This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: ScfU2ck5a+wEzHbb/I/7fqZ/673mc6KMOmsoez0RLbo= Subject key identifier: 1D:65:C9:A5:BC:B0:6B:56:A1:2C:68:CD:86:C1:71:2A:9D:DB:DC:98 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 083D0585B231821CE8A2AF15832115BC0EF5F28B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 01B8 Signing time: Tue 02 Dec 2025 09:10:42 +0000 Manifest this update: Tue 02 Dec 2025 09:05:42 +0000 Manifest next update: Fri 05 Dec 2025 17:40:42 +0000 Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: rcpgUDSOmS6YbJWYOMDAqadQpiapRF0pcNu3DRcFaVk=) 2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3d:05:85:b2:31:82:1c:e8:a2:af:15:83:21:15:bc:0e:f5:f2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Dec 2 09:05:42 2025 GMT Not After : Dec 5 17:40:42 2025 GMT Subject: CN=1D65C9A5BCB06B56A12C68CD86C1712A9DDBDC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:a3:14:dd:9f:19:ef:bb:26:19:02:f2:d5: c5:66:4f:c0:7c:79:fe:e4:17:73:6b:c7:c8:52:9a: 8c:ec:fc:01:51:e9:7f:92:a6:22:24:1f:0c:09:51: 55:fb:3f:c0:2a:5e:17:c4:5d:9d:e1:8e:7f:97:a0: e8:0c:6c:f5:ad:55:9d:5a:44:b4:81:4b:6e:3a:18: ef:72:d2:11:db:23:4e:4a:92:4f:5d:aa:ae:53:69: 08:76:da:66:43:22:30:a1:fd:00:11:30:b9:c9:61: 84:3d:e8:77:da:20:b1:74:d8:44:ec:60:a8:8a:98: 38:c3:d7:73:26:a5:11:7d:b1:e7:d0:12:fe:e4:c7: cc:92:79:70:1a:87:a7:30:8a:39:ba:2b:15:bb:b8: 33:1b:92:68:70:5e:cf:94:49:d7:53:ab:4a:c2:d1: dc:40:49:11:b3:79:20:59:16:79:38:90:d1:59:75: 8e:14:c4:67:cb:2a:a5:34:ed:67:e0:cf:90:45:a8: d1:a9:f4:dc:b6:ef:c5:89:7c:7a:58:66:54:f3:75: ac:69:5d:f2:53:91:a6:09:c1:48:68:e4:b2:91:53: 5e:b5:68:a0:f7:2c:cf:50:00:e9:4b:5f:65:5a:2b: 5f:2e:42:94:43:ab:2e:30:4c:a2:09:ff:0f:69:8d: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:65:C9:A5:BC:B0:6B:56:A1:2C:68:CD:86:C1:71:2A:9D:DB:DC:98 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:95:5a:69:ca:8b:30:ea:7e:9d:65:21:fc:46:60:93:91:b1: 73:ad:dd:af:3a:bf:6d:56:39:a9:13:66:26:e4:f0:9d:b7:c4: a6:c2:13:01:6e:ea:96:c8:0e:e2:ee:8f:86:d1:41:32:df:b9: 1e:5c:04:79:2f:e0:61:ed:dc:7e:77:ad:1c:4d:ef:dd:12:bf: ca:31:8a:f6:94:b8:e3:aa:29:4c:77:02:26:3f:89:e1:33:5b: 6a:8c:20:ac:d6:62:84:b9:42:63:05:e2:a4:e8:9d:5f:18:53: 8b:a9:de:79:48:f4:5d:a2:e8:72:2c:ed:f7:24:d3:32:87:3e: 21:2a:f1:c6:66:db:de:36:60:48:6a:d9:5b:8f:ea:be:0d:39: bf:fc:37:1f:18:75:2f:fd:7e:b9:bc:c3:ed:19:f7:b1:c2:fc: f9:58:f9:d4:82:bf:c2:0d:e4:23:15:a8:a7:d0:d9:c3:02:4c: 18:25:fe:fa:23:49:3a:21:e4:1a:4d:0e:78:d0:28:66:ae:ff: 7b:dc:19:37:21:fe:ec:e5:a3:93:16:5a:0b:d1:e2:38:73:b9: e0:8d:12:87:ec:c4:bf:45:6e:fb:37:96:3b:b8:ba:48:ce:ee: ca:8a:b3:1e:88:ce:c3:ed:0b:b1:34:d3:a4:b1:b8:2f:e6:27: f6:56:48:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD0FhbIxghzooq8VgyEVvA718oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTEyMDIwOTA1NDJaFw0yNTEyMDUxNzQwNDJaMDMxMTAvBgNV BAMTKDFENjVDOUE1QkNCMDZCNTZBMTJDNjhDRDg2QzE3MTJBOUREQkRDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvoaMU3Z8Z77smGQLy1cVmT8B8 ef7kF3Nrx8hSmozs/AFR6X+SpiIkHwwJUVX7P8AqXhfEXZ3hjn+XoOgMbPWtVZ1a RLSBS246GO9y0hHbI05Kkk9dqq5TaQh22mZDIjCh/QARMLnJYYQ96HfaILF02ETs YKiKmDjD13MmpRF9sefQEv7kx8ySeXAah6cwijm6KxW7uDMbkmhwXs+USddTq0rC 0dxASRGzeSBZFnk4kNFZdY4UxGfLKqU07Wfgz5BFqNGp9Ny278WJfHpYZlTzdaxp XfJTkaYJwUho5LKRU161aKD3LM9QAOlLX2VaK18uQpRDqy4wTKIJ/w9pjbF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWXJpbywa1ahLGjNhsFxKp3b3JgwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSVWmnKizDqfp1lIfxGYJORsXOt3a86v21W OakTZibk8J23xKbCEwFu6pbIDuLuj4bRQTLfuR5cBHkv4GHt3H53rRxN790Sv8ox ivaUuOOqKUx3AiY/ieEzW2qMIKzWYoS5QmMF4qTonV8YU4up3nlI9F2i6HIs7fck 0zKHPiEq8cZm2942YEhq2VuP6r4NOb/8Nx8YdS/9frm8w+0Z97HC/PlY+dSCv8IN 5CMVqKfQ2cMCTBgl/vojSToh5BpNDnjQKGau/3vcGTch/uzlo5MWWgvR4jhzueCN EofsxL9Fbvs3lju4ukjO7sqKsx6IzsPtC7E006SxuC/mJ/ZWSG0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:37 2025 by rpki-client