This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: A4U5SwpNdnR+m5aSLntRxBCmWb52lLbHlBnLMQRTqYQ= Subject key identifier: E0:E1:D2:CD:1F:6F:52:6F:B6:F3:16:F3:1B:2C:96:0E:02:38:C2:95 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 5A1EC5AE8BA4048E39678D906A31131E7A518956 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04FB Signing time: Mon 01 Dec 2025 16:22:23 +0000 Manifest this update: Mon 01 Dec 2025 16:17:23 +0000 Manifest next update: Fri 05 Dec 2025 00:53:23 +0000 Files and hashes: 1: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) 2: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 3: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: sZ7Y9HidNwNbLqaWtw5ljbRqMh/n0NpDyP/tNJF266g=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 6: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: SvCd0nS82uo3Ypqw6NsM1h6250Iktc7eo6ieXF63d18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1e:c5:ae:8b:a4:04:8e:39:67:8d:90:6a:31:13:1e:7a:51:89:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Dec 1 16:17:23 2025 GMT Not After : Dec 5 00:53:23 2025 GMT Subject: CN=E0E1D2CD1F6F526FB6F316F31B2C960E0238C295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:7a:05:fd:ac:a3:1d:78:1a:5a:85:13:17: d6:18:f8:91:61:d8:98:01:d3:0b:8b:a6:d7:69:0d: 12:86:45:b1:fa:ad:c8:0d:47:26:29:e4:24:58:9a: 0a:f8:71:ae:0d:7d:c3:e3:ba:73:7a:74:36:70:6c: 5a:63:a6:d2:4b:af:c7:25:d9:24:e9:a2:74:9b:0e: be:bd:cb:47:f2:3d:d4:0e:24:d2:cb:a8:66:1b:c4: 0b:58:15:60:79:fe:84:76:ec:8a:9b:9c:fd:78:68: 8f:12:c5:00:a8:11:73:ff:16:c8:af:92:98:70:a3: 6c:73:92:23:7a:43:1e:31:48:ec:0a:a7:60:fb:6b: 1a:d4:53:7a:2a:6b:cc:7f:5f:f4:e6:f0:f6:9d:e6: ad:b5:9e:e9:79:62:cd:ad:99:90:b0:d3:51:b5:c3: 46:dc:57:54:93:cc:21:f4:a0:c8:4c:ee:c1:b4:45: 65:04:79:6d:50:56:60:b4:80:77:80:99:fb:ee:cc: 56:ff:05:5b:60:9d:cd:da:3d:33:6d:02:47:44:c3: 6a:b1:f2:25:e2:b6:b2:0f:d5:fc:1e:3a:ed:b3:90: ef:02:ed:b3:9a:36:89:0f:d7:e4:47:87:6a:48:e6: 9b:73:55:93:c5:50:2a:6c:63:e5:07:d6:74:f0:e1: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:D2:CD:1F:6F:52:6F:B6:F3:16:F3:1B:2C:96:0E:02:38:C2:95 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:7b:aa:ee:46:ea:57:d2:33:7c:73:24:3b:ed:6e:6f:b6:68: 85:2d:78:53:56:35:7a:6a:ef:e7:99:0e:c5:ab:ed:dc:08:1c: 9a:a1:f4:b3:69:00:85:2f:91:17:50:09:68:c3:b7:9e:3e:23: bc:41:b8:74:c4:9c:61:4c:96:70:70:68:ba:ff:b7:c3:43:2b: 2b:2b:71:cb:07:27:ea:1a:3f:ac:70:e2:2d:eb:4b:10:1a:0d: b1:7f:79:c3:30:c6:c7:d9:8c:98:74:ca:b0:ae:0a:0f:77:4a: 91:62:80:ed:77:c1:c6:7c:9d:7b:29:0f:45:08:f4:0f:6f:b5: e3:ef:59:3f:12:9f:d9:81:f9:2d:a3:2e:1f:cc:15:85:9c:80: 4e:d7:4d:d4:95:25:80:9d:4d:f6:80:31:f1:11:0f:3a:69:ba: 2b:07:c5:b6:75:22:81:f5:9b:4e:8f:1d:43:e9:26:6a:0a:13: 5d:09:58:ce:2c:71:f8:29:53:9c:07:8b:53:cd:a2:a0:0f:81: f8:a0:0c:93:fc:d5:a6:a3:17:4c:a1:6f:3e:ef:af:a2:bc:fa: fa:70:d8:67:fd:ef:0f:89:72:39:0b:02:03:d4:1c:ee:3d:55: 9f:70:b0:27:00:0e:e9:21:cb:3e:a8:de:f6:fd:c9:4f:49:37: e4:e4:65:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWh7FroukBI45Z42QajETHnpRiVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTEyMDExNjE3MjNaFw0yNTEyMDUwMDUzMjNaMDMxMTAvBgNV BAMTKEUwRTFEMkNEMUY2RjUyNkZCNkYzMTZGMzFCMkM5NjBFMDIzOEMyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/noF/ayjHXgaWoUTF9YY+JFh 2JgB0wuLptdpDRKGRbH6rcgNRyYp5CRYmgr4ca4NfcPjunN6dDZwbFpjptJLr8cl 2STponSbDr69y0fyPdQOJNLLqGYbxAtYFWB5/oR27IqbnP14aI8SxQCoEXP/Fsiv kphwo2xzkiN6Qx4xSOwKp2D7axrUU3oqa8x/X/Tm8Pad5q21nul5Ys2tmZCw01G1 w0bcV1STzCH0oMhM7sG0RWUEeW1QVmC0gHeAmfvuzFb/BVtgnc3aPTNtAkdEw2qx 8iXitrIP1fweOu2zkO8C7bOaNokP1+RHh2pI5ptzVZPFUCpsY+UH1nTw4WghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OHSzR9vUm+28xbzGyyWDgI4wpUwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALx7qu5G6lfSM3xzJDvtbm+2aIUteFNWNXpq 7+eZDsWr7dwIHJqh9LNpAIUvkRdQCWjDt54+I7xBuHTEnGFMlnBwaLr/t8NDKysr ccsHJ+oaP6xw4i3rSxAaDbF/ecMwxsfZjJh0yrCuCg93SpFigO13wcZ8nXspD0UI 9A9vtePvWT8Sn9mB+S2jLh/MFYWcgE7XTdSVJYCdTfaAMfERDzppuisHxbZ1IoH1 m06PHUPpJmoKE10JWM4scfgpU5wHi1PNoqAPgfigDJP81aajF0yhbz7vr6K8+vpw 2Gf97w+JcjkLAgPUHO49VZ9wsCcADukhyz6o3vb9yU9JN+TkZfw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:35 2025 by rpki-client