This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: hq09mkClkmNVd8MTjLFFkGoX11X3mKt9c9HmM/xGqFA= Subject key identifier: D7:60:9F:07:C9:9C:8D:74:C6:EC:81:F3:5D:EB:03:A4:81:20:68:A6 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 25E491B93B600A301554A2ED3A8052FCA3B0498E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01E0 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 15:56:26 +0000 Manifest next update: Wed 10 Dec 2025 03:58:26 +0000 Files and hashes: 1: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 2: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 4: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: 2KeXAkBU3K8CyA7vhPY1dJfXNt2tgkSvwH5KS1zXc6c=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e4:91:b9:3b:60:0a:30:15:54:a2:ed:3a:80:52:fc:a3:b0:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Dec 6 15:56:26 2025 GMT Not After : Dec 10 03:58:26 2025 GMT Subject: CN=D7609F07C99C8D74C6EC81F35DEB03A4812068A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:85:ca:33:4c:7f:13:8e:fc:24:16:9d:be: 12:8d:22:9f:6f:85:f7:89:01:05:7d:77:d6:f2:02: 6b:9e:dc:5c:10:cd:8e:ee:86:f0:14:2c:98:f6:e3: fc:45:e1:53:98:a1:52:9d:03:f8:99:1a:13:e5:52: 93:42:63:6a:70:e7:bd:34:30:59:5d:97:90:4c:72: a0:cb:c5:99:28:cf:8e:b1:c4:1b:5e:e2:72:59:91: 0f:ea:71:bf:ff:2c:0f:4b:c9:b3:7a:c8:da:34:8f: e7:24:36:00:9d:b7:9e:f1:ee:f5:7e:6f:ec:99:c7: 7b:c4:d7:9d:a2:9d:9d:9d:d6:7c:d3:23:cc:d2:ab: b5:b7:60:b7:a3:f0:fc:33:b3:92:95:c7:44:9a:0a: eb:9a:41:07:e9:80:5c:a9:12:96:0d:a2:93:87:08: 66:e4:bf:c6:a7:52:a7:80:e7:06:ec:17:08:a8:73: 60:3d:af:ef:1e:98:2c:bc:2b:18:d7:21:68:e7:bb: f1:9b:0e:68:e9:3e:6d:d1:df:29:9e:04:48:03:fb: db:1c:7d:d3:74:d0:0c:17:2a:56:e9:74:b3:61:2e: c6:c7:6c:21:b9:28:f7:f7:4c:d6:b6:bd:fd:1a:ba: 8f:14:e3:f9:f0:63:0c:29:3d:71:ec:6b:72:e7:73: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:9F:07:C9:9C:8D:74:C6:EC:81:F3:5D:EB:03:A4:81:20:68:A6 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:10:2c:93:8e:6e:7c:f2:7f:7a:e9:db:0a:29:86:70:a0:29: 43:34:94:24:ee:29:38:e3:25:d8:13:94:73:94:9a:ea:5d:b5: d1:7e:21:59:9c:1e:f3:6a:ee:df:db:5b:12:00:8e:79:1e:c3: 13:80:0c:99:5e:65:14:29:4b:4a:bc:1f:9c:ce:fc:2b:30:3a: 2a:54:2d:e5:43:66:ad:f0:a4:5d:14:d2:86:74:49:eb:80:c2: 75:65:4e:68:26:29:59:86:77:9d:17:ff:72:8d:b0:ca:81:f2: fb:41:d3:ef:4e:62:0b:86:61:dd:77:ac:e8:ec:b8:e3:8d:d3: 0f:b6:8c:41:00:db:6b:ce:6f:75:bc:7a:c8:f7:f3:60:f7:bd: 22:fc:50:44:f3:2e:77:0f:18:8e:b8:2e:f6:e9:bb:d3:b3:d9: 8f:08:ac:c6:30:dd:52:28:51:48:ce:ec:3a:d8:95:74:16:fc: 14:fc:eb:b8:37:90:e3:79:59:d8:07:b7:24:b9:e0:ae:94:fd: 75:5c:78:d3:3a:87:4a:aa:3a:27:17:59:71:8d:e6:97:ac:55: b2:a8:74:7b:de:64:ec:49:87:5a:02:15:bd:be:45:a5:c2:b8: 09:35:9e:19:4b:fd:9d:b9:40:cd:3c:2f:07:b1:b9:09:b5:0d: 8c:6f:4a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeSRuTtgCjAVVKLtOoBS/KOwSY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTEyMDYxNTU2MjZaFw0yNTEyMTAwMzU4MjZaMDMxMTAvBgNV BAMTKEQ3NjA5RjA3Qzk5QzhENzRDNkVDODFGMzVERUIwM0E0ODEyMDY4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bYXKM0x/E478JBadvhKNIp9v hfeJAQV9d9byAmue3FwQzY7uhvAULJj24/xF4VOYoVKdA/iZGhPlUpNCY2pw5700 MFldl5BMcqDLxZkoz46xxBte4nJZkQ/qcb//LA9LybN6yNo0j+ckNgCdt57x7vV+ b+yZx3vE152inZ2d1nzTI8zSq7W3YLej8Pwzs5KVx0SaCuuaQQfpgFypEpYNopOH CGbkv8anUqeA5wbsFwioc2A9r+8emCy8KxjXIWjnu/GbDmjpPm3R3ymeBEgD+9sc fdN00AwXKlbpdLNhLsbHbCG5KPf3TNa2vf0auo8U4/nwYwwpPXHsa3Lnc0gVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12CfB8mcjXTG7IHzXesDpIEgaKYwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0QLJOObnzyf3rp2wophnCgKUM0lCTuKTjj JdgTlHOUmupdtdF+IVmcHvNq7t/bWxIAjnkewxOADJleZRQpS0q8H5zO/CswOipU LeVDZq3wpF0U0oZ0SeuAwnVlTmgmKVmGd50X/3KNsMqB8vtB0+9OYguGYd13rOjs uOON0w+2jEEA22vOb3W8esj382D3vSL8UETzLncPGI64Lvbpu9Oz2Y8IrMYw3VIo UUjO7DrYlXQW/BT867g3kON5WdgHtyS54K6U/XVceNM6h0qqOicXWXGN5pesVbKo dHveZOxJh1oCFb2+RaXCuAk1nhlL/Z25QM08LwexuQm1DYxvSv0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:45 2025 by rpki-client