 06 Dec 2025 18:17:22 +0000 Manifest next update: Tue 09 Dec 2025 23:40:22 +0000 Files and hashes: 1: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: sTtdk5JKl9UOvj2HWgFTphwLZXR4sQSK/k7UVCLtKu0=) 2: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: HyQIrSfaVLasp8fH2cuEU5XU64FY/TlMBq7lyZFmW5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:07:03:6c:f9:8f:f2:df:d2:05:69:d3:bf:81:95:51:9e:b5:2c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Validity Not Before: Dec 6 18:17:22 2025 GMT Not After : Dec 9 23:40:22 2025 GMT Subject: CN=D450D2D5C15B74B7171778971F245F4784F8D021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:5b:97:2e:79:de:a3:af:70:db:77:f2:50: 9c:da:49:9f:5a:8e:f0:78:89:50:2b:16:f0:94:c9: 22:cc:5d:fd:b1:73:fa:a7:3d:49:33:77:b7:50:d9: a0:bb:98:de:bd:13:81:6a:15:c1:86:66:8d:7e:b2: d6:00:95:9d:b6:4a:41:13:a6:f7:2b:58:1b:84:3a: 16:e1:29:d4:81:14:6e:52:e3:d8:8d:eb:38:cd:9e: 68:c8:4e:a0:50:7b:d4:a0:28:98:20:f8:f9:bc:81: 58:9b:8b:9a:a5:95:a5:48:75:64:9d:95:41:87:fd: a9:43:cb:6e:e5:e5:c3:23:fa:1b:f1:9c:ee:c1:91: 46:1b:81:b1:6f:b1:b2:a7:f6:07:09:9b:0b:b3:e2: 3f:74:8a:86:74:51:96:dd:2a:b8:9d:b4:6b:cc:77: 12:be:02:51:f2:f3:27:50:a8:33:76:9f:22:0c:a5: 9f:a4:ff:cf:68:dc:20:51:8b:e3:2a:21:bc:e7:42: 7c:ce:bd:06:49:12:81:86:5d:a2:9b:bb:cb:36:32: e1:d9:4d:9f:32:9f:69:c5:3b:00:23:d4:09:75:96: a8:ae:7b:0f:06:6d:8d:43:d0:34:4d:e6:12:a8:f6: 80:93:52:f7:8f:ab:a8:56:c5:a6:dc:cf:2a:9f:a5: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:D2:D5:C1:5B:74:B7:17:17:78:97:1F:24:5F:47:84:F8:D0:21 X509v3 Authority Key Identifier: keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:23:8d:6b:66:d8:0a:ed:74:9c:d3:d1:1e:0a:d9:b7:5d: 45:04:0b:72:d8:95:25:e6:89:89:7d:72:5e:89:b3:fb:e2:74: 1d:5c:ed:89:d1:e8:14:8c:af:96:6f:ce:f7:16:9f:b1:ff:78: c6:d5:58:f4:35:f7:88:7b:9f:e8:d0:1e:f4:d3:c0:97:e4:1a: 54:c1:af:28:f8:46:6b:26:7b:1c:2e:7b:82:a4:80:d7:0f:73: 0c:2b:d3:62:6f:cd:de:f6:25:f1:ce:18:e7:af:28:aa:99:da: 86:54:0c:a4:b4:21:4e:60:d8:28:a9:0e:72:f4:c6:ca:35:b8: 52:2e:a5:15:8d:74:87:fd:58:dc:3b:c2:b6:87:00:53:79:b6: 53:dd:15:96:7c:39:4c:43:d7:c4:76:50:71:02:e2:05:48:89: 2a:e0:fa:1c:16:7b:70:d7:a8:2d:25:4a:e4:30:3d:73:bf:a5: b3:f9:4d:93:96:57:88:52:91:0c:e3:7e:62:a3:3e:50:7e:60: c2:69:56:4c:02:0a:fd:e5:d9:6c:9a:08:30:dc:c7:c1:be:e3: 17:e0:31:7f:4a:3d:8a:1b:fe:ae:4a:e9:b5:0d:f2:bc:bb:20: aa:b6:b0:a9:b3:e9:96:47:7b:7b:7a:3c:d2:24:61:8e:46:53: 74:d3:c6:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwcDbPmP8t/SBWnTv4GVUZ61LCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAw RTlDRjgwOTAeFw0yNTEyMDYxODE3MjJaFw0yNTEyMDkyMzQwMjJaMDMxMTAvBgNV BAMTKEQ0NTBEMkQ1QzE1Qjc0QjcxNzE3Nzg5NzFGMjQ1RjQ3ODRGOEQwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk3VuXLnneo69w23fyUJzaSZ9a jvB4iVArFvCUySLMXf2xc/qnPUkzd7dQ2aC7mN69E4FqFcGGZo1+stYAlZ22SkET pvcrWBuEOhbhKdSBFG5S49iN6zjNnmjITqBQe9SgKJgg+Pm8gVibi5qllaVIdWSd lUGH/alDy27l5cMj+hvxnO7BkUYbgbFvsbKn9gcJmwuz4j90ioZ0UZbdKridtGvM dxK+AlHy8ydQqDN2nyIMpZ+k/89o3CBRi+MqIbznQnzOvQZJEoGGXaKbu8s2MuHZ TZ8yn2nFOwAj1Al1lqiuew8GbY1D0DRN5hKo9oCTUvePq6hWxabczyqfpTP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1FDS1cFbdLcXF3iXHyRfR4T40CEwHwYDVR0j BBgwFoAUxpRRdx0sUZwiaeoXEVs+YA6c+AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMC9DNjk0NTE3NzFE MkM1MTlDMjI2OUVBMTcxMTVCM0U2MDBFOUNGODA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAwRTlD RjgwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj YjEtNTkzMDEyZDJiNzU5LzAvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNF NjAwRTlDRjgwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADioI41rZtgK7XSc09EeCtm3XUUEC3LYlSXm iYl9cl6Js/vidB1c7YnR6BSMr5ZvzvcWn7H/eMbVWPQ194h7n+jQHvTTwJfkGlTB ryj4Rmsmexwue4KkgNcPcwwr02Jvzd72JfHOGOevKKqZ2oZUDKS0IU5g2CipDnL0 xso1uFIupRWNdIf9WNw7wraHAFN5tlPdFZZ8OUxD18R2UHEC4gVIiSrg+hwWe3DX qC0lSuQwPXO/pbP5TZOWV4hSkQzjfmKjPlB+YMJpVkwCCv3l2WyaCDDcx8G+4xfg MX9KPYob/q5K6bUN8ry7IKq2sKmz6ZZHe3t6PNIkYY5GU3TTxjs= -----END CERTIFICATE-----Generated at Sun Dec 7 18:54:53 2025 by rpki-client