This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: MFFIiZALSK5XHyI8noF5pmr51a0i4+7hCn6EsBqld8Q= Subject key identifier: 34:C0:CA:F0:29:86:04:79:59:F6:77:68:2E:3E:79:18:22:56:D4:87 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 13BD2E8ADA13A777D7B7B6795E052FD0D0AD88F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0357 Signing time: Fri 19 Dec 2025 18:52:44 +0000 Manifest this update: Fri 19 Dec 2025 18:47:44 +0000 Manifest next update: Mon 22 Dec 2025 20:43:44 +0000 Files and hashes: 1: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) 2: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: B4go5zxTE42TgoD07AFYg5G4JDmyccPr+wfvYvs7FJo=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:2e:8a:da:13:a7:77:d7:b7:b6:79:5e:05:2f:d0:d0:ad:88:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Dec 19 18:47:44 2025 GMT Not After : Dec 22 20:43:44 2025 GMT Subject: CN=34C0CAF02986047959F677682E3E79182256D487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:06:13:e8:6c:3a:73:b8:cf:cb:20:27:89: 42:b8:c4:92:cb:6d:af:dc:64:b8:4a:da:56:2f:2a: ce:8e:cb:89:8a:a5:70:15:af:03:1a:f3:7f:48:f3: e6:0d:22:4b:95:fe:d5:a6:e8:3a:2d:b9:5a:a7:d2: 42:d9:99:d4:99:85:6f:8c:e6:cd:a6:56:c9:39:b4: 3a:f2:25:d2:0c:c0:5a:d7:02:de:3e:1e:cd:b3:6e: 22:64:88:0c:0a:ec:a2:4b:fe:d1:33:48:8a:40:cf: b4:82:8b:80:08:0e:c4:e5:ff:03:74:f8:10:6d:86: c6:d5:0e:44:9d:46:17:24:ed:ea:08:72:df:10:e3: a7:f0:82:9a:ce:c9:a0:39:6d:13:8a:e3:c9:49:cc: b3:0d:f5:a3:b7:22:c7:1d:bd:a6:19:3f:4f:82:3e: 90:35:2a:42:3a:9e:1f:22:07:1a:38:08:98:e9:01: 69:77:8b:94:18:ba:6d:5d:fa:7d:12:26:ea:a4:32: e5:d1:6d:96:49:5d:56:05:4a:62:10:30:f2:cb:0b: 37:49:04:93:cf:05:24:14:ec:d9:b5:53:5e:2e:92: 6a:37:db:75:c1:bc:0d:87:d3:5c:4e:a5:c2:ea:0e: b4:5f:ef:2b:69:25:ef:fe:a6:27:df:6d:9a:39:da: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:CA:F0:29:86:04:79:59:F6:77:68:2E:3E:79:18:22:56:D4:87 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:da:77:db:64:fe:d3:20:f7:8e:f0:7b:2c:49:f7:38:69: ca:ef:29:be:cc:79:c2:5c:7b:57:13:d7:d2:5a:9d:e3:c4:da: a4:0e:08:35:b3:30:f9:77:e2:ee:c5:28:de:e4:22:ca:2e:38: ec:ca:bd:03:3e:7f:36:05:e0:3d:86:06:c4:0e:6f:73:5c:df: ed:b3:7b:6b:66:d2:ba:cf:ec:72:70:2b:49:ed:46:eb:02:f8: 3f:00:39:56:ae:a2:6c:52:a4:61:85:1a:a5:e4:4c:af:fc:d6: 8b:9e:bc:4b:6e:c2:46:ee:87:de:6e:0b:a5:e2:8b:f8:63:36: f7:70:3a:c8:96:7b:65:21:40:36:1c:a1:86:e4:25:8b:19:30: c6:eb:60:e0:29:0b:7b:91:75:68:cc:7e:57:c1:24:0a:e9:0c: 13:0e:d3:4d:f2:ff:b9:c4:bd:95:b1:e2:d8:b3:0e:78:77:2f: ca:06:98:57:a0:3b:f9:c3:ed:a6:f8:dd:0d:8f:08:2e:5e:b5: 5b:87:49:1e:49:66:61:83:6d:aa:ce:36:9f:5e:a1:14:92:42: cd:db:34:e6:da:0c:45:3d:4a:6b:42:a6:3e:17:38:a8:62:f5: fb:b1:0d:3d:4e:2d:99:ca:a3:a1:42:f9:e1:f0:52:74:d7:ab: ce:9a:22:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE70uitoTp3fXt7Z5XgUv0NCtiPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTEyMTkxODQ3NDRaFw0yNTEyMjIyMDQzNDRaMDMxMTAvBgNV BAMTKDM0QzBDQUYwMjk4NjA0Nzk1OUY2Nzc2ODJFM0U3OTE4MjI1NkQ0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FwYT6Gw6c7jPyyAniUK4xJLL ba/cZLhK2lYvKs6Oy4mKpXAVrwMa839I8+YNIkuV/tWm6DotuVqn0kLZmdSZhW+M 5s2mVsk5tDryJdIMwFrXAt4+Hs2zbiJkiAwK7KJL/tEzSIpAz7SCi4AIDsTl/wN0 +BBthsbVDkSdRhck7eoIct8Q46fwgprOyaA5bROK48lJzLMN9aO3IscdvaYZP0+C PpA1KkI6nh8iBxo4CJjpAWl3i5QYum1d+n0SJuqkMuXRbZZJXVYFSmIQMPLLCzdJ BJPPBSQU7Nm1U14ukmo323XBvA2H01xOpcLqDrRf7ytpJe/+piffbZo52qsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNMDK8CmGBHlZ9ndoLj55GCJW1IcwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaI2nfbZP7TIPeO8HssSfc4acrvKb7MecJc e1cT19JanePE2qQOCDWzMPl34u7FKN7kIsouOOzKvQM+fzYF4D2GBsQOb3Nc3+2z e2tm0rrP7HJwK0ntRusC+D8AOVauomxSpGGFGqXkTK/81ouevEtuwkbuh95uC6Xi i/hjNvdwOsiWe2UhQDYcoYbkJYsZMMbrYOApC3uRdWjMflfBJArpDBMO003y/7nE vZWx4tizDnh3L8oGmFegO/nD7ab43Q2PCC5etVuHSR5JZmGDbarONp9eoRSSQs3b NObaDEU9SmtCpj4XOKhi9fuxDT1OLZnKo6FC+eHwUnTXq86aInM= -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:08 2025 by rpki-client