This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: mzuuc7z1p17GJ23ZK1D1NS93GENV1mCFQR6yAEidA4g= Subject key identifier: 42:EC:56:2D:F5:02:F1:1B:72:48:30:B7:1C:BC:F1:33:A6:FB:AF:B1 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 0E16597152D4C4E46DE1ED74AEB7231AE3E702B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0294 Signing time: Fri 05 Dec 2025 23:41:50 +0000 Manifest this update: Fri 05 Dec 2025 23:36:50 +0000 Manifest next update: Tue 09 Dec 2025 10:20:50 +0000 Files and hashes: 1: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: ah+/HeCjqZd5t9oUKB5Ox1Vat7UANvl+xJl1BWbKxzg=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) 3: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:16:59:71:52:d4:c4:e4:6d:e1:ed:74:ae:b7:23:1a:e3:e7:02:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Dec 5 23:36:50 2025 GMT Not After : Dec 9 10:20:50 2025 GMT Subject: CN=42EC562DF502F11B724830B71CBCF133A6FBAFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:66:02:2e:4d:f9:3b:f0:2f:df:d6:5e:fd: de:6b:0b:37:3b:15:20:6b:a7:58:07:2b:68:8e:07: 97:f4:45:f7:51:4c:a9:1a:fd:92:8f:f2:16:44:7a: 99:e5:98:36:d6:19:48:41:33:16:dd:a4:08:7c:90: 23:4b:69:e5:56:1d:d1:59:9f:0a:11:0b:c1:ec:e6: f3:df:01:fd:0f:be:ed:50:9c:c2:f3:e0:2f:19:ce: 9b:65:dd:1e:63:eb:13:e8:25:ca:7e:89:ff:10:0b: df:b6:0a:f6:eb:72:10:cc:bd:52:08:68:26:de:e1: 3f:cb:d6:81:2f:61:2a:53:40:7e:8d:ed:32:cd:57: c3:8e:28:54:dc:a9:e4:9e:71:5c:e4:b5:9b:b0:54: 3a:e4:c1:c8:61:50:80:2f:fb:a9:c0:15:56:cf:10: f4:15:8d:a4:86:13:cc:f1:4d:4b:81:60:d3:e1:c2: 09:51:67:c8:1b:b0:d3:1c:be:c2:fd:a6:8d:86:96: 18:e0:42:13:48:73:b2:3a:31:02:58:e4:69:a9:9e: 67:7f:d5:9d:ce:08:5a:ad:6f:e8:18:db:80:d2:f5: 7b:d3:8e:c4:fa:40:49:fa:ef:bd:80:71:95:39:93: 05:72:15:4d:5c:27:dd:6d:58:97:ed:2f:9c:ac:d3: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:56:2D:F5:02:F1:1B:72:48:30:B7:1C:BC:F1:33:A6:FB:AF:B1 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:71:76:21:04:6c:20:e8:da:72:66:11:c0:84:cc:ac:82:0d: a8:81:09:67:ef:27:c9:a9:30:70:43:2b:05:f2:9b:20:58:0d: 0d:85:34:be:7c:30:24:76:3b:cc:fd:64:5e:d6:57:70:5c:73: 00:4f:86:1f:33:09:dc:c9:96:e7:1d:c9:a2:5f:08:89:9a:5c: 86:fb:d2:a8:47:1a:4f:93:cd:70:15:1a:a6:2a:e2:67:cb:a3: f0:89:60:d5:c5:ff:c8:64:9f:00:96:c9:17:09:2a:e7:bd:5d: 98:bc:25:8a:39:2e:84:5b:65:b3:bd:69:90:5b:0a:85:79:f2: 0d:09:d3:66:7c:7c:60:bf:f6:16:c5:a2:06:7a:87:d6:b6:7e: 8e:f8:c9:5e:9d:16:2b:49:08:0c:32:fc:b3:b6:1f:6c:2c:a8: 17:a0:a4:a4:f3:a8:3d:88:46:ab:f3:1c:34:0e:7d:de:1e:92: 0e:c9:ee:09:c2:38:3a:61:5e:5c:96:f8:ee:56:c6:7a:ad:0e: 3f:ab:2f:73:ef:4f:b7:c3:22:79:8e:90:e5:4e:be:47:fc:c4: a2:63:42:0a:73:5b:58:cf:ca:88:65:de:1f:b3:3c:6f:fc:7b: 58:22:4d:54:0d:02:13:c9:11:19:1e:76:df:30:9b:95:cf:f3: 99:0a:3c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhZZcVLUxORt4e10rrcjGuPnArQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTEyMDUyMzM2NTBaFw0yNTEyMDkxMDIwNTBaMDMxMTAvBgNV BAMTKDQyRUM1NjJERjUwMkYxMUI3MjQ4MzBCNzFDQkNGMTMzQTZGQkFGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbi2YCLk35O/Av39Ze/d5rCzc7 FSBrp1gHK2iOB5f0RfdRTKka/ZKP8hZEepnlmDbWGUhBMxbdpAh8kCNLaeVWHdFZ nwoRC8Hs5vPfAf0Pvu1QnMLz4C8Zzptl3R5j6xPoJcp+if8QC9+2CvbrchDMvVII aCbe4T/L1oEvYSpTQH6N7TLNV8OOKFTcqeSecVzktZuwVDrkwchhUIAv+6nAFVbP EPQVjaSGE8zxTUuBYNPhwglRZ8gbsNMcvsL9po2GlhjgQhNIc7I6MQJY5Gmpnmd/ 1Z3OCFqtb+gY24DS9XvTjsT6QEn6772AcZU5kwVyFU1cJ91tWJftL5ys0yezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQuxWLfUC8RtySDC3HLzxM6b7r7EwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1xdiEEbCDo2nJmEcCEzKyCDaiBCWfvJ8mp MHBDKwXymyBYDQ2FNL58MCR2O8z9ZF7WV3BccwBPhh8zCdzJlucdyaJfCImaXIb7 0qhHGk+TzXAVGqYq4mfLo/CJYNXF/8hknwCWyRcJKue9XZi8JYo5LoRbZbO9aZBb CoV58g0J02Z8fGC/9hbFogZ6h9a2fo74yV6dFitJCAwy/LO2H2wsqBegpKTzqD2I RqvzHDQOfd4ekg7J7gnCODphXlyW+O5WxnqtDj+rL3PvT7fDInmOkOVOvkf8xKJj QgpzW1jPyohl3h+zPG/8e1giTVQNAhPJERkedt8wm5XP85kKPEA= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client