This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: JqNhRRmiD/uPvnpEzW3MxyColnWL3oF00mq1bd3p8/o= Subject key identifier: 5C:C2:98:DD:C5:5F:48:F0:7E:CA:5A:58:27:24:16:6F:FF:42:72:42 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 177BD802A715A7CB91E8CF7AC359F794EA2D203B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 0532 Signing time: Sat 20 Dec 2025 16:31:30 +0000 Manifest this update: Sat 20 Dec 2025 16:26:30 +0000 Manifest next update: Wed 24 Dec 2025 01:49:30 +0000 Files and hashes: 1: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: j6P4xsf0fXPdRhsIO6r4r7ICTPC6AJQrGWPof9Fj7po=) 2: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: sXpqmxuNw5KFGHbUuElptIHnlBHgbhE4oyCC4/bbR5g=) 3: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: 71g17R0P09F8qrxe26WyVipN7k+nUXzMu0u7MqFMMYI=) 4: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: /PEVn+IVmXC5Z5OOwdRuqG9GnOSk8N8Pu2IOBeaPgSc=) 5: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: zQYCa94Kei73ulf+4e/B/4czmcXrLUsguGH7kUJqVxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7b:d8:02:a7:15:a7:cb:91:e8:cf:7a:c3:59:f7:94:ea:2d:20:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: Dec 20 16:26:30 2025 GMT Not After : Dec 24 01:49:30 2025 GMT Subject: CN=5CC298DDC55F48F07ECA5A582724166FFF427242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:33:e4:36:9b:28:91:00:d3:27:f9:f3:44: 54:ad:8c:2a:6a:8f:4a:c8:53:18:21:14:17:4a:66: 4d:a8:3a:bd:d9:bf:71:3e:9d:4d:89:22:fc:45:71: 34:50:72:7d:3c:73:e6:18:08:ff:50:09:e0:9f:ad: 40:cf:4f:ed:7d:85:c1:0a:fc:a5:4f:89:7e:93:22: 30:8f:9e:48:f9:3d:ad:d0:07:8c:d6:9e:fa:b6:76: 2c:91:c8:0e:0b:42:14:83:5b:9f:7e:66:aa:50:c0: 32:58:58:f8:73:3e:06:8b:3d:8e:04:e3:6d:d5:5e: 8d:72:5b:b2:d8:25:06:16:74:d0:95:bd:04:28:d6: 81:a7:72:c6:7b:93:bd:d2:b4:3a:1a:f5:0d:66:b5: 25:30:6d:39:7d:ab:6a:b1:68:b1:45:b9:20:a4:14: 56:f1:c7:04:55:62:ef:fb:36:a4:8d:8f:18:c7:46: ac:d2:0d:68:a0:cf:36:24:2d:b2:05:54:3e:03:04: 39:82:89:34:fe:f8:b9:de:73:6c:b6:64:25:3a:88: 17:7e:5b:61:bf:d0:d5:c9:5f:8d:bf:8b:cd:72:5a: d9:78:9a:a5:fc:3f:f6:ae:4e:b7:cb:84:0f:c9:a1: 31:f2:5c:c3:07:a5:59:5c:cd:f7:f6:52:f7:43:15: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C2:98:DD:C5:5F:48:F0:7E:CA:5A:58:27:24:16:6F:FF:42:72:42 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:68:c2:29:55:0a:d1:23:66:b5:e1:53:0f:02:8a:6a:be:f5: ea:c2:03:9f:38:f9:26:d9:2a:51:cf:53:bc:62:89:7c:19:19: 36:93:3a:ff:d8:d5:1e:68:84:6f:f6:1c:9f:12:67:e9:dd:b0: a9:35:3a:7d:02:d9:b1:dc:b2:b0:65:05:c8:56:27:10:b4:6e: f6:57:f9:69:8d:4b:22:d6:2d:50:bc:41:f7:31:5d:81:de:0d: 07:eb:82:b8:a2:78:c9:17:11:cc:aa:a4:24:83:3c:1c:b2:87: 10:66:44:2c:93:84:74:5a:2f:80:fd:4f:43:63:88:20:cf:7a: d4:59:4e:d7:bf:30:e8:b5:8c:d7:4e:06:04:ee:75:d5:18:86: 26:eb:dd:14:ac:c9:1a:a1:34:ee:a8:a0:b8:a4:30:cf:3a:3a: dd:ef:64:65:7f:dd:7a:3d:e4:e7:4a:e5:43:c1:33:81:ce:61: f1:54:34:c6:58:a0:f2:a6:5e:01:8d:b8:c1:f7:02:09:ef:e9: 59:eb:5e:db:e4:0b:d2:6a:21:13:98:82:dd:46:af:bd:ee:f5: 25:3d:99:fc:f9:db:06:cf:ac:8b:4d:1d:1f:eb:aa:a0:92:36: c6:64:6a:ea:da:62:e1:a5:36:f4:24:b1:cf:95:e9:ec:62:6f: 7f:d1:b6:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3vYAqcVp8uR6M96w1n3lOotIDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNTEyMjAxNjI2MzBaFw0yNTEyMjQwMTQ5MzBaMDMxMTAvBgNV BAMTKDVDQzI5OEREQzU1RjQ4RjA3RUNBNUE1ODI3MjQxNjZGRkY0MjcyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FzPkNpsokQDTJ/nzRFStjCpq j0rIUxghFBdKZk2oOr3Zv3E+nU2JIvxFcTRQcn08c+YYCP9QCeCfrUDPT+19hcEK /KVPiX6TIjCPnkj5Pa3QB4zWnvq2diyRyA4LQhSDW59+ZqpQwDJYWPhzPgaLPY4E 423VXo1yW7LYJQYWdNCVvQQo1oGncsZ7k73StDoa9Q1mtSUwbTl9q2qxaLFFuSCk FFbxxwRVYu/7NqSNjxjHRqzSDWigzzYkLbIFVD4DBDmCiTT++Lnec2y2ZCU6iBd+ W2G/0NXJX42/i81yWtl4mqX8P/auTrfLhA/JoTHyXMMHpVlczff2UvdDFW4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXMKY3cVfSPB+ylpYJyQWb/9CckIwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtowilVCtEjZrXhUw8Cimq+9erCA584+SbZ KlHPU7xiiXwZGTaTOv/Y1R5ohG/2HJ8SZ+ndsKk1On0C2bHcsrBlBchWJxC0bvZX +WmNSyLWLVC8QfcxXYHeDQfrgriieMkXEcyqpCSDPByyhxBmRCyThHRaL4D9T0Nj iCDPetRZTte/MOi1jNdOBgTuddUYhibr3RSsyRqhNO6ooLikMM86Ot3vZGV/3Xo9 5OdK5UPBM4HOYfFUNMZYoPKmXgGNuMH3Agnv6VnrXtvkC9JqIROYgt1Gr73u9SU9 mfz52wbPrItNHR/rqqCSNsZkauraYuGlNvQksc+V6exib3/RtpA= -----END CERTIFICATE-----Generated at Mon Dec 22 09:43:05 2025 by rpki-client