This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: oWNc/lya2RoztMyY2z05mxD6BVIBiMAtV+gKWJjGNtM= Subject key identifier: F8:D1:91:DA:0B:A4:7C:C2:15:6F:22:F3:77:C1:95:63:E3:81:03:82 Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 12436E4C3A8DDD7D341F855CFF83CF8EDCEC002D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 04C6 Signing time: Fri 19 Dec 2025 13:01:53 +0000 Manifest this update: Fri 19 Dec 2025 12:56:53 +0000 Manifest next update: Mon 22 Dec 2025 21:52:53 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) 2: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: 8ZrlBaMmy4rRKEqbPd5kWLdehAw8LTNrvV5IMZOqVsY=) 3: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) 4: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:6e:4c:3a:8d:dd:7d:34:1f:85:5c:ff:83:cf:8e:dc:ec:00:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Dec 19 12:56:53 2025 GMT Not After : Dec 22 21:52:53 2025 GMT Subject: CN=F8D191DA0BA47CC2156F22F377C19563E3810382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:62:41:d9:64:a9:0c:fb:b2:09:f4:df:6e: b5:75:01:9f:ae:6c:c4:e8:93:31:68:26:44:ed:94: ad:ce:d9:66:d8:95:19:fb:1d:98:22:03:f7:c7:70: 04:36:e7:8b:ca:a2:c8:eb:99:64:e8:4d:17:ee:d7: 03:f4:86:87:74:9a:a0:48:70:8b:1e:27:9a:9d:cf: cc:a8:c2:a0:84:2b:63:5f:b4:e0:64:07:55:27:fe: 01:aa:3a:b1:ca:a8:06:03:09:9e:07:8a:ac:01:47: 05:15:24:e1:9a:b6:c5:65:12:cb:73:c7:12:fc:7e: b0:8f:fb:8e:26:d2:cf:7b:b3:01:4a:b6:53:82:ef: 04:d7:11:7f:95:a0:be:8f:55:83:ed:e7:98:68:0e: 8e:dc:2d:3c:a9:a6:6a:30:89:19:a8:23:4a:a7:19: bf:84:00:22:13:36:a3:26:9d:35:7b:67:55:79:6c: 3c:e0:5f:b5:91:00:32:05:5c:7e:5b:06:ca:8f:47: 98:fe:ad:30:86:fc:77:20:4e:3e:48:90:4e:0b:23: 84:ff:0f:6d:67:b6:6d:11:f0:9b:a5:4d:03:2a:2a: d3:d3:0c:09:f1:2f:55:4c:8f:aa:0f:7a:05:a2:7b: a1:ef:ea:5b:de:1a:ec:73:fd:28:43:b3:6f:de:09: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:91:DA:0B:A4:7C:C2:15:6F:22:F3:77:C1:95:63:E3:81:03:82 X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:59:b2:f6:b6:9f:34:4f:04:7c:53:6b:a4:25:1c:54:31: 1f:81:72:3e:a0:cc:52:b7:e5:21:31:aa:a5:33:68:97:c1:8d: a5:d2:be:df:cc:be:20:9b:76:3a:2e:e4:cc:e3:e6:d8:77:f1: a0:e9:99:36:3b:c2:d1:30:ff:d3:04:9f:b9:c0:e0:3a:37:d9: 07:fa:c4:ce:fa:79:e1:b0:d2:ff:73:ca:42:cd:d1:34:87:54: c3:7c:eb:1c:19:74:7b:78:58:f7:26:fc:76:ad:fa:63:7e:1f: 5a:a5:06:0f:93:01:d2:0b:39:3f:e9:99:e7:b4:1f:c4:5d:d1: 4f:c7:69:9d:c1:dc:15:a3:03:8a:e7:85:3a:56:98:f4:00:ef: c0:93:be:49:43:5e:17:56:9a:b9:ec:95:91:47:d3:fd:58:a3: b2:31:37:e4:5b:71:0d:26:b6:dd:eb:b0:d2:fa:60:2e:33:d2: b0:50:43:15:a2:e5:23:c5:0d:39:44:dc:7f:35:9a:81:6c:7c: 6a:b3:70:dd:88:fa:45:5e:17:67:83:b6:84:fb:11:54:59:95: 39:fc:fe:0f:4c:83:53:c6:80:bf:43:e6:c6:32:7a:20:be:4c: ea:61:9e:d9:f5:67:30:12:fb:5a:c6:37:fe:47:cc:e0:49:e9: 5c:68:6f:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkNuTDqN3X00H4Vc/4PPjtzsAC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTEyMTkxMjU2NTNaFw0yNTEyMjIyMTUyNTNaMDMxMTAvBgNV BAMTKEY4RDE5MURBMEJBNDdDQzIxNTZGMjJGMzc3QzE5NTYzRTM4MTAzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfY2JB2WSpDPuyCfTfbrV1AZ+u bMTokzFoJkTtlK3O2WbYlRn7HZgiA/fHcAQ254vKosjrmWToTRfu1wP0hod0mqBI cIseJ5qdz8yowqCEK2NftOBkB1Un/gGqOrHKqAYDCZ4HiqwBRwUVJOGatsVlEstz xxL8frCP+44m0s97swFKtlOC7wTXEX+VoL6PVYPt55hoDo7cLTyppmowiRmoI0qn Gb+EACITNqMmnTV7Z1V5bDzgX7WRADIFXH5bBsqPR5j+rTCG/HcgTj5IkE4LI4T/ D21ntm0R8JulTQMqKtPTDAnxL1VMj6oPegWie6Hv6lveGuxz/ShDs2/eCaS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NGR2gukfMIVbyLzd8GVY+OBA4IwHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt1WbL2tp80TwR8U2ukJRxUMR+Bcj6gzFK3 5SExqqUzaJfBjaXSvt/MviCbdjou5Mzj5th38aDpmTY7wtEw/9MEn7nA4Do32Qf6 xM76eeGw0v9zykLN0TSHVMN86xwZdHt4WPcm/Hat+mN+H1qlBg+TAdILOT/pmee0 H8Rd0U/HaZ3B3BWjA4rnhTpWmPQA78CTvklDXhdWmrnslZFH0/1Yo7IxN+RbcQ0m tt3rsNL6YC4z0rBQQxWi5SPFDTlE3H81moFsfGqzcN2I+kVeF2eDtoT7EVRZlTn8 /g9Mg1PGgL9D5sYyeiC+TOphntn1ZzAS+1rGN/5HzOBJ6Vxob8M= -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:51 2025 by rpki-client