This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: NTjyyooId31wAz+uIPjxcTAuirovjUgXbkTWAK+3VLE= Subject key identifier: 80:A5:06:31:31:AA:70:D8:BB:5F:B6:17:B7:29:C8:85:18:2B:9F:28 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 2ACB2EA769C8567A0683D1FA4F503BEDEDA24EFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 01C8 Signing time: Mon 01 Dec 2025 09:01:02 +0000 Manifest this update: Mon 01 Dec 2025 08:56:02 +0000 Manifest next update: Thu 04 Dec 2025 16:22:02 +0000 Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) 2: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: fuIbup3N4tdpbVlUecGJjH7JhKJQhCuoi4bTUAztFlc=) 3: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cb:2e:a7:69:c8:56:7a:06:83:d1:fa:4f:50:3b:ed:ed:a2:4e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Dec 1 08:56:02 2025 GMT Not After : Dec 4 16:22:02 2025 GMT Subject: CN=80A5063131AA70D8BB5FB617B729C885182B9F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:92:fe:18:e1:60:0a:64:44:8e:89:23:bb: 7c:54:25:01:0d:60:80:8a:a0:4f:93:53:16:e6:b1: 66:00:be:c1:22:fd:41:bd:d6:09:59:18:47:d3:5c: 6e:f4:e9:47:14:b4:ca:92:e5:df:8d:a2:ca:b1:db: fc:64:46:2e:1a:a5:6a:50:38:64:ef:1d:d3:ba:a0: f1:2f:89:14:17:e8:32:e6:73:cd:18:76:f9:d3:81: 15:d9:c5:a2:2c:f3:16:33:94:07:0d:71:f9:43:ca: be:45:e6:f8:4e:ed:99:5a:30:d4:d7:2d:ba:e7:88: 8b:fd:1e:ea:8a:89:c8:3b:f5:4b:ac:ca:5e:02:e7: 68:c9:33:61:c5:c3:cf:32:be:75:8d:5a:b4:cc:96: 6f:d2:f7:b7:c4:93:cb:26:fe:32:81:89:b5:56:91: 8a:12:8d:2b:5a:8a:b1:13:be:d5:ea:1d:05:74:62: f2:59:b6:2f:b5:b9:d1:7e:9f:6e:07:99:04:c5:be: 89:1e:fa:22:68:9b:9e:36:47:ae:8b:c0:b2:c3:6a: 82:b8:34:14:48:cb:0c:d4:6a:9a:4f:52:07:e7:e7: 54:d3:c6:a2:65:12:95:cb:09:ea:26:d1:54:e0:5e: ed:fa:6d:c0:7e:93:f0:a1:3d:9e:5c:3a:c5:ac:2d: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A5:06:31:31:AA:70:D8:BB:5F:B6:17:B7:29:C8:85:18:2B:9F:28 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3c:6d:66:db:bc:9f:99:12:4f:d3:10:7e:e2:3f:dc:8d:ad: e4:60:de:8d:8d:9b:d9:cb:3f:43:85:9f:7e:90:6f:58:af:94: dc:b7:73:e1:10:3c:c5:1b:49:eb:43:af:cd:ab:34:71:ed:be: 3e:a6:4e:ff:fb:f8:1f:73:fe:03:9c:67:a2:f4:31:a4:ae:29: 9d:89:a5:f9:b9:ce:3b:c2:eb:51:ad:2d:af:3d:ab:12:c5:05: ab:9a:ed:7b:2b:5c:5e:59:9d:2e:68:2a:75:89:22:c0:ff:d9: c1:81:f1:43:a2:61:a9:c2:8b:5b:25:c6:8b:56:eb:55:15:5d: ad:8d:6d:7a:9e:3f:f2:8a:61:ff:18:2a:ed:c2:b5:f3:98:83: a9:e6:e5:9b:eb:37:13:92:69:87:2c:dc:57:4b:d2:57:aa:5d: 1e:0c:d5:d5:d8:62:e3:5c:c5:c7:0c:18:0b:57:b9:62:aa:11: 45:33:29:dc:3f:18:27:ff:42:33:69:ce:6d:d7:43:86:72:53: 66:60:03:95:78:59:27:18:de:3a:31:6a:f9:3c:b4:49:25:af: 8a:00:2d:3f:49:20:2e:91:c7:da:93:ac:bf:3d:35:f4:f4:32: 0b:31:42:19:eb:fa:4c:20:33:94:23:3f:7e:f2:2e:3b:08:0c: 48:74:eb:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKssup2nIVnoGg9H6T1A77e2iTv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTEyMDEwODU2MDJaFw0yNTEyMDQxNjIyMDJaMDMxMTAvBgNV BAMTKDgwQTUwNjMxMzFBQTcwRDhCQjVGQjYxN0I3MjlDODg1MTgyQjlGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1JL+GOFgCmREjokju3xUJQEN YICKoE+TUxbmsWYAvsEi/UG91glZGEfTXG706UcUtMqS5d+Nosqx2/xkRi4apWpQ OGTvHdO6oPEviRQX6DLmc80YdvnTgRXZxaIs8xYzlAcNcflDyr5F5vhO7ZlaMNTX LbrniIv9HuqKicg79Uusyl4C52jJM2HFw88yvnWNWrTMlm/S97fEk8sm/jKBibVW kYoSjStairETvtXqHQV0YvJZti+1udF+n24HmQTFvoke+iJom542R66LwLLDaoK4 NBRIywzUappPUgfn51TTxqJlEpXLCeom0VTgXu36bcB+k/ChPZ5cOsWsLSyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgKUGMTGqcNi7X7YXtynIhRgrnygwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ8bWbbvJ+ZEk/TEH7iP9yNreRg3o2Nm9nL P0OFn36Qb1ivlNy3c+EQPMUbSetDr82rNHHtvj6mTv/7+B9z/gOcZ6L0MaSuKZ2J pfm5zjvC61GtLa89qxLFBaua7XsrXF5ZnS5oKnWJIsD/2cGB8UOiYanCi1slxotW 61UVXa2NbXqeP/KKYf8YKu3CtfOYg6nm5ZvrNxOSaYcs3FdL0leqXR4M1dXYYuNc xccMGAtXuWKqEUUzKdw/GCf/QjNpzm3XQ4ZyU2ZgA5V4WScY3joxavk8tEklr4oA LT9JIC6Rx9qTrL89NfT0MgsxQhnr+kwgM5QjP37yLjsIDEh066Q= -----END CERTIFICATE-----Generated at Wed Dec 3 14:51:30 2025 by rpki-client