This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: SsAtOJS2t5JdJ721xTEwS9AJzR607SM7eQU0UUpxJSE= Subject key identifier: A1:98:82:C6:7B:24:3C:B4:47:B5:CC:5F:AC:95:34:78:17:44:FD:4C Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 21AE7D061A1F4CAAC8AC5F9233ECED55DEFCB101 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02EC Signing time: Mon 01 Dec 2025 05:12:29 +0000 Manifest this update: Mon 01 Dec 2025 05:07:29 +0000 Manifest next update: Thu 04 Dec 2025 14:54:29 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 2: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: Xwc5D098wk0TPvM+9DRbZA8KKoz5niB2NEwTL4vJZf8=) 3: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 4: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:7d:06:1a:1f:4c:aa:c8:ac:5f:92:33:ec:ed:55:de:fc:b1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Dec 1 05:07:29 2025 GMT Not After : Dec 4 14:54:29 2025 GMT Subject: CN=A19882C67B243CB447B5CC5FAC9534781744FD4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:92:86:01:76:6e:9b:89:ca:b4:73:d3:ac: a9:48:9a:59:32:7a:80:69:e2:a6:31:57:b3:c4:a9: a8:40:1f:21:7e:e7:0c:39:5a:1a:ea:70:01:6c:b8: ca:c1:d2:26:7b:5d:44:52:15:5f:aa:d9:6e:5b:51: 23:ca:95:86:c3:aa:b2:7c:05:cd:66:e7:ff:2a:ef: 63:b4:e3:0f:6f:35:b8:aa:e5:59:40:fc:eb:53:75: 90:f7:56:31:6e:a9:33:6f:b1:57:67:ab:62:33:2f: a4:a5:e2:be:77:d4:ae:57:f4:33:9b:8e:c1:23:85: c2:46:f8:5f:75:91:9c:b8:14:c3:fe:cd:17:10:0d: b0:d1:a8:72:6f:eb:83:9e:e9:be:f0:34:ae:0a:4e: b6:3e:f3:e1:e0:d9:84:42:85:9d:a1:93:f9:41:47: 76:21:18:6c:22:a1:23:a7:58:de:91:93:b0:e1:e5: 1b:ea:ba:69:f1:86:6a:a9:ff:88:6e:95:cf:a0:d7: 2e:47:b9:dc:b4:29:7d:1a:3f:13:08:a6:bf:1e:e7: c3:6a:2a:2c:a8:3c:23:5e:fc:86:b3:c3:5e:74:e1: 62:69:74:83:f3:85:d6:1f:0e:77:00:8c:06:79:e9: 5c:4f:cf:df:d6:6d:7e:ec:13:12:93:2b:8e:51:b1: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:82:C6:7B:24:3C:B4:47:B5:CC:5F:AC:95:34:78:17:44:FD:4C X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f3:3a:78:6f:fc:14:d7:f1:2f:cc:f3:c9:ca:35:93:43:e6: 67:f5:13:4e:5d:6e:10:0b:e6:27:42:ff:4a:78:18:88:4d:66: 13:97:0f:01:bc:8f:e4:bd:8c:da:e4:74:16:f7:4f:49:63:dd: d6:50:a9:c9:8d:8a:7c:9b:59:79:31:19:84:f2:36:04:eb:b6: 0f:5b:55:74:3d:23:b8:b6:6a:8c:76:6e:55:39:9f:c2:38:e6: 49:f3:39:6b:73:79:a9:41:e4:6a:a0:98:78:75:95:4e:bf:be: b0:b9:44:61:f4:08:02:ae:12:b0:2a:eb:37:82:a1:1a:85:f3: b7:f0:e1:88:e5:51:c2:7c:d9:63:0a:0f:07:3c:46:db:d1:2e: c1:ca:fa:5f:39:89:95:06:6b:51:85:c4:bd:1f:91:bb:ce:2d: f0:d3:49:dd:10:97:1b:e8:fd:dc:f7:97:1f:c7:5f:85:8c:e5: 88:f5:7a:56:02:96:fe:73:22:c0:ec:87:80:7b:27:2b:83:62: a2:12:46:2f:7d:10:ed:50:04:f6:75:ba:0c:e9:33:0e:fb:6c: b3:f2:58:c1:14:09:c5:45:b2:d1:dc:44:48:41:72:bd:ef:b2: b5:11:e6:2f:c4:2d:f7:98:15:28:48:1e:b8:00:ba:4a:65:29: c9:0b:39:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIa59BhofTKrIrF+SM+ztVd78sQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTEyMDEwNTA3MjlaFw0yNTEyMDQxNDU0MjlaMDMxMTAvBgNV BAMTKEExOTg4MkM2N0IyNDNDQjQ0N0I1Q0M1RkFDOTUzNDc4MTc0NEZENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KpKGAXZum4nKtHPTrKlImlky eoBp4qYxV7PEqahAHyF+5ww5WhrqcAFsuMrB0iZ7XURSFV+q2W5bUSPKlYbDqrJ8 Bc1m5/8q72O04w9vNbiq5VlA/OtTdZD3VjFuqTNvsVdnq2IzL6Sl4r531K5X9DOb jsEjhcJG+F91kZy4FMP+zRcQDbDRqHJv64Oe6b7wNK4KTrY+8+Hg2YRChZ2hk/lB R3YhGGwioSOnWN6Rk7Dh5Rvqumnxhmqp/4hulc+g1y5Hudy0KX0aPxMIpr8e58Nq KiyoPCNe/Iazw1504WJpdIPzhdYfDncAjAZ56VxPz9/WbX7sExKTK45Rse7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZiCxnskPLRHtcxfrJU0eBdE/UwwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7zOnhv/BTX8S/M88nKNZND5mf1E05dbhAL 5idC/0p4GIhNZhOXDwG8j+S9jNrkdBb3T0lj3dZQqcmNinybWXkxGYTyNgTrtg9b VXQ9I7i2aox2blU5n8I45knzOWtzealB5GqgmHh1lU6/vrC5RGH0CAKuErAq6zeC oRqF87fw4YjlUcJ82WMKDwc8RtvRLsHK+l85iZUGa1GFxL0fkbvOLfDTSd0Qlxvo /dz3lx/HX4WM5Yj1elYClv5zIsDsh4B7JyuDYqISRi99EO1QBPZ1ugzpMw77bLPy WMEUCcVFstHcREhBcr3vsrUR5i/ELfeYFShIHrgAukplKckLOfo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:39 2025 by rpki-client