This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: rDtz9TF4Lh6Ibx4YOL2UMble1RYK19px0WKkGP/jtL4= Subject key identifier: 28:F6:2F:5F:20:7F:E7:B7:35:E6:88:C3:8E:FD:33:08:FF:51:CB:1A Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 6606BBE974CBAE4EB7E34C1FDE8A9F55F4718402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 024E Signing time: Fri 05 Dec 2025 12:52:21 +0000 Manifest this update: Fri 05 Dec 2025 12:47:21 +0000 Manifest next update: Mon 08 Dec 2025 15:50:21 +0000 Files and hashes: 1: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: GAd5rHQ8AS7Q0119UBRYdcNqTegodlX35bFmsOY520g=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 3: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:06:bb:e9:74:cb:ae:4e:b7:e3:4c:1f:de:8a:9f:55:f4:71:84:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Dec 5 12:47:21 2025 GMT Not After : Dec 8 15:50:21 2025 GMT Subject: CN=28F62F5F207FE7B735E688C38EFD3308FF51CB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:5c:e1:98:3f:85:0d:d9:f2:62:fb:e8:f4: a7:46:5d:a6:3e:c5:64:c2:13:c8:72:69:62:0a:22: 05:16:84:ba:bf:9f:be:63:16:1b:34:ad:fb:a8:54: a6:83:b2:53:c5:5e:cd:87:7c:c9:85:20:e0:6f:3a: 79:e5:8f:83:a2:c2:ab:20:dd:10:9c:31:31:3c:16: af:4b:c4:26:d1:80:6c:f3:32:b9:91:92:30:bb:09: 5b:7a:d6:12:ba:c6:2e:58:fa:37:a5:a3:1e:35:e1: 3a:d9:a8:f7:7b:0c:e3:74:f5:29:77:48:31:5b:5d: 23:0b:60:2c:16:3b:3d:b3:cd:ae:60:f8:49:59:2c: 6a:27:38:9b:ba:bf:52:ba:39:b8:e7:fd:58:55:1d: a3:5e:e9:4a:0b:7e:e5:e2:c3:c9:85:c6:3b:db:3d: 5b:f3:76:9a:cb:a7:5d:c1:ab:8f:ac:27:be:97:f0: a2:f1:f2:36:50:f1:d6:52:ec:6d:4a:f1:5b:e8:cf: 02:ac:08:9f:bf:5e:74:65:b0:fd:74:dc:88:fb:85: 8a:74:e2:45:bc:e3:68:84:f5:73:4c:97:e8:a4:72: 6f:7f:bf:16:23:2e:55:ce:d6:bb:dd:07:ab:8d:a8: e5:06:24:ed:c0:ea:e5:5a:9d:82:8c:61:e9:eb:bc: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F6:2F:5F:20:7F:E7:B7:35:E6:88:C3:8E:FD:33:08:FF:51:CB:1A X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:83:52:30:c0:2d:5a:51:bd:fe:d7:d3:23:cd:28:0a:8f:2f: 57:ce:29:f6:eb:21:b6:4a:63:82:2d:8d:b3:28:6d:ed:08:10: 0b:26:98:d8:6d:50:dd:69:3f:07:7c:5a:60:0d:57:69:62:5b: cc:54:67:7b:c4:cb:4a:c9:43:e6:c9:15:9d:40:6d:8b:8b:d4: 6f:e1:6c:dc:fc:a5:80:c1:da:17:66:9a:aa:d9:49:74:98:91: 75:89:49:0c:5b:46:67:9d:c3:5b:a8:91:5f:3f:a7:b8:b6:77: c6:6a:89:5b:10:bf:79:65:64:8c:be:f1:34:3c:01:9a:a6:21: 1c:52:e5:8c:2f:d2:95:04:2b:1d:9e:71:0b:16:1d:18:c4:ae: 3e:75:e5:86:37:c1:3c:74:f4:52:c1:93:09:7d:40:35:86:27: f0:4b:2e:a8:73:2d:c0:b0:ea:94:98:1a:8c:50:d2:4a:7a:2d: 73:16:b9:00:d7:b6:68:c1:f5:01:cd:0b:78:ab:3a:f6:2e:97: 2c:1c:ff:6e:f2:29:8b:51:c4:43:d6:73:12:cb:d4:ac:4e:92: 27:7a:59:5d:03:a6:00:84:d6:7b:1b:cc:32:ce:3b:3f:31:7a: 89:2b:93:a5:ad:85:73:67:9d:99:52:31:b6:0b:92:13:32:0a: 59:74:ec:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZga76XTLrk6340wf3oqfVfRxhAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTEyMDUxMjQ3MjFaFw0yNTEyMDgxNTUwMjFaMDMxMTAvBgNV BAMTKDI4RjYyRjVGMjA3RkU3QjczNUU2ODhDMzhFRkQzMzA4RkY1MUNCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzolzhmD+FDdnyYvvo9KdGXaY+ xWTCE8hyaWIKIgUWhLq/n75jFhs0rfuoVKaDslPFXs2HfMmFIOBvOnnlj4Oiwqsg 3RCcMTE8Fq9LxCbRgGzzMrmRkjC7CVt61hK6xi5Y+jelox414TrZqPd7DON09Sl3 SDFbXSMLYCwWOz2zza5g+ElZLGonOJu6v1K6Objn/VhVHaNe6UoLfuXiw8mFxjvb PVvzdprLp13Bq4+sJ76X8KLx8jZQ8dZS7G1K8VvozwKsCJ+/XnRlsP103Ij7hYp0 4kW842iE9XNMl+ikcm9/vxYjLlXO1rvdB6uNqOUGJO3A6uVanYKMYenrvOYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPYvXyB/57c15ojDjv0zCP9RyxowHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCDUjDALVpRvf7X0yPNKAqPL1fOKfbrIbZK Y4ItjbMobe0IEAsmmNhtUN1pPwd8WmANV2liW8xUZ3vEy0rJQ+bJFZ1AbYuL1G/h bNz8pYDB2hdmmqrZSXSYkXWJSQxbRmedw1uokV8/p7i2d8ZqiVsQv3llZIy+8TQ8 AZqmIRxS5Ywv0pUEKx2ecQsWHRjErj515YY3wTx09FLBkwl9QDWGJ/BLLqhzLcCw 6pSYGoxQ0kp6LXMWuQDXtmjB9QHNC3irOvYulywc/27yKYtRxEPWcxLL1KxOkid6 WV0DpgCE1nsbzDLOOz8xeokrk6WthXNnnZlSMbYLkhMyCll07IM= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:12 2025 by rpki-client