This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: 68AjWbLhUsEMtpqty0oBTmAbCcWvQtw8Ok6BIENGdBk= Subject key identifier: D7:50:7E:24:C6:54:72:48:3C:EA:A8:54:C9:9F:06:EF:D3:70:99:58 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 4330E79F98924BF4439B829DA308C338FF1F234B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 052B Signing time: Thu 04 Dec 2025 19:42:21 +0000 Manifest this update: Thu 04 Dec 2025 19:37:21 +0000 Manifest next update: Mon 08 Dec 2025 00:45:21 +0000 Files and hashes: 1: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: +2/fO8INW6MBjsIr2MpsMr5pDS/07SU3AZAKJ801ins=) 2: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: lThMm8wS1guXHd9e5RHzDevsPuoguVWwR/hfIGAiBNQ=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: dttoTx4BQRFnMAvnuJnvYcnCQ5YOgtytig0qE7CIy64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:30:e7:9f:98:92:4b:f4:43:9b:82:9d:a3:08:c3:38:ff:1f:23:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Dec 4 19:37:21 2025 GMT Not After : Dec 8 00:45:21 2025 GMT Subject: CN=D7507E24C65472483CEAA854C99F06EFD3709958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:41:b6:2b:61:55:41:be:ad:93:de:1f:73: 85:92:69:c0:81:cf:54:d6:dc:04:7d:54:0b:0b:41: 10:eb:91:50:b6:51:26:63:37:bc:1a:c5:f9:13:31: 30:a0:09:44:e5:e2:06:69:e2:c5:b9:fa:17:5f:62: a1:ca:7e:98:cc:3e:c4:0b:1e:23:8d:d3:37:a2:38: df:bb:3c:ab:40:46:8c:0c:a6:f2:51:99:c9:df:09: 58:6a:eb:da:6b:71:34:ed:19:0f:18:43:a1:a3:c6: b9:95:04:0e:c5:d2:1c:b7:dd:cc:2d:2d:f1:a9:76: b2:14:ff:f1:72:11:8a:43:4d:8b:2b:f6:9c:dd:df: 23:9f:00:6e:46:0f:a3:27:52:8c:e0:e5:40:0f:74: 15:17:90:9f:64:99:67:e0:59:06:75:28:86:11:83: 75:53:77:ef:75:6b:f9:8d:0f:5d:23:6a:c6:c6:3a: d4:e0:f0:a0:6e:ea:01:50:11:5d:93:ef:cb:3d:a2: 02:20:33:ac:f1:27:1c:e9:fd:48:f2:79:71:cc:ce: 5a:e7:ad:a4:1a:19:48:de:9e:70:9a:bb:5a:5f:41: bf:6c:d0:ea:a5:8d:43:80:4f:15:ae:a0:fe:04:71: 8b:f8:1d:dc:72:6e:19:a8:ed:26:d0:b6:91:f2:e8: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:7E:24:C6:54:72:48:3C:EA:A8:54:C9:9F:06:EF:D3:70:99:58 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e7:46:94:f6:31:01:67:58:42:b5:b3:a5:e3:7a:3a:38:7f: b9:cc:18:e7:99:15:a7:33:23:78:6e:e4:fa:3f:93:fb:a0:b4: 76:05:5a:8c:92:51:e3:11:52:63:e6:b7:3b:ae:59:3d:22:d9: ee:e8:ff:ca:1b:34:fb:91:13:d2:f5:66:fa:e1:29:54:94:2b: 46:62:2e:28:1d:3f:11:79:23:ce:81:b3:68:3d:99:68:3c:14: e1:e3:46:e1:41:7e:33:c5:f2:9f:f6:a1:e3:39:52:70:64:e6: 3e:ca:af:09:3a:67:cc:78:f6:2a:ed:f0:18:ce:fb:8f:21:c6: 31:a4:09:ea:19:a1:1f:9e:1d:de:cd:ec:b7:8f:61:ed:87:53: e0:d0:df:47:f3:53:9d:3e:ff:7a:ed:68:cb:a5:41:02:8c:92: d3:aa:01:82:e9:09:81:5e:fe:7f:6e:61:fa:af:3d:ec:1a:96: f7:a6:a2:96:1b:51:f8:0c:22:44:c6:97:20:84:53:ce:49:51: c9:7c:16:a9:95:d7:c2:12:33:42:12:bb:9e:3b:71:fd:89:a6: 92:8f:7c:8f:6a:2e:b8:ff:e2:d8:ce:9c:38:67:b1:6d:54:c3: 2c:30:c4:cc:d5:62:81:59:87:06:0c:79:57:d8:7c:a6:27:ee: 81:26:eb:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzDnn5iSS/RDm4KdowjDOP8fI0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTEyMDQxOTM3MjFaFw0yNTEyMDgwMDQ1MjFaMDMxMTAvBgNV BAMTKEQ3NTA3RTI0QzY1NDcyNDgzQ0VBQTg1NEM5OUYwNkVGRDM3MDk5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigEG2K2FVQb6tk94fc4WSacCB z1TW3AR9VAsLQRDrkVC2USZjN7waxfkTMTCgCUTl4gZp4sW5+hdfYqHKfpjMPsQL HiON0zeiON+7PKtARowMpvJRmcnfCVhq69prcTTtGQ8YQ6GjxrmVBA7F0hy33cwt LfGpdrIU//FyEYpDTYsr9pzd3yOfAG5GD6MnUozg5UAPdBUXkJ9kmWfgWQZ1KIYR g3VTd+91a/mND10jasbGOtTg8KBu6gFQEV2T78s9ogIgM6zxJxzp/UjyeXHMzlrn raQaGUjennCau1pfQb9s0OqljUOATxWuoP4EcYv4Hdxybhmo7SbQtpHy6CxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11B+JMZUckg86qhUyZ8G79NwmVgwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHnRpT2MQFnWEK1s6Xjejo4f7nMGOeZFacz I3hu5Po/k/ugtHYFWoySUeMRUmPmtzuuWT0i2e7o/8obNPuRE9L1ZvrhKVSUK0Zi LigdPxF5I86Bs2g9mWg8FOHjRuFBfjPF8p/2oeM5UnBk5j7Krwk6Z8x49irt8BjO +48hxjGkCeoZoR+eHd7N7LePYe2HU+DQ30fzU50+/3rtaMulQQKMktOqAYLpCYFe /n9uYfqvPewalvemopYbUfgMIkTGlyCEU85JUcl8FqmV18ISM0ISu547cf2JppKP fI9qLrj/4tjOnDhnsW1UwywwxMzVYoFZhwYMeVfYfKYn7oEm69w= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:33 2025 by rpki-client