This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: R477yOluELUSxyVG7Dx0pg9LVyOmZZdixA53QOUOVkI= Subject key identifier: B1:FB:CB:37:97:E4:8C:CF:3A:2D:A9:1E:9E:CC:8C:A9:D3:CA:E9:21 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 46A8A653F48E5B214B113914D9A85F28D6ACF15E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 0535 Signing time: Wed 24 Dec 2025 11:45:03 +0000 Manifest this update: Wed 24 Dec 2025 11:40:03 +0000 Manifest next update: Sat 27 Dec 2025 22:26:03 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: d+XvfoMB397aQGWXYdawX2OeDELtHw7BYpuO6KFB8Cc=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a8:a6:53:f4:8e:5b:21:4b:11:39:14:d9:a8:5f:28:d6:ac:f1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Dec 24 11:40:03 2025 GMT Not After : Dec 27 22:26:03 2025 GMT Subject: CN=B1FBCB3797E48CCF3A2DA91E9ECC8CA9D3CAE921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:d8:e9:a7:c7:ae:b0:0a:c7:70:ad:af:c4: d7:a9:cb:e4:c4:02:90:47:05:10:a3:f7:56:de:43: 4c:68:37:5f:7b:3d:52:bb:d0:9b:33:32:53:9f:97: f4:4c:69:b8:29:53:e1:27:02:87:24:21:7d:4c:fc: ae:9a:df:52:97:89:48:47:24:f9:3d:f7:17:ae:36: 40:cd:d6:bc:d8:dc:5f:28:ae:31:1b:81:66:3d:1e: 04:cf:24:e9:47:32:ef:8b:d0:70:f2:43:74:36:f3: 52:e2:19:7b:8a:43:00:6e:aa:b0:38:f0:4a:91:d5: ae:53:da:7f:a5:63:65:22:95:14:1a:bd:4a:eb:de: 56:fe:71:7b:b1:ab:88:d1:65:1f:f3:80:2c:d4:ce: 6b:89:6a:77:0e:65:e4:a1:c7:97:76:2b:be:d1:0a: cd:09:7d:46:9b:d1:e7:3c:b3:a1:fe:d9:2b:f8:e4: 9d:5f:f6:16:0d:ea:32:0c:53:5c:d2:bf:17:9e:ff: ba:c3:5e:1c:e9:ea:ad:17:ec:86:2d:cb:90:41:ac: d8:76:bb:6e:aa:46:6e:83:13:e0:76:e6:9a:a3:2a: 82:e0:88:24:0a:e2:3b:e0:5a:68:bc:09:00:eb:5a: ec:19:8c:9e:aa:6a:86:b0:60:4f:82:d1:e6:37:4b: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:CB:37:97:E4:8C:CF:3A:2D:A9:1E:9E:CC:8C:A9:D3:CA:E9:21 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:35:99:a1:51:57:33:d2:da:4e:89:f4:0e:47:31:04:88:8b: 90:ae:39:e8:85:73:e3:a6:6c:e5:86:20:a7:ce:13:7e:b1:d1: 1c:0a:3f:bf:e9:b5:22:ef:1c:d4:15:68:08:5a:b1:11:59:89: db:be:79:e5:fe:66:7e:30:c3:2f:1f:65:74:eb:6e:2a:5e:07: 3e:de:dd:7e:d7:4f:2e:2b:b4:ea:4c:84:56:12:13:b3:11:f5: fe:9c:81:b7:3f:92:ae:58:e5:ff:6e:f1:65:02:8e:39:7f:a8: 3d:70:e2:c4:88:2b:4f:57:1e:88:37:fd:3c:bb:af:73:99:77: 70:68:06:1e:6a:e9:05:23:45:fa:23:d3:79:db:2a:8c:11:de: b1:4b:b0:e0:ac:2b:9a:a4:80:57:92:62:a8:39:b7:a3:36:c3: 28:91:4d:02:b6:7a:ea:59:72:c5:ce:f7:e8:ae:4f:d1:d5:5d: 3a:b0:1d:14:f9:1c:5b:7e:94:34:30:60:77:b3:d8:ee:ed:a0: c2:c7:ce:0e:4a:d9:28:1a:3f:a0:39:08:b8:fa:09:c1:03:cd: e8:65:fc:6b:c0:5f:65:3f:99:7c:d3:40:c7:f9:4f:73:bb:10: 60:c4:6a:75:72:4d:43:32:52:31:d7:d5:aa:7b:85:11:84:b8: 73:69:ac:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqimU/SOWyFLETkU2ahfKNas8V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTEyMjQxMTQwMDNaFw0yNTEyMjcyMjI2MDNaMDMxMTAvBgNV BAMTKEIxRkJDQjM3OTdFNDhDQ0YzQTJEQTkxRTlFQ0M4Q0E5RDNDQUU5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKydjpp8eusArHcK2vxNepy+TE ApBHBRCj91beQ0xoN197PVK70JszMlOfl/RMabgpU+EnAockIX1M/K6a31KXiUhH JPk99xeuNkDN1rzY3F8orjEbgWY9HgTPJOlHMu+L0HDyQ3Q281LiGXuKQwBuqrA4 8EqR1a5T2n+lY2UilRQavUrr3lb+cXuxq4jRZR/zgCzUzmuJancOZeShx5d2K77R Cs0JfUab0ec8s6H+2Sv45J1f9hYN6jIMU1zSvxee/7rDXhzp6q0X7IYty5BBrNh2 u26qRm6DE+B25pqjKoLgiCQK4jvgWmi8CQDrWuwZjJ6qaoawYE+C0eY3SzaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfvLN5fkjM86LakensyMqdPK6SEwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs1maFRVzPS2k6J9A5HMQSIi5CuOeiFc+Om bOWGIKfOE36x0RwKP7/ptSLvHNQVaAhasRFZidu+eeX+Zn4wwy8fZXTrbipeBz7e 3X7XTy4rtOpMhFYSE7MR9f6cgbc/kq5Y5f9u8WUCjjl/qD1w4sSIK09XHog3/Ty7 r3OZd3BoBh5q6QUjRfoj03nbKowR3rFLsOCsK5qkgFeSYqg5t6M2wyiRTQK2eupZ csXO9+iuT9HVXTqwHRT5HFt+lDQwYHez2O7toMLHzg5K2SgaP6A5CLj6CcEDzehl /GvAX2U/mXzTQMf5T3O7EGDEanVyTUMyUjHX1ap7hRGEuHNprAc= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:34 2025 by rpki-client