This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: SPqDAR1uQN4a0DLXQi2RkN6uAtqpQZZz6G5+7e5LlI8= Subject key identifier: 85:22:34:45:C1:30:A5:22:F7:B2:D6:81:77:48:E5:E5:B0:83:24:51 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 5CDFEDD2EE328878D39272C1EB074438AB27FC93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: F9 Signing time: Wed 03 Dec 2025 09:31:31 +0000 Manifest this update: Wed 03 Dec 2025 09:26:31 +0000 Manifest next update: Sat 06 Dec 2025 20:01:31 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: pgUNKg5nN7EHlOIqv2sAaSckkjftG8w33bX95hRl96I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:df:ed:d2:ee:32:88:78:d3:92:72:c1:eb:07:44:38:ab:27:fc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Dec 3 09:26:31 2025 GMT Not After : Dec 6 20:01:31 2025 GMT Subject: CN=85223445C130A522F7B2D6817748E5E5B0832451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:fa:e8:9b:ca:66:30:0f:e4:e9:f4:7e:09: ff:ae:96:1c:91:7c:e3:8f:86:8f:69:c6:90:63:2a: 41:8e:68:61:c2:01:bb:f2:b1:e1:de:0b:ef:a3:3f: 72:fd:4a:e8:df:e5:f4:17:63:14:3d:a8:8c:61:3e: 44:9e:17:46:5c:ff:2b:0b:b0:ca:8b:d8:67:64:cb: 5d:ed:f4:19:fc:d8:16:c9:be:fd:9b:72:37:d5:a2: 0c:5a:b4:e0:97:63:66:ff:20:f9:ff:81:b6:6d:3e: f7:2d:23:c8:a5:80:8b:ba:99:46:1e:29:00:a3:0e: 5e:e1:8a:f5:6a:ba:9b:c6:b4:59:ce:86:e9:59:2b: af:db:39:8f:63:e3:c3:87:f7:9a:09:f7:44:60:86: 39:3a:c4:e0:a9:55:f1:50:9e:6d:47:0b:8a:c2:bb: 80:a7:41:e9:81:76:0c:4a:b2:09:5c:71:89:36:16: 08:da:0b:64:24:4c:16:01:9b:8d:10:85:b1:5a:cf: cb:c5:4c:58:3d:09:2f:39:05:72:90:a8:5f:ce:f0: 7a:dd:cc:be:db:4a:7d:1d:b0:d6:cf:c4:2c:b3:55: 0b:a7:8d:17:5e:68:c8:7e:05:98:62:46:0b:c8:08: 57:66:44:3b:87:6a:7c:58:9f:2a:4a:e3:44:dc:c9: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:34:45:C1:30:A5:22:F7:B2:D6:81:77:48:E5:E5:B0:83:24:51 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:dc:25:12:9c:7d:8e:43:4f:3f:2a:9a:cb:df:1e:90:99:c6: 71:c0:8c:80:56:f8:51:e4:99:76:47:68:1d:57:f2:a4:b2:b9: 1b:61:85:93:f5:c6:92:26:11:34:2a:59:d2:d3:c5:04:30:de: 58:b3:1f:21:b3:d9:c5:e3:49:99:bd:f2:8d:48:74:c2:3a:cc: 92:45:9b:a9:7c:88:89:db:84:8c:e0:17:45:88:15:d4:0e:72: 00:90:0d:2d:2a:f1:38:c5:db:27:7f:2d:e6:9c:bf:ba:d5:93: 79:54:ee:66:4f:eb:9f:01:b8:62:75:70:e9:9a:29:2f:5d:bf: 41:e9:30:04:c9:e7:bd:25:1e:a2:b5:40:70:f7:13:de:cc:28: 9d:44:08:c3:95:1a:67:9e:98:b7:ae:3f:ea:10:cb:35:b5:4b: 77:52:a8:0b:2f:4a:a0:30:79:82:df:d7:33:e1:fd:49:55:5e: 77:93:e1:3f:3b:23:68:32:37:8d:36:21:3b:c1:18:bd:64:9f: 1e:66:8c:34:d8:b0:99:19:96:9e:b5:1e:e5:d7:6f:5e:e7:90: 54:66:c1:3e:ee:45:48:19:57:22:32:41:22:81:6e:ad:23:ca: da:8d:90:a4:eb:aa:8b:ac:19:d6:63:c6:57:41:73:1a:94:d5: 13:e7:93:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN/t0u4yiHjTknLB6wdEOKsn/JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNTEyMDMwOTI2MzFaFw0yNTEyMDYyMDAxMzFaMDMxMTAvBgNV BAMTKDg1MjIzNDQ1QzEzMEE1MjJGN0IyRDY4MTc3NDhFNUU1QjA4MzI0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyProm8pmMA/k6fR+Cf+ulhyR fOOPho9pxpBjKkGOaGHCAbvyseHeC++jP3L9Sujf5fQXYxQ9qIxhPkSeF0Zc/ysL sMqL2Gdky13t9Bn82BbJvv2bcjfVogxatOCXY2b/IPn/gbZtPvctI8ilgIu6mUYe KQCjDl7hivVqupvGtFnOhulZK6/bOY9j48OH95oJ90Rghjk6xOCpVfFQnm1HC4rC u4CnQemBdgxKsglccYk2FgjaC2QkTBYBm40QhbFaz8vFTFg9CS85BXKQqF/O8Hrd zL7bSn0dsNbPxCyzVQunjRdeaMh+BZhiRgvICFdmRDuHanxYnypK40TcyflZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSI0RcEwpSL3staBd0jl5bCDJFEwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/cJRKcfY5DTz8qmsvfHpCZxnHAjIBW+FHk mXZHaB1X8qSyuRthhZP1xpImETQqWdLTxQQw3lizHyGz2cXjSZm98o1IdMI6zJJF m6l8iInbhIzgF0WIFdQOcgCQDS0q8TjF2yd/Leacv7rVk3lU7mZP658BuGJ1cOma KS9dv0HpMATJ570lHqK1QHD3E97MKJ1ECMOVGmeemLeuP+oQyzW1S3dSqAsvSqAw eYLf1zPh/UlVXneT4T87I2gyN402ITvBGL1knx5mjDTYsJkZlp61HuXXb17nkFRm wT7uRUgZVyIyQSKBbq0jytqNkKTrqousGdZjxldBcxqU1RPnk50= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:53 2025 by rpki-client