This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: 9YvISFJclPAdFqhVt71UUxmwBtWLpTYlEqdUlkiLqZQ= Subject key identifier: CA:80:AE:E2:7F:8B:FE:52:FE:23:D4:4F:75:6D:D1:A1:53:9C:E7:E4 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 2BC8BE1A84EA4F1C53AD78D1C0A6866FDCCCD8F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01F6 Signing time: Tue 02 Dec 2025 16:31:41 +0000 Manifest this update: Tue 02 Dec 2025 16:26:41 +0000 Manifest next update: Fri 05 Dec 2025 16:34:41 +0000 Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: KZmBt7BUjWEsKqyDlaSZNuY6m8CYbNTltjuME2dj3u0=) 2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c8:be:1a:84:ea:4f:1c:53:ad:78:d1:c0:a6:86:6f:dc:cc:d8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Dec 2 16:26:41 2025 GMT Not After : Dec 5 16:34:41 2025 GMT Subject: CN=CA80AEE27F8BFE52FE23D44F756DD1A1539CE7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:5a:01:b5:06:df:a9:df:bc:11:94:4c:cc: fe:8d:62:62:a9:08:91:61:07:9f:d5:91:fb:c9:24: 0a:d8:71:91:4f:08:a5:c1:e4:14:ec:84:97:52:e2: a3:45:9e:5c:6d:4c:03:f6:7e:84:0e:36:0e:61:e0: a9:ac:5c:ad:27:5d:32:93:75:29:cd:0d:24:1e:8e: d0:e5:0a:20:74:5f:20:c9:4b:0b:de:3e:a2:82:a6: 0d:6a:4f:ac:4b:18:f7:2b:bf:ac:73:9c:9a:1b:3c: c6:35:a5:b8:37:fb:46:f7:c5:14:a2:92:32:fa:5e: a2:76:0a:6b:f4:3b:9c:c1:90:a3:81:f3:96:33:cd: b8:f5:76:5c:dd:c9:d3:af:1c:39:8e:cd:2f:94:47: b8:9e:01:6a:bd:a4:3e:84:c3:84:fd:5d:90:c3:62: 14:54:9c:3d:d5:f1:de:c5:31:89:79:9a:49:68:21: 76:d4:5f:cc:01:4c:d1:b8:7a:3a:12:66:98:01:f5: d4:32:7c:c9:bf:31:35:a3:63:10:7e:8e:1f:17:9f: ad:2a:dd:e1:ac:22:3d:c1:dc:30:0c:62:5d:e4:be: 76:4d:9c:f0:c0:6c:30:bf:b6:77:c0:d9:8c:f8:64: 9d:12:9a:50:53:7b:1c:e8:e9:c3:9e:8b:08:4c:87: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:AE:E2:7F:8B:FE:52:FE:23:D4:4F:75:6D:D1:A1:53:9C:E7:E4 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:29:5d:96:3f:c6:c2:73:83:2c:37:11:82:0b:cb:de:b9:57: d9:d8:85:b7:3e:a5:66:a4:72:99:9b:34:88:e0:7d:19:f5:0d: ba:a8:95:a4:f7:09:06:ce:13:42:5c:c5:02:f1:9c:83:e2:30: aa:b7:03:cb:97:01:8e:0a:c9:1d:d8:1d:6d:52:23:7d:1f:92: b7:4e:c5:d9:6c:ff:ed:5e:72:18:32:fe:7e:44:25:15:d2:84: c0:29:c4:c3:ae:77:d4:95:85:ee:e9:84:cd:9f:c3:98:42:32: 17:24:3c:2b:61:35:15:9c:2d:fb:86:fe:76:36:ab:3d:73:fc: ab:9a:73:8b:ce:fd:57:30:4a:03:52:50:89:65:6a:fc:9c:07: dd:55:f7:76:36:e1:e2:70:6a:af:a5:f5:21:1a:1a:84:99:e0: 20:7a:2d:43:54:17:0a:52:b4:31:fe:25:3d:01:0b:61:31:f8: 88:54:4e:9e:f6:b7:a7:7c:41:e7:c7:98:19:78:2c:68:41:7f: 4b:d5:0c:a2:91:fc:96:90:9f:5f:83:5d:79:26:15:b7:13:bc: 91:60:9c:d4:0a:b4:29:51:54:ea:16:f6:1a:2f:a4:54:4e:55: c0:0a:85:43:45:c2:aa:69:e5:8a:70:46:ca:3f:48:94:b5:d3: 03:b8:73:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8i+GoTqTxxTrXjRwKaGb9zM2PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTEyMDIxNjI2NDFaFw0yNTEyMDUxNjM0NDFaMDMxMTAvBgNV BAMTKENBODBBRUUyN0Y4QkZFNTJGRTIzRDQ0Rjc1NkREMUExNTM5Q0U3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YVoBtQbfqd+8EZRMzP6NYmKp CJFhB5/VkfvJJArYcZFPCKXB5BTshJdS4qNFnlxtTAP2foQONg5h4KmsXK0nXTKT dSnNDSQejtDlCiB0XyDJSwvePqKCpg1qT6xLGPcrv6xznJobPMY1pbg3+0b3xRSi kjL6XqJ2Cmv0O5zBkKOB85Yzzbj1dlzdydOvHDmOzS+UR7ieAWq9pD6Ew4T9XZDD YhRUnD3V8d7FMYl5mkloIXbUX8wBTNG4ejoSZpgB9dQyfMm/MTWjYxB+jh8Xn60q 3eGsIj3B3DAMYl3kvnZNnPDAbDC/tnfA2Yz4ZJ0SmlBTexzo6cOeiwhMh/F9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyoCu4n+L/lL+I9RPdW3RoVOc5+QwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQpXZY/xsJzgyw3EYILy965V9nYhbc+pWak cpmbNIjgfRn1DbqolaT3CQbOE0JcxQLxnIPiMKq3A8uXAY4KyR3YHW1SI30fkrdO xdls/+1echgy/n5EJRXShMApxMOud9SVhe7phM2fw5hCMhckPCthNRWcLfuG/nY2 qz1z/Kuac4vO/VcwSgNSUIllavycB91V93Y24eJwaq+l9SEaGoSZ4CB6LUNUFwpS tDH+JT0BC2Ex+IhUTp72t6d8QefHmBl4LGhBf0vVDKKR/JaQn1+DXXkmFbcTvJFg nNQKtClRVOoW9hovpFROVcAKhUNFwqpp5YpwRso/SJS10wO4c9s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:36 2025 by rpki-client