This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: TERlXE++E1YRhYppQ1Vq8BTfeRQk53CuG9qKE9moPgQ= Subject key identifier: 65:AF:44:E0:7E:58:26:E8:2E:09:71:14:0F:89:F3:0E:C9:C2:37:31 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 5CE93A7E5B1AA85D8D3034E08EA3263726A9F37E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 034F Signing time: Mon 01 Dec 2025 22:31:37 +0000 Manifest this update: Mon 01 Dec 2025 22:26:37 +0000 Manifest next update: Fri 05 Dec 2025 02:06:37 +0000 Files and hashes: 1: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=) 3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: njd7R06AJnL49Gb4U5+m+XXMF9O7NEySWVuuACix3Wg=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e9:3a:7e:5b:1a:a8:5d:8d:30:34:e0:8e:a3:26:37:26:a9:f3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: Dec 1 22:26:37 2025 GMT Not After : Dec 5 02:06:37 2025 GMT Subject: CN=65AF44E07E5826E82E0971140F89F30EC9C23731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:e7:0c:db:f0:32:c9:53:a8:d1:a3:3e:7a: 1c:34:2f:ce:e4:38:a6:e6:6a:d6:ab:e5:3e:4a:23: 17:1a:3a:b1:de:9e:3e:3f:aa:1e:8b:39:86:5c:99: 8e:b9:fe:3e:11:4d:ae:a7:18:a0:a4:9e:c4:f3:0d: cd:49:f6:09:e6:16:2a:3b:0d:90:8a:83:5c:ba:94: 8a:fa:c8:66:73:3b:4f:6b:0f:21:d6:ef:34:53:64: d6:df:12:bc:f6:fd:bc:f1:a2:4b:cc:78:fe:3e:56: 54:93:94:60:d9:34:d5:80:2b:ce:3b:80:2c:df:b3: d1:c9:88:20:d6:fd:2d:72:39:c7:ae:ba:5b:cb:6a: 33:04:c7:af:30:6a:c6:c3:a9:c4:35:11:64:98:65: 2e:5d:d5:2a:51:2c:23:c2:c6:cd:c0:99:38:82:0b: 69:98:4a:b4:4d:19:81:42:b6:2f:f9:78:54:83:36: 55:6f:3d:07:5b:1b:09:6b:ae:43:3a:0b:87:3a:83: 81:ff:75:35:55:a7:5c:ee:3a:b0:e0:71:20:13:8b: 47:6e:b9:1e:e4:93:88:8e:37:78:32:6d:d2:6e:dc: fd:e3:14:7a:41:07:55:e6:61:5d:a9:4c:24:da:2f: 08:ad:8d:c9:25:6a:96:40:48:81:a0:a9:e2:6d:af: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:44:E0:7E:58:26:E8:2E:09:71:14:0F:89:F3:0E:C9:C2:37:31 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:13:24:79:13:c6:7a:9a:da:4d:f9:94:83:b3:8d:45:7e:36: 0f:89:6d:ab:a2:1b:84:1c:1b:0d:b2:94:5a:38:cd:cf:f6:61: bd:b5:05:4a:84:64:9a:a9:f0:7f:27:c3:24:05:a8:b7:b4:fb: f7:fa:91:54:83:26:a8:23:f4:e6:ea:34:42:72:07:78:63:56: 26:44:0f:c2:f1:31:86:df:5a:d2:53:9a:d1:ad:e8:84:a5:08: 20:41:d5:2b:63:34:31:6a:1c:62:80:db:97:c6:8c:c3:83:b1: 73:f4:21:e7:34:4c:66:ad:8d:05:31:71:a4:80:d9:c1:e9:ad: e8:39:6a:28:b7:a9:0f:a8:3d:1b:a6:2c:23:2f:7f:68:c5:5b: 93:01:37:e1:11:e7:cd:7a:86:c4:51:d0:94:12:2d:9c:a0:f9: 7d:e9:44:8d:1c:f0:bf:aa:93:4d:0b:0f:75:0b:6f:95:0f:09: 99:48:6c:0e:bb:c8:10:0c:e2:16:6f:89:b3:ed:c4:e7:65:9b: 2c:c6:47:cb:3a:08:9f:2a:bb:21:61:9a:60:e0:4b:1d:10:0b: f3:95:5a:df:69:0a:65:b0:d2:17:56:df:2c:17:48:dd:14:d2: 77:0b:03:93:27:9f:d4:79:af:7e:55:4d:eb:ea:20:df:a4:e9: ea:8f:35:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOk6flsaqF2NMDTgjqMmNyap834wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNTEyMDEyMjI2MzdaFw0yNTEyMDUwMjA2MzdaMDMxMTAvBgNV BAMTKDY1QUY0NEUwN0U1ODI2RTgyRTA5NzExNDBGODlGMzBFQzlDMjM3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1N+cM2/AyyVOo0aM+ehw0L87k OKbmatar5T5KIxcaOrHenj4/qh6LOYZcmY65/j4RTa6nGKCknsTzDc1J9gnmFio7 DZCKg1y6lIr6yGZzO09rDyHW7zRTZNbfErz2/bzxokvMeP4+VlSTlGDZNNWAK847 gCzfs9HJiCDW/S1yOceuulvLajMEx68wasbDqcQ1EWSYZS5d1SpRLCPCxs3AmTiC C2mYSrRNGYFCti/5eFSDNlVvPQdbGwlrrkM6C4c6g4H/dTVVp1zuOrDgcSATi0du uR7kk4iON3gybdJu3P3jFHpBB1XmYV2pTCTaLwitjcklapZASIGgqeJtr0+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZa9E4H5YJuguCXEUD4nzDsnCNzEwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4TJHkTxnqa2k35lIOzjUV+Ng+JbauiG4Qc Gw2ylFo4zc/2Yb21BUqEZJqp8H8nwyQFqLe0+/f6kVSDJqgj9ObqNEJyB3hjViZE D8LxMYbfWtJTmtGt6ISlCCBB1StjNDFqHGKA25fGjMODsXP0Iec0TGatjQUxcaSA 2cHpreg5aii3qQ+oPRumLCMvf2jFW5MBN+ER5816hsRR0JQSLZyg+X3pRI0c8L+q k00LD3ULb5UPCZlIbA67yBAM4hZvibPtxOdlmyzGR8s6CJ8quyFhmmDgSx0QC/OV Wt9pCmWw0hdW3ywXSN0U0ncLA5Mnn9R5r35VTevqIN+k6eqPNZE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:47:38 2025 by rpki-client