This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: psXSNUwD/Su9KdYHg+FzeaDPriRWSZN/bKE6aEPOiuU= Subject key identifier: 84:E5:DB:BE:60:86:98:90:88:F5:AA:CC:D2:12:80:AA:CB:21:3A:11 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 60F15AF1AC44C027537BD2D4A90F5A389061A1E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: 0130 Signing time: Tue 30 Dec 2025 18:41:57 +0000 Manifest this update: Tue 30 Dec 2025 18:36:57 +0000 Manifest next update: Fri 02 Jan 2026 19:59:57 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: 8vdMPGHCqE7H8YqDTd+gvwo/fxlB5ousDvbZUNN1NrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 19:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f1:5a:f1:ac:44:c0:27:53:7b:d2:d4:a9:0f:5a:38:90:61:a1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Dec 30 18:36:57 2025 GMT Not After : Jan 2 19:59:57 2026 GMT Subject: CN=84E5DBBE6086989088F5AACCD21280AACB213A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:ab:05:51:61:a4:bb:d6:e3:4b:c4:1c:d3: d3:8b:6c:23:a6:5f:63:4e:94:01:e6:dc:1b:a5:33: dd:67:6a:41:64:7e:57:28:f5:da:fe:c0:b3:e5:dd: 5e:87:b9:31:5e:21:fc:5b:d7:0a:82:d0:6f:33:38: d0:37:3a:0e:1e:04:e7:c8:5d:6a:e6:64:0a:a6:39: 71:f6:ba:5e:ef:e0:28:59:05:6b:0b:d0:88:e7:ce: c4:e9:0d:e3:9b:43:d4:11:79:cc:8b:2a:ab:da:49: 42:fd:af:c7:43:0c:b3:d5:37:fd:ae:7e:20:48:7d: 7c:fb:50:15:dc:b7:80:73:8c:5f:10:95:4d:b7:00: c1:9f:64:e7:87:f0:4a:b8:8d:d4:2d:82:95:f1:86: b9:14:0f:12:65:4a:ad:55:f2:8c:04:6f:c1:92:97: 65:ef:ba:bb:86:56:45:b1:65:87:9b:1b:4e:47:96: 48:e6:ee:63:34:86:a3:e6:d6:3a:b3:9e:da:de:13: 3e:77:b3:b1:bf:ab:49:f0:c7:0b:2f:ef:80:99:b7: a3:ea:c0:0a:b5:b2:7e:7d:43:f9:06:ab:fe:ec:26: a9:35:a7:93:70:ab:84:0a:a2:2a:f5:e4:a5:fb:8b: be:e9:ee:67:1b:fb:e0:f9:a9:54:54:9e:a0:2d:8d: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:DB:BE:60:86:98:90:88:F5:AA:CC:D2:12:80:AA:CB:21:3A:11 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:17:df:1d:8f:67:ea:d6:a5:a9:e0:a9:48:d5:8f:3c:d5:5c: 5e:ae:39:4a:10:b2:4e:ce:52:26:18:0b:09:7e:54:33:e6:9b: 1a:94:fe:e5:5d:29:69:f4:a3:0c:d8:38:17:d7:41:36:41:c7: ef:56:7b:5f:60:67:2f:d9:e0:dd:cd:b1:85:d6:ce:67:66:76: c3:30:8a:8e:53:1b:bc:9b:98:09:c1:88:06:3b:b9:a4:a2:8e: da:20:c2:00:8e:07:9e:94:09:b7:b0:c0:d1:84:75:f1:d0:72: 3a:ce:ed:e6:9a:eb:ca:c3:99:fb:bf:cf:ac:50:5b:4c:79:9a: 71:61:a5:da:94:8c:d1:84:de:59:ce:9c:3e:48:b4:89:a3:35: 2e:5b:35:c7:b2:9c:ce:4a:f6:97:e2:ac:6c:3e:b2:70:f1:98: 8a:df:93:e2:8c:39:55:b0:03:10:58:74:b9:06:78:b9:74:34: 6b:fc:28:f8:cd:d4:76:b1:c9:7c:52:ed:55:4b:a5:56:cb:8f: d4:62:60:e9:18:43:1d:36:ad:b3:bc:14:2c:e9:38:4e:fc:08: a4:2a:f1:80:70:fd:ab:89:5d:01:f1:2b:02:e4:2d:2e:7a:c9: af:8d:a5:88:00:d0:d5:82:17:29:29:19:72:e4:7c:cd:5c:76: ba:0e:5e:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPFa8axEwCdTe9LUqQ9aOJBhoeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTEyMzAxODM2NTdaFw0yNjAxMDIxOTU5NTdaMDMxMTAvBgNV BAMTKDg0RTVEQkJFNjA4Njk4OTA4OEY1QUFDQ0QyMTI4MEFBQ0IyMTNBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVasFUWGku9bjS8Qc09OLbCOm X2NOlAHm3BulM91nakFkflco9dr+wLPl3V6HuTFeIfxb1wqC0G8zONA3Og4eBOfI XWrmZAqmOXH2ul7v4ChZBWsL0IjnzsTpDeObQ9QRecyLKqvaSUL9r8dDDLPVN/2u fiBIfXz7UBXct4BzjF8QlU23AMGfZOeH8Eq4jdQtgpXxhrkUDxJlSq1V8owEb8GS l2XvuruGVkWxZYebG05Hlkjm7mM0hqPm1jqzntreEz53s7G/q0nwxwsv74CZt6Pq wAq1sn59Q/kGq/7sJqk1p5Nwq4QKoir15KX7i77p7mcb++D5qVRUnqAtjRczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOXbvmCGmJCI9arM0hKAqsshOhEwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUX3x2PZ+rWpangqUjVjzzVXF6uOUoQsk7O UiYYCwl+VDPmmxqU/uVdKWn0owzYOBfXQTZBx+9We19gZy/Z4N3NsYXWzmdmdsMw io5TG7ybmAnBiAY7uaSijtogwgCOB56UCbewwNGEdfHQcjrO7eaa68rDmfu/z6xQ W0x5mnFhpdqUjNGE3lnOnD5ItImjNS5bNceynM5K9pfirGw+snDxmIrfk+KMOVWw AxBYdLkGeLl0NGv8KPjN1HaxyXxS7VVLpVbLj9RiYOkYQx02rbO8FCzpOE78CKQq 8YBw/auJXQHxKwLkLS56ya+NpYgA0NWCFykpGXLkfM1cdroOXt8= -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:11 2025 by rpki-client