This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: 41yfaNiMd7OqFybgLXcbVXvom4rf7frm3LpciRuftkc= Subject key identifier: 10:F1:77:CD:6D:48:66:88:5F:71:4D:A5:1D:70:31:5B:3A:0A:1D:EB Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 1B97542B1A188771CEDD180CF6DE75EF9D14079C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 04AA Signing time: Sat 06 Dec 2025 14:22:10 +0000 Manifest this update: Sat 06 Dec 2025 14:17:10 +0000 Manifest next update: Tue 09 Dec 2025 19:46:10 +0000 Files and hashes: 1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=) 2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: KhvKhTFsnQOKFx2guwBV7RYjS+bU7Uv/DUhrPQngdck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:97:54:2b:1a:18:87:71:ce:dd:18:0c:f6:de:75:ef:9d:14:07:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Dec 6 14:17:10 2025 GMT Not After : Dec 9 19:46:10 2025 GMT Subject: CN=10F177CD6D4866885F714DA51D70315B3A0A1DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:a6:e6:11:ce:33:3d:29:da:2e:5a:14:e9: 7e:36:cd:60:45:ae:fe:50:b2:22:98:c7:b0:34:77: 06:c6:fe:1b:18:22:e3:0f:da:02:18:92:3a:75:a5: 5c:d1:5d:42:f4:a7:ce:ca:be:03:1c:42:12:34:03: c5:80:52:77:3e:57:3b:5d:2d:c4:e3:1e:be:f0:37: 4d:b2:74:f5:5b:66:c2:8f:e8:95:77:97:e3:85:51: 21:b0:47:26:ba:f1:bc:6e:e3:38:f1:48:4a:b0:1f: a2:da:57:b8:63:75:e2:fd:ad:3d:2d:b2:41:d4:3a: db:92:0f:91:03:e8:9d:81:08:3c:ea:15:40:2f:b9: f6:1f:c4:8e:c4:03:9d:31:db:2e:4a:1b:8e:6f:5a: 27:66:02:41:d7:f4:5a:10:a4:10:7d:f3:d2:95:02: 10:30:e2:3a:ff:a3:c8:1b:ac:a0:19:03:2b:b8:1a: 4d:73:3a:5b:52:65:8a:3d:92:61:3c:86:21:4f:1c: ea:3c:bc:5c:f1:9c:50:5c:92:2f:2a:af:79:db:ab: eb:f5:b4:7e:ff:df:ee:0c:b8:1f:f4:04:9b:f4:00: 53:a7:6d:49:c2:c9:3f:17:e2:cf:a0:8d:01:7c:54: 6a:e4:86:0b:7e:95:3e:1a:09:f4:82:e6:bd:e2:47: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:77:CD:6D:48:66:88:5F:71:4D:A5:1D:70:31:5B:3A:0A:1D:EB X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:c1:f5:73:b3:12:ef:6a:34:37:50:22:dc:f7:b0:f2:7b: ec:7c:8b:66:38:bf:08:a2:dc:be:72:b4:07:e4:7f:29:70:9e: 0e:7b:41:56:2a:b7:6f:f9:2c:bc:7d:c9:bb:b6:8e:13:63:cc: af:51:6c:90:ef:d4:e3:85:94:b4:f8:1f:a4:11:bb:fa:09:69: 7b:a0:1b:2a:9d:d5:58:20:9a:39:3f:d0:b2:ab:13:0d:58:6c: 13:7a:30:6b:93:93:e4:ac:69:c8:04:ed:3f:bf:13:d3:27:16: 01:5d:52:2b:a1:29:b8:eb:2c:75:21:a1:11:e5:d4:d6:6b:0e: f0:c8:5b:4a:e8:87:ba:82:c5:fd:0e:95:ca:f9:4c:d9:9e:24: cb:27:07:ae:ef:77:94:29:e2:5c:07:8f:eb:a9:93:ad:d4:c9: 60:d0:db:49:3b:2e:df:dd:59:05:95:c7:d6:7c:49:12:57:25: 96:46:7b:0c:50:9d:c6:dd:3c:e0:3b:ea:a0:9b:1b:61:3f:53: 74:e1:92:c3:1d:33:82:3e:77:b3:87:f4:9b:6b:7f:b7:bc:e4: 8f:ca:69:2f:8b:29:92:e4:cc:2b:c3:ec:02:9e:83:f8:5d:c4: 3a:f9:e8:41:c2:01:fc:12:4d:99:53:8c:80:16:de:09:64:6b: 92:97:72:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5dUKxoYh3HO3RgM9t51750UB5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTEyMDYxNDE3MTBaFw0yNTEyMDkxOTQ2MTBaMDMxMTAvBgNV BAMTKDEwRjE3N0NENkQ0ODY2ODg1RjcxNERBNTFENzAzMTVCM0EwQTFERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7g6bmEc4zPSnaLloU6X42zWBF rv5QsiKYx7A0dwbG/hsYIuMP2gIYkjp1pVzRXUL0p87KvgMcQhI0A8WAUnc+Vztd LcTjHr7wN02ydPVbZsKP6JV3l+OFUSGwRya68bxu4zjxSEqwH6LaV7hjdeL9rT0t skHUOtuSD5ED6J2BCDzqFUAvufYfxI7EA50x2y5KG45vWidmAkHX9FoQpBB989KV AhAw4jr/o8gbrKAZAyu4Gk1zOltSZYo9kmE8hiFPHOo8vFzxnFBcki8qr3nbq+v1 tH7/3+4MuB/0BJv0AFOnbUnCyT8X4s+gjQF8VGrkhgt+lT4aCfSC5r3iRx21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPF3zW1IZohfcU2lHXAxWzoKHeswHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIJwfVzsxLvajQ3UCLc97Dye+x8i2Y4vwii 3L5ytAfkfylwng57QVYqt2/5LLx9ybu2jhNjzK9RbJDv1OOFlLT4H6QRu/oJaXug Gyqd1Vggmjk/0LKrEw1YbBN6MGuTk+SsacgE7T+/E9MnFgFdUiuhKbjrLHUhoRHl 1NZrDvDIW0roh7qCxf0Olcr5TNmeJMsnB67vd5Qp4lwHj+upk63UyWDQ20k7Lt/d WQWVx9Z8SRJXJZZGewxQncbdPOA76qCbG2E/U3ThksMdM4I+d7OH9Jtrf7e85I/K aS+LKZLkzCvD7AKeg/hdxDr56EHCAfwSTZlTjIAW3glka5KXcuQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:38 2025 by rpki-client