This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: ZmnSWxIC1MskdI362SAQ4RuWFVwRg4CWAdCeMv6+QJ4= Subject key identifier: C4:6C:B6:02:4F:B2:BE:E0:5A:B8:B0:BF:13:AA:C3:3B:B0:5A:33:ED Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 72265CF4A1BB67A5BE2CA44088C9FE0A28E8757C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0537 Signing time: Sat 06 Dec 2025 11:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:56:55 +0000 Manifest next update: Tue 09 Dec 2025 11:48:55 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 2: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 4: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: f1ZFgMpuMEw8NDz9WGPSXVY902AmpFz4Hyv5IktkCic=) 5: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:26:5c:f4:a1:bb:67:a5:be:2c:a4:40:88:c9:fe:0a:28:e8:75:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Dec 6 10:56:55 2025 GMT Not After : Dec 9 11:48:55 2025 GMT Subject: CN=C46CB6024FB2BEE05AB8B0BF13AAC33BB05A33ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:5d:9c:83:7b:9b:b5:63:ef:91:b3:9b:29: c8:b6:48:05:6e:4e:aa:fd:a6:e8:c5:e8:33:9f:de: 09:11:98:a6:89:fd:14:77:a4:78:79:d5:80:32:bc: d6:fa:cf:0d:09:2d:2b:e3:2a:54:d7:bd:7f:94:e9: 0b:81:6a:c1:78:34:c2:88:42:9e:f4:c7:19:84:65: bb:88:16:be:5d:f0:5a:08:89:4a:ca:71:c5:9d:17: 42:e1:73:ad:d3:80:fb:92:b1:37:9d:39:b2:c8:29: c7:55:8d:5d:f9:25:b1:93:39:32:bb:fb:81:e3:7d: 17:25:02:b1:a8:a9:e9:b2:e6:af:1e:82:b2:b1:b6: d3:24:24:cd:23:02:fe:3c:c0:ae:7e:23:02:ba:e3: 57:46:f5:04:d4:eb:df:66:51:e3:dc:ff:1c:40:64: 25:5e:5e:84:58:45:a2:0d:3d:2c:90:6d:1a:b6:1b: 12:27:75:51:e7:58:6e:4e:ae:1c:e6:1a:f9:63:6c: 85:fd:2b:f1:57:7e:cd:82:2e:6e:9b:6d:7c:73:cc: 32:27:11:ca:ed:b8:8a:5b:59:c6:22:38:ec:27:35: 69:40:42:1a:19:3a:e4:91:3a:3b:a4:c0:92:55:1d: 20:9b:4d:48:94:bc:f6:4c:4e:39:44:b9:df:72:3f: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:B6:02:4F:B2:BE:E0:5A:B8:B0:BF:13:AA:C3:3B:B0:5A:33:ED X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:35:cb:2a:8c:97:48:16:bc:e7:87:5f:47:bd:4a:94:2b:b8: 90:c3:6a:8b:91:d0:ab:01:71:bc:f3:9a:37:08:2f:f9:0b:b6: 18:83:b3:09:79:21:41:37:92:d6:cb:c8:5f:e6:30:b5:dc:5a: 09:67:a3:91:45:e8:e9:63:ec:5d:be:2c:25:d6:4b:27:f7:29: 15:7a:88:d6:da:20:9d:27:95:f6:cc:3a:b4:66:58:41:04:19: 0d:70:4b:92:71:93:3e:14:55:3b:7c:e7:74:3e:d1:15:a6:0f: dc:ff:f6:04:c8:ad:de:78:3d:2d:f3:2c:30:e5:0e:59:00:d4: d0:69:f6:af:0e:9b:a5:11:d0:89:ed:b4:4e:b5:b7:65:e3:33: 26:05:43:15:7b:a9:bc:34:91:47:8e:ca:b5:96:c2:53:8c:49: 06:30:56:25:7d:e5:1a:c4:fa:93:46:b1:8e:10:a3:5e:5f:70: 46:1d:25:7c:96:51:c6:c0:ad:b1:31:02:e7:ca:73:c5:4e:ec: 47:37:2d:01:19:d7:ff:ee:01:75:63:6e:d3:df:b2:3f:15:de: ba:6c:29:f3:f9:0b:bf:52:96:d9:a9:b9:c1:9b:6e:d2:71:fd: 2b:f7:4b:cf:88:95:d7:e6:13:cc:08:ec:40:b8:95:73:4d:a1: 2b:75:d0:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciZc9KG7Z6W+LKRAiMn+CijodXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEyMDYxMDU2NTVaFw0yNTEyMDkxMTQ4NTVaMDMxMTAvBgNV BAMTKEM0NkNCNjAyNEZCMkJFRTA1QUI4QjBCRjEzQUFDMzNCQjA1QTMzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcF2cg3ubtWPvkbObKci2SAVu Tqr9pujF6DOf3gkRmKaJ/RR3pHh51YAyvNb6zw0JLSvjKlTXvX+U6QuBasF4NMKI Qp70xxmEZbuIFr5d8FoIiUrKccWdF0Lhc63TgPuSsTedObLIKcdVjV35JbGTOTK7 +4HjfRclArGoqemy5q8egrKxttMkJM0jAv48wK5+IwK641dG9QTU699mUePc/xxA ZCVeXoRYRaINPSyQbRq2GxIndVHnWG5OrhzmGvljbIX9K/FXfs2CLm6bbXxzzDIn EcrtuIpbWcYiOOwnNWlAQhoZOuSROjukwJJVHSCbTUiUvPZMTjlEud9yP+szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGy2Ak+yvuBauLC/E6rDO7BaM+0wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc1yyqMl0gWvOeHX0e9SpQruJDDaouR0KsB cbzzmjcIL/kLthiDswl5IUE3ktbLyF/mMLXcWglno5FF6Olj7F2+LCXWSyf3KRV6 iNbaIJ0nlfbMOrRmWEEEGQ1wS5Jxkz4UVTt853Q+0RWmD9z/9gTIrd54PS3zLDDl DlkA1NBp9q8Om6UR0InttE61t2XjMyYFQxV7qbw0kUeOyrWWwlOMSQYwViV95RrE +pNGsY4Qo15fcEYdJXyWUcbArbExAufKc8VO7Ec3LQEZ1//uAXVjbtPfsj8V3rps KfP5C79SltmpucGbbtJx/Sv3S8+IldfmE8wI7EC4lXNNoSt10Mo= -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:37 2025 by rpki-client