This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: 5xpG/vQhHwXHL4751tkm0x8XpU8379kGEG1MKLI6IBI= Subject key identifier: 3E:47:2A:4E:4E:40:F5:86:02:DC:AD:9A:2B:1F:C4:7A:AE:C7:66:4B Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 27B69ED7AF879B5E835CADBFA60E431BF956F7C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 0232 Signing time: Sat 20 Dec 2025 07:21:14 +0000 Manifest this update: Sat 20 Dec 2025 07:16:14 +0000 Manifest next update: Tue 23 Dec 2025 07:25:14 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: bYxyz/3aBPmTxU9XQ40/cYWavx+zj6xL7BAMAwJkseU=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 07:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b6:9e:d7:af:87:9b:5e:83:5c:ad:bf:a6:0e:43:1b:f9:56:f7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Dec 20 07:16:14 2025 GMT Not After : Dec 23 07:25:14 2025 GMT Subject: CN=3E472A4E4E40F58602DCAD9A2B1FC47AAEC7664B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:3a:40:00:04:ff:9a:07:ed:56:1d:3e:b0: bf:aa:3f:79:92:59:2d:66:48:ae:65:8c:01:5a:31: 8d:e0:53:08:e0:ee:20:53:59:7d:23:11:be:e5:22: b0:65:b8:8b:a4:57:6d:aa:05:72:0f:81:8b:aa:dd: 44:99:12:c4:70:5d:4c:48:f4:b9:de:fc:0e:02:27: 64:bb:f0:94:bd:5b:3c:be:93:eb:c6:96:04:60:e9: 5b:99:dd:5f:09:fa:49:54:d8:7c:13:2d:53:0a:ec: fb:99:c7:2d:fa:c0:47:3c:ed:f2:1e:d1:4a:7e:55: b4:ed:47:b2:3c:21:68:e0:08:91:8b:57:d6:ba:3f: 15:bf:5c:ff:c5:a0:09:c2:17:40:5c:4b:7d:a2:46: 69:c1:99:9a:5e:9d:89:98:ba:1b:78:ab:1e:c5:3e: 7f:75:fc:2b:ac:cd:97:96:7d:7b:a9:12:58:d7:ed: 13:cb:93:f4:11:bf:9c:51:af:a3:ab:d2:21:b8:b1: 5e:8e:1e:8a:6d:75:c2:2d:58:13:e4:3e:7b:57:e7: 7a:59:34:c7:19:f8:6c:1f:67:fd:5a:a2:0f:c6:02: 9f:98:8d:b3:d0:ab:27:97:40:1b:b2:92:1b:07:30: b0:4e:93:97:8e:b7:11:00:f3:3b:75:65:be:f2:05: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:47:2A:4E:4E:40:F5:86:02:DC:AD:9A:2B:1F:C4:7A:AE:C7:66:4B X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:fe:66:0b:bf:c0:b6:0b:20:22:f8:33:8b:b9:a9:1f:41: 8f:93:ff:9b:19:ce:ec:21:60:8c:ed:50:32:87:f7:0b:b8:0e: 22:bb:b1:ed:72:98:79:49:37:f0:dc:fe:e5:4d:cc:77:e6:56: c4:ee:d1:f6:8d:81:07:c9:36:58:e1:2d:34:14:b5:c9:29:b4: 16:f9:3d:ae:2b:b1:ac:3a:a5:91:85:82:97:51:1a:54:ea:fc: 80:ef:5b:75:46:46:51:94:31:fd:4f:89:88:38:6f:e0:78:97: 80:fd:fe:05:47:eb:47:eb:bf:b4:6d:8b:7b:5a:63:6e:c9:bc: 2d:9b:a9:8b:43:da:88:13:21:f3:98:f6:e0:65:95:35:2f:d5: 6b:43:0f:44:88:27:02:73:f2:e9:07:d9:50:30:9e:ef:7f:30: f0:78:42:51:a4:09:9e:9a:a3:1a:cc:7c:84:ae:a3:6e:f1:b1: b4:6d:55:d7:31:e8:9b:81:78:e0:9a:27:e4:f4:86:99:4a:d9: ea:8f:da:0c:18:f5:35:57:57:21:f4:70:6f:c9:a8:69:4c:dd: 46:98:1e:4a:05:90:64:97:42:78:8e:e1:56:f4:6a:64:c8:63: 95:9b:a5:44:f1:28:35:55:40:ed:8b:0d:51:f3:e1:35:c2:4f: ed:ab:51:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7ae16+Hm16DXK2/pg5DG/lW98EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTEyMjAwNzE2MTRaFw0yNTEyMjMwNzI1MTRaMDMxMTAvBgNV BAMTKDNFNDcyQTRFNEU0MEY1ODYwMkRDQUQ5QTJCMUZDNDdBQUVDNzY2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9jpAAAT/mgftVh0+sL+qP3mS WS1mSK5ljAFaMY3gUwjg7iBTWX0jEb7lIrBluIukV22qBXIPgYuq3USZEsRwXUxI 9Lne/A4CJ2S78JS9Wzy+k+vGlgRg6VuZ3V8J+klU2HwTLVMK7PuZxy36wEc87fIe 0Up+VbTtR7I8IWjgCJGLV9a6PxW/XP/FoAnCF0BcS32iRmnBmZpenYmYuht4qx7F Pn91/CuszZeWfXupEljX7RPLk/QRv5xRr6Or0iG4sV6OHoptdcItWBPkPntX53pZ NMcZ+GwfZ/1aog/GAp+YjbPQqyeXQBuykhsHMLBOk5eOtxEA8zt1Zb7yBS5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPkcqTk5A9YYC3K2aKx/Eeq7HZkswHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI2/mYLv8C2CyAi+DOLuakfQY+T/5sZzuwh YIztUDKH9wu4DiK7se1ymHlJN/Dc/uVNzHfmVsTu0faNgQfJNljhLTQUtckptBb5 Pa4rsaw6pZGFgpdRGlTq/IDvW3VGRlGUMf1PiYg4b+B4l4D9/gVH60frv7Rti3ta Y27JvC2bqYtD2ogTIfOY9uBllTUv1WtDD0SIJwJz8ukH2VAwnu9/MPB4QlGkCZ6a oxrMfISuo27xsbRtVdcx6JuBeOCaJ+T0hplK2eqP2gwY9TVXVyH0cG/JqGlM3UaY HkoFkGSXQniO4Vb0amTIY5WbpUTxKDVVQO2LDVHz4TXCT+2rUck= -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:32 2025 by rpki-client