This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: 2SxaqTOjyg2/ndbS2skdsyhtjHwkT0Z5/YmmWyiSTTo= Subject key identifier: 43:FF:A6:77:85:58:4C:97:E3:C7:6F:FB:D9:A6:5E:AC:E1:D1:68:E3 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 71A3B7048F4CB3D9017589422B3BDF6CBE6F4F81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 052F Signing time: Wed 17 Dec 2025 06:01:21 +0000 Manifest this update: Wed 17 Dec 2025 05:56:21 +0000 Manifest next update: Sat 20 Dec 2025 06:07:21 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: btRxJOhCK6TvIGoQUYheZMU/Lge0obPFJ74rtYqu6Rc=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a3:b7:04:8f:4c:b3:d9:01:75:89:42:2b:3b:df:6c:be:6f:4f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Dec 17 05:56:21 2025 GMT Not After : Dec 20 06:07:21 2025 GMT Subject: CN=43FFA67785584C97E3C76FFBD9A65EACE1D168E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:c4:46:4e:a7:ed:68:7b:d6:26:cd:34:68: 9f:47:22:59:18:16:28:65:0f:69:cd:c4:4b:27:89: 65:89:4e:ac:42:39:93:af:46:d3:5b:21:82:06:00: 42:cf:87:02:3f:f9:85:88:3b:9e:7b:6a:ae:71:b1: cf:4d:bb:89:62:78:5b:a8:c5:57:2a:63:bb:e5:8a: fe:81:c0:7a:24:38:89:7c:42:2f:0e:ad:a2:c1:3b: 9f:d3:e0:5c:33:c5:a6:5a:78:24:9e:79:78:a1:1c: 7a:35:e8:15:7b:35:64:31:be:71:fc:f4:ea:d6:57: 03:e0:d5:02:8a:bf:00:6a:3f:43:15:15:af:ac:62: 97:43:ad:dc:17:e4:c5:b5:cb:6f:08:f6:4d:14:f2: 99:03:d1:27:ee:d7:8f:92:c3:79:70:38:ad:a6:10: 40:53:b6:5f:0c:d2:44:0e:e3:82:fc:81:7b:4f:ec: 04:71:62:0e:0c:13:47:10:9a:4a:6c:b6:b1:ee:9b: dd:cc:07:8d:72:83:a6:e5:02:03:39:54:bd:1f:91: e9:6f:42:2b:ec:29:e7:d1:a3:79:1b:8b:da:b6:d2: d2:b4:7a:7b:9a:90:59:54:88:5c:ad:25:b2:43:ee: 0e:bc:76:f2:88:2c:53:1c:99:0e:74:0c:77:6b:d7: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:A6:77:85:58:4C:97:E3:C7:6F:FB:D9:A6:5E:AC:E1:D1:68:E3 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1d:c3:6b:64:79:c4:03:66:61:fc:bc:ea:e9:1a:52:02:fd: 87:09:79:8f:9e:8b:54:58:7c:e3:70:f9:db:83:d6:42:54:03: 3a:7a:35:e4:46:30:d5:35:20:05:d7:c2:1e:03:1d:3b:86:2a: 67:74:82:65:53:f1:ed:17:69:1b:ba:0a:e3:89:0f:b2:2b:2a: d8:89:d2:4f:4f:75:1b:63:15:c2:f4:55:2f:f3:8e:1c:f6:09: c9:ad:35:22:c4:5c:db:39:2a:0b:b0:3b:3c:7c:db:1e:34:12: f4:1f:bb:04:f7:e9:c9:05:00:56:67:de:44:b9:73:04:1c:c2: fb:51:56:55:fe:cb:e9:01:41:08:03:b6:98:50:d0:cf:ef:19: b6:f5:93:ad:0b:ca:70:0e:5a:76:42:47:2e:9f:36:4d:25:a2: 03:6c:91:60:58:90:c9:f2:a3:1c:4d:4f:0d:17:17:e8:df:b8: fb:f5:92:ae:35:6d:4a:2b:1e:5d:97:bc:0c:f5:29:55:35:45: b2:c9:a3:5a:7c:7d:0c:c5:52:6f:a1:87:16:00:9c:3c:6d:6a: 7e:0e:1a:75:b6:f5:38:ea:5c:3b:36:d1:53:74:ec:f3:77:9f: ae:35:48:2c:0b:84:58:ab:d9:e5:56:4f:7b:45:df:b2:23:a7: b5:68:13:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaO3BI9Ms9kBdYlCKzvfbL5vT4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTEyMTcwNTU2MjFaFw0yNTEyMjAwNjA3MjFaMDMxMTAvBgNV BAMTKDQzRkZBNjc3ODU1ODRDOTdFM0M3NkZGQkQ5QTY1RUFDRTFEMTY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2m8RGTqftaHvWJs00aJ9HIlkY FihlD2nNxEsniWWJTqxCOZOvRtNbIYIGAELPhwI/+YWIO557aq5xsc9Nu4lieFuo xVcqY7vliv6BwHokOIl8Qi8OraLBO5/T4FwzxaZaeCSeeXihHHo16BV7NWQxvnH8 9OrWVwPg1QKKvwBqP0MVFa+sYpdDrdwX5MW1y28I9k0U8pkD0Sfu14+Sw3lwOK2m EEBTtl8M0kQO44L8gXtP7ARxYg4ME0cQmkpstrHum93MB41yg6blAgM5VL0fkelv QivsKefRo3kbi9q20tK0enuakFlUiFytJbJD7g68dvKILFMcmQ50DHdr1907AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/+md4VYTJfjx2/72aZerOHRaOMwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAdw2tkecQDZmH8vOrpGlIC/YcJeY+ei1RY fONw+duD1kJUAzp6NeRGMNU1IAXXwh4DHTuGKmd0gmVT8e0XaRu6CuOJD7IrKtiJ 0k9PdRtjFcL0VS/zjhz2CcmtNSLEXNs5KguwOzx82x40EvQfuwT36ckFAFZn3kS5 cwQcwvtRVlX+y+kBQQgDtphQ0M/vGbb1k60LynAOWnZCRy6fNk0logNskWBYkMny oxxNTw0XF+jfuPv1kq41bUorHl2XvAz1KVU1RbLJo1p8fQzFUm+hhxYAnDxtan4O GnW29TjqXDs20VN07PN3n641SCwLhFir2eVWT3tF37Ijp7VoEwg= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:41 2025 by rpki-client