This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: va6umVTkLZWLeKcqD7isz+qSoaNFbQJIK+4Y2jw3mSQ= Subject key identifier: 1F:43:49:89:7C:C8:AE:63:39:37:98:B4:48:18:14:02:15:EE:A1:17 Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 5EFAFBED83F41B01E8CB5460C2A488D5326E68D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: EC Signing time: Thu 04 Dec 2025 23:30:49 +0000 Manifest this update: Thu 04 Dec 2025 23:25:49 +0000 Manifest next update: Mon 08 Dec 2025 07:48:49 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) 2: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: 32ImpE33XV1wrZ19M8t0no0ALpWxLXIglWYNdLXjg1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fa:fb:ed:83:f4:1b:01:e8:cb:54:60:c2:a4:88:d5:32:6e:68:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Dec 4 23:25:49 2025 GMT Not After : Dec 8 07:48:49 2025 GMT Subject: CN=1F4349897CC8AE63393798B44818140215EEA117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:f4:12:03:06:09:25:ea:d0:25:b1:b7:79: bf:fd:b6:b1:f1:ed:02:21:73:9b:7a:8d:72:b9:92: 70:20:fe:ef:6f:f9:f6:20:e1:a5:df:68:98:d8:c5: e7:bd:92:4c:61:f0:2a:4c:08:4d:85:e8:47:f4:23: 33:88:40:64:da:20:e6:b8:b1:f2:94:4c:52:4a:8a: 68:42:5a:bc:4a:30:84:74:27:77:e8:20:08:ea:c7: 3f:ee:df:7d:06:5b:5c:bf:a4:04:6d:80:56:ba:59: a9:a6:b3:7e:43:34:fc:4a:c7:91:d8:83:e5:c0:fd: b3:16:9f:de:9e:cf:65:dc:10:db:1f:62:74:74:9f: 68:cd:89:2c:8c:68:d5:e5:2f:44:14:73:02:7c:c3: 92:9b:df:4c:7c:da:71:3a:0a:f8:bd:a9:b4:f4:a3: e7:3c:af:02:31:c9:16:85:ae:bf:30:86:94:5a:09: f1:4b:14:d0:1c:92:81:ad:fa:b5:69:7c:e2:d3:6c: 09:9d:c0:50:9a:9f:cb:1e:9e:8f:e0:bf:6a:9a:ca: 66:bc:62:89:c9:fb:6b:b8:e0:a3:53:4f:ed:2b:39: 51:86:0d:e3:f2:55:29:3b:0b:87:0c:10:0e:70:c2: 32:c8:01:b5:95:12:c5:6d:a4:c7:5c:9f:81:75:20: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:49:89:7C:C8:AE:63:39:37:98:B4:48:18:14:02:15:EE:A1:17 X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e0:81:96:84:0a:bd:08:b5:e5:39:61:02:0e:11:1f:91:dd: cb:7c:2f:3f:7e:84:46:44:6f:af:ce:3c:17:25:8c:27:d1:1f: 5d:dd:10:05:0e:8c:0d:63:e7:8a:fd:67:c2:3b:96:01:48:2c: b9:c1:f2:01:28:bb:24:6f:12:c3:e0:d5:70:46:59:9a:40:43: da:44:c0:f6:c8:15:9a:5a:aa:89:51:a9:ef:25:10:f2:8f:d7: d1:10:41:2b:ed:30:d8:54:79:a6:b6:73:b4:60:c9:65:9e:e5: 82:cc:83:56:e9:0c:d5:a5:93:95:06:01:7d:cd:09:0f:31:d9: 30:02:a0:52:40:20:0d:84:c2:8d:04:30:3a:f0:12:03:fe:40: fc:af:d5:fa:a2:bc:7e:54:55:b4:d4:12:f6:87:fc:c3:74:8c: ca:2a:a4:bf:ec:db:b8:ee:c7:23:4b:52:a0:bf:21:78:cc:6b: 83:cb:6e:5d:10:4c:9b:b8:05:1b:20:21:83:d3:6a:c7:17:d1: aa:dd:d8:78:24:4c:d8:89:ec:5e:59:17:fd:7b:b4:e1:c1:24: cc:78:1a:f1:1f:65:78:d6:15:06:1e:06:b2:a0:2f:5a:50:7e: b9:3e:0a:b5:f0:22:f7:11:8d:2d:63:7c:ad:df:6f:6f:87:63: 03:ed:07:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvr77YP0GwHoy1RgwqSI1TJuaNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNTEyMDQyMzI1NDlaFw0yNTEyMDgwNzQ4NDlaMDMxMTAvBgNV BAMTKDFGNDM0OTg5N0NDOEFFNjMzOTM3OThCNDQ4MTgxNDAyMTVFRUExMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7PQSAwYJJerQJbG3eb/9trHx 7QIhc5t6jXK5knAg/u9v+fYg4aXfaJjYxee9kkxh8CpMCE2F6Ef0IzOIQGTaIOa4 sfKUTFJKimhCWrxKMIR0J3foIAjqxz/u330GW1y/pARtgFa6Wamms35DNPxKx5HY g+XA/bMWn96ez2XcENsfYnR0n2jNiSyMaNXlL0QUcwJ8w5Kb30x82nE6Cvi9qbT0 o+c8rwIxyRaFrr8whpRaCfFLFNAckoGt+rVpfOLTbAmdwFCan8seno/gv2qayma8 YonJ+2u44KNTT+0rOVGGDePyVSk7C4cMEA5wwjLIAbWVEsVtpMdcn4F1IJz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0NJiXzIrmM5N5i0SBgUAhXuoRcwHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrggZaECr0IteU5YQIOER+R3ct8Lz9+hEZE b6/OPBcljCfRH13dEAUOjA1j54r9Z8I7lgFILLnB8gEouyRvEsPg1XBGWZpAQ9pE wPbIFZpaqolRqe8lEPKP19EQQSvtMNhUeaa2c7RgyWWe5YLMg1bpDNWlk5UGAX3N CQ8x2TACoFJAIA2Ewo0EMDrwEgP+QPyv1fqivH5UVbTUEvaH/MN0jMoqpL/s27ju xyNLUqC/IXjMa4PLbl0QTJu4BRsgIYPTascX0ard2HgkTNiJ7F5ZF/17tOHBJMx4 GvEfZXjWFQYeBrKgL1pQfrk+CrXwIvcRjS1jfK3fb2+HYwPtB0s= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:03 2025 by rpki-client