This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: sOe7VX16sI0Un0PiGT4moUIAX1+PyzytU23kPBAYWaY= Subject key identifier: AD:8C:7B:D8:50:F2:2D:53:9C:DF:71:A9:C5:C6:31:09:63:A3:A1:F9 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 4D1BD14694731C9DCE50045679567F6289840B6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01DE Signing time: Mon 01 Dec 2025 18:21:26 +0000 Manifest this update: Mon 01 Dec 2025 18:16:26 +0000 Manifest next update: Fri 05 Dec 2025 05:14:26 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: DiekDW4xSCtMobH4e6873EB5ToCCew+DU/ZX7MGArEc=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) 4: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 5: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1b:d1:46:94:73:1c:9d:ce:50:04:56:79:56:7f:62:89:84:0b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Dec 1 18:16:26 2025 GMT Not After : Dec 5 05:14:26 2025 GMT Subject: CN=AD8C7BD850F22D539CDF71A9C5C6310963A3A1F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:5e:01:29:ee:6d:ab:7a:a7:f9:f9:89:67: 2b:1f:7d:3f:5c:0f:0f:14:00:6a:9a:10:b4:b3:4d: a8:cc:90:05:d6:c8:2f:6b:51:3b:de:d2:27:cc:86: a1:fe:29:84:d9:58:c7:58:21:0f:46:b3:d0:1e:e2: af:64:f3:09:1f:25:4c:d1:15:9a:86:ff:93:9f:fa: 4f:a9:7d:69:30:df:b7:ad:73:bf:fa:9e:f1:84:1e: 53:6f:1b:bf:90:74:c1:3a:3c:63:6a:9f:4c:50:aa: 01:a2:ac:ef:c2:c1:f0:4d:0e:04:57:60:a8:b1:a0: 8f:b1:6b:78:fd:43:f7:59:4f:67:5f:ae:52:19:63: fb:42:ec:ab:07:29:75:53:27:2d:c1:ba:83:99:1b: a4:17:53:b2:a4:e7:d6:23:62:ae:25:d2:77:fe:6b: b1:af:ef:62:37:92:45:34:e4:6d:de:36:23:89:92: 64:6c:36:f4:d0:4d:b3:dd:bb:6f:c0:50:d4:ae:90: 28:a3:a4:0c:39:7c:ef:fe:18:61:ec:d5:8e:b0:a0: 7a:57:55:fe:89:8e:f6:e2:e3:14:69:2b:de:d4:65: fb:02:84:82:bd:07:3c:52:1a:c7:b3:33:4e:1c:a4: ef:5d:6d:a9:9b:61:91:b0:5b:0f:3f:b3:82:ac:43: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:7B:D8:50:F2:2D:53:9C:DF:71:A9:C5:C6:31:09:63:A3:A1:F9 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:7a:65:4f:17:a9:1f:48:aa:22:af:03:1d:47:72:47:a3: 7f:84:ee:1d:14:87:70:c0:15:12:3e:b8:92:f7:59:aa:46:41: 4f:71:b5:13:0e:a5:0b:39:97:c4:a9:85:1c:b5:b9:80:c9:3c: a4:b4:93:96:c4:e9:a5:38:db:3f:34:58:30:80:ed:40:bc:aa: 50:52:43:7d:8e:c1:84:ae:61:9d:e4:dc:1a:af:81:84:83:44: d4:96:30:98:56:d1:71:7d:8d:78:30:a6:bd:e3:45:ba:e4:da: ed:1b:b6:95:af:06:c1:db:ef:f7:3c:73:0b:b3:8d:06:06:5f: 74:4b:eb:ab:43:7c:11:0b:f6:4b:17:a3:7f:01:5d:fb:32:d3: 21:92:c1:4f:bd:0a:5e:8e:1b:87:8f:05:48:86:9f:d8:23:01: 70:55:d4:e0:e4:5c:c6:54:4f:a0:21:01:d4:ec:db:33:0e:d0: 85:cb:98:b3:04:65:72:3d:74:ed:87:eb:bc:73:b3:a3:e8:e1: c2:ad:ba:27:ec:fc:60:41:43:5c:35:14:dd:37:ec:cd:da:37: 37:a6:2c:3a:1b:1e:b8:84:16:77:c8:9b:56:cb:91:0f:1d:97: 39:20:1f:c8:f8:e0:76:e5:77:3d:2c:3e:72:68:bb:07:27:ec: 81:7f:d4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRvRRpRzHJ3OUARWeVZ/YomEC24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTEyMDExODE2MjZaFw0yNTEyMDUwNTE0MjZaMDMxMTAvBgNV BAMTKEFEOEM3QkQ4NTBGMjJENTM5Q0RGNzFBOUM1QzYzMTA5NjNBM0ExRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdF4BKe5tq3qn+fmJZysffT9c Dw8UAGqaELSzTajMkAXWyC9rUTve0ifMhqH+KYTZWMdYIQ9Gs9Ae4q9k8wkfJUzR FZqG/5Of+k+pfWkw37etc7/6nvGEHlNvG7+QdME6PGNqn0xQqgGirO/CwfBNDgRX YKixoI+xa3j9Q/dZT2dfrlIZY/tC7KsHKXVTJy3BuoOZG6QXU7Kk59YjYq4l0nf+ a7Gv72I3kkU05G3eNiOJkmRsNvTQTbPdu2/AUNSukCijpAw5fO/+GGHs1Y6woHpX Vf6Jjvbi4xRpK97UZfsChIK9BzxSGsezM04cpO9dbambYZGwWw8/s4KsQ8XnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYx72FDyLVOc33GpxcYxCWOjofkwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE2emVPF6kfSKoirwMdR3JHo3+E7h0Uh3DA FRI+uJL3WapGQU9xtRMOpQs5l8SphRy1uYDJPKS0k5bE6aU42z80WDCA7UC8qlBS Q32OwYSuYZ3k3BqvgYSDRNSWMJhW0XF9jXgwpr3jRbrk2u0btpWvBsHb7/c8cwuz jQYGX3RL66tDfBEL9ksXo38BXfsy0yGSwU+9Cl6OG4ePBUiGn9gjAXBV1ODkXMZU T6AhAdTs2zMO0IXLmLMEZXI9dO2H67xzs6Po4cKtuifs/GBBQ1w1FN037M3aNzem LDobHriEFnfIm1bLkQ8dlzkgH8j44Hbldz0sPnJouwcn7IF/1I0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:40 2025 by rpki-client