This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: IiYmf4uCV7OR+/kXVCrksxAySLdlm7jHMtgzJlPlB+w= Subject key identifier: 9E:4E:D5:25:B4:53:22:21:D3:30:14:C1:50:62:FF:C8:25:3D:20:57 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 74E42D3544F6F15C61B17FA86BAD753BFA495B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01FE Signing time: Mon 01 Dec 2025 13:52:31 +0000 Manifest this update: Mon 01 Dec 2025 13:47:31 +0000 Manifest next update: Thu 04 Dec 2025 18:02:31 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) 2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 3: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: k+K+RVjPToP+qjH0aSkFySS4LiEe8pCD+mvil1lUbaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e4:2d:35:44:f6:f1:5c:61:b1:7f:a8:6b:ad:75:3b:fa:49:5b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Dec 1 13:47:31 2025 GMT Not After : Dec 4 18:02:31 2025 GMT Subject: CN=9E4ED525B4532221D33014C15062FFC8253D2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1b:da:e0:16:12:44:e8:e1:aa:5e:e8:51:fd: d6:52:dd:48:05:00:96:cb:2f:de:cc:e9:9d:d0:62: e3:bf:b0:a7:42:63:8f:22:90:57:fc:52:61:22:ef: fe:41:e1:dc:55:7e:10:5c:de:62:13:17:99:d6:a5: 1e:48:af:4e:85:f3:99:16:28:c8:80:ef:4c:e9:c7: ab:a2:6f:a9:dd:46:d5:16:c5:5a:0e:5b:ad:e5:a5: 41:d4:37:de:c0:76:9c:07:b0:27:fa:e7:6e:7e:cc: 80:b4:01:4e:72:aa:f3:c8:56:57:4a:b0:55:5b:fb: 9f:a4:be:50:6a:df:7e:76:dc:ad:a5:21:ae:96:84: 42:91:44:c8:e2:61:0c:a0:cc:ab:04:65:d7:49:71: ff:55:53:5d:3c:7b:6f:cc:26:fb:21:c6:6f:80:3d: 4f:4e:fd:f7:8d:82:4c:16:98:cd:5d:bd:c6:a1:be: 16:ed:f8:dc:e7:8f:49:47:13:80:40:a4:dc:ec:f4: 89:aa:65:f5:cb:33:4f:f2:1d:4e:d3:ce:02:06:33: 7a:97:6a:76:95:3c:0b:82:93:62:a1:f4:31:d2:9c: ed:1c:96:3e:cb:cb:4f:b6:44:6f:22:6f:4f:bf:70: 73:27:1a:90:4f:ef:11:89:68:1e:fa:8f:56:20:ea: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4E:D5:25:B4:53:22:21:D3:30:14:C1:50:62:FF:C8:25:3D:20:57 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:50:97:8c:19:35:68:cb:2c:4d:c9:39:a9:b9:9d:ca:fe:06: ac:5e:f0:cd:8f:f7:c6:cb:a8:73:a8:33:24:0e:79:27:a7:0e: 66:d6:ac:c9:bb:c8:7b:13:cf:9b:df:15:d0:eb:74:a7:7a:d7: 5e:39:d9:c9:f2:eb:e5:d3:67:f5:51:b6:e4:96:4a:ed:da:20: e2:3c:9b:97:d9:2b:96:fe:ab:15:42:88:c1:b0:60:f3:3c:0f: 62:c9:c7:f0:38:e6:9d:4c:2b:0b:45:e3:40:5f:3d:67:d3:50: 42:9d:0c:60:65:ae:6e:b3:8e:ec:72:b6:d3:1c:19:9e:31:f6: 1a:95:06:1f:81:91:0b:63:85:d8:58:11:91:65:f5:b3:d2:df: e1:7c:11:a1:55:0b:42:f6:8b:3e:ed:b2:2d:71:4f:4d:86:bd: 4c:b6:ac:0e:c7:4f:f6:ad:b6:c8:69:b9:4d:f4:4e:85:05:63: 11:c1:35:bb:fe:26:58:ee:3e:10:b1:ba:f9:72:e4:0f:61:b1: a0:27:6d:22:90:dd:9d:0d:8c:d1:1b:d4:61:03:e8:fa:28:4a: d2:bb:53:d3:c8:34:a3:6d:ed:9a:23:ec:81:24:91:0c:52:80: 89:52:36:4a:f9:86:1c:e7:26:44:78:9d:be:8c:c6:18:a7:0b: 5b:6b:58:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOQtNUT28VxhsX+oa611O/pJW4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTEyMDExMzQ3MzFaFw0yNTEyMDQxODAyMzFaMDMxMTAvBgNV BAMTKDlFNEVENTI1QjQ1MzIyMjFEMzMwMTRDMTUwNjJGRkM4MjUzRDIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwG9rgFhJE6OGqXuhR/dZS3UgF AJbLL97M6Z3QYuO/sKdCY48ikFf8UmEi7/5B4dxVfhBc3mITF5nWpR5Ir06F85kW KMiA70zpx6uib6ndRtUWxVoOW63lpUHUN97AdpwHsCf6525+zIC0AU5yqvPIVldK sFVb+5+kvlBq33523K2lIa6WhEKRRMjiYQygzKsEZddJcf9VU108e2/MJvshxm+A PU9O/feNgkwWmM1dvcahvhbt+Nznj0lHE4BApNzs9ImqZfXLM0/yHU7TzgIGM3qX anaVPAuCk2Kh9DHSnO0clj7Ly0+2RG8ib0+/cHMnGpBP7xGJaB76j1Yg6mX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnk7VJbRTIiHTMBTBUGL/yCU9IFcwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1Ql4wZNWjLLE3JOam5ncr+Bqxe8M2P98bL qHOoMyQOeSenDmbWrMm7yHsTz5vfFdDrdKd611452cny6+XTZ/VRtuSWSu3aIOI8 m5fZK5b+qxVCiMGwYPM8D2LJx/A45p1MKwtF40BfPWfTUEKdDGBlrm6zjuxyttMc GZ4x9hqVBh+BkQtjhdhYEZFl9bPS3+F8EaFVC0L2iz7tsi1xT02GvUy2rA7HT/at tshpuU30ToUFYxHBNbv+JljuPhCxuvly5A9hsaAnbSKQ3Z0NjNEb1GED6PooStK7 U9PINKNt7Zoj7IEkkQxSgIlSNkr5hhznJkR4nb6MxhinC1trWBM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:29 2025 by rpki-client