This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: d/+X8+TqoDJKVM+5REqpPcjVdXFAZ8paJUGoLrEX1Uo= Subject key identifier: D8:E8:99:5A:1D:5E:30:B1:79:80:80:8F:66:37:1D:E3:A4:8B:7F:C7 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 07B6242B42B1E41458BEAEB46EB635673611AAC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 014C Signing time: Mon 01 Dec 2025 22:41:07 +0000 Manifest this update: Mon 01 Dec 2025 22:36:07 +0000 Manifest next update: Fri 05 Dec 2025 09:22:07 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: qBKUBRfRjR7BzZBe3YwWdmzPlid3NTwFp8blGPkd4fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b6:24:2b:42:b1:e4:14:58:be:ae:b4:6e:b6:35:67:36:11:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Dec 1 22:36:07 2025 GMT Not After : Dec 5 09:22:07 2025 GMT Subject: CN=D8E8995A1D5E30B17980808F66371DE3A48B7FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:92:de:bb:d8:f0:95:03:06:31:78:72:c5: d7:e3:27:9c:eb:f4:04:f5:a7:df:44:cd:b2:c4:b4: c8:02:09:f8:ee:22:39:4e:5e:9d:2d:c9:f7:7c:8b: f9:df:03:30:c5:fd:38:05:00:3a:27:9b:6c:5b:2a: c8:29:94:2a:27:e8:52:c3:4a:57:47:cc:23:cc:0d: 0c:f2:75:ad:d2:b3:97:83:04:9d:c7:5b:a0:fd:90: c5:ac:db:ac:88:73:58:56:85:70:2b:36:f3:28:23: 9d:1c:2a:ef:fa:64:41:35:e5:7b:31:ce:61:b1:d1: 7c:97:b3:ff:52:b8:8c:61:a7:54:e7:cf:20:ba:74: 6b:62:d5:a7:79:f6:33:12:d4:25:5e:3d:ee:b0:b2: 1a:f3:a5:8b:08:0e:db:05:13:ed:19:cd:a1:4d:ea: 5a:30:e8:44:3a:74:11:c8:3f:0b:66:84:f4:b4:27: 65:69:6f:cc:a8:9c:70:9a:e7:b0:87:2e:5c:07:41: c2:e2:e6:3a:c1:28:70:33:33:df:cf:3d:ed:14:fa: 9d:5c:96:d5:08:ef:75:a5:5f:66:1e:8e:c8:53:89: 46:70:cd:57:48:95:3c:d5:6a:87:2f:be:81:f1:79: cf:fb:2c:34:c4:66:87:3a:5b:49:f6:ba:f5:30:5d: 46:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:99:5A:1D:5E:30:B1:79:80:80:8F:66:37:1D:E3:A4:8B:7F:C7 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6d:00:1d:50:85:39:b2:97:29:2a:1b:e1:85:01:34:b0:58: a4:b2:03:52:92:46:a6:e3:1c:9f:b7:cf:42:80:82:00:81:eb: ee:d8:d4:6a:ca:e5:23:9d:cc:3f:e9:78:08:17:2e:3e:d5:5c: 96:0b:99:41:17:08:20:da:3d:30:81:bd:39:84:fe:5e:b6:82: ac:62:3d:e0:83:1a:de:14:54:cb:2b:81:f7:95:e5:53:51:60: c9:4d:38:e9:48:28:bc:da:3d:fe:bb:f7:df:5b:32:f8:ca:4a: 18:36:73:2b:69:44:4a:51:66:b3:88:3f:7a:24:a5:5c:fe:f4: 20:50:88:50:44:7b:bf:77:af:bd:fe:51:b6:7b:31:0b:a9:b1: a1:c5:b9:75:25:83:8b:1c:ac:75:51:27:e5:11:c4:31:08:30: 19:90:ef:7c:f6:76:8a:12:2d:1e:ac:05:a4:f0:27:1e:38:a2: 10:16:43:ed:21:b5:85:6f:76:60:6c:49:c6:cf:29:fe:37:40: f4:c5:bf:c8:b8:2f:57:a7:a1:70:6b:cf:d0:47:dc:ef:c3:73: f7:95:d4:39:88:c0:97:71:99:cf:21:28:f9:e4:d0:25:cd:22: d2:97:fd:d9:11:a7:79:5a:54:eb:44:58:02:1f:df:32:da:5f: 13:84:62:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7YkK0Kx5BRYvq60brY1ZzYRqsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTEyMDEyMjM2MDdaFw0yNTEyMDUwOTIyMDdaMDMxMTAvBgNV BAMTKEQ4RTg5OTVBMUQ1RTMwQjE3OTgwODA4RjY2MzcxREUzQTQ4QjdGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UZLeu9jwlQMGMXhyxdfjJ5zr 9AT1p99EzbLEtMgCCfjuIjlOXp0tyfd8i/nfAzDF/TgFADonm2xbKsgplCon6FLD SldHzCPMDQzyda3Ss5eDBJ3HW6D9kMWs26yIc1hWhXArNvMoI50cKu/6ZEE15Xsx zmGx0XyXs/9SuIxhp1TnzyC6dGti1ad59jMS1CVePe6wshrzpYsIDtsFE+0ZzaFN 6low6EQ6dBHIPwtmhPS0J2Vpb8yonHCa57CHLlwHQcLi5jrBKHAzM9/PPe0U+p1c ltUI73WlX2YejshTiUZwzVdIlTzVaocvvoHxec/7LDTEZoc6W0n2uvUwXUaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2OiZWh1eMLF5gICPZjcd46SLf8cwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1tAB1QhTmylykqG+GFATSwWKSyA1KSRqbj HJ+3z0KAggCB6+7Y1GrK5SOdzD/peAgXLj7VXJYLmUEXCCDaPTCBvTmE/l62gqxi PeCDGt4UVMsrgfeV5VNRYMlNOOlIKLzaPf67999bMvjKShg2cytpREpRZrOIP3ok pVz+9CBQiFBEe793r73+UbZ7MQupsaHFuXUlg4scrHVRJ+URxDEIMBmQ73z2dooS LR6sBaTwJx44ohAWQ+0htYVvdmBsScbPKf43QPTFv8i4L1enoXBrz9BH3O/Dc/eV 1DmIwJdxmc8hKPnk0CXNItKX/dkRp3laVOtEWAIf3zLaXxOEYi8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:21 2025 by rpki-client