This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: v9J/DyvVhEwRhPUY707rP7OnNhm2vbXSgng9Phv/7BY= Subject key identifier: 01:18:C8:1D:ED:50:85:D6:6E:A4:E1:33:74:5A:EC:3F:EE:5E:73:FB Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 35F7ADA821FAA252622E52999B0D3D8A87B11494 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 04C5 Signing time: Wed 17 Dec 2025 12:41:22 +0000 Manifest this update: Wed 17 Dec 2025 12:36:22 +0000 Manifest next update: Sat 20 Dec 2025 12:57:22 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) 2: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) 3: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) 4: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: 0nXI91EJ8NzeFg7FHytcsjVTvcU2SDw0H35lVZojOoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f7:ad:a8:21:fa:a2:52:62:2e:52:99:9b:0d:3d:8a:87:b1:14:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Dec 17 12:36:22 2025 GMT Not After : Dec 20 12:57:22 2025 GMT Subject: CN=0118C81DED5085D66EA4E133745AEC3FEE5E73FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:ad:b3:08:e8:ec:0e:78:56:7d:1b:cc:58: 94:15:94:fd:b3:91:43:81:da:c4:83:69:a2:73:0c: b6:a9:dc:af:b3:66:21:e9:d2:c1:55:b0:ac:c3:98: ff:00:bb:e5:11:9d:fa:e4:90:cd:81:fa:da:28:3a: 15:27:03:3f:57:5f:66:88:0b:e1:58:80:88:99:f7: 8f:b2:07:0e:ce:2a:57:86:69:3d:55:0b:32:86:1a: 65:52:69:dc:36:0a:a7:57:bc:10:78:aa:50:c5:c1: 78:f3:b1:af:af:83:ed:4c:66:fe:1d:92:8e:09:eb: e0:95:1a:13:e4:13:9b:c2:93:2b:76:a5:69:d8:49: 7f:67:a3:14:25:e4:e5:b8:33:92:8a:04:4d:5d:f3: 88:42:8b:f0:d8:2d:8a:37:e4:3a:09:6f:4b:0f:d1: 61:a3:fa:17:3e:75:cf:a2:f9:70:fa:95:9b:7e:5d: d2:70:fa:26:0c:53:7c:93:f2:f1:59:12:13:2f:59: 1f:2b:80:98:6d:5b:c0:ee:5a:80:c3:8c:3a:5a:20: b0:09:b1:a9:20:3c:6a:3d:e5:a3:94:af:44:4a:4d: 7a:17:d9:82:3d:82:43:5e:f8:a3:a6:ff:0b:d8:c5: 8a:ce:c5:c9:23:cd:4c:11:bf:31:88:93:30:e2:1d: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:18:C8:1D:ED:50:85:D6:6E:A4:E1:33:74:5A:EC:3F:EE:5E:73:FB X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:fb:de:88:97:e0:97:8c:34:c8:91:3a:dc:b4:70:9b:86:5e: e0:f9:3a:d2:66:0e:db:46:93:6b:63:91:92:8b:2e:a4:b2:68: 68:c2:3b:ff:02:51:21:49:eb:9d:4e:38:03:f2:bb:6d:a8:f6: ed:45:5e:4f:9f:10:92:ab:25:19:72:a8:99:a7:29:7b:98:f4: 84:05:95:8e:78:4e:a0:84:fc:19:ee:07:5a:bb:b6:99:df:dc: 98:41:72:45:7b:18:95:c4:99:5b:e1:b0:2f:43:d7:79:87:6f: 8d:56:e8:67:df:2a:aa:af:71:54:f8:07:4e:07:c5:89:50:91: 0e:cf:00:43:4d:1f:b1:8f:25:94:44:9d:13:ff:ae:32:ab:2d: c3:44:67:bd:a0:b3:53:dd:9f:4e:99:7b:19:be:03:7d:7e:e9: aa:5e:74:46:57:87:d0:f2:7a:ba:98:9e:43:16:dc:e5:9d:a1: 7d:32:53:91:1b:36:5f:7e:49:1e:01:bc:3f:7d:4a:48:33:2c: d2:cc:1c:c9:e8:17:b1:51:5c:2e:96:6d:a3:32:87:21:4e:f7: 3c:6e:a7:6c:44:09:e8:d2:7f:6a:72:d9:36:0a:ee:7f:97:0d: 94:c8:35:ed:24:78:b3:4f:cc:bd:e0:70:40:8d:36:a5:5b:94: 36:da:01:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfetqCH6olJiLlKZmw09ioexFJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTEyMTcxMjM2MjJaFw0yNTEyMjAxMjU3MjJaMDMxMTAvBgNV BAMTKDAxMThDODFERUQ1MDg1RDY2RUE0RTEzMzc0NUFFQzNGRUU1RTczRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oa2zCOjsDnhWfRvMWJQVlP2z kUOB2sSDaaJzDLap3K+zZiHp0sFVsKzDmP8Au+URnfrkkM2B+tooOhUnAz9XX2aI C+FYgIiZ94+yBw7OKleGaT1VCzKGGmVSadw2CqdXvBB4qlDFwXjzsa+vg+1MZv4d ko4J6+CVGhPkE5vCkyt2pWnYSX9noxQl5OW4M5KKBE1d84hCi/DYLYo35DoJb0sP 0WGj+hc+dc+i+XD6lZt+XdJw+iYMU3yT8vFZEhMvWR8rgJhtW8DuWoDDjDpaILAJ sakgPGo95aOUr0RKTXoX2YI9gkNe+KOm/wvYxYrOxckjzUwRvzGIkzDiHfvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARjIHe1QhdZupOEzdFrsP+5ec/swHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMf73oiX4JeMNMiROty0cJuGXuD5OtJmDttG k2tjkZKLLqSyaGjCO/8CUSFJ651OOAPyu22o9u1FXk+fEJKrJRlyqJmnKXuY9IQF lY54TqCE/BnuB1q7tpnf3JhBckV7GJXEmVvhsC9D13mHb41W6GffKqqvcVT4B04H xYlQkQ7PAENNH7GPJZREnRP/rjKrLcNEZ72gs1Pdn06Zexm+A31+6apedEZXh9Dy erqYnkMW3OWdoX0yU5EbNl9+SR4BvD99SkgzLNLMHMnoF7FRXC6WbaMyhyFO9zxu p2xECejSf2py2TYK7n+XDZTINe0keLNPzL3gcECNNqVblDbaAU0= -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:12 2025 by rpki-client