This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: xOC0r78W+DgU+h4WqPfkoBgoZTNvbLa+pakaB916asI= Subject key identifier: 63:6A:63:E0:06:0C:5A:72:31:D2:58:DD:3D:DF:DD:CF:E4:8F:CA:F9 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 01D6E6AE1F4BC4F0904A670D391826102B5590BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 01B9 Signing time: Thu 04 Dec 2025 17:50:41 +0000 Manifest this update: Thu 04 Dec 2025 17:45:41 +0000 Manifest next update: Mon 08 Dec 2025 03:37:41 +0000 Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: HjNuI6MyJUvHsts7M2uEX3O1amBBR+3WczrTsExYZ4Y=) 2: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) 3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d6:e6:ae:1f:4b:c4:f0:90:4a:67:0d:39:18:26:10:2b:55:90:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Dec 4 17:45:41 2025 GMT Not After : Dec 8 03:37:41 2025 GMT Subject: CN=636A63E0060C5A7231D258DD3DDFDDCFE48FCAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:92:a1:ff:de:3e:d3:f0:df:65:29:93:79: 08:46:ad:95:b4:90:8a:02:eb:7d:89:59:a5:3c:33: b1:ce:dd:10:04:53:65:54:c6:5f:80:91:42:65:61: 66:2f:3f:c8:b2:df:45:ba:c7:41:a0:6b:68:68:2f: 8f:7e:14:c0:0a:f4:01:97:6a:6a:d7:66:22:6b:8a: 7b:39:ee:c6:3c:00:26:be:40:dc:64:60:ca:91:61: 20:97:b5:5a:bd:99:a9:af:0d:5e:77:6b:98:de:63: b8:77:23:69:d0:33:02:d0:64:53:f2:9f:8a:7b:d3: 3a:30:32:32:23:71:20:1b:4e:b5:69:9b:9d:70:42: 0c:6d:c5:0c:67:4d:21:1d:91:c3:f7:0e:df:e4:32: ab:ec:5b:fb:b7:21:07:9a:dc:8d:4b:f7:98:89:1d: 05:77:18:33:b5:75:98:94:b7:b8:fa:05:37:87:e9: 08:a0:79:4b:2c:a8:ea:0d:ed:62:52:f8:89:a1:7a: 5f:4a:6e:aa:a5:af:cb:9a:f6:fc:d9:09:20:c4:fe: 53:f0:de:34:9e:aa:d5:00:40:c7:df:4f:58:6a:31: 29:15:68:60:bc:c9:89:1b:5e:9e:2b:61:29:d8:61: 5a:1f:1d:c7:a6:44:5b:d6:ec:5c:eb:32:0a:86:ac: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:63:E0:06:0C:5A:72:31:D2:58:DD:3D:DF:DD:CF:E4:8F:CA:F9 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:40:6f:1b:e7:52:d2:19:ee:95:d3:f0:ce:0b:95:d9:21: 31:30:94:25:85:98:06:e2:c2:ff:04:ce:d6:ca:49:6e:e6:ee: 87:d3:a2:3d:92:15:50:03:cd:bd:9d:7f:22:58:26:f1:18:55: a2:74:4a:a4:22:2e:a4:6d:23:af:dc:0d:cd:9b:53:b6:64:69: 01:09:b0:a8:fe:b1:4c:ff:08:56:b3:bc:fd:e9:df:54:65:8e: d6:3b:09:28:4a:d5:18:e1:a2:af:55:34:45:fb:24:c1:b5:b6: cf:55:b8:03:6d:89:9e:d3:4a:b2:f4:e1:ec:0e:02:43:da:c2: 01:8a:4c:d9:ac:3e:7e:53:91:66:39:88:7d:a3:4d:00:43:4d: f1:e2:9c:6e:8e:26:28:54:0e:29:21:71:2e:c0:b1:f5:1a:2f: 18:2e:66:c9:7a:12:44:14:0d:68:b8:29:b2:d9:ba:71:d3:02: 34:10:2d:c7:37:af:26:1b:7d:1f:8b:16:a6:0a:2c:73:56:d1: ee:0b:21:dd:3e:8b:ba:0b:0d:cc:cf:44:3b:ec:25:87:40:5c: 1e:0a:2e:36:7c:fd:76:a0:42:84:30:c3:06:0c:97:bd:6e:1c: 37:c8:97:d3:38:c6:b4:1e:6f:5e:b1:f9:95:b0:a8:63:d3:36: ad:78:d8:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdbmrh9LxPCQSmcNORgmECtVkLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTEyMDQxNzQ1NDFaFw0yNTEyMDgwMzM3NDFaMDMxMTAvBgNV BAMTKDYzNkE2M0UwMDYwQzVBNzIzMUQyNThERDNEREZERENGRTQ4RkNBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeXJKh/94+0/DfZSmTeQhGrZW0 kIoC632JWaU8M7HO3RAEU2VUxl+AkUJlYWYvP8iy30W6x0Gga2hoL49+FMAK9AGX amrXZiJrins57sY8ACa+QNxkYMqRYSCXtVq9mamvDV53a5jeY7h3I2nQMwLQZFPy n4p70zowMjIjcSAbTrVpm51wQgxtxQxnTSEdkcP3Dt/kMqvsW/u3IQea3I1L95iJ HQV3GDO1dZiUt7j6BTeH6QigeUssqOoN7WJS+Imhel9Kbqqlr8ua9vzZCSDE/lPw 3jSeqtUAQMffT1hqMSkVaGC8yYkbXp4rYSnYYVofHcemRFvW7FzrMgqGrDWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2pj4AYMWnIx0ljdPd/dz+SPyvkwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeFQG8b51LSGe6V0/DOC5XZITEwlCWFmAbi wv8EztbKSW7m7ofToj2SFVADzb2dfyJYJvEYVaJ0SqQiLqRtI6/cDc2bU7ZkaQEJ sKj+sUz/CFazvP3p31RljtY7CShK1Rjhoq9VNEX7JMG1ts9VuANtiZ7TSrL04ewO AkPawgGKTNmsPn5TkWY5iH2jTQBDTfHinG6OJihUDikhcS7AsfUaLxguZsl6EkQU DWi4KbLZunHTAjQQLcc3ryYbfR+LFqYKLHNW0e4LId0+i7oLDczPRDvsJYdAXB4K LjZ8/XagQoQwwwYMl71uHDfIl9M4xrQeb16x+ZWwqGPTNq142K8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:04 2025 by rpki-client