This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json) Hash identifier: To9fIimo8mOtSuqMmWTUP7HtdHihYBZ6i4tbKkK7XAg= Subject key identifier: C0:08:7F:9E:A7:DA:D4:81:E3:62:1C:71:79:24:35:86:32:A0:B3:C7 Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0 Certificate serial: 3FE139B7BA78FB2BD0387D707FAB153D590E262D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft Manifest number: 0230 Signing time: Thu 11 Dec 2025 23:02:00 +0000 Manifest this update: Thu 11 Dec 2025 22:57:00 +0000 Manifest next update: Mon 15 Dec 2025 09:30:00 +0000 Files and hashes: 1: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: Z65LlbGCFaSuKUjoPv6nSpyOmBX4yDOKpKHx2P90KqU=) 2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=) 3: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 09:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e1:39:b7:ba:78:fb:2b:d0:38:7d:70:7f:ab:15:3d:59:0e:26:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0 Validity Not Before: Dec 11 22:57:00 2025 GMT Not After : Dec 15 09:30:00 2025 GMT Subject: CN=C0087F9EA7DAD481E3621C717924358632A0B3C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:fb:52:a6:14:d6:cf:9d:24:dd:33:86:f6: 73:fc:7f:32:d6:eb:1b:79:1e:ce:ae:ae:af:5c:2d: f2:fa:84:7c:33:44:c9:89:48:d3:77:e7:22:cf:89: 9b:e9:7d:a5:64:4d:a0:f6:a4:9b:f0:ad:de:90:a1: c4:a0:69:00:df:71:41:9f:b4:10:95:ed:0a:e1:4a: 34:45:13:dc:8a:a8:5f:11:51:66:24:e0:91:ab:7a: 7e:67:ad:18:ab:4c:4f:5e:0f:a1:33:07:38:49:57: f3:91:a0:d0:54:96:5f:6b:cd:e1:05:69:75:3e:5f: 85:5e:25:f4:02:b3:82:bb:62:3f:d1:0c:54:48:90: a5:49:97:92:96:b8:3d:e6:4a:8e:77:44:d4:df:c7: 30:e2:1d:71:ef:de:30:4a:9e:91:d6:5f:c1:5b:c3: 90:fa:e3:43:e4:77:05:59:a5:fb:50:c7:c9:4f:33: db:44:ec:1b:43:76:f0:88:7b:a9:14:83:63:4c:9f: 92:7f:01:6e:1d:47:b4:28:76:40:7d:8d:fa:f3:14: c0:9c:8c:1d:77:10:be:be:0f:e1:be:eb:3a:6b:8b: e9:fe:91:a1:ce:45:93:fa:db:4e:df:22:79:6f:3b: 30:ba:08:2b:aa:1c:8c:2d:b7:2d:a2:4b:be:e4:a8: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:7F:9E:A7:DA:D4:81:E3:62:1C:71:79:24:35:86:32:A0:B3:C7 X509v3 Authority Key Identifier: keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bd:02:b9:10:26:30:0d:4f:2b:ff:2b:89:46:25:d9:46:3b: f3:98:5e:a6:36:de:8a:bd:6d:7f:b4:44:d5:e7:71:09:23:4a: da:6b:b2:88:d9:bb:a4:44:da:ab:94:22:22:da:ce:f6:28:17: b0:31:05:9e:d8:5b:49:8f:99:bd:d4:d0:dd:5b:9b:a4:08:93: ee:33:a6:d2:55:19:e3:a2:b6:b2:7f:2c:36:5f:61:2a:ee:4f: 17:10:77:ae:de:d2:8d:0a:34:42:f0:fb:d9:4c:28:e0:35:fe: 44:68:48:09:8f:5d:0b:56:2d:b1:a7:1e:c2:94:16:05:53:b8: 1f:6c:05:69:38:ed:95:50:88:eb:ec:d2:dc:b0:18:65:39:f1: 43:be:40:da:e5:eb:2e:93:7f:bf:33:f7:5f:52:5a:7b:b8:d1: 9a:68:70:59:f8:d9:ff:3e:b7:87:b1:c2:9f:5a:af:0d:b8:be: 78:c0:19:e4:42:3c:f6:18:9a:52:b1:f9:88:e5:7c:72:e6:57: 85:a5:e9:ca:77:1e:00:20:4a:d2:ba:5a:c4:3a:cf:98:d9:a4: 97:69:63:73:eb:48:99:0f:44:46:c4:13:a6:2a:2b:9e:32:87: 0d:a8:3e:cf:f7:5f:91:a1:f8:19:af:5d:0d:4c:e9:03:6d:5b: 23:9e:5f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+E5t7p4+yvQOH1wf6sVPVkOJi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4 RjIzOEFGMDAeFw0yNTEyMTEyMjU3MDBaFw0yNTEyMTUwOTMwMDBaMDMxMTAvBgNV BAMTKEMwMDg3RjlFQTdEQUQ0ODFFMzYyMUM3MTc5MjQzNTg2MzJBMEIzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BvtSphTWz50k3TOG9nP8fzLW 6xt5Hs6urq9cLfL6hHwzRMmJSNN35yLPiZvpfaVkTaD2pJvwrd6QocSgaQDfcUGf tBCV7QrhSjRFE9yKqF8RUWYk4JGren5nrRirTE9eD6EzBzhJV/ORoNBUll9rzeEF aXU+X4VeJfQCs4K7Yj/RDFRIkKVJl5KWuD3mSo53RNTfxzDiHXHv3jBKnpHWX8Fb w5D640PkdwVZpftQx8lPM9tE7BtDdvCIe6kUg2NMn5J/AW4dR7QodkB9jfrzFMCc jB13EL6+D+G+6zpri+n+kaHORZP6207fInlvOzC6CCuqHIwtty2iS77kqAJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwAh/nqfa1IHjYhxxeSQ1hjKgs8cwHwYDVR0j BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5 NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACu9ArkQJjANTyv/K4lGJdlGO/OYXqY23oq9 bX+0RNXncQkjStprsojZu6RE2quUIiLazvYoF7AxBZ7YW0mPmb3U0N1bm6QIk+4z ptJVGeOitrJ/LDZfYSruTxcQd67e0o0KNELw+9lMKOA1/kRoSAmPXQtWLbGnHsKU FgVTuB9sBWk47ZVQiOvs0tywGGU58UO+QNrl6y6Tf78z919SWnu40ZpocFn42f8+ t4exwp9arw24vnjAGeRCPPYYmlKx+YjlfHLmV4Wl6cp3HgAgStK6WsQ6z5jZpJdp Y3PrSJkPREbEE6YqK54yhw2oPs/3X5Gh+BmvXQ1M6QNtWyOeX7o= -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:33 2025 by rpki-client