This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: B68Cgmv3+5cIUwB5XKV56bq77tNetbWrKQGMz4YX2zk= Subject key identifier: F9:66:C9:9C:2A:0A:83:D4:96:D4:3A:39:A2:D0:61:35:EB:1B:1B:55 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 3B0C8F8041B95119625491CB2A940BE8E4A4F2DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 0205 Signing time: Wed 17 Dec 2025 07:42:26 +0000 Manifest this update: Wed 17 Dec 2025 07:37:26 +0000 Manifest next update: Sat 20 Dec 2025 19:38:26 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 3: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: voPR+AphEVRZnaF8w7E8HNE3Jjd4bVpH4PXcZxv8yTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0c:8f:80:41:b9:51:19:62:54:91:cb:2a:94:0b:e8:e4:a4:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Dec 17 07:37:26 2025 GMT Not After : Dec 20 19:38:26 2025 GMT Subject: CN=F966C99C2A0A83D496D43A39A2D06135EB1B1B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:99:13:39:d6:f9:05:10:60:94:4b:f1:d7: b1:ee:13:03:da:73:6a:b1:da:e5:23:10:1a:81:79: 0b:12:af:74:98:20:63:60:13:00:49:4f:fb:55:33: 3c:41:cf:0a:9e:11:da:1b:01:a1:8a:8a:3c:9c:21: 1b:d5:cb:3e:9d:18:e3:85:3c:76:be:6b:4f:27:6f: 07:18:6a:1b:33:1c:92:e0:e0:7f:bf:c1:af:c7:be: c2:de:72:00:9f:0c:f3:78:8a:67:a7:99:90:f8:94: 26:8d:75:a1:af:aa:ec:13:ee:74:db:ed:74:83:68: b7:0a:dc:22:21:80:52:f4:38:b4:dd:0d:65:42:05: b0:87:4c:5b:a6:10:94:05:f3:9e:3c:62:cc:e4:b6: 23:0e:c6:4e:f6:55:e5:fe:45:75:b3:0c:4b:ec:56: dc:92:06:8d:40:3e:67:7e:13:6a:e2:ca:b5:76:33: 17:43:82:62:16:8e:f2:82:ea:65:75:a2:9a:19:2b: 0f:85:84:a2:10:60:43:f4:7d:d4:5d:68:5d:1d:5f: c7:92:24:5f:62:db:17:ec:6d:3a:60:74:9c:c7:0d: 49:e8:c1:24:d6:e8:f3:51:a8:ff:b0:74:c7:02:75: d8:bc:98:2f:60:80:f5:e9:42:32:c4:17:5d:93:12: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:C9:9C:2A:0A:83:D4:96:D4:3A:39:A2:D0:61:35:EB:1B:1B:55 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:61:2e:d9:c1:3f:53:34:4e:95:ef:1e:6e:5c:d1:b2:e6: b0:6e:a2:86:1e:2e:40:57:53:fd:46:94:38:d2:7b:cb:e0:e1: cf:ff:5a:da:66:e3:70:f4:58:ab:1a:11:dc:7d:22:ac:2f:4a: 64:b6:aa:3d:2c:23:9e:d4:e7:29:ff:3a:a9:d4:2a:3c:ce:86: 76:9a:a4:d4:82:a0:ba:1f:69:db:3f:52:cf:b6:1a:7f:56:e3: 72:e4:a7:31:1a:c0:d2:dc:d3:15:55:98:14:45:68:3b:6e:65: 73:5c:af:ca:31:e1:6b:3d:35:e4:38:c0:08:52:ce:af:73:ba: 30:e0:86:3d:46:60:6c:3d:b7:5e:37:5c:ef:22:dd:be:eb:b6: 35:6f:59:40:a1:a7:3a:4e:2e:4e:74:26:c0:97:6a:ec:a5:99: f6:14:44:92:46:7f:dc:b0:60:13:0a:1a:a4:f3:fb:e2:61:df: 52:b2:37:31:ee:f2:e5:21:0b:d5:da:e9:76:c8:c3:8c:1d:9a: ae:d8:91:64:df:7d:89:e2:c6:4d:7f:43:3a:d7:4f:60:77:2c: 8b:9e:76:03:e6:ff:e9:16:e5:ad:ad:73:16:d2:bc:b8:ab:21: dd:0c:fb:dd:4a:68:fe:2c:d2:58:a6:b8:cd:73:f5:90:8a:73: 9e:09:e5:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwyPgEG5URliVJHLKpQL6OSk8t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTEyMTcwNzM3MjZaFw0yNTEyMjAxOTM4MjZaMDMxMTAvBgNV BAMTKEY5NjZDOTlDMkEwQTgzRDQ5NkQ0M0EzOUEyRDA2MTM1RUIxQjFCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGZkTOdb5BRBglEvx17HuEwPa c2qx2uUjEBqBeQsSr3SYIGNgEwBJT/tVMzxBzwqeEdobAaGKijycIRvVyz6dGOOF PHa+a08nbwcYahszHJLg4H+/wa/HvsLecgCfDPN4imenmZD4lCaNdaGvquwT7nTb 7XSDaLcK3CIhgFL0OLTdDWVCBbCHTFumEJQF8548YszktiMOxk72VeX+RXWzDEvs VtySBo1APmd+E2riyrV2MxdDgmIWjvKC6mV1opoZKw+FhKIQYEP0fdRdaF0dX8eS JF9i2xfsbTpgdJzHDUnowSTW6PNRqP+wdMcCddi8mC9ggPXpQjLEF12TEvdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+WbJnCoKg9SW1Do5otBhNesbG1UwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn7YS7ZwT9TNE6V7x5uXNGy5rBuooYeLkBX U/1GlDjSe8vg4c//Wtpm43D0WKsaEdx9IqwvSmS2qj0sI57U5yn/OqnUKjzOhnaa pNSCoLofads/Us+2Gn9W43LkpzEawNLc0xVVmBRFaDtuZXNcr8ox4Ws9NeQ4wAhS zq9zujDghj1GYGw9t143XO8i3b7rtjVvWUChpzpOLk50JsCXauylmfYURJJGf9yw YBMKGqTz++Jh31KyNzHu8uUhC9Xa6XbIw4wdmq7YkWTffYnixk1/QzrXT2B3LIue dgPm/+kW5a2tcxbSvLirId0M+91KaP4s0limuM1z9ZCKc54J5fs= -----END CERTIFICATE-----Generated at Fri Dec 19 13:51:41 2025 by rpki-client