This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: /2AJglp9xl9CBZQiEa2iJdhD0dyffgT6pnFlkCdaApE= Subject key identifier: 37:17:68:C7:34:EF:B1:A8:4E:FE:3F:FB:8E:82:EF:01:B2:02:F6:BE Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 41DC86517C4F9AC4A4C09ED801B2F6127F65FA63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: E7 Signing time: Fri 05 Dec 2025 18:11:29 +0000 Manifest this update: Fri 05 Dec 2025 18:06:29 +0000 Manifest next update: Tue 09 Dec 2025 01:09:29 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: 4e8x30LwcPjpCWp1T2xs0FVAQafSBDG8u5XOWM1mHyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dc:86:51:7c:4f:9a:c4:a4:c0:9e:d8:01:b2:f6:12:7f:65:fa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Dec 5 18:06:29 2025 GMT Not After : Dec 9 01:09:29 2025 GMT Subject: CN=371768C734EFB1A84EFE3FFB8E82EF01B202F6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:fb:b8:14:7b:a4:86:61:ca:1b:f1:2f:93: 8b:62:d0:58:f3:ab:8e:d9:d2:8a:ee:79:7c:9a:59: 66:9e:c4:d1:a3:20:a2:ab:02:a4:f6:b4:ab:24:1a: 45:66:a7:3e:a1:ab:41:e0:87:e4:62:11:c8:7e:dc: 43:21:70:c7:80:1d:11:ea:84:5a:54:b3:32:26:c9: fc:65:53:67:e3:75:de:ed:67:2f:11:c3:ec:1e:89: 19:30:82:8b:51:9a:ce:71:32:55:6f:6a:4c:eb:d5: 2c:2c:17:a4:c0:81:43:91:09:7d:79:88:13:ff:66: 12:df:b4:59:0e:b0:59:ee:88:e1:9a:38:29:45:09: cf:b1:d7:79:d9:9a:81:73:c2:fe:8d:f2:ff:74:4e: 93:8b:5c:c0:32:8f:3f:1a:31:ea:85:ba:9e:98:2a: 56:86:8b:a1:3d:4e:49:07:80:de:7c:d7:0e:a0:15: 3c:14:0f:c2:30:53:44:3c:9e:78:07:8c:9b:fd:ac: 6f:d0:e9:12:b1:f5:2a:13:55:a2:89:f1:f8:e9:aa: 7e:45:d3:28:ff:54:cf:1c:9a:e0:62:24:bb:e6:46: 43:02:52:db:1a:4e:12:68:b0:8f:e3:0e:47:f8:65: 1d:3e:30:51:0f:34:76:6d:90:c3:43:cd:1e:c3:20: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:68:C7:34:EF:B1:A8:4E:FE:3F:FB:8E:82:EF:01:B2:02:F6:BE X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:fd:3a:82:3d:33:56:09:a0:73:6a:28:eb:8d:36:d8:97: 47:2e:fe:2b:28:5a:7b:d5:37:47:d1:28:4d:af:38:0f:0c:66: ac:a5:49:4c:32:b0:06:1d:73:e2:b6:7d:cd:e3:3e:4f:32:75: 88:09:5a:f8:89:f0:11:87:a2:1c:b8:81:f6:2b:86:21:05:2f: 1b:0c:e8:66:c3:8f:64:1a:7e:32:93:76:ed:59:e2:9b:21:01: d8:41:1f:64:c4:f7:74:6c:b2:8f:0d:87:10:25:a2:9f:17:06: e7:58:c6:28:ce:2f:cd:7f:21:89:67:63:18:89:1d:a7:ab:4c: d0:70:85:0d:24:dd:48:01:29:07:55:bc:02:19:10:c4:e8:2e: ee:5f:9a:ca:3f:32:e7:1d:ab:70:2a:27:97:9e:a2:c2:a9:5b: bd:1c:6b:0d:b4:83:bd:1b:27:a7:58:3e:39:16:3b:3a:47:75: 1a:a4:72:06:c7:5d:a0:4c:59:51:02:06:80:60:d2:41:0e:26: 58:d6:08:f3:9e:6d:38:e9:58:3b:ba:9e:12:ee:85:a3:5c:4a: b9:6a:d9:20:18:5a:08:81:14:c5:0f:65:02:ef:c7:f4:2a:cf: 3d:0a:e3:db:d8:27:dd:a3:6a:93:db:8a:b2:63:ff:b2:65:9f: 5d:60:4b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdyGUXxPmsSkwJ7YAbL2En9l+mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTEyMDUxODA2MjlaFw0yNTEyMDkwMTA5MjlaMDMxMTAvBgNV BAMTKDM3MTc2OEM3MzRFRkIxQTg0RUZFM0ZGQjhFODJFRjAxQjIwMkY2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3vu4FHukhmHKG/Evk4ti0Fjz q47Z0orueXyaWWaexNGjIKKrAqT2tKskGkVmpz6hq0Hgh+RiEch+3EMhcMeAHRHq hFpUszImyfxlU2fjdd7tZy8Rw+weiRkwgotRms5xMlVvakzr1SwsF6TAgUORCX15 iBP/ZhLftFkOsFnuiOGaOClFCc+x13nZmoFzwv6N8v90TpOLXMAyjz8aMeqFup6Y KlaGi6E9TkkHgN581w6gFTwUD8IwU0Q8nngHjJv9rG/Q6RKx9SoTVaKJ8fjpqn5F 0yj/VM8cmuBiJLvmRkMCUtsaThJosI/jDkf4ZR0+MFEPNHZtkMNDzR7DIINtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxdoxzTvsahO/j/7joLvAbIC9r4wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHst/TqCPTNWCaBzaijrjTbYl0cu/isoWnvV N0fRKE2vOA8MZqylSUwysAYdc+K2fc3jPk8ydYgJWviJ8BGHohy4gfYrhiEFLxsM 6GbDj2QafjKTdu1Z4pshAdhBH2TE93Rsso8NhxAlop8XBudYxijOL81/IYlnYxiJ HaerTNBwhQ0k3UgBKQdVvAIZEMToLu5fmso/Mucdq3AqJ5eeosKpW70caw20g70b J6dYPjkWOzpHdRqkcgbHXaBMWVECBoBg0kEOJljWCPOebTjpWDu6nhLuhaNcSrlq 2SAYWgiBFMUPZQLvx/Qqzz0K49vYJ92japPbirJj/7Jln11gS7g= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:25 2025 by rpki-client