This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft File: 62F71C75A752B45AE4B51A4E7010124979820A90.mft (raw, json) Hash identifier: EKOZr8s9adiBrH5UyVC8qM7lMS4FW8yLHmQMEPE8AJM= Subject key identifier: 04:A1:A8:82:9A:03:5C:66:D7:D9:63:EB:27:F9:A5:87:8A:E5:58:E0 Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 18A531D4283A7BD52E2879351DDE536FF4B7AC1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft Manifest number: F7 Signing time: Fri 05 Dec 2025 03:00:46 +0000 Manifest this update: Fri 05 Dec 2025 02:55:46 +0000 Manifest next update: Mon 08 Dec 2025 09:29:46 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8=) 2: 62F71C75A752B45AE4B51A4E7010124979820A90.crl (hash: s9VPEFjpph0ED7uvHZ3x4fw28pjeU/+4oHub4z1qt+M=) 3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Eu+4u02FPo/RfVFVxOIqvYkg8/wWVoya955tDIny+5E=) 4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a5:31:d4:28:3a:7b:d5:2e:28:79:35:1d:de:53:6f:f4:b7:ac:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: Dec 5 02:55:46 2025 GMT Not After : Dec 8 09:29:46 2025 GMT Subject: CN=04A1A8829A035C66D7D963EB27F9A5878AE558E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:c8:3a:c1:43:94:6e:02:14:59:1c:0a:10: 4f:5b:ed:6d:5f:84:6a:50:7a:7d:c3:15:c3:74:cb: ce:20:b1:f9:aa:f9:aa:c3:53:26:8f:f9:8a:d4:4b: 59:e6:9f:b9:0f:a2:c0:65:bb:3f:fd:fc:52:bf:a9: 5b:f1:17:68:0f:0e:a9:78:2a:09:d0:e8:a7:5b:3d: 9d:17:f1:5f:13:16:b5:6d:b6:af:69:5a:a5:e6:3d: 26:5a:33:37:37:8d:06:15:85:2b:12:08:09:1b:d0: 7a:6c:26:90:64:fa:ba:9c:5b:e9:5a:21:7d:8b:42: fc:25:61:3f:07:20:17:74:43:ca:b2:48:81:f7:c1: ab:ee:4c:d7:60:50:fe:c7:d5:47:09:f6:8d:1d:e8: 19:4b:57:62:dd:69:01:9a:1f:0f:86:e7:27:3c:c4: cf:77:4b:c1:6d:87:8a:b5:b7:b6:33:1b:61:44:97: d0:b7:27:17:ee:83:3b:b2:48:37:1b:86:cb:f8:30: 7a:23:78:f2:be:13:c4:8f:3b:59:4c:f6:c4:27:09: e3:d3:c4:f3:1f:af:ad:37:a1:bf:63:43:2c:a4:be: 48:d2:56:45:32:0e:2a:47:d7:6a:ad:0e:85:98:a0: 9a:d0:db:21:85:32:2e:54:54:a5:b8:6f:a9:a6:53: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:A8:82:9A:03:5C:66:D7:D9:63:EB:27:F9:A5:87:8A:E5:58:E0 X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ac:81:c0:43:31:75:96:2f:7b:06:4a:68:15:6b:3e:e6:35: f6:45:98:90:d3:eb:2a:bb:24:3f:3f:fa:b5:7d:60:e7:f9:60: 0b:42:d4:ba:a0:6e:5f:60:da:f0:b2:8d:f3:f6:b4:bc:95:c6: 78:f0:2c:a8:be:7d:59:1c:67:59:62:5c:3a:24:43:60:e0:d8: 77:dc:ec:70:6c:0b:84:02:13:45:09:ce:24:85:24:86:06:de: fc:38:d3:38:1b:9b:eb:ff:c0:ee:14:ed:ed:aa:ca:9a:6e:a4: da:66:ea:28:a2:fd:2b:6f:5d:44:20:63:7a:f2:8e:85:82:c7: 3f:70:c5:cf:02:f7:42:1a:ab:3d:d9:b1:b8:a2:ea:9a:c3:33: 45:c6:ba:a8:ad:12:8c:7c:49:54:20:b1:e5:d1:40:69:2f:75: 9f:07:b3:6c:e7:bb:c6:b7:6b:09:4c:da:19:a9:8c:77:80:17: e0:d7:2a:1d:24:38:b9:3f:4b:14:ed:41:9a:35:fb:d4:e4:56: 4b:66:d8:23:c1:1b:f8:10:2a:67:43:b7:7c:9c:ed:7a:12:ff: b9:fd:90:05:01:ed:a9:06:33:8a:f3:5d:00:ce:92:3f:61:88: 6e:80:03:9d:72:b9:bd:e9:5d:fc:b4:59:95:63:c1:32:c5:4d: c6:d1:41:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKUx1Cg6e9UuKHk1Hd5Tb/S3rBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTEyMDUwMjU1NDZaFw0yNTEyMDgwOTI5NDZaMDMxMTAvBgNV BAMTKDA0QTFBODgyOUEwMzVDNjZEN0Q5NjNFQjI3RjlBNTg3OEFFNTU4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIsg6wUOUbgIUWRwKEE9b7W1f hGpQen3DFcN0y84gsfmq+arDUyaP+YrUS1nmn7kPosBluz/9/FK/qVvxF2gPDql4 KgnQ6KdbPZ0X8V8TFrVttq9pWqXmPSZaMzc3jQYVhSsSCAkb0HpsJpBk+rqcW+la IX2LQvwlYT8HIBd0Q8qySIH3wavuTNdgUP7H1UcJ9o0d6BlLV2LdaQGaHw+G5yc8 xM93S8Fth4q1t7YzG2FEl9C3JxfugzuySDcbhsv4MHojePK+E8SPO1lM9sQnCePT xPMfr603ob9jQyykvkjSVkUyDipH12qtDoWYoJrQ2yGFMi5UVKW4b6mmU3TdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBKGogpoDXGbX2WPrJ/mlh4rlWOAwHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEy NDk3OTgyMEE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJusgcBDMXWWL3sGSmgVaz7mNfZFmJDT6yq7 JD8/+rV9YOf5YAtC1Lqgbl9g2vCyjfP2tLyVxnjwLKi+fVkcZ1liXDokQ2Dg2Hfc 7HBsC4QCE0UJziSFJIYG3vw40zgbm+v/wO4U7e2qyppupNpm6iii/StvXUQgY3ry joWCxz9wxc8C90Iaqz3Zsbii6prDM0XGuqitEox8SVQgseXRQGkvdZ8Hs2znu8a3 awlM2hmpjHeAF+DXKh0kOLk/SxTtQZo1+9TkVktm2CPBG/gQKmdDt3yc7XoS/7n9 kAUB7akGM4rzXQDOkj9hiG6AA51yub3pXfy0WZVjwTLFTcbRQWk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:53 2025 by rpki-client