This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: DMtTo5tlTYIC+hiqUPUdo8EkJqUJPddv063nAivp3+Y= Subject key identifier: 4A:C7:DA:2D:6D:76:F9:D8:46:E2:5E:AE:E4:F7:8E:87:CB:08:8E:35 Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 14F1AD957609AA12D95E3D202FBDF977C2DB53CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 04BF Signing time: Wed 03 Dec 2025 12:01:23 +0000 Manifest this update: Wed 03 Dec 2025 11:56:23 +0000 Manifest next update: Sat 06 Dec 2025 15:03:23 +0000 Files and hashes: 1: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: +ZkSQ/5VkA3H+B/kRjFDbg5CCfz0xfcVJJsYejDEhdk=) 2: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) 3: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) 4: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f1:ad:95:76:09:aa:12:d9:5e:3d:20:2f:bd:f9:77:c2:db:53:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Dec 3 11:56:23 2025 GMT Not After : Dec 6 15:03:23 2025 GMT Subject: CN=4AC7DA2D6D76F9D846E25EAEE4F78E87CB088E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:6e:16:cf:fa:03:58:c2:2b:b3:06:5c:b8: 6d:c1:29:3d:08:c0:b3:fb:57:7a:71:fc:32:16:71: 70:96:33:a9:45:b7:0e:f7:cf:44:57:25:60:9d:4c: 22:a3:65:8b:7c:af:ac:9e:26:1e:45:a7:8d:e7:4d: a8:30:0a:a7:1c:15:68:93:78:5a:b6:a6:55:08:1d: 41:38:85:55:19:69:8a:52:53:84:28:e2:57:c6:6a: d6:82:c9:0d:96:fd:bf:a9:44:b6:27:2b:10:dc:ad: 15:a4:e4:5e:ee:78:32:55:43:38:30:30:94:81:3f: fa:81:7c:21:df:32:49:84:25:e4:98:28:c3:36:1a: 54:19:07:39:ca:75:a5:ac:31:36:95:72:e2:7f:67: fd:de:03:d6:72:74:3d:9a:71:3f:9e:f5:64:53:39: 43:b9:8e:31:61:10:c2:88:bf:10:91:e8:b8:4d:79: 33:68:2a:70:fb:a1:fa:55:67:f2:d3:5c:a9:17:1c: c8:25:2b:b6:18:dd:11:74:3b:51:4a:12:de:6b:4b: 5b:2e:07:c8:84:2e:ab:12:3c:32:14:dc:b7:c9:a3: ef:40:89:79:80:26:c4:db:21:ef:bb:a7:80:65:c4: 72:14:35:70:7f:b4:93:3f:3e:43:59:35:8c:f3:ee: 7e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:DA:2D:6D:76:F9:D8:46:E2:5E:AE:E4:F7:8E:87:CB:08:8E:35 X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:09:a9:00:87:3f:bc:b8:62:5e:d4:f6:d2:31:d3:f0:1e: 79:58:72:bf:9a:a9:5a:56:78:75:d3:cc:be:13:3e:a8:fa:4e: f2:21:11:4e:f6:6d:48:40:ec:6e:14:d5:52:8f:73:dc:9d:00: 2d:76:d0:29:c5:c2:16:53:b6:ad:ee:3c:16:ff:9b:e2:59:25: 45:af:cc:92:d0:e6:ec:4f:dd:9a:cb:f0:12:59:a0:45:70:a3: cd:2c:70:88:f8:de:71:3f:c5:e6:63:23:e6:e2:9b:eb:a3:dc: 46:3c:a8:4c:eb:b2:c9:9b:c9:b0:bc:00:5f:79:e1:ca:59:7c: cc:23:67:5b:4a:65:0f:72:ae:c2:b2:a4:ca:48:e2:fb:82:bc: 14:5f:d1:c9:13:be:e8:a7:76:0e:cf:7a:e0:71:45:8e:77:6e: 58:88:d6:7c:4a:ba:c7:84:84:8a:7d:82:3a:df:8b:82:1d:0a: 30:a0:f0:78:6f:f7:81:63:7e:74:4d:61:fb:5b:22:c0:8a:d8: 25:00:a8:40:c5:6f:4a:3a:16:a1:98:40:21:a4:51:ad:84:13: f1:a7:ae:ed:5c:ee:1f:66:c9:7d:af:13:37:10:76:e3:31:49: a9:1e:ae:c4:24:c7:65:26:f1:a8:8b:19:fa:e7:19:02:fe:19: 3d:42:7b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPGtlXYJqhLZXj0gL735d8LbU8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNTEyMDMxMTU2MjNaFw0yNTEyMDYxNTAzMjNaMDMxMTAvBgNV BAMTKDRBQzdEQTJENkQ3NkY5RDg0NkUyNUVBRUU0Rjc4RTg3Q0IwODhFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Jm4Wz/oDWMIrswZcuG3BKT0I wLP7V3px/DIWcXCWM6lFtw73z0RXJWCdTCKjZYt8r6yeJh5Fp43nTagwCqccFWiT eFq2plUIHUE4hVUZaYpSU4Qo4lfGataCyQ2W/b+pRLYnKxDcrRWk5F7ueDJVQzgw MJSBP/qBfCHfMkmEJeSYKMM2GlQZBznKdaWsMTaVcuJ/Z/3eA9ZydD2acT+e9WRT OUO5jjFhEMKIvxCR6LhNeTNoKnD7ofpVZ/LTXKkXHMglK7YY3RF0O1FKEt5rS1su B8iELqsSPDIU3LfJo+9AiXmAJsTbIe+7p4BlxHIUNXB/tJM/PkNZNYzz7n7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsfaLW12+dhG4l6u5PeOh8sIjjUwHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsuCakAhz+8uGJe1PbSMdPwHnlYcr+aqVpW eHXTzL4TPqj6TvIhEU72bUhA7G4U1VKPc9ydAC120CnFwhZTtq3uPBb/m+JZJUWv zJLQ5uxP3ZrL8BJZoEVwo80scIj43nE/xeZjI+bim+uj3EY8qEzrssmbybC8AF95 4cpZfMwjZ1tKZQ9yrsKypMpI4vuCvBRf0ckTvuindg7PeuBxRY53bliI1nxKuseE hIp9gjrfi4IdCjCg8Hhv94FjfnRNYftbIsCK2CUAqEDFb0o6FqGYQCGkUa2EE/Gn ru1c7h9myX2vEzcQduMxSakersQkx2Um8aiLGfrnGQL+GT1CewA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:09 2025 by rpki-client