This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft File: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json) Hash identifier: poUnWjT/QdSVpCyLxjsMgNmn3dQ0i+l/eYK9Ab7e6aE= Subject key identifier: 02:60:29:3A:8B:59:17:4C:26:B4:42:BF:F6:5D:D6:59:14:AB:55:68 Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E Certificate issuer: /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Certificate serial: 3FF4C4B8D862DE6F271013E2FBCD38DFF3D64DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft Manifest number: 04A8 Signing time: Tue 02 Dec 2025 04:02:10 +0000 Manifest this update: Tue 02 Dec 2025 03:57:10 +0000 Manifest next update: Fri 05 Dec 2025 11:56:10 +0000 Files and hashes: 1: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: ov+g+5ENGXpMBTL+Q/xjQU3PPtJ4sqY5BXSIa+2B6PM=) 2: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f4:c4:b8:d8:62:de:6f:27:10:13:e2:fb:cd:38:df:f3:d6:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E Validity Not Before: Dec 2 03:57:10 2025 GMT Not After : Dec 5 11:56:10 2025 GMT Subject: CN=0260293A8B59174C26B442BFF65DD65914AB5568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:78:8a:6d:65:c8:d8:6b:57:00:11:f8:da: d9:94:40:0f:2d:91:41:01:1a:82:ff:6c:2a:04:79: 48:63:9a:a7:7c:84:64:6b:e0:68:52:51:d1:14:19: 07:d7:85:4f:80:e1:5c:8f:03:31:f5:7e:91:32:18: 8b:a6:55:80:7a:bd:6f:11:02:a6:04:50:ce:20:fb: 7f:64:3b:70:a2:1e:c1:10:4b:47:09:a3:ef:e2:34: be:58:bb:e4:24:c6:09:d1:2c:41:93:0c:9f:32:de: 12:d9:8e:8a:29:d5:48:8b:c3:d0:4d:3e:e2:c8:2a: 2a:f8:0c:34:08:76:05:87:f2:c9:df:18:68:54:85: 06:af:44:23:0d:80:76:a5:4b:6b:72:36:3e:e5:99: a5:0a:e7:2c:47:96:75:f4:8f:64:60:f1:19:b3:53: 31:97:40:ab:e6:67:ee:20:14:79:fe:cb:45:d3:61: 37:e3:ad:c3:89:bc:27:b6:5e:93:e3:2f:a7:47:3a: 43:22:22:ea:ff:0f:bd:41:22:2b:b8:7b:d9:0d:34: 1a:a9:f9:34:50:8d:c7:e4:2d:65:1f:ee:6c:e0:26: e9:fb:b0:f5:37:59:05:b6:2d:fe:c3:a4:6d:b4:c8: e6:b4:8c:53:fe:ce:d7:63:f2:b4:3f:2b:84:5a:89: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:29:3A:8B:59:17:4C:26:B4:42:BF:F6:5D:D6:59:14:AB:55:68 X509v3 Authority Key Identifier: keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:af:c3:f4:e3:b6:f5:fa:9d:c5:56:c1:e9:42:4b:86:b1:3c: c7:a0:c7:56:34:26:cf:60:34:14:f8:56:70:98:df:b3:e2:36: 27:e0:be:ae:31:05:3c:c6:d1:00:b9:cc:61:a8:4a:b9:d5:29: 2c:ef:2d:15:c0:b2:d8:10:9a:0f:79:06:69:ca:92:86:a1:9e: 59:de:43:41:24:af:74:15:aa:0b:4e:65:1e:88:24:63:1b:f8: b5:b0:32:26:6e:06:3f:3b:1d:2c:66:4a:2e:89:aa:09:d3:27: b2:8b:14:bf:fc:fb:0f:ce:e5:3d:73:5b:4b:0f:3e:9f:05:f8: 8a:4e:c3:c6:99:2a:d4:43:56:85:2d:25:69:5f:25:6a:b1:d8: cc:85:4c:f9:9b:41:75:5e:3e:b6:1c:0e:bb:a3:ef:32:82:12: 37:9a:b4:3a:29:86:09:e5:68:78:69:e1:7d:fd:d9:c9:53:3d: 8b:6c:1b:a3:dc:32:d5:0d:a5:96:29:3f:4f:e5:c3:ec:20:9a: 28:ba:e7:4c:00:84:5f:3c:5e:7b:c3:e4:86:00:0b:8f:5f:71: 7b:a9:26:56:74:d0:27:37:24:3e:8b:ae:fa:43:51:05:f6:5d: 23:ee:2a:11:aa:d0:ba:99:82:ad:65:5b:af:44:cf:61:f1:e7: fd:ff:de:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/TEuNhi3m8nEBPi+8043/PWTfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1 MkZDNDgwRTAeFw0yNTEyMDIwMzU3MTBaFw0yNTEyMDUxMTU2MTBaMDMxMTAvBgNV BAMTKDAyNjAyOTNBOEI1OTE3NEMyNkI0NDJCRkY2NURENjU5MTRBQjU1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5niKbWXI2GtXABH42tmUQA8t kUEBGoL/bCoEeUhjmqd8hGRr4GhSUdEUGQfXhU+A4VyPAzH1fpEyGIumVYB6vW8R AqYEUM4g+39kO3CiHsEQS0cJo+/iNL5Yu+QkxgnRLEGTDJ8y3hLZjoop1UiLw9BN PuLIKir4DDQIdgWH8snfGGhUhQavRCMNgHalS2tyNj7lmaUK5yxHlnX0j2Rg8Rmz UzGXQKvmZ+4gFHn+y0XTYTfjrcOJvCe2XpPjL6dHOkMiIur/D71BIiu4e9kNNBqp +TRQjcfkLWUf7mzgJun7sPU3WQW2Lf7DpG20yOa0jFP+ztdj8rQ/K4RaiUzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmApOotZF0wmtEK/9l3WWRSrVWgwHwYDVR0j BBgwFoAUYsNbmtkctbalL00o8sX3slL8SA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjdiMTFjMi1hYjkwLTQyMGYtYjQ5Yy0zY2MzMzJlYjdkNjQvMC82MkMzNUI5QUQ5 MUNCNUI2QTUyRjREMjhGMkM1RjdCMjUyRkM0ODBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3QjI1MkZD NDgwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI3YjExYzItYWI5MC00MjBmLWI0 OWMtM2NjMzMyZWI3ZDY0LzAvNjJDMzVCOUFEOTFDQjVCNkE1MkY0RDI4RjJDNUY3 QjI1MkZDNDgwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmvw/TjtvX6ncVWwelCS4axPMegx1Y0Js9g NBT4VnCY37PiNifgvq4xBTzG0QC5zGGoSrnVKSzvLRXAstgQmg95BmnKkoahnlne Q0Ekr3QVqgtOZR6IJGMb+LWwMiZuBj87HSxmSi6JqgnTJ7KLFL/8+w/O5T1zW0sP Pp8F+IpOw8aZKtRDVoUtJWlfJWqx2MyFTPmbQXVePrYcDruj7zKCEjeatDophgnl aHhp4X392clTPYtsG6PcMtUNpZYpP0/lw+wgmii650wAhF88XnvD5IYAC49fcXup JlZ00Cc3JD6LrvpDUQX2XSPuKhGq0LqZgq1lW69Ez2Hx5/3/3sE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:06 2025 by rpki-client