This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: JtnP+xD+e0gJzF+W2bYNmMAlCUOloAKxicLk4djPkdE= Subject key identifier: C6:D4:AF:35:FA:7F:CE:9E:BD:B3:80:2A:8C:02:56:13:16:F6:B7:90 Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 7D9112E407214E84AAC13E88112DF8CE3CF7B435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 022A Signing time: Tue 02 Dec 2025 05:00:42 +0000 Manifest this update: Tue 02 Dec 2025 04:55:42 +0000 Manifest next update: Fri 05 Dec 2025 05:29:42 +0000 Files and hashes: 1: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: 7uLepTUU3wIPCfSOoJzpaSbHAX1iNWrFwi2CU2JeiHA=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: n9faUnCbWhusYdCfxrnLNqDhxkXGrQrgv3xph9VpN8Y=) 3: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: ulCDIZmLd0HYWIWWJ/jpzCkeunifwX1+jqQhjZozW0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:91:12:e4:07:21:4e:84:aa:c1:3e:88:11:2d:f8:ce:3c:f7:b4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: Dec 2 04:55:42 2025 GMT Not After : Dec 5 05:29:42 2025 GMT Subject: CN=C6D4AF35FA7FCE9EBDB3802A8C02561316F6B790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:30:6b:e0:3e:49:d7:c9:83:27:f2:67:cc: d0:4f:56:92:28:e9:9b:cd:7e:4c:b0:58:f9:ae:24: a1:64:d2:78:9a:0d:6c:80:24:fc:8a:30:f0:2c:c4: 4d:f7:98:dd:9d:9a:1d:f6:62:0b:11:fa:98:59:af: cf:41:99:01:25:92:3c:03:17:1c:27:c0:57:5d:28: f6:31:f8:73:91:94:f4:e5:ba:0f:ab:cd:5c:68:e1: 5b:06:97:61:98:2c:27:cf:8a:62:ee:a3:da:66:eb: 94:3a:b6:fd:b4:8f:5f:f9:ad:cf:5a:7a:fc:40:11: 45:b7:be:a7:7a:79:cd:11:75:3d:36:f8:1e:e1:e3: 04:0a:79:48:3f:bc:91:75:a5:59:0d:3f:25:02:ba: 9a:87:c9:fd:c7:65:c9:7a:23:3f:7e:e8:83:f4:1e: 4b:de:ac:3d:54:95:4f:b4:ad:4d:6d:43:32:8b:e8: ec:4d:28:25:b3:ec:c4:4c:94:77:ad:7b:bf:0f:53: 40:97:1f:d8:6c:3e:2e:1e:67:38:02:c6:9d:11:0f: 8b:77:60:85:9a:d2:74:15:57:68:ae:66:29:2a:61: d5:9c:3c:72:d1:05:6a:97:4d:54:68:f7:7b:75:e6: 5d:5a:52:7a:e4:65:09:9f:60:15:fd:72:13:1e:67: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:AF:35:FA:7F:CE:9E:BD:B3:80:2A:8C:02:56:13:16:F6:B7:90 X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ff:d9:f7:51:2b:5d:9e:e4:3b:83:23:65:3d:d1:0a:fc:44: 45:fb:7c:83:f2:cf:40:e0:fc:23:b9:9a:96:d3:1e:ed:49:80: c7:2c:27:59:95:90:a1:dd:bf:69:6a:0b:45:b0:30:26:be:18: fb:32:76:3a:52:c7:58:4c:55:2b:3d:6c:5a:ef:39:fe:16:22: d7:72:b6:bd:fb:9e:7c:f7:36:a3:94:06:06:e1:60:40:05:57: b8:88:05:3c:00:47:92:77:59:66:67:1a:f3:82:98:b3:77:a3: f2:be:12:2b:e7:5a:e5:a6:3f:63:ab:79:65:ea:1a:03:07:4b: 70:41:a0:b4:62:2e:65:a3:03:30:b4:b5:f3:59:cf:69:46:fd: 49:91:46:ac:41:66:13:59:f9:f2:1c:f6:53:c1:23:64:68:3f: c9:de:2f:84:ec:b4:33:37:c7:3c:cd:b4:36:80:33:5e:99:eb: 00:41:dc:ac:00:d7:9e:da:cd:e2:9c:20:d4:5a:7a:60:04:d1: b0:95:97:d2:36:b5:24:9f:f9:4d:cd:d9:41:a6:85:3c:5b:f3: 83:12:93:53:71:0a:a4:8c:2c:aa:ed:aa:5f:2e:bc:0b:df:62: c8:d0:67:9e:e4:d5:99:53:47:ff:02:67:06:c5:d7:b2:33:85: a6:41:58:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZES5AchToSqwT6IES34zjz3tDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNTEyMDIwNDU1NDJaFw0yNTEyMDUwNTI5NDJaMDMxMTAvBgNV BAMTKEM2RDRBRjM1RkE3RkNFOUVCREIzODAyQThDMDI1NjEzMTZGNkI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNzBr4D5J18mDJ/JnzNBPVpIo 6ZvNfkywWPmuJKFk0niaDWyAJPyKMPAsxE33mN2dmh32YgsR+phZr89BmQElkjwD FxwnwFddKPYx+HORlPTlug+rzVxo4VsGl2GYLCfPimLuo9pm65Q6tv20j1/5rc9a evxAEUW3vqd6ec0RdT02+B7h4wQKeUg/vJF1pVkNPyUCupqHyf3HZcl6Iz9+6IP0 HkverD1UlU+0rU1tQzKL6OxNKCWz7MRMlHete78PU0CXH9hsPi4eZzgCxp0RD4t3 YIWa0nQVV2iuZikqYdWcPHLRBWqXTVRo93t15l1aUnrkZQmfYBX9chMeZ0l/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtSvNfp/zp69s4AqjAJWExb2t5AwHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT/2fdRK12e5DuDI2U90Qr8REX7fIPyz0Dg /CO5mpbTHu1JgMcsJ1mVkKHdv2lqC0WwMCa+GPsydjpSx1hMVSs9bFrvOf4WItdy tr37nnz3NqOUBgbhYEAFV7iIBTwAR5J3WWZnGvOCmLN3o/K+EivnWuWmP2OreWXq GgMHS3BBoLRiLmWjAzC0tfNZz2lG/UmRRqxBZhNZ+fIc9lPBI2RoP8neL4TstDM3 xzzNtDaAM16Z6wBB3KwA157azeKcINRaemAE0bCVl9I2tSSf+U3N2UGmhTxb84MS k1NxCqSMLKrtql8uvAvfYsjQZ57k1ZlTR/8CZwbF17IzhaZBWJM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:35:28 2025 by rpki-client