This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: PMZ2ReMxN6RJL4r6Jevgyj46OBEl1IOwJQKomkscgtY= Subject key identifier: 7E:2A:CC:2B:90:3B:53:F8:D5:BA:65:5B:49:C5:1D:ED:AF:35:97:C0 Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 2349A9E0FA1557817A9670CBC3E071007D7CBF23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 0529 Signing time: Mon 01 Dec 2025 08:42:08 +0000 Manifest this update: Mon 01 Dec 2025 08:37:08 +0000 Manifest next update: Thu 04 Dec 2025 13:47:08 +0000 Files and hashes: 1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: pabObsYFL5G8XwKDZeBNJGhPGT6sKpj5H8AxTj0qoPc=) 2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:49:a9:e0:fa:15:57:81:7a:96:70:cb:c3:e0:71:00:7d:7c:bf:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: Dec 1 08:37:08 2025 GMT Not After : Dec 4 13:47:08 2025 GMT Subject: CN=7E2ACC2B903B53F8D5BA655B49C51DEDAF3597C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:1e:be:81:0c:d6:46:8e:e4:31:58:5c:72: 0b:8a:5a:4b:71:04:00:f1:29:16:5c:f0:de:70:11: 5f:01:ac:c1:3f:c1:d6:9a:03:8a:96:5d:56:39:50: 8e:4a:90:94:ab:6f:44:77:ab:2f:1f:96:e6:20:e6: 40:5a:42:ad:d3:2e:a0:1d:b5:79:98:9d:f8:2f:66: 15:d6:1b:c9:84:b9:06:1a:cf:b8:ef:d4:d3:a5:21: a6:f2:11:a8:8e:5d:46:21:7f:4f:e0:e5:ec:86:90: 9c:37:6f:af:c5:a9:19:89:89:28:d8:28:be:a3:86: 40:75:d1:44:c6:39:d5:b8:c2:71:83:83:72:c5:95: 5d:1c:ff:be:50:0f:b1:5d:23:5f:c4:91:92:b7:20: 9f:4c:0c:94:e8:2c:06:d5:0c:c5:bb:ce:45:2e:12: 17:b6:71:ac:c2:d9:7f:01:1d:e5:7d:6e:bf:6a:19: 42:29:0e:d5:de:af:b6:56:a0:3b:e5:97:42:94:6c: 34:62:72:72:02:62:7f:b9:86:4e:4e:23:c0:cb:74: 94:b4:ee:66:60:5d:53:0c:f9:6c:47:b8:cc:20:4b: fa:d4:e8:b5:37:b5:75:a8:96:52:d3:0f:c7:36:eb: f7:1c:29:f3:f6:2b:d4:a7:f2:3f:ef:34:1f:41:08: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2A:CC:2B:90:3B:53:F8:D5:BA:65:5B:49:C5:1D:ED:AF:35:97:C0 X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ed:06:9a:01:64:f6:57:3e:95:3d:5f:81:7a:bc:d8:8d:58: 96:bf:bc:4c:01:66:89:6e:f7:48:72:d9:e7:56:b0:9d:df:7e: 5e:aa:2c:cc:3d:d9:e7:cb:67:8f:80:a2:ee:13:a7:31:48:1c: e5:58:7f:e6:6a:ba:12:c2:90:25:84:e2:99:77:67:ab:90:e0: ae:0c:79:b4:98:c3:1a:95:b2:24:3e:9b:7a:a6:e7:7c:88:6e: 3b:73:69:1e:c9:5b:6e:90:fc:4f:20:a7:9e:4a:6a:c5:e8:8c: fa:fa:cf:29:8f:61:e4:9e:c0:f9:b8:90:ed:66:0f:94:d1:24: 60:cc:e8:02:84:e9:9d:a9:82:22:ab:63:8d:2e:36:91:f9:15: b7:46:8c:08:d8:cc:15:b6:5d:2e:55:f6:a3:68:bd:69:5b:7b: 99:81:3f:9f:f5:63:7e:c2:1f:cb:4a:0b:78:46:9b:ee:17:61: b9:d6:6f:c5:9c:95:f5:1e:59:a7:39:eb:69:31:13:75:89:9d: 8b:dd:be:65:69:d2:6e:b7:84:74:ba:3a:fa:e5:7a:6a:a8:4b: 1a:40:2d:8d:6a:01:72:98:3a:53:85:ba:86:71:c4:7f:bd:73: a6:a6:7f:bd:b4:49:c4:fb:ef:5e:6f:ec:c2:7c:0b:93:45:4c: 45:a8:fd:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0mp4PoVV4F6lnDLw+BxAH18vyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNTEyMDEwODM3MDhaFw0yNTEyMDQxMzQ3MDhaMDMxMTAvBgNV BAMTKDdFMkFDQzJCOTAzQjUzRjhENUJBNjU1QjQ5QzUxREVEQUYzNTk3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1h6+gQzWRo7kMVhccguKWktx BADxKRZc8N5wEV8BrME/wdaaA4qWXVY5UI5KkJSrb0R3qy8fluYg5kBaQq3TLqAd tXmYnfgvZhXWG8mEuQYaz7jv1NOlIabyEaiOXUYhf0/g5eyGkJw3b6/FqRmJiSjY KL6jhkB10UTGOdW4wnGDg3LFlV0c/75QD7FdI1/EkZK3IJ9MDJToLAbVDMW7zkUu Ehe2cazC2X8BHeV9br9qGUIpDtXer7ZWoDvll0KUbDRicnICYn+5hk5OI8DLdJS0 7mZgXVMM+WxHuMwgS/rU6LU3tXWollLTD8c26/ccKfP2K9Sn8j/vNB9BCJ6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfirMK5A7U/jVumVbScUd7a81l8AwHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvtBpoBZPZXPpU9X4F6vNiNWJa/vEwBZolu 90hy2edWsJ3ffl6qLMw92efLZ4+Aou4TpzFIHOVYf+ZquhLCkCWE4pl3Z6uQ4K4M ebSYwxqVsiQ+m3qm53yIbjtzaR7JW26Q/E8gp55KasXojPr6zymPYeSewPm4kO1m D5TRJGDM6AKE6Z2pgiKrY40uNpH5FbdGjAjYzBW2XS5V9qNovWlbe5mBP5/1Y37C H8tKC3hGm+4XYbnWb8WclfUeWac562kxE3WJnYvdvmVp0m63hHS6OvrlemqoSxpA LY1qAXKYOlOFuoZxxH+9c6amf720ScT7715v7MJ8C5NFTEWo/dY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:28 2025 by rpki-client