This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: kj1Qg33HCznugsoVfA7eQ/RZkY+0ahlL3+zKk2xMgjA= Subject key identifier: FB:6A:F0:73:F1:44:00:F6:E3:DE:7D:71:B5:0C:AF:65:B0:21:AC:70 Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 5ECBF525002AE63967FECF4FF1A4387E128AB9F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 04AF Signing time: Wed 17 Dec 2025 19:02:13 +0000 Manifest this update: Wed 17 Dec 2025 18:57:13 +0000 Manifest next update: Sun 21 Dec 2025 04:35:13 +0000 Files and hashes: 1: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: P69Gzls+OehEXuaakfFDYpIzylPYDBXnrZYuhQng4Lg=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cb:f5:25:00:2a:e6:39:67:fe:cf:4f:f1:a4:38:7e:12:8a:b9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Dec 17 18:57:13 2025 GMT Not After : Dec 21 04:35:13 2025 GMT Subject: CN=FB6AF073F14400F6E3DE7D71B50CAF65B021AC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3b:00:e2:42:0a:42:d1:ec:f1:33:d3:3e:08: ec:e2:ea:ca:4e:68:a5:d1:fc:1d:57:46:b7:6b:f4: f0:60:8b:b3:d4:66:fc:70:cf:e8:9f:c5:11:8c:5a: db:e8:dc:7c:31:0a:47:dd:07:c0:b2:f1:ba:17:97: 12:35:13:9f:11:95:c5:01:16:a3:82:01:c8:48:1c: d8:10:c1:19:b4:30:e4:c0:d0:04:28:e1:03:5f:72: dd:17:3f:94:b6:dd:89:48:fe:48:fc:c8:fe:00:1b: a1:ca:26:df:cb:0b:64:30:45:c6:e5:ef:b2:a4:c0: de:3e:f4:d1:27:6d:a2:a0:09:3a:78:9d:f1:ac:51: 9d:a0:5b:33:40:51:5d:64:22:38:57:71:2c:83:de: fd:41:cf:25:b5:4e:84:5a:39:e9:ca:f1:2d:83:f4: d7:86:30:61:5a:7f:68:72:01:75:8e:86:f2:21:b5: 6f:4f:01:b9:63:28:80:b3:8c:6d:cf:c3:7e:8f:01: 38:e3:ca:d8:31:ce:8a:0f:27:fd:89:af:f5:a2:0a: 03:31:9f:5a:dc:2a:0d:26:9b:87:1b:4e:c2:d5:8f: 6a:d0:58:34:89:0a:bb:b1:70:4f:bc:4e:53:40:d7: 81:1d:39:04:0f:a0:2b:ed:81:10:68:71:8b:c6:c0: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6A:F0:73:F1:44:00:F6:E3:DE:7D:71:B5:0C:AF:65:B0:21:AC:70 X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:46:37:6b:09:24:90:d0:f8:02:b0:d5:22:b5:aa:f2:da:3d: 56:87:3c:d0:c4:52:2a:e8:ff:92:62:51:b4:fa:50:f2:1c:bc: ea:e1:60:f1:d7:84:15:38:29:3f:8a:c3:32:62:d2:3f:4c:cd: 46:ef:e0:d6:c1:e1:8e:9b:24:7e:ac:e9:f8:0c:23:48:02:3a: 9a:16:88:d3:2b:22:03:2a:eb:1f:41:7f:96:27:a8:1d:3a:df: f7:a6:d2:e7:56:5e:ee:71:34:ff:f7:96:86:48:e9:22:79:90: 62:ac:ac:78:3e:3e:6a:3b:6b:c1:98:30:b6:8a:98:27:d1:fc: 27:8f:09:fe:14:f5:de:c8:97:42:d2:af:0b:4b:38:45:95:9f: b3:83:5c:e0:db:b7:63:87:b8:09:d0:59:7a:8e:c8:a1:ad:d4: 39:56:5a:f2:a0:24:ae:f9:eb:9b:ef:d7:1c:e3:d4:76:88:07: f2:2b:4b:a3:a6:a9:e4:c6:f5:d4:11:12:be:72:25:37:36:2e: c9:7f:2d:79:c0:a9:51:07:15:c4:f2:4f:21:80:b7:dd:fb:d9: 48:0a:12:0d:a7:87:39:d0:9b:8a:b1:a3:46:ef:19:09:e7:42: ea:1d:aa:1d:92:8d:c1:5a:df:71:63:b6:f0:a8:21:ac:a6:5c: e9:e1:8a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsv1JQAq5jln/s9P8aQ4fhKKufMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTEyMTcxODU3MTNaFw0yNTEyMjEwNDM1MTNaMDMxMTAvBgNV BAMTKEZCNkFGMDczRjE0NDAwRjZFM0RFN0Q3MUI1MENBRjY1QjAyMUFDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOwDiQgpC0ezxM9M+COzi6spO aKXR/B1XRrdr9PBgi7PUZvxwz+ifxRGMWtvo3HwxCkfdB8Cy8boXlxI1E58RlcUB FqOCAchIHNgQwRm0MOTA0AQo4QNfct0XP5S23YlI/kj8yP4AG6HKJt/LC2QwRcbl 77KkwN4+9NEnbaKgCTp4nfGsUZ2gWzNAUV1kIjhXcSyD3v1BzyW1ToRaOenK8S2D 9NeGMGFaf2hyAXWOhvIhtW9PAbljKICzjG3Pw36PATjjytgxzooPJ/2Jr/WiCgMx n1rcKg0mm4cbTsLVj2rQWDSJCruxcE+8TlNA14EdOQQPoCvtgRBocYvGwAfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2rwc/FEAPbj3n1xtQyvZbAhrHAwHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpGN2sJJJDQ+AKw1SK1qvLaPVaHPNDEUiro /5JiUbT6UPIcvOrhYPHXhBU4KT+KwzJi0j9MzUbv4NbB4Y6bJH6s6fgMI0gCOpoW iNMrIgMq6x9Bf5YnqB063/em0udWXu5xNP/3loZI6SJ5kGKsrHg+Pmo7a8GYMLaK mCfR/CePCf4U9d7Il0LSrwtLOEWVn7ODXODbt2OHuAnQWXqOyKGt1DlWWvKgJK75 65vv1xzj1HaIB/IrS6OmqeTG9dQREr5yJTc2Lsl/LXnAqVEHFcTyTyGAt9372UgK Eg2nhznQm4qxo0bvGQnnQuodqh2SjcFa33FjtvCoIaymXOnhir4= -----END CERTIFICATE-----Generated at Fri Dec 19 18:18:22 2025 by rpki-client