This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: 04C519LOzhjROaV6wdFu/k9qz/fhVMXPXdoPOUbp31Y= Subject key identifier: 59:97:F9:69:9E:0D:EF:05:FF:26:AB:29:63:3B:5C:45:7C:47:CC:B6 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 3274A5770417EE098A9E3176A134B57C40A7A8D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02EE Signing time: Sat 06 Dec 2025 00:12:28 +0000 Manifest this update: Sat 06 Dec 2025 00:07:28 +0000 Manifest next update: Tue 09 Dec 2025 02:35:28 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: 6fzAKCzULVdcAFUbHQSL1iLIKu9nZGJco1uJb/Rj+zY=) 4: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:a5:77:04:17:ee:09:8a:9e:31:76:a1:34:b5:7c:40:a7:a8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Dec 6 00:07:28 2025 GMT Not After : Dec 9 02:35:28 2025 GMT Subject: CN=5997F9699E0DEF05FF26AB29633B5C457C47CCB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:0e:5a:b6:1f:a7:3f:dc:30:a5:cd:5d:55: dd:ba:25:66:86:da:4f:67:b9:5f:b3:0b:93:14:e0: ee:e7:3b:92:39:a8:b9:33:39:08:e7:a0:4d:d9:9f: 46:92:70:62:b8:08:47:13:1b:89:8b:22:86:db:73: 9b:6c:aa:6b:95:23:4a:1e:ff:58:35:96:af:0b:49: 29:84:33:6d:ee:11:99:a5:d1:c7:7f:90:9e:99:b2: 35:d3:b3:74:ca:34:cd:c9:8e:0a:7f:8b:09:b0:d6: 43:1b:eb:8e:93:c4:ff:0f:40:93:4f:1d:b5:69:b9: b8:da:e8:af:e1:de:75:0e:49:99:bb:4e:54:9b:f2: 50:bc:fd:35:ae:5d:7d:ed:8f:38:d8:a9:14:b1:af: d8:34:72:d1:3f:05:9d:57:5f:be:21:7a:3c:52:d8: fe:51:4c:75:4a:fb:7d:70:c8:72:76:27:9c:89:62: 98:c8:12:6e:ce:28:4f:41:df:82:13:8f:9d:a8:53: ae:92:d9:6f:bd:54:c7:a4:31:d6:6e:41:73:b7:0d: 77:0b:aa:75:05:42:1b:68:5d:71:1f:ed:1f:c7:b4: 30:d4:6a:ba:c1:15:41:ac:e3:29:eb:07:c2:40:a0: 5a:7b:51:82:89:d7:16:82:4f:d3:64:af:29:70:84: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:97:F9:69:9E:0D:EF:05:FF:26:AB:29:63:3B:5C:45:7C:47:CC:B6 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3b:6a:eb:96:cb:db:a4:8c:0d:7c:4c:aa:ad:01:e7:5d:1c: ef:7d:d8:09:85:95:40:88:b9:39:f5:de:bc:ca:e3:0c:cb:3a: 8d:06:fb:51:f1:90:35:53:13:d1:15:92:ec:ed:80:b8:23:e9: 62:44:70:41:69:94:e2:01:21:76:5c:2f:10:d6:8a:24:02:d1: a3:a0:3a:4f:77:21:24:bc:3b:e8:64:47:ed:17:1b:dd:bd:a2: 95:9f:32:4a:a1:aa:2f:e1:94:e3:44:a1:1b:2b:ae:73:f9:1f: 9d:d6:64:7f:4f:76:09:fe:a7:72:10:36:96:54:c1:e5:b5:50: 43:d7:c2:88:63:16:94:5f:6a:e4:b3:07:d2:d5:2d:cc:ee:7d: 31:01:fc:a2:e0:61:11:46:e1:46:98:a8:81:e9:a3:e9:1f:40: 16:0b:58:24:2e:4d:51:e5:d8:ad:f4:b8:bc:fe:bf:6d:db:d3: c0:39:0f:7f:bf:93:ea:13:20:f8:15:fa:a9:0d:4d:cc:bb:6c: e9:6f:09:9c:f3:14:40:fe:24:e8:aa:cf:1a:4a:03:08:b0:4d: dd:4e:bb:71:c6:32:b9:6a:1c:da:2f:5d:c0:aa:a7:ea:8e:16: 68:30:8e:52:ae:02:27:57:5a:2c:8e:7f:e5:7a:f5:5d:b7:82: c0:ce:0d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnSldwQX7gmKnjF2oTS1fECnqNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTEyMDYwMDA3MjhaFw0yNTEyMDkwMjM1MjhaMDMxMTAvBgNV BAMTKDU5OTdGOTY5OUUwREVGMDVGRjI2QUIyOTYzM0I1QzQ1N0M0N0NDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5w5ath+nP9wwpc1dVd26JWaG 2k9nuV+zC5MU4O7nO5I5qLkzOQjnoE3Zn0aScGK4CEcTG4mLIobbc5tsqmuVI0oe /1g1lq8LSSmEM23uEZml0cd/kJ6ZsjXTs3TKNM3Jjgp/iwmw1kMb646TxP8PQJNP HbVpubja6K/h3nUOSZm7TlSb8lC8/TWuXX3tjzjYqRSxr9g0ctE/BZ1XX74hejxS 2P5RTHVK+31wyHJ2J5yJYpjIEm7OKE9B34ITj52oU66S2W+9VMekMdZuQXO3DXcL qnUFQhtoXXEf7R/HtDDUarrBFUGs4ynrB8JAoFp7UYKJ1xaCT9NkrylwhKc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZf5aZ4N7wX/JqspYztcRXxHzLYwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY7auuWy9ukjA18TKqtAeddHO992AmFlUCI uTn13rzK4wzLOo0G+1HxkDVTE9EVkuztgLgj6WJEcEFplOIBIXZcLxDWiiQC0aOg Ok93ISS8O+hkR+0XG929opWfMkqhqi/hlONEoRsrrnP5H53WZH9Pdgn+p3IQNpZU weW1UEPXwohjFpRfauSzB9LVLczufTEB/KLgYRFG4UaYqIHpo+kfQBYLWCQuTVHl 2K30uLz+v23b08A5D3+/k+oTIPgV+qkNTcy7bOlvCZzzFED+JOiqzxpKAwiwTd1O u3HGMrlqHNovXcCqp+qOFmgwjlKuAidXWiyOf+V69V23gsDODSs= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:05 2025 by rpki-client