This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: 2EbaPvDBmjk1vsn3bJVZKizF/IJ+43h/z3ZsFnb2Bgc= Subject key identifier: A1:29:A1:AD:E9:69:94:7E:82:C8:46:CA:B0:D9:AA:9F:85:D2:C7:99 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 14A100FD2ECB426C781B578EB65FA91F428830E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 041A Signing time: Fri 05 Dec 2025 23:02:02 +0000 Manifest this update: Fri 05 Dec 2025 22:57:02 +0000 Manifest next update: Tue 09 Dec 2025 07:28:02 +0000 Files and hashes: 1: AS23693.roa (hash: 2OeAAmf8g6ko0+S0040YHAvcujONBCPKazmiJ6Yl4Lg=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: ZKMYSONssJA+UadxuiwvcldH08mcI+93yMhaDJOAyU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a1:00:fd:2e:cb:42:6c:78:1b:57:8e:b6:5f:a9:1f:42:88:30:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Dec 5 22:57:02 2025 GMT Not After : Dec 9 07:28:02 2025 GMT Subject: CN=A129A1ADE969947E82C846CAB0D9AA9F85D2C799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:7e:d2:7b:ff:4e:55:e6:03:aa:0f:82:1b: 24:54:92:8b:63:fb:0b:2d:58:f4:0a:14:ae:da:fb: 12:b0:16:00:92:48:da:ee:89:b2:b2:1c:23:d3:fd: a3:83:64:b2:45:a7:a3:2a:07:b2:1e:3b:2d:65:d2: 0e:ca:ca:46:f3:5f:87:84:6e:91:b9:d2:8a:f3:d9: 73:ec:bc:96:c7:03:00:2f:8f:c3:51:73:b7:50:ba: 3b:2c:8f:f3:14:cd:87:6a:73:5b:71:ac:24:48:cd: c2:92:78:03:12:67:b6:28:ac:dc:55:50:ce:47:b7: 20:62:11:0d:5d:aa:cd:a8:ca:43:8b:89:70:51:09: 9f:1b:06:34:06:40:62:13:7f:b1:c9:14:8a:cc:1f: ed:88:6b:5f:27:f9:22:89:91:ee:e6:a4:a7:0b:9d: 94:f8:b1:5a:c5:88:ca:22:ca:32:41:51:fd:87:7d: 1f:50:8b:c9:5c:72:a7:6e:36:b2:1c:69:f8:30:b9: 48:29:e2:40:1a:a1:74:87:5f:e8:74:ba:e6:5b:ed: 92:ac:ac:f2:f6:a5:41:8d:57:0a:a3:01:10:a5:f1: 86:cb:6b:64:b2:ab:ad:38:8d:20:3e:13:52:9c:22: 76:46:2e:d7:19:dc:26:9a:da:74:44:b6:1e:00:92: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:A1:AD:E9:69:94:7E:82:C8:46:CA:B0:D9:AA:9F:85:D2:C7:99 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:fa:7c:09:66:65:79:dd:fe:1d:30:57:8d:22:0e:3e:73: e8:36:a5:1a:9d:bd:d4:a6:f0:48:e8:8a:9b:39:2b:92:24:d6: cb:bb:3b:a3:4a:8a:2e:57:29:fe:05:28:06:22:da:b9:a7:65: 61:b1:05:d5:a6:0f:d9:76:59:b9:cc:49:d9:4b:a3:f4:ba:ba: 2f:39:61:08:65:f9:62:23:ff:2b:f0:24:3a:1e:30:6b:ca:f8: d3:f5:86:28:72:b4:be:42:d3:8d:76:90:e8:89:af:37:d4:66: aa:88:4c:d5:65:98:fa:2f:0f:90:ac:3f:9d:79:66:22:9c:d1: 56:52:28:a9:78:4f:be:40:f3:12:bc:10:85:b4:7e:95:df:6c: be:82:74:25:76:76:aa:74:11:93:ec:e2:ab:09:1d:ae:4a:31: d4:11:20:07:0b:d8:9e:d7:db:89:34:25:24:76:81:9a:a7:24: b1:cb:50:18:1c:03:de:36:82:51:f1:91:91:30:06:bf:81:dc: 65:01:dc:7b:46:f4:fc:81:64:58:68:8d:8c:bb:7a:11:da:71: 1d:87:b1:f6:3c:bb:7e:fd:c9:81:4a:d1:92:ae:85:e6:d1:8c: 4c:1f:65:bb:b8:f7:ab:ab:05:de:c8:bb:a5:03:e7:a2:37:77: ad:61:ba:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKEA/S7LQmx4G1eOtl+pH0KIMOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTEyMDUyMjU3MDJaFw0yNTEyMDkwNzI4MDJaMDMxMTAvBgNV BAMTKEExMjlBMUFERTk2OTk0N0U4MkM4NDZDQUIwRDlBQTlGODVEMkM3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOR37Se/9OVeYDqg+CGyRUkotj +wstWPQKFK7a+xKwFgCSSNruibKyHCPT/aODZLJFp6MqB7IeOy1l0g7KykbzX4eE bpG50orz2XPsvJbHAwAvj8NRc7dQujssj/MUzYdqc1txrCRIzcKSeAMSZ7YorNxV UM5HtyBiEQ1dqs2oykOLiXBRCZ8bBjQGQGITf7HJFIrMH+2Ia18n+SKJke7mpKcL nZT4sVrFiMoiyjJBUf2HfR9Qi8lccqduNrIcafgwuUgp4kAaoXSHX+h0uuZb7ZKs rPL2pUGNVwqjARCl8YbLa2Syq604jSA+E1KcInZGLtcZ3Caa2nREth4AkqkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSmhrelplH6CyEbKsNmqn4XSx5kwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9f+nwJZmV53f4dMFeNIg4+c+g2pRqdvdSm 8Ejoips5K5Ik1su7O6NKii5XKf4FKAYi2rmnZWGxBdWmD9l2WbnMSdlLo/S6ui85 YQhl+WIj/yvwJDoeMGvK+NP1hihytL5C0412kOiJrzfUZqqITNVlmPovD5CsP515 ZiKc0VZSKKl4T75A8xK8EIW0fpXfbL6CdCV2dqp0EZPs4qsJHa5KMdQRIAcL2J7X 24k0JSR2gZqnJLHLUBgcA942glHxkZEwBr+B3GUB3HtG9PyBZFhojYy7ehHacR2H sfY8u379yYFK0ZKuhebRjEwfZbu496urBd7Iu6UD56I3d61huns= -----END CERTIFICATE-----Generated at Sat Dec 6 22:33:03 2025 by rpki-client