This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: aqNypzbd+3PI5kqRS8cckDZ4uryT56mkQ9N0na6r8ac= Subject key identifier: 8F:37:8A:4B:56:0F:25:48:9E:4E:31:1B:FB:A6:AD:8D:7C:AC:0B:F0 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 3BFFC2B716CBFF86D366F7E690CD1267684180AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 0235 Signing time: Tue 23 Dec 2025 11:00:57 +0000 Manifest this update: Tue 23 Dec 2025 10:55:56 +0000 Manifest next update: Fri 26 Dec 2025 22:08:56 +0000 Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) 2: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: E0xMQ60BAGk2UJhybrOmXCViPpNqRxYyUdDdz7lMtbU=) 3: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ff:c2:b7:16:cb:ff:86:d3:66:f7:e6:90:cd:12:67:68:41:80:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Dec 23 10:55:56 2025 GMT Not After : Dec 26 22:08:56 2025 GMT Subject: CN=8F378A4B560F25489E4E311BFBA6AD8D7CAC0BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:ea:8c:6e:5b:0b:8c:94:1e:cb:98:a3:f7: fa:24:1c:83:fc:a3:82:70:b0:9b:b7:c9:65:e9:0a: bf:4c:32:f2:b9:56:b0:50:61:12:b4:13:ff:1e:91: 34:c7:79:77:cf:db:e2:a8:6c:01:8d:55:05:c6:8f: cc:a9:df:bf:bc:d7:18:31:ee:5b:68:fa:83:e7:65: d5:83:05:6d:e0:32:41:96:f9:91:80:6a:63:d0:73: f3:f4:ba:0c:ca:07:1b:9f:4f:52:94:d0:a7:49:e0: 57:eb:17:2d:6d:c3:75:e6:69:d0:03:17:b8:f4:b5: 2b:00:c9:66:9b:66:52:51:cb:3b:d4:5e:a0:5f:73: 25:3e:d4:5b:aa:7c:be:a4:40:7a:33:68:16:22:0f: 68:98:e2:85:91:11:7b:7b:46:fe:ee:c2:93:0a:0a: 93:1f:96:81:6a:44:15:b1:dd:69:7f:b5:f4:9e:54: 57:04:29:d2:56:8c:72:fd:c3:6a:db:dc:62:be:98: 94:85:25:9f:85:3d:95:dc:5e:3d:fe:b0:25:b9:d5: fb:da:f8:b1:01:55:db:f8:bd:df:4e:f0:58:34:39: 09:68:31:2f:86:e9:f6:d8:ca:7a:97:47:48:f9:ab: ec:d7:dd:5e:75:fe:26:d3:ca:a3:29:8f:d0:26:f0: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:8A:4B:56:0F:25:48:9E:4E:31:1B:FB:A6:AD:8D:7C:AC:0B:F0 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:86:92:f0:fa:10:d7:4a:4e:27:d6:5e:36:d2:4c:7b:12:e9: 01:c5:b0:24:39:d1:ec:62:09:7d:21:6b:75:02:e1:d5:a1:a6: 9f:b4:b7:65:21:09:0f:62:74:e0:1c:36:c7:53:64:26:cc:0a: a9:af:36:5a:3d:0c:77:45:ae:f2:73:68:6c:d7:40:ff:6e:3b: dd:d8:fa:bc:0d:6c:c4:71:49:26:a3:a8:a0:61:e8:7f:13:2b: 89:77:2d:fc:0c:6c:fc:cc:d7:ba:74:23:e8:a7:fb:7b:53:fc: 0d:51:4f:13:96:08:7e:73:c4:a1:79:d3:23:cf:7e:47:7d:46: 27:a1:06:46:20:5f:bf:22:ab:b8:6b:76:bf:67:3e:62:1c:51: 66:b6:a7:40:18:af:0a:14:82:0a:c0:58:95:e7:aa:c4:83:32: e3:b7:99:c9:e7:7b:e8:9a:bc:91:88:6c:f3:1b:20:49:07:9b: a2:01:72:32:5d:43:8a:52:81:48:b0:e3:86:29:c8:ee:e5:27: c7:58:dd:c4:62:7b:ca:e5:b8:dd:97:6a:94:09:b3:13:0b:b0: 42:1f:9f:22:61:32:e9:8f:89:40:ff:b3:0f:df:20:3b:b3:cc: 44:30:05:75:b2:8f:46:d3:97:03:4b:b1:b0:a0:f5:54:45:4e: 45:01:25:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO//CtxbL/4bTZvfmkM0SZ2hBgK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTEyMjMxMDU1NTZaFw0yNTEyMjYyMjA4NTZaMDMxMTAvBgNV BAMTKDhGMzc4QTRCNTYwRjI1NDg5RTRFMzExQkZCQTZBRDhEN0NBQzBCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhOqMblsLjJQey5ij9/okHIP8 o4JwsJu3yWXpCr9MMvK5VrBQYRK0E/8ekTTHeXfP2+KobAGNVQXGj8yp37+81xgx 7lto+oPnZdWDBW3gMkGW+ZGAamPQc/P0ugzKBxufT1KU0KdJ4FfrFy1tw3XmadAD F7j0tSsAyWabZlJRyzvUXqBfcyU+1FuqfL6kQHozaBYiD2iY4oWREXt7Rv7uwpMK CpMfloFqRBWx3Wl/tfSeVFcEKdJWjHL9w2rb3GK+mJSFJZ+FPZXcXj3+sCW51fva +LEBVdv4vd9O8Fg0OQloMS+G6fbYynqXR0j5q+zX3V51/ibTyqMpj9Am8CCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzeKS1YPJUieTjEb+6atjXysC/AwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeGkvD6ENdKTifWXjbSTHsS6QHFsCQ50exi CX0ha3UC4dWhpp+0t2UhCQ9idOAcNsdTZCbMCqmvNlo9DHdFrvJzaGzXQP9uO93Y +rwNbMRxSSajqKBh6H8TK4l3LfwMbPzM17p0I+in+3tT/A1RTxOWCH5zxKF50yPP fkd9RiehBkYgX78iq7hrdr9nPmIcUWa2p0AYrwoUggrAWJXnqsSDMuO3mcnne+ia vJGIbPMbIEkHm6IBcjJdQ4pSgUiw44YpyO7lJ8dY3cRie8rluN2XapQJsxMLsEIf nyJhMumPiUD/sw/fIDuzzEQwBXWyj0bTlwNLsbCg9VRFTkUBJcg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:33 2025 by rpki-client