This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: Yw8YCJ+rVSg4MSBbT31cUFiys3nGgSXoiLoGOydT40M= Subject key identifier: 69:2F:1F:79:0A:A4:73:96:D9:B0:9D:73:75:41:B2:7B:58:FC:90:71 Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 27EDFD3A28C21FAF5671FD2B90451A3FBC9D6030 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: 0124 Signing time: Fri 05 Dec 2025 21:21:58 +0000 Manifest this update: Fri 05 Dec 2025 21:16:58 +0000 Manifest next update: Mon 08 Dec 2025 22:02:58 +0000 Files and hashes: 1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) 2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: Fqf+K14aCOQjrU5vbXGsXZtDFCCsk2sVedm1KBQo1Yk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ed:fd:3a:28:c2:1f:af:56:71:fd:2b:90:45:1a:3f:bc:9d:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Dec 5 21:16:58 2025 GMT Not After : Dec 8 22:02:58 2025 GMT Subject: CN=692F1F790AA47396D9B09D737541B27B58FC9071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:28:ca:04:64:c2:6f:58:c2:f6:43:49:67: 94:40:4f:20:86:7e:69:a2:af:4a:72:90:32:91:c6: 61:70:97:f1:c1:b4:c8:db:79:e9:91:b0:c2:8b:74: 45:8b:da:e3:f8:99:b0:9d:22:57:98:15:76:6e:ba: da:4f:70:6e:26:02:17:86:49:1a:a9:7d:f7:2e:4d: 0c:1a:6e:a8:0d:58:c4:b1:fa:a9:cf:99:8a:f7:eb: 62:1e:c1:4f:4a:73:6b:86:66:ed:d2:67:2e:0e:6a: b8:73:2e:0d:8b:06:59:3b:95:a7:6b:e8:d9:ca:70: 99:ec:99:b6:9e:7b:dc:c5:7f:55:19:17:15:ca:b4: a5:a4:b5:d5:48:9b:9a:71:e9:d8:94:32:58:f8:6f: 26:58:d1:9d:e4:69:c8:e6:e4:d6:e0:37:81:1a:e5: b9:43:3c:30:6b:3c:78:3d:5c:14:40:a5:c5:80:e4: 68:7b:a3:a9:0e:63:e9:d4:a9:9a:5c:0d:34:20:7f: 62:00:a1:9d:3d:47:53:eb:7b:b3:4f:d0:9b:62:5b: d0:84:36:7d:96:e2:32:8e:34:69:06:6d:5a:73:d8: 37:21:90:20:8a:5f:e8:57:18:8b:78:ee:61:2f:cb: 04:5f:1b:cf:fd:46:51:3c:f0:6d:70:86:07:b7:6d: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:1F:79:0A:A4:73:96:D9:B0:9D:73:75:41:B2:7B:58:FC:90:71 X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2f:3a:54:05:1f:0f:51:0f:7e:49:3a:36:0f:4e:b0:1b:4d: 64:09:95:11:6d:02:ce:d6:7a:0e:77:4c:0b:99:aa:28:53:02: 8e:d9:80:a7:47:19:d4:fe:67:e9:83:cf:d2:7e:15:e7:36:01: 96:e2:d4:bd:e8:34:11:69:44:1f:43:22:0b:bc:9c:c3:10:f0: d2:1c:d0:67:4e:3c:19:b8:5a:28:50:b3:2d:27:8a:de:d3:df: 54:82:fa:e6:65:fa:b7:dc:15:2f:fd:3a:46:f8:1d:e8:20:77: 59:11:30:61:8e:e4:8e:31:d1:7d:cd:42:24:0e:5b:85:11:40: e2:02:e6:c0:1f:5c:a2:18:dd:c7:b1:63:46:c0:3f:c6:9c:aa: bd:68:65:89:53:22:1f:ab:8d:67:5f:fc:68:1a:f8:0b:db:28: 23:1d:75:1b:7a:5e:10:17:1d:2a:80:76:5c:4d:89:d5:fe:af: 80:4c:fa:c3:40:b3:a5:22:f4:11:30:bf:79:b9:e8:53:9a:3b: 5a:09:72:50:30:fd:5c:b0:05:ae:61:e0:3c:4c:2d:2a:3a:4c: 16:38:41:98:04:55:a6:87:65:45:d5:f2:c0:bd:85:d4:55:fd: e6:86:c0:a2:d1:63:7a:2b:c5:43:aa:18:61:0e:82:5b:f9:a5: e6:72:a6:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+39OijCH69Wcf0rkEUaP7ydYDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTEyMDUyMTE2NThaFw0yNTEyMDgyMjAyNThaMDMxMTAvBgNV BAMTKDY5MkYxRjc5MEFBNDczOTZEOUIwOUQ3Mzc1NDFCMjdCNThGQzkwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeSjKBGTCb1jC9kNJZ5RATyCG fmmir0pykDKRxmFwl/HBtMjbeemRsMKLdEWL2uP4mbCdIleYFXZuutpPcG4mAheG SRqpffcuTQwabqgNWMSx+qnPmYr362IewU9Kc2uGZu3SZy4OarhzLg2LBlk7ladr 6NnKcJnsmbaee9zFf1UZFxXKtKWktdVIm5px6diUMlj4byZY0Z3kacjm5NbgN4Ea 5blDPDBrPHg9XBRApcWA5Gh7o6kOY+nUqZpcDTQgf2IAoZ09R1Pre7NP0JtiW9CE Nn2W4jKONGkGbVpz2DchkCCKX+hXGIt47mEvywRfG8/9RlE88G1whge3bbrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaS8feQqkc5bZsJ1zdUGye1j8kHEwHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4vOlQFHw9RD35JOjYPTrAbTWQJlRFtAs7W eg53TAuZqihTAo7ZgKdHGdT+Z+mDz9J+Fec2AZbi1L3oNBFpRB9DIgu8nMMQ8NIc 0GdOPBm4WihQsy0nit7T31SC+uZl+rfcFS/9Okb4Heggd1kRMGGO5I4x0X3NQiQO W4URQOIC5sAfXKIY3cexY0bAP8acqr1oZYlTIh+rjWdf/Gga+AvbKCMddRt6XhAX HSqAdlxNidX+r4BM+sNAs6Ui9BEwv3m56FOaO1oJclAw/VywBa5h4DxMLSo6TBY4 QZgEVaaHZUXV8sC9hdRV/eaGwKLRY3orxUOqGGEOglv5peZyppI= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:46 2025 by rpki-client