This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: jpd+cVa0MCqVhLox8bmOZka/P/v63fNQrs5lK/vzBTA= Subject key identifier: 4A:DB:4D:BA:1E:F9:3C:A9:55:B5:E2:7D:22:0C:F7:2C:07:67:CC:AD Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 395A070521EB83063198C4C0339D1621B8737D20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 0260 Signing time: Mon 01 Dec 2025 12:22:29 +0000 Manifest this update: Mon 01 Dec 2025 12:17:29 +0000 Manifest next update: Thu 04 Dec 2025 22:53:29 +0000 Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) 2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: DQmTAZC5S8JHTHINOmzUCETxemkapho6E2cCLLh1c/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5a:07:05:21:eb:83:06:31:98:c4:c0:33:9d:16:21:b8:73:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Dec 1 12:17:29 2025 GMT Not After : Dec 4 22:53:29 2025 GMT Subject: CN=4ADB4DBA1EF93CA955B5E27D220CF72C0767CCAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:f5:42:e7:51:0b:31:7a:53:07:ef:e8:5b: c6:df:80:b6:53:ba:b1:93:c7:df:f0:ab:7c:11:6c: e4:fc:44:17:d8:56:ce:69:a0:8e:17:42:20:6f:7d: 9c:9a:d6:7a:dc:f8:a0:8c:6f:bf:66:3d:3b:2b:99: a1:5f:31:af:94:52:45:06:91:90:19:94:75:a3:fc: 3c:31:06:78:49:b5:04:c9:ed:aa:e7:9c:fc:3e:98: 3a:8c:a9:c8:8c:4c:df:a2:69:4b:d9:c6:8d:8f:2a: 02:84:6f:02:e6:fc:ad:a4:4b:f8:8c:c7:9f:98:e1: 8c:96:4a:29:e4:28:dd:95:a5:c7:de:e8:da:d6:eb: 58:2a:2c:43:57:ab:c4:2d:3c:0b:b6:ff:3d:ee:34: 5d:8c:51:65:93:f6:9e:a7:c9:42:23:59:fc:8b:75: 31:09:38:64:bb:cb:ec:5b:99:cd:92:db:4d:cf:1c: a3:d8:08:9c:1a:87:ca:b2:b5:06:c0:8f:65:78:71: 87:c4:71:d0:7b:81:92:9b:7f:1e:02:3a:a4:d5:96: 07:27:c4:fd:b5:37:ac:79:d3:9a:7d:65:e0:c9:90: f7:31:76:10:ff:83:15:ca:05:c1:4e:09:40:44:24: de:be:42:88:4f:63:80:d7:72:36:6c:2a:3a:e3:60: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DB:4D:BA:1E:F9:3C:A9:55:B5:E2:7D:22:0C:F7:2C:07:67:CC:AD X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:38:cf:34:ab:01:e3:db:f5:a6:fc:22:57:ec:4f:ad:49:e2: 0f:7d:63:79:43:da:a1:43:60:f1:5d:30:8b:0a:e0:d6:5d:04: 04:b3:db:c6:b2:30:e4:1e:4e:31:8f:4c:eb:08:bd:cc:18:7b: 65:94:bc:4c:f2:e9:3a:ff:4d:f3:70:6e:86:6d:c5:0f:41:9b: ff:73:77:d7:16:b5:0d:45:d3:e1:d9:22:a0:d1:e8:f2:b9:b3: 42:6b:82:c6:66:dc:b7:f1:50:aa:56:cb:64:9b:e8:7a:3b:c0: 68:10:3e:9f:3b:c6:99:88:0b:a6:6b:c6:ff:f3:12:2b:02:8b: 4c:83:de:f2:99:4a:f9:3c:23:48:6f:68:ee:b4:20:91:34:10: 27:f1:3b:c0:58:70:f1:65:52:c3:d9:8c:53:53:32:7d:9f:f4: 6c:13:fb:b5:0f:c2:cd:4d:99:37:2d:d1:33:0c:97:75:30:9c: b9:1b:a5:84:e8:b5:98:a4:a7:09:8e:5c:51:14:cc:c1:ed:9c: d5:17:a9:a0:e1:7f:6b:1a:51:4f:13:56:71:12:52:29:c9:cf: 55:33:cf:cc:a4:97:a8:c0:9c:df:33:c0:fc:5b:f1:d6:ea:b6: b8:19:25:22:64:14:56:22:31:bb:ac:25:a3:99:38:5e:ae:b2: fc:4c:0d:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVoHBSHrgwYxmMTAM50WIbhzfSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTEyMDExMjE3MjlaFw0yNTEyMDQyMjUzMjlaMDMxMTAvBgNV BAMTKDRBREI0REJBMUVGOTNDQTk1NUI1RTI3RDIyMENGNzJDMDc2N0NDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0fVC51ELMXpTB+/oW8bfgLZT urGTx9/wq3wRbOT8RBfYVs5poI4XQiBvfZya1nrc+KCMb79mPTsrmaFfMa+UUkUG kZAZlHWj/DwxBnhJtQTJ7arnnPw+mDqMqciMTN+iaUvZxo2PKgKEbwLm/K2kS/iM x5+Y4YyWSinkKN2Vpcfe6NrW61gqLENXq8QtPAu2/z3uNF2MUWWT9p6nyUIjWfyL dTEJOGS7y+xbmc2S203PHKPYCJwah8qytQbAj2V4cYfEcdB7gZKbfx4COqTVlgcn xP21N6x505p9ZeDJkPcxdhD/gxXKBcFOCUBEJN6+QohPY4DXcjZsKjrjYAOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSttNuh75PKlVteJ9Igz3LAdnzK0wHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH04zzSrAePb9ab8IlfsT61J4g99Y3lD2qFD YPFdMIsK4NZdBASz28ayMOQeTjGPTOsIvcwYe2WUvEzy6Tr/TfNwboZtxQ9Bm/9z d9cWtQ1F0+HZIqDR6PK5s0JrgsZm3LfxUKpWy2Sb6Ho7wGgQPp87xpmIC6Zrxv/z EisCi0yD3vKZSvk8I0hvaO60IJE0ECfxO8BYcPFlUsPZjFNTMn2f9GwT+7UPws1N mTct0TMMl3UwnLkbpYTotZikpwmOXFEUzMHtnNUXqaDhf2saUU8TVnESUinJz1Uz z8ykl6jAnN8zwPxb8dbqtrgZJSJkFFYiMbusJaOZOF6usvxMDXg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:32 2025 by rpki-client