This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: Rq3Ph6oklEdlqXUv5YiBQcWFfCbONUoWF5dNtyT3N/A= Subject key identifier: 37:BA:79:67:13:95:46:44:42:FA:8A:0D:87:1C:E0:65:8D:0E:03:FE Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 259D7D86482D752C65598FC5FEACB3F690055B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 053C Signing time: Wed 17 Dec 2025 21:11:53 +0000 Manifest this update: Wed 17 Dec 2025 21:06:53 +0000 Manifest next update: Sun 21 Dec 2025 09:01:53 +0000 Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 2: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: ZOY0FlCr3JX+qfKIWcVdXcnILBlzsOdyec2Awlm9WvM=) 3: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 5: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 09:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:7d:86:48:2d:75:2c:65:59:8f:c5:fe:ac:b3:f6:90:05:5b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Dec 17 21:06:53 2025 GMT Not After : Dec 21 09:01:53 2025 GMT Subject: CN=37BA79671395464442FA8A0D871CE0658D0E03FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:8a:d6:1f:72:95:04:34:fe:db:c1:b4:99: c6:45:88:5c:22:02:6b:61:98:d0:b7:12:d0:03:cf: 74:af:2d:e1:97:d5:83:2b:43:e1:7f:3a:eb:e1:6f: 32:fc:7e:e0:c9:58:95:50:15:b8:16:fc:21:3d:7b: 33:18:f0:52:a0:e4:a4:d9:01:27:6e:03:6b:d4:0c: 96:e5:41:84:b9:d1:20:55:07:b6:58:05:84:c3:9a: 83:b8:0f:19:a3:2f:b6:2e:f4:f1:ae:15:c7:de:67: 42:9d:a2:08:cd:be:44:f4:8d:7a:a2:d5:14:30:b5: 1c:bb:e2:2f:4f:50:5a:98:0b:dc:e9:9c:37:cd:65: c2:47:0f:9f:ea:40:95:f7:a3:79:cd:6e:9e:6b:60: e9:3b:27:9d:67:5f:5c:fa:fc:c9:40:c5:c4:a9:85: 07:35:aa:60:41:7d:5d:35:6a:61:19:20:77:65:e8: d0:0c:2b:1f:63:4e:03:ec:b4:dc:17:a3:2d:b4:53: 3f:17:0f:04:72:0b:fb:32:be:9d:a4:ff:96:af:8f: 7d:80:eb:81:88:5d:83:ff:7d:02:17:0d:19:77:cf: bd:c4:fe:55:9f:ad:1b:cd:ab:ec:e7:5b:7b:d4:0c: fe:07:d4:e6:88:83:ee:32:71:7d:70:e6:1e:84:c0: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:79:67:13:95:46:44:42:FA:8A:0D:87:1C:E0:65:8D:0E:03:FE X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ac:11:d2:d0:8e:84:53:22:97:24:93:de:60:86:e3:d0:2a: 71:35:11:86:df:b7:14:dc:9e:a9:d9:ff:d8:21:d9:db:3b:99: 55:eb:90:3d:41:40:c8:2b:64:cf:4c:aa:5b:bc:74:6e:15:72: 14:5c:b8:fa:ea:39:65:fa:32:20:50:a3:b0:0d:dc:c9:a5:0d: 30:43:04:46:d0:18:4e:c3:f6:de:42:2c:e7:0c:51:77:cb:8c: bd:7c:b3:4a:3e:a5:64:3e:53:ce:f1:3c:70:a6:88:6a:8d:63: 7e:96:a3:84:9b:c5:76:cb:da:ff:12:52:08:39:94:48:bd:d7: 0d:7e:87:28:21:3b:2b:d6:e2:2a:d1:02:69:3a:b3:4e:19:29: 01:fb:89:e1:ac:1b:f3:dd:80:07:de:99:62:bb:68:aa:aa:ee: ac:14:36:bb:9b:34:8b:72:e0:4e:28:5a:8b:80:52:91:85:67: 1f:35:c2:b7:b8:c7:62:60:f1:6e:cb:9e:f9:62:69:25:a5:10: 84:f3:fb:7f:96:0f:aa:08:8b:33:32:e0:1a:78:03:f5:e6:06: 75:8a:fd:8b:26:a0:7d:19:25:d0:1c:8d:bf:6b:cb:9b:e2:51: 86:e1:41:33:fc:94:de:3a:f1:ac:42:45:55:d8:e2:3b:b0:3a: 4b:7b:a4:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZ19hkgtdSxlWY/F/qyz9pAFW0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEyMTcyMTA2NTNaFw0yNTEyMjEwOTAxNTNaMDMxMTAvBgNV BAMTKDM3QkE3OTY3MTM5NTQ2NDQ0MkZBOEEwRDg3MUNFMDY1OEQwRTAzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNIrWH3KVBDT+28G0mcZFiFwi AmthmNC3EtADz3SvLeGX1YMrQ+F/OuvhbzL8fuDJWJVQFbgW/CE9ezMY8FKg5KTZ ASduA2vUDJblQYS50SBVB7ZYBYTDmoO4DxmjL7Yu9PGuFcfeZ0KdogjNvkT0jXqi 1RQwtRy74i9PUFqYC9zpnDfNZcJHD5/qQJX3o3nNbp5rYOk7J51nX1z6/MlAxcSp hQc1qmBBfV01amEZIHdl6NAMKx9jTgPstNwXoy20Uz8XDwRyC/syvp2k/5avj32A 64GIXYP/fQIXDRl3z73E/lWfrRvNq+znW3vUDP4H1OaIg+4ycX1w5h6EwGN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7p5ZxOVRkRC+ooNhxzgZY0OA/4wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEisEdLQjoRTIpckk95ghuPQKnE1EYbftxTc nqnZ/9gh2ds7mVXrkD1BQMgrZM9Mqlu8dG4VchRcuPrqOWX6MiBQo7AN3MmlDTBD BEbQGE7D9t5CLOcMUXfLjL18s0o+pWQ+U87xPHCmiGqNY36Wo4SbxXbL2v8SUgg5 lEi91w1+hyghOyvW4irRAmk6s04ZKQH7ieGsG/PdgAfemWK7aKqq7qwUNrubNIty 4E4oWouAUpGFZx81wre4x2Jg8W7LnvliaSWlEITz+3+WD6oIizMy4Bp4A/XmBnWK /YsmoH0ZJdAcjb9ry5viUYbhQTP8lN468axCRVXY4juwOkt7pCc= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:40 2025 by rpki-client