This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json) Hash identifier: rG+pW77UR27QROH0R/Q8keKc9KsWoCPxPVIizSIGflA= Subject key identifier: 93:6A:ED:EC:B4:12:A6:B0:95:73:99:87:A1:79:2D:08:38:AE:22:C9 Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Certificate serial: 18580F4B8805EB9DC0BD0D74EA751EAC1FB7332A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft Manifest number: 0214 Signing time: Tue 16 Dec 2025 23:21:52 +0000 Manifest this update: Tue 16 Dec 2025 23:16:52 +0000 Manifest next update: Sat 20 Dec 2025 04:26:52 +0000 Files and hashes: 1: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: n2m5ezPZflfehykcJ7I0WYBCTjZTWwmOa6826kODlRQ=) 2: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=) 3: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:0f:4b:88:05:eb:9d:c0:bd:0d:74:ea:75:1e:ac:1f:b7:33:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F Validity Not Before: Dec 16 23:16:52 2025 GMT Not After : Dec 20 04:26:52 2025 GMT Subject: CN=936AEDECB412A6B095739987A1792D0838AE22C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:60:b2:3a:df:a5:42:f9:06:3b:07:09:c7: 7a:a1:05:e1:1b:d2:b5:af:82:ae:44:32:ca:df:d2: 2b:d2:81:46:9a:a3:a8:4a:72:06:e1:9a:53:68:ad: 8f:74:a0:6d:61:ea:ba:f9:a6:eb:a1:f7:80:2c:3a: 31:eb:62:91:06:bd:31:4e:a7:93:06:6a:18:9e:f5: 9b:17:1a:9f:af:1f:99:9a:02:90:dd:9d:99:66:40: 41:d8:da:37:f4:92:c6:2c:cd:f1:0c:60:4e:2c:b7: 17:61:44:e2:37:f6:db:82:fa:03:b7:9f:d3:1c:79: 58:0e:61:06:0f:7c:df:1b:65:54:54:a5:e1:db:2f: 14:61:d1:15:e7:58:f9:e5:66:d6:23:b9:c2:ae:b6: 6a:a5:90:01:9a:66:fe:89:18:5c:7f:dc:4d:e4:05: d5:95:d6:ec:57:c2:68:94:cc:14:68:0e:3c:aa:f8: 03:7f:a9:90:9b:40:e0:37:07:22:25:a0:c9:26:98: bf:51:e6:f6:0f:b8:82:f7:24:43:bb:6b:2d:e9:9a: d7:2a:b0:60:1c:83:6a:5f:8c:7f:dc:02:bf:b8:38: eb:79:51:0e:f3:04:d1:07:37:8e:19:f9:62:35:99: 4e:ad:5e:77:9f:cd:64:71:6e:96:a5:81:2f:fc:eb: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6A:ED:EC:B4:12:A6:B0:95:73:99:87:A1:79:2D:08:38:AE:22:C9 X509v3 Authority Key Identifier: keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:f0:ae:87:e5:d7:bd:2e:24:c2:95:7d:c8:92:de:66:c8: 1d:3f:53:72:24:7a:08:4c:3c:c3:a8:57:26:4d:c5:3d:db:0c: 06:82:8e:2b:c3:63:3c:8d:0f:f1:58:e4:d1:d3:21:56:2b:30: a6:87:d1:2e:c2:f4:58:c2:5d:5d:b0:ea:62:c9:a7:f5:5c:74: aa:90:5a:47:13:ce:ba:39:4f:41:f0:8e:c9:61:1c:e5:24:30: ac:87:20:80:98:c7:71:40:3d:90:e4:da:7c:1c:2c:16:a2:a8: 59:65:15:bb:49:b0:21:47:df:0d:73:d0:c5:8d:9d:ac:08:86: 79:d7:17:a9:1e:98:8a:e1:74:35:df:bf:6f:84:66:d0:ca:b9: 0d:e7:c2:3b:20:4b:5a:0d:97:fb:54:4d:00:43:97:a9:25:f3: e9:4b:84:dd:1e:10:95:ac:15:f7:cb:7f:78:22:20:70:27:d9: ac:1c:f9:a0:34:06:60:a5:c5:93:77:58:1d:e5:df:c3:94:43: 87:55:0e:ab:09:c0:fa:f6:da:b1:15:50:d2:f8:c1:ef:d0:59: 3a:1e:d1:d4:b8:59:45:55:ce:e4:6a:30:68:e0:bd:c8:ca:54: 5c:5b:35:ce:de:0f:72:f5:50:47:43:72:60:44:42:37:63:68: ac:e9:6c:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFgPS4gF653AvQ106nUerB+3MyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx MkM5Q0I5RjAeFw0yNTEyMTYyMzE2NTJaFw0yNTEyMjAwNDI2NTJaMDMxMTAvBgNV BAMTKDkzNkFFREVDQjQxMkE2QjA5NTczOTk4N0ExNzkyRDA4MzhBRTIyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwz2CyOt+lQvkGOwcJx3qhBeEb 0rWvgq5EMsrf0ivSgUaao6hKcgbhmlNorY90oG1h6rr5puuh94AsOjHrYpEGvTFO p5MGahie9ZsXGp+vH5maApDdnZlmQEHY2jf0ksYszfEMYE4stxdhROI39tuC+gO3 n9MceVgOYQYPfN8bZVRUpeHbLxRh0RXnWPnlZtYjucKutmqlkAGaZv6JGFx/3E3k BdWV1uxXwmiUzBRoDjyq+AN/qZCbQOA3ByIloMkmmL9R5vYPuIL3JEO7ay3pmtcq sGAcg2pfjH/cAr+4OOt5UQ7zBNEHN44Z+WI1mU6tXnefzWRxbpalgS/864MpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk2rt7LQSprCVc5mHoXktCDiuIskwHwYDVR0j BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3 QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5 Q0I5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1ZDg4ZjEtYjljMC00ODVlLTkx NmUtNTliN2UzNjk4ZGExLzAvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJG REUxMkM5Q0I5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjW8K6H5de9LiTClX3Ikt5myB0/U3IkeghM PMOoVyZNxT3bDAaCjivDYzyND/FY5NHTIVYrMKaH0S7C9FjCXV2w6mLJp/VcdKqQ WkcTzro5T0HwjslhHOUkMKyHIICYx3FAPZDk2nwcLBaiqFllFbtJsCFH3w1z0MWN nawIhnnXF6kemIrhdDXfv2+EZtDKuQ3nwjsgS1oNl/tUTQBDl6kl8+lLhN0eEJWs FffLf3giIHAn2awc+aA0BmClxZN3WB3l38OUQ4dVDqsJwPr22rEVUNL4we/QWToe 0dS4WUVVzuRqMGjgvcjKVFxbNc7eD3L1UEdDcmBEQjdjaKzpbM0= -----END CERTIFICATE-----Generated at Wed Dec 17 20:14:04 2025 by rpki-client