This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: oxoaVad//0zwXDdBvBmhYjFptLeG8K0SXZ8GV/C69LM= Subject key identifier: 0D:1D:FC:DB:2F:3E:F4:89:B6:95:A4:E9:10:ED:55:92:38:4E:8A:C8 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 6CE276267D630C362C75A58264A5A0480B587832 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 023E Signing time: Sat 06 Dec 2025 21:42:05 +0000 Manifest this update: Sat 06 Dec 2025 21:37:05 +0000 Manifest next update: Wed 10 Dec 2025 07:02:05 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: LyQ/LoSwjDG9HV+fAWHpiVqP31AxwlOoWjnTcE1JGtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e2:76:26:7d:63:0c:36:2c:75:a5:82:64:a5:a0:48:0b:58:78:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Dec 6 21:37:05 2025 GMT Not After : Dec 10 07:02:05 2025 GMT Subject: CN=0D1DFCDB2F3EF489B695A4E910ED5592384E8AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:ac:e9:e9:99:71:e5:58:b2:f4:28:0a:f6: 38:e8:f2:7d:02:3c:01:27:ca:45:60:d9:09:ca:9e: 1e:f8:53:95:e5:a9:0e:f7:47:a4:a0:65:25:29:fb: 6e:9f:43:c1:f1:eb:57:2c:14:a6:b5:2b:36:b1:e0: a3:11:05:62:d0:fb:34:ea:8e:3f:ff:1c:19:c7:f4: 9b:c4:52:bf:e4:88:a8:80:21:7c:b8:01:29:72:42: de:21:f0:dc:9b:a8:19:fa:20:45:da:4d:b5:24:dd: 7a:ca:d0:3c:37:c5:47:c5:5b:29:92:f7:a6:02:2d: 42:35:55:ca:a4:0b:27:a4:52:d8:02:18:63:5c:2a: 23:a9:44:f1:f8:c2:a0:ba:06:00:aa:0e:45:c0:72: eb:05:c3:a9:ae:1e:ea:60:ce:d2:74:88:cc:6c:20: f1:15:7e:c0:34:74:eb:0c:83:26:d2:a8:0a:f8:78: 51:17:b7:8d:cf:5d:b8:fd:d3:63:f7:77:26:15:74: d1:31:8f:05:17:bb:ae:8a:dd:71:f3:f9:87:a7:e3: 67:8c:d1:2c:38:e4:cb:2c:42:f1:ff:09:16:c5:8b: 46:d7:ea:5c:80:3d:ee:41:d1:cb:b3:f1:50:b2:eb: 9d:8d:f2:ac:26:64:e0:5a:14:2b:d5:83:eb:3d:36: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:FC:DB:2F:3E:F4:89:B6:95:A4:E9:10:ED:55:92:38:4E:8A:C8 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:24:4d:1e:21:27:79:a8:ce:63:da:96:32:02:8d:49:c5:62: 41:87:a0:38:6c:23:dc:52:e4:7a:0b:02:18:f2:3c:c5:f0:53: f0:e8:b5:8c:94:ef:5b:a6:f7:71:a7:1a:c1:16:04:13:01:3f: 09:46:55:45:9e:8b:5d:7e:42:ba:ad:0f:4b:bd:0d:aa:d7:44: 67:cd:34:b0:7a:0c:3c:05:07:8f:81:42:b5:94:7d:53:4a:c9: 57:83:af:a5:44:1a:bf:1e:76:00:8c:6d:50:d4:a2:54:60:c0: e6:0e:f0:2e:51:6a:17:03:9d:15:00:50:65:73:86:d5:b9:56: 35:26:51:25:85:67:d6:49:39:4f:da:07:19:9f:68:d3:e3:77: eb:3d:9b:25:b9:a4:de:8b:e7:14:ae:95:91:36:d6:03:f6:99: ad:da:bf:e4:58:4c:4a:12:85:93:37:30:90:47:03:f1:47:a0: 43:77:3b:54:83:83:30:dc:59:c7:1e:75:56:99:69:78:af:82: 36:91:7a:01:0b:c8:82:6e:48:ef:1b:44:cb:ef:d0:e7:80:d9: 3f:06:b5:07:5d:6d:7e:0c:eb:7e:0b:9f:4b:82:51:61:3d:9a: f0:4f:38:cb:ba:a2:fe:42:45:32:35:18:59:ad:bb:9f:e8:bc: 75:a6:bb:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOJ2Jn1jDDYsdaWCZKWgSAtYeDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTEyMDYyMTM3MDVaFw0yNTEyMTAwNzAyMDVaMDMxMTAvBgNV BAMTKDBEMURGQ0RCMkYzRUY0ODlCNjk1QTRFOTEwRUQ1NTkyMzg0RThBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI6zp6Zlx5Viy9CgK9jjo8n0C PAEnykVg2QnKnh74U5XlqQ73R6SgZSUp+26fQ8Hx61csFKa1Kzax4KMRBWLQ+zTq jj//HBnH9JvEUr/kiKiAIXy4ASlyQt4h8NybqBn6IEXaTbUk3XrK0Dw3xUfFWymS 96YCLUI1VcqkCyekUtgCGGNcKiOpRPH4wqC6BgCqDkXAcusFw6muHupgztJ0iMxs IPEVfsA0dOsMgybSqAr4eFEXt43PXbj902P3dyYVdNExjwUXu66K3XHz+Yen42eM 0Sw45MssQvH/CRbFi0bX6lyAPe5B0cuz8VCy652N8qwmZOBaFCvVg+s9NqiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDR382y8+9Im2laTpEO1VkjhOisgwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgkTR4hJ3mozmPaljICjUnFYkGHoDhsI9xS 5HoLAhjyPMXwU/DotYyU71um93GnGsEWBBMBPwlGVUWei11+QrqtD0u9DarXRGfN NLB6DDwFB4+BQrWUfVNKyVeDr6VEGr8edgCMbVDUolRgwOYO8C5RahcDnRUAUGVz htW5VjUmUSWFZ9ZJOU/aBxmfaNPjd+s9myW5pN6L5xSulZE21gP2ma3av+RYTEoS hZM3MJBHA/FHoEN3O1SDgzDcWccedVaZaXivgjaRegELyIJuSO8bRMvv0OeA2T8G tQddbX4M634Ln0uCUWE9mvBPOMu6ov5CRTI1GFmtu5/ovHWmuxY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:27 2025 by rpki-client