This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: n+cync2Q4377idHwMC+gHEjHiu3wCkgGtJCQyUAmZBI= Subject key identifier: BE:10:D4:0C:0E:FA:AD:B1:3F:DF:74:8E:DB:EF:6E:37:5D:CA:36:92 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 2B3402D0B8CC3720A9890B082884E85E8A15D8DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02F6 Signing time: Wed 24 Dec 2025 03:43:46 +0000 Manifest this update: Wed 24 Dec 2025 03:38:46 +0000 Manifest next update: Sat 27 Dec 2025 13:07:46 +0000 Files and hashes: 1: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: T4TBCFB8hbww1ya3goV9mgTzY8Q/t3+75O2VGLk/sbo=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:34:02:d0:b8:cc:37:20:a9:89:0b:08:28:84:e8:5e:8a:15:d8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Dec 24 03:38:46 2025 GMT Not After : Dec 27 13:07:46 2025 GMT Subject: CN=BE10D40C0EFAADB13FDF748EDBEF6E375DCA3692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c0:15:0d:4c:e5:db:6d:42:57:04:dc:fe:46: 92:0c:47:22:46:1b:e0:ed:16:0e:d9:53:df:11:2c: f9:2f:37:e5:66:6d:51:94:df:3b:3b:1a:ef:d4:1a: e8:8e:f2:56:b3:11:9d:71:63:1f:fb:38:99:cb:d2: ce:ec:c9:65:00:ee:55:fb:16:3d:3a:5e:55:d3:60: 35:f9:d5:4f:db:d5:48:ef:4d:3d:1a:d5:af:35:d0: 63:05:e5:d5:84:dc:c6:64:91:d1:50:38:ff:18:3b: 84:92:82:67:cc:3a:21:55:af:fb:18:58:b2:b5:42: 28:bb:f3:63:a0:1f:6b:7d:38:81:2d:61:e6:f7:ce: 10:50:44:53:56:58:e4:06:a1:63:71:25:28:e7:b5: f5:28:05:70:9e:ba:da:a0:26:c2:e1:c5:65:86:c8: 43:12:e0:0b:1d:c8:04:06:7c:55:d6:99:5e:dd:eb: 4a:bb:4a:69:08:36:6c:22:51:48:70:99:3b:4b:77: 24:df:7a:6f:a0:4b:59:da:ea:64:63:1c:1b:09:02: b1:33:10:7e:f5:1b:29:76:0d:11:4a:52:5b:f1:bb: d1:3c:ed:a6:66:8e:a2:4f:71:78:49:ca:d2:32:98: cc:d8:c5:75:fa:9c:5c:bf:83:53:26:ff:76:32:fc: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:D4:0C:0E:FA:AD:B1:3F:DF:74:8E:DB:EF:6E:37:5D:CA:36:92 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9a:a6:cc:6d:c1:2e:31:45:04:f1:27:91:fd:f6:3b:4f:a9: 1a:cd:d9:93:a3:9f:41:5b:fc:43:ab:2f:96:32:bf:09:6b:82: 25:d0:50:55:4f:a7:dc:43:f3:e6:c8:ba:39:64:18:9b:9d:74: a3:23:c9:60:35:4a:64:4b:f2:db:0d:6b:7b:5b:28:95:4d:a0: ce:ce:98:ef:bb:50:87:5a:5e:f5:54:9c:1e:29:48:7f:b6:c4: c7:39:5c:e5:25:26:f1:8d:32:8b:0f:ef:4b:5b:b0:de:d6:ef: 3f:45:35:0e:96:e0:17:b1:73:47:a8:03:ab:69:3e:39:e1:52: db:7e:5b:9b:55:f3:2d:3d:b5:0c:74:69:67:bc:c8:b8:c6:51: 35:bb:37:66:bf:30:3f:36:35:b9:2b:05:8f:15:42:e5:af:a4: 7b:17:36:0c:8a:a2:f8:92:00:1a:45:50:f5:e8:62:6c:1c:60: 10:e2:46:c3:9e:45:dc:52:0c:0e:2d:b9:21:e1:18:47:b1:88: 6a:3c:b0:76:0f:fc:1b:68:18:7e:ea:a2:12:61:55:b7:d0:08: 84:71:65:6e:d8:e8:36:2b:b2:6b:97:d9:22:1d:0e:aa:a9:bc: 01:32:23:fa:7e:9e:dc:4b:a7:2a:90:21:18:48:21:dc:a8:e5: d0:8c:76:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzQC0LjMNyCpiQsIKIToXooV2N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTEyMjQwMzM4NDZaFw0yNTEyMjcxMzA3NDZaMDMxMTAvBgNV BAMTKEJFMTBENDBDMEVGQUFEQjEzRkRGNzQ4RURCRUY2RTM3NURDQTM2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4wBUNTOXbbUJXBNz+RpIMRyJG G+DtFg7ZU98RLPkvN+VmbVGU3zs7Gu/UGuiO8lazEZ1xYx/7OJnL0s7syWUA7lX7 Fj06XlXTYDX51U/b1UjvTT0a1a810GMF5dWE3MZkkdFQOP8YO4SSgmfMOiFVr/sY WLK1Qii782OgH2t9OIEtYeb3zhBQRFNWWOQGoWNxJSjntfUoBXCeutqgJsLhxWWG yEMS4AsdyAQGfFXWmV7d60q7SmkINmwiUUhwmTtLdyTfem+gS1na6mRjHBsJArEz EH71Gyl2DRFKUlvxu9E87aZmjqJPcXhJytIymMzYxXX6nFy/g1Mm/3Yy/Du5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhDUDA76rbE/33SO2+9uN13KNpIwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2apsxtwS4xRQTxJ5H99jtPqRrN2ZOjn0Fb /EOrL5YyvwlrgiXQUFVPp9xD8+bIujlkGJuddKMjyWA1SmRL8tsNa3tbKJVNoM7O mO+7UIdaXvVUnB4pSH+2xMc5XOUlJvGNMosP70tbsN7W7z9FNQ6W4Bexc0eoA6tp PjnhUtt+W5tV8y09tQx0aWe8yLjGUTW7N2a/MD82NbkrBY8VQuWvpHsXNgyKoviS ABpFUPXoYmwcYBDiRsOeRdxSDA4tuSHhGEexiGo8sHYP/BtoGH7qohJhVbfQCIRx ZW7Y6DYrsmuX2SIdDqqpvAEyI/p+ntxLpyqQIRhIIdyo5dCMdi8= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:44 2025 by rpki-client