This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: XRzV0tH54tf+Vrv5CZyGisBNGvxYOC928BviaFlRqmo= Subject key identifier: B7:84:5C:3B:FE:67:5F:DA:94:68:3C:DC:07:3B:E2:07:BC:B3:72:15 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 2E49159A82375799BAAD60D0C9A60902DE4955B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 022C Signing time: Tue 02 Dec 2025 21:30:54 +0000 Manifest this update: Tue 02 Dec 2025 21:25:54 +0000 Manifest next update: Sat 06 Dec 2025 07:51:54 +0000 Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) 2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 3: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: iDeEYENtDWp5T3/Tkj+vwBanfzR/t3PqVJyNEKQKGDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:49:15:9a:82:37:57:99:ba:ad:60:d0:c9:a6:09:02:de:49:55:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Dec 2 21:25:54 2025 GMT Not After : Dec 6 07:51:54 2025 GMT Subject: CN=B7845C3BFE675FDA94683CDC073BE207BCB37215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:2a:c0:eb:bf:1c:d1:45:fb:9c:f1:dc:46: 2d:13:18:77:ae:b0:09:1c:1d:4d:56:66:ac:7a:a9: 56:f4:da:bf:96:16:f6:bb:73:af:b9:d1:5f:42:84: 2c:c4:d2:c5:e7:09:c9:50:2b:7d:94:c1:a7:c4:66: f2:88:e3:02:b8:64:33:e9:b2:f2:65:ac:40:ef:a8: 7a:27:d2:49:b5:75:ff:e5:f2:24:08:2d:42:ba:66: e3:d7:40:bc:01:9d:f4:ac:6c:52:b3:ff:4d:ed:3d: 4f:16:6c:a7:43:4b:87:58:65:41:88:a8:70:30:5b: 7c:c6:8b:4b:30:f7:a8:be:11:52:34:1f:3e:dd:d6: 4f:46:fa:a3:45:41:ae:c6:18:ef:7d:a4:e1:fd:87: 40:f1:57:87:de:5c:69:85:15:15:7d:81:f0:6e:7d: 00:eb:eb:31:9f:9f:0d:c3:b6:a0:73:26:92:3d:ff: a9:f0:92:68:1b:ef:1b:f5:ad:83:3c:51:f8:53:36: 0f:02:40:8e:98:bc:25:a0:86:ec:eb:0a:f9:21:0c: 40:07:11:22:db:70:79:89:ec:c2:85:bc:21:fc:05: 5b:63:aa:ca:a3:79:d9:37:fb:af:86:b8:27:05:ec: e8:aa:b0:a0:f0:f6:c4:d4:34:8b:f5:97:34:65:3a: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:84:5C:3B:FE:67:5F:DA:94:68:3C:DC:07:3B:E2:07:BC:B3:72:15 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a0:c2:68:c0:8d:81:10:15:46:1e:cc:62:ad:cd:1d:a9:b1: 31:a0:0d:2e:0c:7c:2a:bb:ba:a3:be:74:d8:b1:42:48:8b:3b: 3e:37:e3:7d:8c:58:2a:1e:29:f7:89:2e:e8:15:c3:03:9e:fa: dc:c4:55:46:33:8d:90:9b:fe:82:6d:90:20:de:9a:d3:f4:1d: 26:50:77:4b:41:f8:e2:4d:81:71:ae:71:bd:9f:da:88:fc:64: 95:a5:eb:6c:b8:f8:b7:ea:f8:34:98:28:e0:36:ac:dd:dc:cf: 2a:cb:e5:7d:1c:0d:9f:11:16:8c:98:d4:04:e2:5c:ee:66:a4: 00:36:d3:46:3f:49:7e:91:30:7f:a7:0c:39:37:71:45:c1:55: 6c:aa:44:0a:8e:60:c9:95:cf:81:69:47:18:8a:9f:75:54:cd: a7:e7:6d:8a:04:e2:d4:25:80:3c:b4:e0:04:30:9d:06:5d:98: 68:0a:3e:24:b3:1a:99:43:df:d2:f3:0a:de:e2:70:6f:3a:b2: 3e:61:6f:2a:e7:0b:c6:2e:d8:3d:2e:d8:da:f3:03:a8:50:ea: 4b:dc:9c:a2:cd:73:4f:b0:4c:db:8b:f7:d4:f8:76:f9:40:0e: c2:b2:30:9b:81:61:3d:3b:81:f4:15:01:6f:45:42:37:61:38: 4b:fe:d2:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkkVmoI3V5m6rWDQyaYJAt5JVbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTEyMDIyMTI1NTRaFw0yNTEyMDYwNzUxNTRaMDMxMTAvBgNV BAMTKEI3ODQ1QzNCRkU2NzVGREE5NDY4M0NEQzA3M0JFMjA3QkNCMzcyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEyrA678c0UX7nPHcRi0TGHeu sAkcHU1WZqx6qVb02r+WFva7c6+50V9ChCzE0sXnCclQK32UwafEZvKI4wK4ZDPp svJlrEDvqHon0km1df/l8iQILUK6ZuPXQLwBnfSsbFKz/03tPU8WbKdDS4dYZUGI qHAwW3zGi0sw96i+EVI0Hz7d1k9G+qNFQa7GGO99pOH9h0DxV4feXGmFFRV9gfBu fQDr6zGfnw3DtqBzJpI9/6nwkmgb7xv1rYM8UfhTNg8CQI6YvCWghuzrCvkhDEAH ESLbcHmJ7MKFvCH8BVtjqsqjedk3+6+GuCcF7OiqsKDw9sTUNIv1lzRlOu83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4RcO/5nX9qUaDzcBzviB7yzchUwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGigwmjAjYEQFUYezGKtzR2psTGgDS4MfCq7 uqO+dNixQkiLOz43432MWCoeKfeJLugVwwOe+tzEVUYzjZCb/oJtkCDemtP0HSZQ d0tB+OJNgXGucb2f2oj8ZJWl62y4+Lfq+DSYKOA2rN3czyrL5X0cDZ8RFoyY1ATi XO5mpAA200Y/SX6RMH+nDDk3cUXBVWyqRAqOYMmVz4FpRxiKn3VUzafnbYoE4tQl gDy04AQwnQZdmGgKPiSzGplD39LzCt7icG86sj5hbyrnC8Yu2D0u2NrzA6hQ6kvc nKLNc0+wTNuL99T4dvlADsKyMJuBYT07gfQVAW9FQjdhOEv+0oA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:09 2025 by rpki-client