This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: JwoH1h75ml+Yu7cLwo3eF1uRv4G+7UZZ1rwen6x8uu8= Subject key identifier: F8:83:1F:FF:8F:44:BC:5B:E9:D6:E7:D0:97:92:12:DA:52:86:5D:F7 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 6F516CC254A5D746A3926D44764E8E4C8FDF185E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0200 Signing time: Fri 05 Dec 2025 20:32:35 +0000 Manifest this update: Fri 05 Dec 2025 20:27:35 +0000 Manifest next update: Tue 09 Dec 2025 00:31:35 +0000 Files and hashes: 1: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: TxYHGnAsqBNlYp+28yfuPkGWlHwfMvTZK2nU0ktgkD8=) 2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:51:6c:c2:54:a5:d7:46:a3:92:6d:44:76:4e:8e:4c:8f:df:18:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Dec 5 20:27:35 2025 GMT Not After : Dec 9 00:31:35 2025 GMT Subject: CN=F8831FFF8F44BC5BE9D6E7D0979212DA52865DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:72:5d:38:92:5f:3c:d7:c8:30:7e:5e:3b: 3e:5d:bf:e1:b9:51:86:40:b7:2c:b4:1d:c8:7c:87: 47:d0:37:10:10:9f:af:71:ff:f5:67:ca:55:12:36: c0:db:0c:db:ed:ea:0d:9c:bd:ff:9c:56:e6:b9:ae: 4c:22:62:87:cb:82:82:64:1f:06:d5:f7:f9:c6:f9: dd:95:6d:85:e3:4f:4c:c7:b9:20:bc:56:04:aa:23: 86:59:0d:df:5e:13:4a:c3:91:f7:e1:6a:c3:dc:1b: 14:d0:b5:53:5a:87:25:17:73:08:ab:3a:fc:3c:5c: 7c:7a:69:83:89:7b:48:96:f5:bf:1b:e1:e8:93:19: 7a:ec:01:a6:eb:3b:c4:c4:f1:fe:a5:1d:fb:b7:49: 85:ca:86:18:ca:65:37:cc:58:ea:2a:f6:49:7d:6d: ec:b4:1f:77:bd:65:f6:dd:12:25:a8:2b:02:86:b7: 9c:4b:4d:30:99:1f:73:85:a1:61:99:1d:c2:72:0f: f3:a8:9d:e8:e8:be:bc:dd:f1:6f:40:c8:f9:15:75: fe:c3:94:19:ee:df:a5:58:05:4c:d0:3f:a3:ff:f7: 55:5f:80:e8:81:00:89:d5:dc:55:c9:ae:3c:39:fc: 19:ae:b8:fe:ae:06:e7:e3:0a:6e:1b:41:b6:52:0a: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:83:1F:FF:8F:44:BC:5B:E9:D6:E7:D0:97:92:12:DA:52:86:5D:F7 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:24:59:64:ad:73:0c:8e:bd:4c:44:5d:ed:c7:14:64:0d:ea: ac:95:3c:22:c5:4c:00:4b:96:f1:49:49:7e:66:03:db:02:f8: dc:49:de:4c:8c:1a:b6:81:16:83:c3:92:0e:94:48:8f:09:64: 56:e4:52:e8:db:7f:77:ae:8e:26:91:98:c5:02:83:ed:24:2c: 9f:8f:80:23:54:3a:46:c6:99:e4:74:c8:08:55:c9:59:d4:3f: a6:3b:03:82:8d:f4:71:7e:65:f0:63:ce:a8:1e:82:2d:82:ec: 9a:20:c5:67:46:bb:06:ad:56:d4:83:0b:e0:f3:a0:45:ac:b5: 0d:b7:24:fb:3f:6a:79:73:bb:89:d5:fe:ec:64:8a:04:e6:12: 8f:1b:56:d6:46:1b:c7:b4:72:05:fb:63:53:16:f4:78:71:d6: 6f:a1:c0:53:3b:71:44:5a:77:3d:2e:20:84:f3:77:17:77:03: ca:0a:b9:a5:a1:79:bb:b0:7e:34:2f:eb:a2:30:81:73:a4:c0: af:ac:ed:57:4d:50:5d:69:af:7e:97:d2:49:e2:cd:88:c8:11: f3:f1:45:b4:b1:71:8a:d9:41:9b:29:e9:6f:21:15:c9:80:77: b6:03:65:a0:e8:71:b2:59:3d:2d:9c:ea:8e:7e:3c:b3:14:62: ff:b8:09:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1FswlSl10ajkm1Edk6OTI/fGF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTEyMDUyMDI3MzVaFw0yNTEyMDkwMDMxMzVaMDMxMTAvBgNV BAMTKEY4ODMxRkZGOEY0NEJDNUJFOUQ2RTdEMDk3OTIxMkRBNTI4NjVERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAs3JdOJJfPNfIMH5eOz5dv+G5 UYZAtyy0Hch8h0fQNxAQn69x//VnylUSNsDbDNvt6g2cvf+cVua5rkwiYofLgoJk HwbV9/nG+d2VbYXjT0zHuSC8VgSqI4ZZDd9eE0rDkffhasPcGxTQtVNahyUXcwir Ovw8XHx6aYOJe0iW9b8b4eiTGXrsAabrO8TE8f6lHfu3SYXKhhjKZTfMWOoq9kl9 bey0H3e9ZfbdEiWoKwKGt5xLTTCZH3OFoWGZHcJyD/Oonejovrzd8W9AyPkVdf7D lBnu36VYBUzQP6P/91VfgOiBAInV3FXJrjw5/BmuuP6uBufjCm4bQbZSClpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IMf/49EvFvp1ufQl5IS2lKGXfcwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8kWWStcwyOvUxEXe3HFGQN6qyVPCLFTABL lvFJSX5mA9sC+NxJ3kyMGraBFoPDkg6USI8JZFbkUujbf3eujiaRmMUCg+0kLJ+P gCNUOkbGmeR0yAhVyVnUP6Y7A4KN9HF+ZfBjzqgegi2C7JogxWdGuwatVtSDC+Dz oEWstQ23JPs/anlzu4nV/uxkigTmEo8bVtZGG8e0cgX7Y1MW9Hhx1m+hwFM7cURa dz0uIITzdxd3A8oKuaWhebuwfjQv66IwgXOkwK+s7VdNUF1pr36X0knizYjIEfPx RbSxcYrZQZsp6W8hFcmAd7YDZaDocbJZPS2c6o5+PLMUYv+4CZw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:03 2025 by rpki-client