This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: +yjn7B9aMaLfUSjx/ZvVcKhI9bnXTQfbIjMfnHpyMZM= Subject key identifier: B7:8C:86:69:28:DA:D2:F4:AB:6D:F1:0A:89:D4:EF:8A:91:4F:ED:70 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 3C4975F0CEDA0C33FF2C9D1EADD735982B71891F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 0234 Signing time: Wed 17 Dec 2025 03:41:25 +0000 Manifest this update: Wed 17 Dec 2025 03:36:25 +0000 Manifest next update: Sat 20 Dec 2025 12:02:25 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: aSiLBGOfeHf2IiCdpJncaQnPzDLw4hrZxz7kdBgZRX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:49:75:f0:ce:da:0c:33:ff:2c:9d:1e:ad:d7:35:98:2b:71:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Dec 17 03:36:25 2025 GMT Not After : Dec 20 12:02:25 2025 GMT Subject: CN=B78C866928DAD2F4AB6DF10A89D4EF8A914FED70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:9e:8a:22:e8:54:aa:58:68:5a:62:7c:89: 74:25:99:14:d9:6c:ac:fb:ff:f2:78:7f:a9:f5:1f: 65:99:8b:ce:45:73:c3:c6:bc:f4:9a:d8:8d:ac:1d: 10:73:cc:41:51:9f:f1:35:e2:ab:2e:51:dd:4c:96: eb:9f:f3:72:f6:29:33:c8:2d:75:79:7c:47:70:af: 46:b4:93:38:b5:e9:01:22:4e:87:c6:7c:30:9e:d7: 45:f8:54:eb:46:a0:c9:c9:d2:12:fd:ac:aa:98:97: a1:e9:1d:4d:0b:29:f0:e0:fa:c7:16:76:c1:f3:0e: 54:8a:79:a3:04:d6:e6:e5:b6:1a:55:a6:3f:80:c4: ac:18:a0:8f:f5:fe:7e:bf:78:4a:2b:4b:c9:72:06: 5d:fb:92:8a:9a:7f:0d:c3:db:ba:ba:2b:2c:ee:fe: 79:f1:8e:9a:a2:61:82:b0:a6:15:fa:d0:6d:49:c1: 65:4c:0f:49:d0:4c:0e:66:6a:56:23:ee:ef:69:dc: 5c:0c:62:eb:80:cf:cb:b2:9b:dc:98:e9:5e:fa:94: 37:29:12:1a:bd:7a:2a:1b:05:37:cb:ea:1f:5f:8f: 2e:b6:4e:a9:1c:8b:7c:f1:96:4c:53:1d:fe:93:d3: d4:84:11:44:a2:b5:b6:1c:86:ca:0e:6b:91:3e:a8: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:86:69:28:DA:D2:F4:AB:6D:F1:0A:89:D4:EF:8A:91:4F:ED:70 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:82:cb:05:0f:da:4a:8e:75:c8:a9:9c:09:1a:38:af:4b:90: 93:1d:13:20:74:b3:a0:04:0d:f1:5b:07:18:85:d4:ac:41:d1: 97:4b:42:05:21:4d:21:17:82:fb:3a:ee:0b:6a:19:e7:a8:40: e9:17:b0:9f:d2:d7:d4:41:4c:28:c1:c0:b8:09:a4:a2:24:4a: f3:c3:9a:bb:82:42:0a:89:6d:eb:9e:3b:46:32:2c:3a:61:f2: ec:15:ca:63:88:d2:72:e1:10:ae:6d:3c:13:ed:f6:79:0b:2c: b2:aa:28:93:17:83:3e:fa:c5:6a:2e:2b:5a:7b:62:6e:20:04: b8:ae:78:f7:26:a6:19:83:4e:1d:92:86:c4:11:9c:94:fb:27: e3:8e:8a:a2:b4:d5:a7:29:4b:76:a6:97:df:09:da:26:90:8a: f5:b1:1a:34:51:00:a2:dd:4f:56:b4:17:be:57:72:f4:84:84: 9a:9a:f7:55:8e:56:ab:b1:96:1c:f9:e7:5b:c6:60:2b:eb:eb: ff:06:64:e4:d9:44:a3:7d:90:63:99:25:b7:38:e6:48:a3:db: 44:d4:fb:4a:43:fc:8d:b4:80:f3:97:97:12:44:be:d7:1e:d3: 42:ef:85:e0:84:d7:26:76:c8:a6:1b:88:3a:c7:8e:a7:56:28: 1c:92:b8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEl18M7aDDP/LJ0erdc1mCtxiR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTEyMTcwMzM2MjVaFw0yNTEyMjAxMjAyMjVaMDMxMTAvBgNV BAMTKEI3OEM4NjY5MjhEQUQyRjRBQjZERjEwQTg5RDRFRjhBOTE0RkVENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkop6KIuhUqlhoWmJ8iXQlmRTZ bKz7//J4f6n1H2WZi85Fc8PGvPSa2I2sHRBzzEFRn/E14qsuUd1Mluuf83L2KTPI LXV5fEdwr0a0kzi16QEiTofGfDCe10X4VOtGoMnJ0hL9rKqYl6HpHU0LKfDg+scW dsHzDlSKeaME1ublthpVpj+AxKwYoI/1/n6/eEorS8lyBl37koqafw3D27q6Kyzu /nnxjpqiYYKwphX60G1JwWVMD0nQTA5malYj7u9p3FwMYuuAz8uym9yY6V76lDcp Ehq9eiobBTfL6h9fjy62Tqkci3zxlkxTHf6T09SEEUSitbYchsoOa5E+qGjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4yGaSja0vSrbfEKidTvipFP7XAwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiCywUP2kqOdcipnAkaOK9LkJMdEyB0s6AE DfFbBxiF1KxB0ZdLQgUhTSEXgvs67gtqGeeoQOkXsJ/S19RBTCjBwLgJpKIkSvPD mruCQgqJbeueO0YyLDph8uwVymOI0nLhEK5tPBPt9nkLLLKqKJMXgz76xWouK1p7 Ym4gBLiuePcmphmDTh2ShsQRnJT7J+OOiqK01acpS3aml98J2iaQivWxGjRRAKLd T1a0F75XcvSEhJqa91WOVquxlhz551vGYCvr6/8GZOTZRKN9kGOZJbc45kij20TU +0pD/I20gPOXlxJEvtce00LvheCE1yZ2yKYbiDrHjqdWKBySuHM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:00 2025 by rpki-client