This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: 4qFX3PgTeRekYNXyzFU/3qFp277GU87J1OI0c9Ye3pA= Subject key identifier: 9A:F2:45:73:7F:CE:C5:C8:0E:E1:C9:21:CB:61:1A:69:73:C0:D1:2E Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 09C0725418ACF2166ABBE4FBA042A82C71C0B1B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 028B Signing time: Wed 17 Dec 2025 11:52:23 +0000 Manifest this update: Wed 17 Dec 2025 11:47:23 +0000 Manifest next update: Sat 20 Dec 2025 12:48:23 +0000 Files and hashes: 1: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 2: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: zwQnTIZ0nWmVDaNUFHaBaJV0lg46DllFL4yzOOS0CE4=) 3: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 5: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=) 6: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 7: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c0:72:54:18:ac:f2:16:6a:bb:e4:fb:a0:42:a8:2c:71:c0:b1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Dec 17 11:47:23 2025 GMT Not After : Dec 20 12:48:23 2025 GMT Subject: CN=9AF245737FCEC5C80EE1C921CB611A6973C0D12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:dc:6e:04:75:4c:42:10:82:31:d6:98:a6:c2: 26:7a:90:8c:81:c3:0f:82:ce:bd:9e:a8:6b:c7:c4: 83:f6:be:4a:cb:fb:aa:f5:9e:bc:ce:fb:2e:f8:56: d2:ff:8f:76:24:ea:ea:8a:30:42:c1:84:b3:ae:1e: d0:13:14:74:4d:65:f2:ba:b4:77:13:1c:4a:69:2e: 82:a5:e3:1c:12:df:ec:15:48:b2:4e:fa:6b:55:0a: ee:31:b8:62:26:d1:a8:7a:b3:28:9a:df:31:8b:42: 20:a7:bb:37:69:bf:ef:96:fa:d4:ea:30:c0:34:6e: a0:3a:35:b1:bd:fb:8b:8f:a1:b3:6e:9e:34:b9:28: db:fb:0d:f9:a1:fe:06:84:c7:f8:30:23:6b:03:37: b9:c0:1e:f5:03:a2:67:fc:cb:21:e3:21:8b:de:db: e3:b5:b4:87:7d:f2:93:01:0a:79:d6:ac:96:bf:03: 00:ac:f9:9b:4f:c9:66:f2:36:23:00:27:28:55:a4: 09:56:37:0f:a7:8d:8a:a9:1a:37:20:35:4f:19:e9: d8:f5:bb:ef:2e:df:3c:cb:f3:ff:b2:a4:3e:86:b5: 90:5c:c0:3f:31:dd:32:93:43:e4:55:89:bb:50:d6: d1:2e:a5:6d:03:06:10:79:20:a5:7a:fc:74:a9:52: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:45:73:7F:CE:C5:C8:0E:E1:C9:21:CB:61:1A:69:73:C0:D1:2E X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:03:db:8d:55:29:9f:50:7b:65:3d:0c:e1:ed:9b:7a:f1:ce: 0b:7a:ae:6c:05:15:28:72:00:bb:ad:a5:f2:2f:3c:6f:d3:cd: de:98:fc:51:23:17:ab:7c:d6:a3:59:65:c4:63:fd:ae:3f:b4: 0a:7f:61:57:4f:cd:8e:26:4d:21:f2:bc:fa:a8:04:1f:57:9f: b3:b8:42:95:7e:e2:45:1b:00:d6:6e:1d:1c:5a:86:80:25:8d: e9:17:f8:47:b7:a6:fa:35:5c:84:1c:4c:59:c8:ec:56:ed:68: 7e:47:85:3d:a6:16:74:46:57:54:d1:2a:d0:f0:ad:0b:12:80: 3e:73:04:a9:cd:45:87:2c:b8:27:58:1e:6c:e9:eb:86:0b:6b: f7:2b:ad:03:7d:ec:9d:e5:cf:a0:2d:66:c9:ac:54:ea:ba:8f: 65:03:8d:30:17:9f:a5:e1:7d:b7:ac:e7:04:19:7a:e2:06:68: a6:fb:f1:ea:33:15:50:9b:f8:b9:76:34:e4:82:ea:93:fd:10: c4:f1:8b:4b:47:dc:d5:cc:38:08:37:af:db:7c:9a:ff:ed:40: 24:57:ac:08:40:7c:13:f3:c2:df:7a:3d:7e:54:33:0a:fa:88: 4a:5b:29:0f:12:3d:4c:42:54:05:72:87:ca:ee:bf:ef:92:5d: 5b:a5:62:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcByVBis8hZqu+T7oEKoLHHAsbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTEyMTcxMTQ3MjNaFw0yNTEyMjAxMjQ4MjNaMDMxMTAvBgNV BAMTKDlBRjI0NTczN0ZDRUM1QzgwRUUxQzkyMUNCNjExQTY5NzNDMEQxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23G4EdUxCEIIx1pimwiZ6kIyB ww+Czr2eqGvHxIP2vkrL+6r1nrzO+y74VtL/j3Yk6uqKMELBhLOuHtATFHRNZfK6 tHcTHEppLoKl4xwS3+wVSLJO+mtVCu4xuGIm0ah6syia3zGLQiCnuzdpv++W+tTq MMA0bqA6NbG9+4uPobNunjS5KNv7Dfmh/gaEx/gwI2sDN7nAHvUDomf8yyHjIYve 2+O1tId98pMBCnnWrJa/AwCs+ZtPyWbyNiMAJyhVpAlWNw+njYqpGjcgNU8Z6dj1 u+8u3zzL8/+ypD6GtZBcwD8x3TKTQ+RVibtQ1tEupW0DBhB5IKV6/HSpUj43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvJFc3/OxcgO4ckhy2EaaXPA0S4wHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQD241VKZ9Qe2U9DOHtm3rxzgt6rmwFFShy ALutpfIvPG/Tzd6Y/FEjF6t81qNZZcRj/a4/tAp/YVdPzY4mTSHyvPqoBB9Xn7O4 QpV+4kUbANZuHRxahoAljekX+Ee3pvo1XIQcTFnI7FbtaH5HhT2mFnRGV1TRKtDw rQsSgD5zBKnNRYcsuCdYHmzp64YLa/crrQN97J3lz6AtZsmsVOq6j2UDjTAXn6Xh fbes5wQZeuIGaKb78eozFVCb+Ll2NOSC6pP9EMTxi0tH3NXMOAg3r9t8mv/tQCRX rAhAfBPzwt96PX5UMwr6iEpbKQ8SPUxCVAVyh8ruv++SXVulYn8= -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:14 2025 by rpki-client