This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: nm2WjUUhlAuDdmwmdBlr8MbHSaj5KpnG+LGcekjfAUc= Subject key identifier: 31:02:86:96:5E:2F:0C:E9:09:3C:F9:A3:48:9B:DD:C9:25:7A:16:07 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 6D54C3EB919B04AF3EEA60381509F21C99AA89A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0297 Signing time: Fri 12 Dec 2025 22:41:51 +0000 Manifest this update: Fri 12 Dec 2025 22:36:51 +0000 Manifest next update: Mon 15 Dec 2025 23:15:51 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) 3: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: FCDHpYmOn1SJcyVA6WZ5rq+WnskfQfdIi+p+BDf8H0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:54:c3:eb:91:9b:04:af:3e:ea:60:38:15:09:f2:1c:99:aa:89:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Dec 12 22:36:51 2025 GMT Not After : Dec 15 23:15:51 2025 GMT Subject: CN=310286965E2F0CE9093CF9A3489BDDC9257A1607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:8b:9a:9e:cf:a4:b2:ba:50:68:5e:a5:cb: 4f:bd:77:a5:73:d0:aa:41:d5:cd:b4:e9:4d:f0:1a: 8b:88:df:9c:1f:00:3e:ca:b8:8b:d0:ff:4b:c6:3a: 0e:8c:d0:10:bb:97:f1:bb:28:bc:04:36:d2:a4:37: 75:09:aa:13:ab:ad:2f:a8:22:5b:8c:b5:87:2f:6c: 37:f9:b9:9b:13:be:51:7b:fc:34:e4:88:6e:e6:ce: ee:df:52:df:03:c4:7f:04:e6:7d:e8:f8:ea:7f:48: 72:bd:16:7d:40:67:6f:90:69:e6:27:d5:f1:4f:59: 86:2f:8f:59:19:57:cd:d4:c9:77:f5:e5:ee:4e:9b: 86:e4:74:bf:b6:3b:c0:ee:04:6f:23:5a:d2:7b:c4: fb:cc:f4:44:04:b2:12:65:71:02:de:47:b2:73:8a: aa:bc:01:ba:a4:d7:a3:87:f4:95:21:74:0f:65:26: 5d:a4:a9:fa:5c:ce:08:84:7d:26:cd:20:6e:72:b0: 64:51:61:58:d1:2b:61:74:09:d5:d7:01:22:b3:4e: 30:6f:34:26:7e:52:31:be:2b:65:a6:04:7b:51:16: f3:23:3a:db:8d:c4:6e:49:43:c9:a7:b3:e4:5d:42: a4:95:b4:14:9a:65:3d:9a:80:58:f1:8b:1d:b5:1a: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:86:96:5E:2F:0C:E9:09:3C:F9:A3:48:9B:DD:C9:25:7A:16:07 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4d:24:cd:9a:20:93:d6:c7:9b:fa:c3:84:c9:9b:44:b5:23: b0:f7:7b:80:9e:84:60:ac:cd:ac:77:c4:4d:f3:42:88:a0:c3: 30:33:86:c0:77:d7:65:d0:c9:e1:2c:d2:a4:a4:96:d7:6d:c3: 62:73:9d:95:1c:b4:8a:f5:5a:ff:cf:5b:29:c6:b2:2b:92:4b: c1:13:e8:1d:4e:3c:3e:68:b5:5d:73:5f:5f:f0:a7:4d:c5:0c: fc:47:58:02:10:87:c3:74:f3:a9:56:31:ac:8b:72:90:64:0b: cd:ff:99:98:e5:c9:05:0d:0b:90:ca:f0:bb:f8:17:57:2f:e2: c9:18:7f:d3:eb:cd:9e:90:29:7f:0b:93:f3:cb:9e:51:58:8a: 5e:d4:23:1f:f0:91:ff:b7:f9:67:20:25:48:9a:20:62:5e:1b: c2:cc:87:1d:f7:4a:46:10:a0:1d:20:d9:00:c6:99:14:ca:be: cc:86:c5:4f:49:fd:04:94:23:8a:e8:b6:e4:e3:e8:17:6e:18: c3:c1:34:b3:31:8d:4a:b3:84:1f:bd:24:33:c1:27:99:b3:c6: 9c:36:e1:81:e6:d2:c6:4d:b2:4b:5b:29:1b:03:1d:a7:14:69: 72:82:fe:2a:2c:8f:6b:62:3f:9e:ed:82:a5:8a:31:d4:c9:7a: 38:7c:23:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVTD65GbBK8+6mA4FQnyHJmqiaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTEyMTIyMjM2NTFaFw0yNTEyMTUyMzE1NTFaMDMxMTAvBgNV BAMTKDMxMDI4Njk2NUUyRjBDRTkwOTNDRjlBMzQ4OUJEREM5MjU3QTE2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdIuans+ksrpQaF6ly0+9d6Vz 0KpB1c206U3wGouI35wfAD7KuIvQ/0vGOg6M0BC7l/G7KLwENtKkN3UJqhOrrS+o IluMtYcvbDf5uZsTvlF7/DTkiG7mzu7fUt8DxH8E5n3o+Op/SHK9Fn1AZ2+QaeYn 1fFPWYYvj1kZV83UyXf15e5Om4bkdL+2O8DuBG8jWtJ7xPvM9EQEshJlcQLeR7Jz iqq8Abqk16OH9JUhdA9lJl2kqfpczgiEfSbNIG5ysGRRYVjRK2F0CdXXASKzTjBv NCZ+UjG+K2WmBHtRFvMjOtuNxG5JQ8mns+RdQqSVtBSaZT2agFjxix21GopVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQKGll4vDOkJPPmjSJvdySV6FgcwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1NJM2aIJPWx5v6w4TJm0S1I7D3e4CehGCs zax3xE3zQoigwzAzhsB312XQyeEs0qSkltdtw2JznZUctIr1Wv/PWynGsiuSS8ET 6B1OPD5otV1zX1/wp03FDPxHWAIQh8N086lWMayLcpBkC83/mZjlyQUNC5DK8Lv4 F1cv4skYf9PrzZ6QKX8Lk/PLnlFYil7UIx/wkf+3+WcgJUiaIGJeG8LMhx33SkYQ oB0g2QDGmRTKvsyGxU9J/QSUI4rotuTj6BduGMPBNLMxjUqzhB+9JDPBJ5mzxpw2 4YHm0sZNsktbKRsDHacUaXKC/iosj2tiP57tgqWKMdTJejh8I3Y= -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:53 2025 by rpki-client