This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: tAn0CKFvbGoigoRTJhOZr9LAis3ddpyD++yVu8fCr8s= Subject key identifier: 69:C7:70:E7:12:21:6A:54:C5:B9:C5:15:8E:B9:1E:7B:D8:2B:3A:42 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 3B7D94B4F2F1AD40A60F20A96FE627BA83682C36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: 01E5 Signing time: Thu 18 Dec 2025 03:01:27 +0000 Manifest this update: Thu 18 Dec 2025 02:56:27 +0000 Manifest next update: Sun 21 Dec 2025 03:53:27 +0000 Files and hashes: 1: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: iDhsHzDkVNr/vSSmI9ZIctObh09TpaY2vp55/txIX4E=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: UCEf5IfiByEdUIC6IcuGAPdKBlU0kwuJEAxznX5A47w=) 3: 3130332e35382e3139382e302f32342d3234203d3e20313531353237.roa (hash: jJN+a1uyK5er9vytVlfqMqFHVNtiQSwDgGPE7xDkxVU=) 4: 3130332e35382e3139392e302f32342d3234203d3e20313531353237.roa (hash: dHvA0l4MoAsHbnDeUczCGz/tbqjQXH0AlY+9WKNokS8=) 5: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: 7IHy7S58PrSgI+9s9OhKwDaIOEZSZJD9pKdINBx6ktw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7d:94:b4:f2:f1:ad:40:a6:0f:20:a9:6f:e6:27:ba:83:68:2c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Dec 18 02:56:27 2025 GMT Not After : Dec 21 03:53:27 2025 GMT Subject: CN=69C770E712216A54C5B9C5158EB91E7BD82B3A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:3a:3f:ea:3d:bb:69:32:00:28:4d:d4:1a: ef:27:f5:94:f6:45:64:f5:4f:b9:39:86:f6:f3:98: 0e:fb:dd:a0:0a:5c:8e:f4:09:9f:b0:45:93:2b:aa: 46:31:ce:98:0d:48:35:34:03:e6:50:88:e9:cc:9a: 2c:63:35:b7:49:ba:c9:fa:a1:98:b5:51:fa:07:69: c5:93:c3:27:0b:08:68:0e:16:5f:b3:43:97:c0:8b: 3d:f5:34:dc:46:d1:7d:02:6d:a4:fc:35:bc:9a:a8: aa:ba:8d:ec:e7:8b:ba:37:25:d5:d7:39:72:c0:43: aa:d6:21:a6:73:ac:a5:13:a7:58:1f:ce:78:da:d1: da:4b:4e:dd:d0:25:ba:66:eb:72:ba:33:a0:e0:6b: 96:1b:7b:fd:59:58:85:37:ad:b0:2b:f0:88:24:a8: f3:8b:63:6d:bb:5e:b6:a4:21:45:a2:a8:eb:c4:38: b2:92:a8:72:d0:3c:a4:3f:71:20:f8:32:f8:79:e6: 51:34:d2:70:c3:24:6b:fb:e2:11:77:78:47:09:8b: 61:66:7f:d7:3f:96:28:4a:69:6a:64:95:b3:f0:65: 01:1b:ee:f7:e8:8a:6f:6a:1e:1a:c3:86:9c:9e:f1: 7f:c2:63:10:9f:1e:df:1b:73:23:5e:67:4c:32:0e: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C7:70:E7:12:21:6A:54:C5:B9:C5:15:8E:B9:1E:7B:D8:2B:3A:42 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f4:26:bf:e7:0d:bb:e2:21:87:97:50:ef:10:2a:d1:50:b1: 85:95:c3:0e:12:b6:b1:91:7b:b0:e1:70:be:f1:9c:90:95:9e: d4:05:2d:f1:af:9d:b1:d2:8e:76:b0:56:d8:71:c4:77:0d:d3: ae:11:34:a5:11:69:24:a4:31:69:62:06:c9:5d:1a:b9:71:c4: 48:65:ce:ce:86:6e:39:bd:45:25:fe:65:f7:8a:1e:04:97:89: b1:66:a3:07:69:63:09:d4:05:e3:ce:d5:f2:aa:af:bc:99:11: 0e:d4:7a:2b:05:4f:7a:ed:b8:3d:5d:7e:fc:d2:ed:ed:9f:d6: 04:25:38:73:a4:fa:f7:70:0c:ee:e0:ef:1a:32:a8:a8:d9:f0: ad:5b:d8:3c:34:55:c0:e7:21:ac:2a:e0:5a:c6:2e:ed:30:45: a8:e6:1d:59:fa:5d:1d:61:5e:dc:7f:0a:fc:c6:cf:43:da:c5: 9b:11:a7:ef:8b:fc:ad:65:70:99:f8:9d:55:ce:9a:53:dd:37: 14:1a:e6:bb:cc:84:c0:fc:39:ef:bc:6e:2a:1c:b0:81:83:e9: 15:fc:86:dc:10:4a:9f:5c:06:a0:ad:46:69:86:4d:7c:b4:43: c0:ae:ef:47:e2:2a:d2:6a:64:8a:8b:e9:79:14:f9:f1:41:cd: 04:1c:50:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO32UtPLxrUCmDyCpb+YnuoNoLDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNTEyMTgwMjU2MjdaFw0yNTEyMjEwMzUzMjdaMDMxMTAvBgNV BAMTKDY5Qzc3MEU3MTIyMTZBNTRDNUI5QzUxNThFQjkxRTdCRDgyQjNBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvjo/6j27aTIAKE3UGu8n9ZT2 RWT1T7k5hvbzmA773aAKXI70CZ+wRZMrqkYxzpgNSDU0A+ZQiOnMmixjNbdJusn6 oZi1UfoHacWTwycLCGgOFl+zQ5fAiz31NNxG0X0CbaT8NbyaqKq6jezni7o3JdXX OXLAQ6rWIaZzrKUTp1gfznja0dpLTt3QJbpm63K6M6Dga5Ybe/1ZWIU3rbAr8Igk qPOLY227XrakIUWiqOvEOLKSqHLQPKQ/cSD4Mvh55lE00nDDJGv74hF3eEcJi2Fm f9c/lihKaWpklbPwZQEb7vfoim9qHhrDhpye8X/CYxCfHt8bcyNeZ0wyDnZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacdw5xIhalTFucUVjrkee9grOkIwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn0Jr/nDbviIYeXUO8QKtFQsYWVww4StrGR e7DhcL7xnJCVntQFLfGvnbHSjnawVthxxHcN064RNKURaSSkMWliBsldGrlxxEhl zs6Gbjm9RSX+ZfeKHgSXibFmowdpYwnUBePO1fKqr7yZEQ7UeisFT3rtuD1dfvzS 7e2f1gQlOHOk+vdwDO7g7xoyqKjZ8K1b2Dw0VcDnIawq4FrGLu0wRajmHVn6XR1h Xtx/CvzGz0PaxZsRp++L/K1lcJn4nVXOmlPdNxQa5rvMhMD8Oe+8biocsIGD6RX8 htwQSp9cBqCtRmmGTXy0Q8Cu70fiKtJqZIqL6XkU+fFBzQQcUDI= -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:23 2025 by rpki-client