This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: qVYrrtIGNVWRo+JNqadVVGb0Fx+oBIBV0xsLlwAxOmQ= Subject key identifier: A8:AE:E4:9A:D5:1F:03:63:18:2D:B4:89:7C:DC:05:21:2D:E8:31:6B Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 519A31CCDFA9C4BA34CD4C15ED0D767C0093B496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 053D Signing time: Sat 20 Dec 2025 09:02:10 +0000 Manifest this update: Sat 20 Dec 2025 08:57:10 +0000 Manifest next update: Tue 23 Dec 2025 18:24:10 +0000 Files and hashes: 1: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 3: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 4: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: fktiqTitr5x5VaR97VmBXDyDcUDvO0QFhMUwBHd8Ck0=) 5: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9a:31:cc:df:a9:c4:ba:34:cd:4c:15:ed:0d:76:7c:00:93:b4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Dec 20 08:57:10 2025 GMT Not After : Dec 23 18:24:10 2025 GMT Subject: CN=A8AEE49AD51F0363182DB4897CDC05212DE8316B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:9d:98:8d:20:31:4b:27:13:2a:21:e2:da: ea:1d:77:e9:bb:0e:53:ac:5f:12:a7:fe:ed:05:00: 91:04:fe:57:f2:08:89:9f:86:82:9a:13:da:d4:4f: 74:26:2a:38:6e:9c:b6:69:04:d8:c7:6f:b1:de:d8: 40:81:36:bb:cd:ae:e3:10:d1:09:b6:65:23:06:46: a7:46:a0:2a:77:58:0a:de:ae:5f:bc:0b:fe:1a:95: 8d:22:9b:54:21:65:f8:fa:8a:bb:d5:b2:87:a0:96: d8:47:1e:27:ec:79:9e:5b:b7:59:c0:a9:b3:c3:60: fa:e6:0e:47:fc:38:36:97:d9:33:95:cc:95:58:a2: a6:02:3e:62:3e:9c:87:b8:2e:0e:5f:ce:74:7b:b5: f0:c5:09:c4:cb:5a:82:87:d5:7e:1d:28:53:50:d4: 24:b2:b3:3c:5f:99:81:db:57:77:d4:fc:3c:24:93: 0e:26:79:3b:26:b4:fe:de:4d:f5:70:08:fa:24:10: f3:b1:70:7c:e4:1d:6d:71:f9:fd:66:e5:d1:95:29: 11:2f:da:b4:a3:8f:3f:70:b3:ca:e0:2b:76:2d:c0: 27:a9:e9:8f:52:9d:d3:ae:bd:fb:61:96:db:ef:ea: 70:ee:ab:13:48:c2:aa:7b:f5:1f:7b:22:a4:2a:d3: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AE:E4:9A:D5:1F:03:63:18:2D:B4:89:7C:DC:05:21:2D:E8:31:6B X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:88:c8:cf:3b:51:00:52:76:ed:4c:96:72:22:a4:35:3f:68: 46:6f:9b:fe:eb:78:f1:0f:4f:1e:ea:38:7c:33:03:7a:46:eb: a6:87:a0:2d:7a:c3:32:8f:a0:f1:b9:aa:36:9d:05:54:e2:f5: f1:2a:0e:31:d8:78:39:ba:95:e9:22:13:73:e5:98:6c:d4:37: 0e:d1:03:92:d3:74:22:0b:10:62:69:47:44:e8:e8:a8:22:ae: b0:35:93:ec:37:0f:1e:d1:a5:46:3e:c8:e0:2a:a9:ed:0c:08: aa:28:a5:6e:a7:7d:61:e8:34:df:f6:e1:a1:bf:f2:22:4f:9d: 9b:37:62:e9:56:fc:34:ba:82:36:f0:d2:28:04:4f:77:de:db: a2:80:9e:c5:92:e9:01:d9:27:62:7d:62:9b:98:27:5a:a7:ea: c6:8d:c1:81:4d:e2:f7:85:e4:d7:79:87:7b:fa:99:35:2b:12: 04:71:a6:3a:91:90:7e:8e:49:75:1c:c7:b0:eb:8c:dd:4f:4f: 93:d7:1c:98:99:f7:4b:81:75:52:2e:af:92:1e:4d:a9:9c:88: 86:57:c4:91:c5:35:b3:35:87:cc:34:7b:72:dd:53:b2:81:0e: 37:1e:a5:25:f4:a5:14:12:7e:a4:25:e6:8d:1d:95:a0:c8:09: da:20:29:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZoxzN+pxLo0zUwV7Q12fACTtJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEyMjAwODU3MTBaFw0yNTEyMjMxODI0MTBaMDMxMTAvBgNV BAMTKEE4QUVFNDlBRDUxRjAzNjMxODJEQjQ4OTdDREMwNTIxMkRFODMxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMp2YjSAxSycTKiHi2uodd+m7 DlOsXxKn/u0FAJEE/lfyCImfhoKaE9rUT3QmKjhunLZpBNjHb7He2ECBNrvNruMQ 0Qm2ZSMGRqdGoCp3WArerl+8C/4alY0im1QhZfj6irvVsoeglthHHifseZ5bt1nA qbPDYPrmDkf8ODaX2TOVzJVYoqYCPmI+nIe4Lg5fznR7tfDFCcTLWoKH1X4dKFNQ 1CSyszxfmYHbV3fU/Dwkkw4meTsmtP7eTfVwCPokEPOxcHzkHW1x+f1m5dGVKREv 2rSjjz9ws8rgK3YtwCep6Y9SndOuvfthltvv6nDuqxNIwqp79R97IqQq0+5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqK7kmtUfA2MYLbSJfNwFIS3oMWswHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWIyM87UQBSdu1MlnIipDU/aEZvm/7rePEP Tx7qOHwzA3pG66aHoC16wzKPoPG5qjadBVTi9fEqDjHYeDm6lekiE3PlmGzUNw7R A5LTdCILEGJpR0To6KgirrA1k+w3Dx7RpUY+yOAqqe0MCKoopW6nfWHoNN/24aG/ 8iJPnZs3YulW/DS6gjbw0igET3fe26KAnsWS6QHZJ2J9YpuYJ1qn6saNwYFN4veF 5Nd5h3v6mTUrEgRxpjqRkH6OSXUcx7DrjN1PT5PXHJiZ90uBdVIur5IeTamciIZX xJHFNbM1h8w0e3LdU7KBDjcepSX0pRQSfqQl5o0dlaDICdogKeY= -----END CERTIFICATE-----Generated at Sun Dec 21 13:56:22 2025 by rpki-client