This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: xhT2UUgCbV/KTUVJRmYvWoSt6rZ5jiCPizwUarcpgzI= Subject key identifier: A7:F6:2A:DB:AA:3F:28:A5:3B:85:B3:BA:F4:5A:95:25:5F:63:A1:92 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 091BB9AED422AFD6A321F9D1F15A9DD5B542ADA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: EE Signing time: Fri 05 Dec 2025 19:22:00 +0000 Manifest this update: Fri 05 Dec 2025 19:17:00 +0000 Manifest next update: Mon 08 Dec 2025 23:39:00 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: GGpRNQ07lUcwVZGIlU1PqawOCFWji+HnQ/l46VEdRXY=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: ELxVGi0X39R0AE9CfsUVmNBqLXLKlWbihy40TmoFuKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1b:b9:ae:d4:22:af:d6:a3:21:f9:d1:f1:5a:9d:d5:b5:42:ad:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Dec 5 19:17:00 2025 GMT Not After : Dec 8 23:39:00 2025 GMT Subject: CN=A7F62ADBAA3F28A53B85B3BAF45A95255F63A192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:56:38:4e:d0:a5:72:22:75:62:12:75:69: ea:d2:8a:1f:d7:2a:e2:b8:05:8c:1a:07:96:b2:4d: d5:5a:1f:c7:e0:05:ac:b0:44:c0:e3:ca:3d:ec:a3: 33:07:c3:78:9b:37:20:ae:e8:dd:72:25:a5:4e:aa: 55:a6:81:21:52:e3:7f:81:bd:66:cc:bf:8e:e1:8e: e2:f1:5c:41:31:61:0c:3f:81:66:16:00:a9:df:c8: 26:17:7c:54:cc:71:9d:30:14:3f:ea:8f:7f:99:b3: f9:d1:07:d1:7c:e1:3c:3a:26:0a:5d:d0:5e:85:6c: 62:eb:23:89:6d:1c:4e:d6:83:29:61:d3:ee:70:43: d9:ee:13:69:13:e9:14:83:a6:05:a7:58:2d:68:93: fb:e1:dd:04:88:b6:0d:33:9e:a0:30:6d:0b:66:9b: c2:69:f0:3c:4c:a7:47:91:7d:0c:09:f1:6b:72:db: 2f:ae:80:64:ee:6c:c4:b5:a8:f4:ad:13:69:e2:39: 24:9f:e9:0c:b4:b0:b2:99:31:d8:af:c7:25:23:c8: f9:18:07:aa:af:80:2d:85:75:64:f6:78:84:73:11: 67:bb:5e:4b:29:b8:0a:77:48:f9:ba:8e:33:76:d5: 74:b7:b4:f2:c1:5b:38:83:29:2c:8e:7b:5c:64:20: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F6:2A:DB:AA:3F:28:A5:3B:85:B3:BA:F4:5A:95:25:5F:63:A1:92 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:9b:5f:7f:8e:b4:d2:d8:51:17:b0:de:82:26:5b:40:89: 81:ff:5a:c2:33:0d:7a:d9:4f:ff:64:aa:dd:4f:e5:85:8a:94: af:fd:19:8e:89:ef:9f:e4:87:6c:e9:98:09:f7:45:67:e9:f7: d3:d7:f2:e5:5b:06:03:3c:c1:51:fe:3a:59:f0:fb:77:00:a3: f2:86:91:fe:d9:3e:6c:d0:84:99:f4:01:40:8c:60:0c:96:5e: ae:b6:87:bf:8a:2f:7a:b9:f8:5e:a0:07:b0:69:90:57:e4:89: 01:c4:41:1f:8f:36:16:07:42:73:ba:1f:4c:69:2d:6f:1d:2a: b4:fe:e8:7b:94:c8:8c:aa:6a:23:71:db:62:04:2f:1a:cf:9c: c8:22:86:da:71:d9:fc:d8:dd:c4:2d:43:4d:ed:bf:26:35:d4: 8a:ee:e4:cf:56:1f:20:a3:ae:d3:21:b4:77:46:26:10:b1:6d: e4:9c:c8:0f:01:95:7b:88:af:ea:db:b3:04:74:d4:c8:f1:9d: fd:48:8f:ba:a3:65:a1:5a:5d:47:7f:39:e6:f0:b0:93:aa:68: cd:f0:fe:da:59:b9:f3:68:3b:ad:72:e9:28:02:79:3c:e6:fa: da:df:50:cb:1a:cc:ab:bb:ba:ed:81:c6:e4:b6:c4:b1:91:99: 0e:0e:d2:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRu5rtQir9ajIfnR8Vqd1bVCraYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTEyMDUxOTE3MDBaFw0yNTEyMDgyMzM5MDBaMDMxMTAvBgNV BAMTKEE3RjYyQURCQUEzRjI4QTUzQjg1QjNCQUY0NUE5NTI1NUY2M0ExOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGFY4TtClciJ1YhJ1aerSih/X KuK4BYwaB5ayTdVaH8fgBaywRMDjyj3sozMHw3ibNyCu6N1yJaVOqlWmgSFS43+B vWbMv47hjuLxXEExYQw/gWYWAKnfyCYXfFTMcZ0wFD/qj3+Zs/nRB9F84Tw6Jgpd 0F6FbGLrI4ltHE7Wgylh0+5wQ9nuE2kT6RSDpgWnWC1ok/vh3QSItg0znqAwbQtm m8Jp8DxMp0eRfQwJ8Wty2y+ugGTubMS1qPStE2niOSSf6Qy0sLKZMdivxyUjyPkY B6qvgC2FdWT2eIRzEWe7XkspuAp3SPm6jjN21XS3tPLBWziDKSyOe1xkIKBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/Yq26o/KKU7hbO69FqVJV9joZIwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACsm19/jrTS2FEXsN6CJltAiYH/WsIzDXrZ T/9kqt1P5YWKlK/9GY6J75/kh2zpmAn3RWfp99PX8uVbBgM8wVH+Olnw+3cAo/KG kf7ZPmzQhJn0AUCMYAyWXq62h7+KL3q5+F6gB7BpkFfkiQHEQR+PNhYHQnO6H0xp LW8dKrT+6HuUyIyqaiNx22IELxrPnMgihtpx2fzY3cQtQ03tvyY11Iru5M9WHyCj rtMhtHdGJhCxbeScyA8BlXuIr+rbswR01Mjxnf1Ij7qjZaFaXUd/OebwsJOqaM3w /tpZufNoO61y6SgCeTzm+trfUMsazKu7uu2BxuS2xLGRmQ4O0tE= -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:10 2025 by rpki-client