This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: iQb3IJJNBBaXKnUexi8I7VUp2eym5N3riulKjlKF+2Y= Subject key identifier: D5:8A:52:DA:96:53:CF:32:EB:17:74:F6:7C:90:59:43:7E:9B:2B:44 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 3B9E892829B8C2DE08A18B76DFED786190E2F043 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 022C Signing time: Sat 06 Dec 2025 16:00:42 +0000 Manifest this update: Sat 06 Dec 2025 15:55:42 +0000 Manifest next update: Tue 09 Dec 2025 20:25:42 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: VztsPLr4kRNXGKeedGTd5V4SNO6NIYdYMKd7feBkSiE=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9e:89:28:29:b8:c2:de:08:a1:8b:76:df:ed:78:61:90:e2:f0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Dec 6 15:55:42 2025 GMT Not After : Dec 9 20:25:42 2025 GMT Subject: CN=D58A52DA9653CF32EB1774F67C9059437E9B2B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:fa:12:e6:77:ba:ee:03:5e:d6:78:3c:22: 9f:73:20:19:fb:7b:b5:87:e8:79:00:1d:41:bb:75: bb:c6:b9:be:fc:ef:f3:bf:3c:75:62:54:02:bd:ca: 23:1a:77:78:11:62:d9:49:cd:e2:5c:0e:de:1c:93: 67:bd:55:b0:12:db:cc:5b:00:cf:01:9a:33:f9:fe: a8:ee:61:b1:48:c0:fc:a5:41:18:c7:ca:ca:c1:61: 3c:5c:e0:42:6f:2a:ab:b9:08:bc:b5:da:9a:4b:40: 63:3b:ef:6f:3b:fb:2b:d2:64:1b:dd:77:4a:e8:0b: d7:2f:b2:8b:d3:87:c0:00:92:bd:35:ea:c5:73:eb: 91:5b:b5:77:09:62:0d:3e:61:de:d5:4a:99:1c:e2: d2:a8:e3:23:f1:4d:05:14:34:23:53:80:63:2a:81: 68:d9:fa:87:b2:11:cd:ee:e5:81:65:5e:aa:65:c3: 4a:f0:f5:fd:6a:f3:bb:42:44:ac:ee:15:d0:70:93: 3a:04:64:d6:f3:6e:04:5e:7f:a3:9d:46:59:bd:e3: e1:6d:fd:f3:e2:45:5b:6c:c6:4f:5d:5f:30:5c:13: d6:f7:b4:bf:53:b2:ab:dc:cd:9b:ea:09:58:e5:33: e5:5c:f4:aa:37:d8:77:0c:b6:1b:c8:94:aa:59:cf: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:52:DA:96:53:CF:32:EB:17:74:F6:7C:90:59:43:7E:9B:2B:44 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:44:9d:1e:2a:8a:45:f4:02:16:2d:cd:01:e0:3f:16:4b:9b: 46:77:f0:d6:0e:b0:58:2d:1a:fc:63:8c:b6:eb:09:13:d2:a2: 80:16:2f:92:0d:a9:80:c8:de:c3:bf:6a:30:06:ac:52:57:a8: dc:44:72:37:38:8b:fd:1d:c9:5b:e6:34:2b:6f:84:84:d8:3a: 22:eb:87:f8:90:b1:43:bb:25:52:75:98:99:3d:a7:df:a8:40: a3:d0:d0:24:fd:55:cd:4c:08:a7:84:1b:05:24:6f:fb:ba:2c: df:b8:0d:76:52:98:b9:0d:79:77:6b:73:21:f5:93:e5:16:96: e4:fa:17:86:e1:d3:c6:4e:d6:16:72:60:c5:94:bd:d4:49:d4: 9a:ae:d8:cc:87:5c:f0:0d:f9:75:44:17:c3:60:77:ad:71:ea: eb:a1:33:73:8b:a7:07:59:5a:e1:68:50:7f:a7:51:79:09:c3: e4:4e:60:b8:e2:a5:94:89:50:43:9a:ca:64:da:cb:d0:8b:68: aa:69:24:21:d8:b7:56:10:f9:c0:9d:18:9e:9d:04:9e:05:9e: 00:b9:f3:02:16:62:22:8c:9d:79:3d:77:8f:0c:d7:e5:ae:03: e0:7d:1b:cd:85:c2:f3:b5:8c:32:a0:d6:a9:5d:80:e7:f7:95: 45:60:e2:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO56JKCm4wt4IoYt23+14YZDi8EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTEyMDYxNTU1NDJaFw0yNTEyMDkyMDI1NDJaMDMxMTAvBgNV BAMTKEQ1OEE1MkRBOTY1M0NGMzJFQjE3NzRGNjdDOTA1OTQzN0U5QjJCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiPoS5ne67gNe1ng8Ip9zIBn7 e7WH6HkAHUG7dbvGub787/O/PHViVAK9yiMad3gRYtlJzeJcDt4ck2e9VbAS28xb AM8BmjP5/qjuYbFIwPylQRjHysrBYTxc4EJvKqu5CLy12ppLQGM77287+yvSZBvd d0roC9cvsovTh8AAkr016sVz65FbtXcJYg0+Yd7VSpkc4tKo4yPxTQUUNCNTgGMq gWjZ+oeyEc3u5YFlXqplw0rw9f1q87tCRKzuFdBwkzoEZNbzbgRef6OdRlm94+Ft /fPiRVtsxk9dXzBcE9b3tL9TsqvczZvqCVjlM+Vc9Ko32HcMthvIlKpZz6QvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YpS2pZTzzLrF3T2fJBZQ36bK0QwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1EnR4qikX0AhYtzQHgPxZLm0Z38NYOsFgt GvxjjLbrCRPSooAWL5INqYDI3sO/ajAGrFJXqNxEcjc4i/0dyVvmNCtvhITYOiLr h/iQsUO7JVJ1mJk9p9+oQKPQ0CT9Vc1MCKeEGwUkb/u6LN+4DXZSmLkNeXdrcyH1 k+UWluT6F4bh08ZO1hZyYMWUvdRJ1Jqu2MyHXPAN+XVEF8Ngd61x6uuhM3OLpwdZ WuFoUH+nUXkJw+ROYLjipZSJUEOaymTay9CLaKppJCHYt1YQ+cCdGJ6dBJ4FngC5 8wIWYiKMnXk9d48M1+WuA+B9G82FwvO1jDKg1qldgOf3lUVg4ns= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:47 2025 by rpki-client