This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: eqmISFm91/HndzcGpPWD9aOFD6sc1gxLGcG5TiNpmbQ= Subject key identifier: 3D:9B:7C:90:41:C7:A4:AC:63:B3:C9:48:94:57:CC:24:4B:C5:81:05 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 38629F5299C6A8EEDB3F0B7D3F4E0FF434260C1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0420 Signing time: Sat 13 Dec 2025 16:02:03 +0000 Manifest this update: Sat 13 Dec 2025 15:57:03 +0000 Manifest next update: Tue 16 Dec 2025 20:42:03 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: 2veNnH7xseKmHRFds7zxkts++cngFp3AF/fz7bKkrDg=) 2: AS23693.roa (hash: Z3jM6KPjKamqDlAz+a22bHWv8pxRgbuvJGlFrFV15JU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 20:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:62:9f:52:99:c6:a8:ee:db:3f:0b:7d:3f:4e:0f:f4:34:26:0c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Dec 13 15:57:03 2025 GMT Not After : Dec 16 20:42:03 2025 GMT Subject: CN=3D9B7C9041C7A4AC63B3C9489457CC244BC58105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3b:2c:58:41:4d:67:7a:d4:19:75:06:a8:6b: f0:06:8b:4a:b3:6b:96:03:14:4f:76:ae:81:c5:97: 0e:bb:19:f9:d5:23:ea:f1:d9:f8:70:d1:a7:75:6f: 64:7c:9e:2f:e1:59:7f:35:df:00:2c:25:73:a2:6f: e8:f7:34:0b:dc:fd:3d:ff:81:4a:d4:52:dc:18:96: 3b:01:6a:4a:a7:dd:cb:1d:1d:af:51:74:8c:06:82: b3:ab:66:da:b9:d2:3b:51:9f:f8:43:68:80:7e:4a: fd:e3:a2:30:cd:7a:cd:97:8d:e4:a1:98:f8:2e:99: 22:13:af:f4:f7:81:66:b5:20:5a:b7:78:2f:0b:ab: ca:31:55:e2:67:08:68:7d:82:5c:10:58:95:7c:9d: fb:a2:43:6f:ce:67:be:1b:10:d2:ce:1e:e5:42:ec: 19:4c:26:38:91:99:58:75:0d:9d:8f:4e:00:d5:a5: a7:98:7b:75:54:a7:a1:b3:32:13:7e:cd:dc:99:3c: 0f:61:f3:02:23:e7:82:37:9d:db:90:aa:4e:68:73: 9d:d3:b0:b7:c1:6c:f3:46:3b:88:9f:6b:d0:bb:f5: ab:82:7b:23:21:40:26:d6:a0:c8:87:d3:cc:ec:24: 19:38:0f:a9:17:f7:93:5c:27:0b:97:6d:b8:ff:eb: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:7C:90:41:C7:A4:AC:63:B3:C9:48:94:57:CC:24:4B:C5:81:05 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:75:67:21:38:97:89:f1:a5:da:c2:fa:ee:ac:6f:36:13:6b: 3b:d3:ac:ea:cd:7d:3d:1c:2f:ea:74:55:cd:56:a9:df:a4:75: e8:77:b7:6c:9c:c8:14:8b:45:8d:b7:ab:b5:cf:a0:36:1a:fc: ef:e5:ad:bd:1a:f7:39:9d:46:03:fb:d9:e0:64:10:64:d9:f0: 9c:6d:08:48:2c:8d:1f:c4:6c:e6:83:b4:38:a6:8f:d2:8b:54: 04:66:d9:be:ed:b5:14:47:ad:46:4a:b5:6f:67:9a:07:f2:66: 08:a3:70:a3:09:f3:f2:07:29:14:fa:e3:0c:0d:e1:12:02:78: 2b:5e:34:09:44:7b:19:6d:62:86:60:ea:1e:b2:a4:ae:1c:d0: fd:04:bd:82:2e:47:ee:12:de:ca:9d:52:6d:7e:61:06:82:75: 67:98:31:83:c8:00:81:a5:2c:42:b2:c3:3b:37:b7:92:07:f7: b7:03:34:8c:64:aa:1b:e0:61:4a:14:cc:c0:59:da:4b:c5:0b: 63:0d:3e:62:49:3c:0f:e1:e7:e8:52:33:71:8c:bb:3a:dd:43: b8:17:a7:3e:75:43:fe:e0:e7:df:b9:8c:55:65:d7:be:bd:a3: 2c:94:7b:7f:1b:1d:6b:d4:fd:e7:c0:3e:87:50:87:1d:08:c2: 88:0f:b0:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGKfUpnGqO7bPwt9P04P9DQmDBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTEyMTMxNTU3MDNaFw0yNTEyMTYyMDQyMDNaMDMxMTAvBgNV BAMTKDNEOUI3QzkwNDFDN0E0QUM2M0IzQzk0ODk0NTdDQzI0NEJDNTgxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnOyxYQU1netQZdQaoa/AGi0qz a5YDFE92roHFlw67GfnVI+rx2fhw0ad1b2R8ni/hWX813wAsJXOib+j3NAvc/T3/ gUrUUtwYljsBakqn3csdHa9RdIwGgrOrZtq50jtRn/hDaIB+Sv3jojDNes2XjeSh mPgumSITr/T3gWa1IFq3eC8Lq8oxVeJnCGh9glwQWJV8nfuiQ2/OZ74bENLOHuVC 7BlMJjiRmVh1DZ2PTgDVpaeYe3VUp6GzMhN+zdyZPA9h8wIj54I3nduQqk5oc53T sLfBbPNGO4ifa9C79auCeyMhQCbWoMiH08zsJBk4D6kX95NcJwuXbbj/6+7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZt8kEHHpKxjs8lIlFfMJEvFgQUwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA51ZyE4l4nxpdrC+u6sbzYTazvTrOrNfT0c L+p0Vc1Wqd+kdeh3t2ycyBSLRY23q7XPoDYa/O/lrb0a9zmdRgP72eBkEGTZ8Jxt CEgsjR/EbOaDtDimj9KLVARm2b7ttRRHrUZKtW9nmgfyZgijcKMJ8/IHKRT64wwN 4RICeCteNAlEexltYoZg6h6ypK4c0P0EvYIuR+4S3sqdUm1+YQaCdWeYMYPIAIGl LEKywzs3t5IH97cDNIxkqhvgYUoUzMBZ2kvFC2MNPmJJPA/h5+hSM3GMuzrdQ7gX pz51Q/7g59+5jFVl1769oyyUe38bHWvU/efAPodQhx0IwogPsBc= -----END CERTIFICATE-----Generated at Mon Dec 15 19:48:17 2025 by rpki-client