This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: qnVO2ERl0Gt8AllOzSG6aRVyQHGJp+uUI1xpR265lLs= Subject key identifier: 41:92:84:59:F4:DE:65:E6:21:6E:4D:5A:B5:49:CA:40:9F:15:13:F4 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 7420088CD9E1E3A2CEFCBF7EB4C163003C0C9299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 01C9 Signing time: Wed 17 Dec 2025 16:02:08 +0000 Manifest this update: Wed 17 Dec 2025 15:57:08 +0000 Manifest next update: Sat 20 Dec 2025 21:23:08 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 8bdcuP86nx1UFfxVnnh8wGJritVHJXJ+E76C/c7hdYk=) 2: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: og5wov7h/5/vBqk2P+zdGiJo0UKtT+FKcuAs0lpYwZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:20:08:8c:d9:e1:e3:a2:ce:fc:bf:7e:b4:c1:63:00:3c:0c:92:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Dec 17 15:57:08 2025 GMT Not After : Dec 20 21:23:08 2025 GMT Subject: CN=41928459F4DE65E6216E4D5AB549CA409F1513F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:e0:4e:03:3a:e3:fb:89:2b:dc:52:45:0f: c2:17:6b:46:42:d4:fb:7b:b4:70:03:bc:33:dd:39: c6:ff:30:85:cf:df:35:e6:ea:15:f1:f4:77:97:09: 17:17:9a:4a:77:e8:8f:7a:9c:44:ca:66:d7:7a:85: 4c:9b:74:62:a5:02:4f:c8:21:a4:ea:f2:7d:94:dc: 65:26:54:6a:eb:90:5f:c1:25:37:51:ad:06:e6:6f: 7f:3a:e4:9c:dc:19:32:d9:e3:89:22:07:32:6f:3c: e7:35:b2:8f:63:97:92:3c:aa:34:6f:fc:9f:6b:24: cd:0b:ac:38:1f:0d:1b:32:d3:50:68:cf:bc:17:98: b7:de:3f:36:bd:6f:7c:f8:1c:fa:0c:b8:b2:98:f1: 1b:e2:68:a8:25:09:b0:c2:21:5e:f9:48:f6:83:40: e5:a9:c7:7a:10:54:cf:24:98:ae:cb:a9:0f:d1:7e: 24:50:12:63:b0:54:b1:0a:7b:0f:e9:e7:84:52:a2: 5e:47:43:00:1a:49:ee:5a:33:15:aa:4f:e7:f6:dc: 23:05:2b:57:10:c3:d1:cc:ee:ae:24:59:1f:67:45: 09:ae:47:34:0b:f5:1d:94:8b:51:e6:25:02:da:70: 99:30:69:53:85:f1:f3:b0:a3:3a:a5:94:6a:ec:a7: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:92:84:59:F4:DE:65:E6:21:6E:4D:5A:B5:49:CA:40:9F:15:13:F4 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d7:d1:fb:4f:a3:ef:f4:d1:11:32:be:c2:3d:11:67:52:38: 37:66:01:1e:81:e1:75:a0:d9:31:f5:6c:73:9e:3e:2e:a6:e4: 80:4d:56:94:a5:03:87:d4:87:eb:2b:8f:46:0d:53:8b:ec:ff: c4:03:b1:c0:f7:23:f5:1a:c1:58:1d:60:7b:bd:f3:c7:da:31: d0:c7:88:2d:e2:89:2e:48:4b:19:4a:05:ea:1b:66:72:c9:64: db:b9:f5:91:9e:02:2c:4e:10:6c:7f:3d:4c:eb:b0:27:be:5d: e5:18:f9:7f:60:94:d2:55:6e:06:51:fe:ed:43:15:2f:b1:59: 0d:0c:1d:bf:94:df:4d:29:41:26:f8:d1:49:90:a2:2b:ee:c4: 4f:f9:5e:1b:11:6c:b2:16:aa:f5:a9:de:42:8c:e1:87:2d:2e: 51:7c:51:5b:3d:f5:c0:61:75:94:7c:34:5a:e4:88:5e:24:0e: 6e:3a:a9:c2:f6:2a:ef:c8:4c:7d:78:4f:b1:58:65:82:ad:27: c4:35:b9:7a:08:12:fe:2b:b0:f6:34:ee:68:03:fb:74:ee:68: c6:f8:d8:64:00:c0:67:12:4c:84:99:a5:67:e3:1d:88:07:ef: 92:88:64:8b:16:8d:67:ae:be:52:d0:71:dc:81:6a:08:20:7f: de:8a:20:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCAIjNnh46LO/L9+tMFjADwMkpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTEyMTcxNTU3MDhaFw0yNTEyMjAyMTIzMDhaMDMxMTAvBgNV BAMTKDQxOTI4NDU5RjRERTY1RTYyMTZFNEQ1QUI1NDlDQTQwOUYxNTEzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFuBOAzrj+4kr3FJFD8IXa0ZC 1Pt7tHADvDPdOcb/MIXP3zXm6hXx9HeXCRcXmkp36I96nETKZtd6hUybdGKlAk/I IaTq8n2U3GUmVGrrkF/BJTdRrQbmb3865JzcGTLZ44kiBzJvPOc1so9jl5I8qjRv /J9rJM0LrDgfDRsy01Boz7wXmLfePza9b3z4HPoMuLKY8RviaKglCbDCIV75SPaD QOWpx3oQVM8kmK7LqQ/RfiRQEmOwVLEKew/p54RSol5HQwAaSe5aMxWqT+f23CMF K1cQw9HM7q4kWR9nRQmuRzQL9R2Ui1HmJQLacJkwaVOF8fOwozqllGrsp/JZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZKEWfTeZeYhbk1atUnKQJ8VE/QwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTX0ftPo+/00REyvsI9EWdSODdmAR6B4XWg 2TH1bHOePi6m5IBNVpSlA4fUh+srj0YNU4vs/8QDscD3I/UawVgdYHu988faMdDH iC3iiS5ISxlKBeobZnLJZNu59ZGeAixOEGx/PUzrsCe+XeUY+X9glNJVbgZR/u1D FS+xWQ0MHb+U300pQSb40UmQoivuxE/5XhsRbLIWqvWp3kKM4YctLlF8UVs99cBh dZR8NFrkiF4kDm46qcL2Ku/ITH14T7FYZYKtJ8Q1uXoIEv4rsPY07mgD+3TuaMb4 2GQAwGcSTISZpWfjHYgH75KIZIsWjWeuvlLQcdyBagggf96KIHE= -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:23 2025 by rpki-client