This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft File: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft (raw, json) Hash identifier: PxLqSHYfTmNkQXHw1Em2QG78uS+RKajdfvlWDJAK6UY= Subject key identifier: 9E:4A:E8:BF:A4:63:43:3D:BD:29:79:EA:0A:95:0D:22:F4:F6:CD:D5 Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 Certificate issuer: /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Certificate serial: 0684C4F474F656A0E79C7043344A92119BE39543 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft Manifest number: 01C2 Signing time: Wed 03 Dec 2025 05:12:09 +0000 Manifest this update: Wed 03 Dec 2025 05:07:09 +0000 Manifest next update: Sat 06 Dec 2025 09:48:09 +0000 Files and hashes: 1: 065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl (hash: T3Izr/LtpP+d8TVTSL1BYWktvA5Rc6pivOPJiv0/WIc=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: 4cos8zRNic3burKBIecuEZ8HkONfIkWVKTfqYR7ZnNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:84:c4:f4:74:f6:56:a0:e7:9c:70:43:34:4a:92:11:9b:e3:95:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43 Validity Not Before: Dec 3 05:07:09 2025 GMT Not After : Dec 6 09:48:09 2025 GMT Subject: CN=9E4AE8BFA463433DBD2979EA0A950D22F4F6CDD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:7b:3f:74:3c:76:27:a7:f9:40:01:4a:2b: 8a:35:1c:7e:29:c7:96:c3:63:e2:6e:43:35:67:72: 81:5e:25:c8:8d:ef:48:bc:93:d7:27:05:b6:fe:d1: df:db:40:90:4d:0f:8f:ad:5c:98:46:34:45:02:8d: 35:5f:39:e0:b3:f9:a4:e7:01:a1:68:80:29:7e:2d: e4:b3:c9:3e:8d:6a:d9:e1:ad:2e:75:45:b1:11:f0: 51:a4:2d:47:ff:19:ab:f3:20:c2:56:87:8c:87:fa: 90:0b:ea:10:1a:7e:0f:0e:e7:ba:cb:42:c6:0b:47: 09:d9:d3:5c:d8:dd:41:71:29:18:33:ec:df:dd:25: b3:45:ad:8c:f3:92:f3:89:bc:e6:92:12:1b:a2:e5: 4f:57:20:33:c6:b2:74:b0:d2:9f:0b:68:98:93:cd: bd:51:f5:79:e5:21:61:04:e1:e8:1d:ce:0b:ad:1f: b5:f8:3c:d6:85:eb:eb:d2:30:d9:0a:ab:99:04:b7: 10:de:13:58:e8:42:1f:df:94:42:b4:73:83:52:c0: 64:7c:1e:52:83:01:e7:eb:e3:42:9f:3b:14:04:cb: 94:19:f6:8d:29:05:44:8a:8b:ef:d0:73:00:1b:4b: 8a:30:d9:31:9a:cd:b1:4c:aa:68:26:26:93:50:ec: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4A:E8:BF:A4:63:43:3D:BD:29:79:EA:0A:95:0D:22:F4:F6:CD:D5 X509v3 Authority Key Identifier: keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9f:6c:8a:b5:51:57:61:0e:4d:f7:8f:0a:bd:a8:c0:4f:54: 01:52:83:0e:b3:e4:b9:0d:0c:57:4d:44:0d:6d:6b:1c:02:f5: e3:6f:2d:00:54:b6:df:cc:e1:fc:17:3d:74:43:0c:c6:25:c1: a8:f8:33:9c:5f:53:5e:55:72:b7:30:9e:e0:76:bc:2f:f9:09: 7c:b1:d3:4d:54:5e:89:4b:6a:21:70:f6:6c:6d:35:64:94:c9: 8e:90:6c:ef:f5:a1:3e:44:24:5f:cb:89:9c:79:3d:d1:8c:51: 86:2a:7f:31:52:ef:fc:e6:b8:73:6d:ad:f7:21:bd:c3:c1:a6: 1d:1b:6b:3a:29:28:35:cf:df:bd:dd:a9:bb:e4:a3:7a:ae:d8: 15:13:08:1f:f0:34:f6:81:05:e2:59:33:26:81:46:43:b2:84: 56:10:87:70:65:c5:6c:be:e9:48:0f:41:2c:ee:ee:db:3b:84: e5:4e:e6:2e:cd:6b:1c:99:0d:81:ca:38:e5:be:d3:b7:b8:d7: 64:ba:f2:93:df:28:b5:22:00:aa:b8:25:72:8a:eb:a3:d8:45: d4:a8:79:25:1c:53:1e:db:e0:bd:9b:79:05:2b:65:de:f5:d2: cc:82:bb:c2:05:d3:ca:42:8d:07:86:96:9d:df:37:3c:39:fa: 47:2d:58:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoTE9HT2VqDnnHBDNEqSEZvjlUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5 MzY0NEU0MzAeFw0yNTEyMDMwNTA3MDlaFw0yNTEyMDYwOTQ4MDlaMDMxMTAvBgNV BAMTKDlFNEFFOEJGQTQ2MzQzM0RCRDI5NzlFQTBBOTUwRDIyRjRGNkNERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZHs/dDx2J6f5QAFKK4o1HH4p x5bDY+JuQzVncoFeJciN70i8k9cnBbb+0d/bQJBND4+tXJhGNEUCjTVfOeCz+aTn AaFogCl+LeSzyT6NatnhrS51RbER8FGkLUf/GavzIMJWh4yH+pAL6hAafg8O57rL QsYLRwnZ01zY3UFxKRgz7N/dJbNFrYzzkvOJvOaSEhui5U9XIDPGsnSw0p8LaJiT zb1R9XnlIWEE4egdzgutH7X4PNaF6+vSMNkKq5kEtxDeE1joQh/flEK0c4NSwGR8 HlKDAefr40KfOxQEy5QZ9o0pBUSKi+/QcwAbS4ow2TGazbFMqmgmJpNQ7MgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnkrov6RjQz29KXnqCpUNIvT2zdUwHwYDVR0j BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0 NEU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThF MkM5MzY0NEU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSfbIq1UVdhDk33jwq9qMBPVAFSgw6z5LkN DFdNRA1taxwC9eNvLQBUtt/M4fwXPXRDDMYlwaj4M5xfU15VcrcwnuB2vC/5CXyx 001UXolLaiFw9mxtNWSUyY6QbO/1oT5EJF/LiZx5PdGMUYYqfzFS7/zmuHNtrfch vcPBph0bazopKDXP373dqbvko3qu2BUTCB/wNPaBBeJZMyaBRkOyhFYQh3BlxWy+ 6UgPQSzu7ts7hOVO5i7NaxyZDYHKOOW+07e412S68pPfKLUiAKq4JXKK66PYRdSo eSUcUx7b4L2beQUrZd710syCu8IF08pCjQeGlp3fNzw5+kctWBQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client