This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: rWNeeh0+lgBI32cEgDhfgNjnQj4N44E9Zhm9HrLNnbQ= Subject key identifier: E1:9B:8B:5D:B3:CC:B9:4A:E3:B3:BD:8F:0C:EA:4D:36:9E:E5:33:28 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 34C44B02A30B8FEFCC94CC1D2C2B32EFBE7C9E0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04FD Signing time: Sat 06 Dec 2025 05:12:25 +0000 Manifest this update: Sat 06 Dec 2025 05:07:25 +0000 Manifest next update: Tue 09 Dec 2025 07:41:25 +0000 Files and hashes: 1: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=) 2: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 3: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 4: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 5: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) 6: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: YtgQ+c7YIoXtJ0KwHq9fDPNKqDLjyuSlt/To08ez3a4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c4:4b:02:a3:0b:8f:ef:cc:94:cc:1d:2c:2b:32:ef:be:7c:9e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Dec 6 05:07:25 2025 GMT Not After : Dec 9 07:41:25 2025 GMT Subject: CN=E19B8B5DB3CCB94AE3B3BD8F0CEA4D369EE53328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:9b:c6:ea:9f:a4:46:01:fc:88:81:ff:03: f1:37:4b:97:e7:0e:c1:03:af:22:b4:6e:35:b8:4a: cf:f5:e5:88:b2:05:1f:6c:00:f2:de:ee:ce:ba:2d: 2b:5e:b6:73:f7:f0:99:ec:c4:2d:e2:e3:8e:b0:b0: 5b:9f:a5:0e:61:ae:d5:7b:ba:e7:9b:d7:10:97:43: 58:b0:99:58:92:1e:da:f7:0f:ce:6c:c8:c7:06:dc: 83:3d:76:76:a7:4f:1d:9d:8f:42:5d:3c:eb:a4:87: 36:70:77:15:63:b8:a2:e1:1b:a9:e8:93:79:7f:3c: 68:65:a4:e3:70:d9:82:e1:b9:7e:93:9f:01:e5:d4: 5f:5d:3d:03:10:cd:53:00:8a:03:8d:62:90:0a:7d: 97:61:7c:d5:a9:72:05:6e:59:68:ad:38:27:2a:2a: cb:1b:d6:d8:60:09:67:e7:1a:bc:a2:18:e3:f7:74: 10:63:46:ca:15:3f:12:8f:bf:db:bb:60:f8:38:20: f4:58:d6:93:33:b0:fa:0c:a0:09:33:21:e1:fd:35: df:9f:a9:01:ce:98:5f:62:14:54:d2:d9:8d:28:31: b8:02:2a:94:c1:a2:ec:3e:70:72:b5:13:d1:ae:cc: 2c:2a:f1:09:c3:d0:bc:a6:5d:30:ca:d4:c0:d9:b2: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:8B:5D:B3:CC:B9:4A:E3:B3:BD:8F:0C:EA:4D:36:9E:E5:33:28 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:06:1e:48:13:5c:3e:28:6f:cd:67:9d:eb:ac:d6:e0:2c:ca: 95:7d:3b:58:72:74:50:b2:3d:03:6a:75:66:e0:07:2c:58:0d: 0c:f5:03:39:2f:ef:8c:31:a7:31:b1:a6:2e:f0:ac:4b:14:9a: 6e:6c:c4:6c:22:91:7b:98:b2:e1:bc:2d:3e:aa:6c:ea:c2:48: eb:c5:be:d3:eb:af:59:0f:15:d4:0e:07:97:03:50:fc:15:a0: a1:ad:7c:76:11:9b:b7:3e:c3:a2:7d:aa:0f:72:49:69:c2:7c: dd:8b:d5:87:7b:4b:7a:e4:c5:3b:94:b6:62:ad:3d:29:3a:69: c6:59:ac:c0:58:7b:ba:a6:19:72:9f:50:f4:c6:5d:99:0f:e0: 06:71:5b:aa:9c:bc:7f:f5:98:d2:3a:36:b0:5a:70:ff:f5:50: 32:5f:c3:5e:8d:24:c8:84:00:5b:f3:9b:dd:da:7f:94:8b:85: 05:49:57:9d:2a:07:d2:ce:b8:5b:39:5a:d2:aa:f0:a4:e4:03: b0:a1:76:40:e6:cf:78:76:ae:40:a4:31:b1:13:6f:3b:ce:7f: b2:d1:c4:56:59:bf:29:38:01:18:58:d8:5c:25:e7:07:20:fa: 8d:78:21:2e:5a:89:d5:71:ae:1c:08:23:74:5a:d2:43:1d:68: 7a:c6:f8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMRLAqMLj+/MlMwdLCsy7758ngswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTEyMDYwNTA3MjVaFw0yNTEyMDkwNzQxMjVaMDMxMTAvBgNV BAMTKEUxOUI4QjVEQjNDQ0I5NEFFM0IzQkQ4RjBDRUE0RDM2OUVFNTMzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPJvG6p+kRgH8iIH/A/E3S5fn DsEDryK0bjW4Ss/15YiyBR9sAPLe7s66LStetnP38JnsxC3i446wsFufpQ5hrtV7 uueb1xCXQ1iwmViSHtr3D85syMcG3IM9dnanTx2dj0JdPOukhzZwdxVjuKLhG6no k3l/PGhlpONw2YLhuX6TnwHl1F9dPQMQzVMAigONYpAKfZdhfNWpcgVuWWitOCcq Kssb1thgCWfnGryiGOP3dBBjRsoVPxKPv9u7YPg4IPRY1pMzsPoMoAkzIeH9Nd+f qQHOmF9iFFTS2Y0oMbgCKpTBouw+cHK1E9GuzCwq8QnD0LymXTDK1MDZslKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ZuLXbPMuUrjs72PDOpNNp7lMygwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0GHkgTXD4ob81nneus1uAsypV9O1hydFCy PQNqdWbgByxYDQz1Azkv74wxpzGxpi7wrEsUmm5sxGwikXuYsuG8LT6qbOrCSOvF vtPrr1kPFdQOB5cDUPwVoKGtfHYRm7c+w6J9qg9ySWnCfN2L1Yd7S3rkxTuUtmKt PSk6acZZrMBYe7qmGXKfUPTGXZkP4AZxW6qcvH/1mNI6NrBacP/1UDJfw16NJMiE AFvzm93af5SLhQVJV50qB9LOuFs5WtKq8KTkA7ChdkDmz3h2rkCkMbETbzvOf7LR xFZZvyk4ARhY2Fwl5wcg+o14IS5aidVxrhwII3Ra0kMdaHrG+FI= -----END CERTIFICATE-----Generated at Mon Dec 8 05:14:49 2025 by rpki-client