This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: WNMoDDE/nV4cGyoxztlBhD00Upn1fVvGcfIXxnct7m4= Subject key identifier: E3:DB:F3:C5:97:ED:38:0C:64:F1:55:EA:E7:39:A1:68:39:40:22:86 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 38B9C4240823E5613854AB8F44FCD0F20091B567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0235 Signing time: Sat 06 Dec 2025 20:51:37 +0000 Manifest this update: Sat 06 Dec 2025 20:46:37 +0000 Manifest next update: Tue 09 Dec 2025 22:03:37 +0000 Files and hashes: 1: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: SvvbkM7LzvK3Cb2gUHsZnj943IZ41ZNsIvlG6pglY/E=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) 4: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b9:c4:24:08:23:e5:61:38:54:ab:8f:44:fc:d0:f2:00:91:b5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Dec 6 20:46:37 2025 GMT Not After : Dec 9 22:03:37 2025 GMT Subject: CN=E3DBF3C597ED380C64F155EAE739A16839402286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:a5:37:b9:03:db:41:4a:ea:a2:2a:3a:89: a8:00:de:bc:de:ba:eb:15:40:57:9e:6d:46:5f:61: a2:00:fc:5f:fd:a2:fa:91:d7:51:55:6c:83:dc:4e: 9e:7f:79:93:87:01:3a:3a:b4:b6:a8:ab:3d:df:a3: 5b:0c:2b:71:13:c8:18:52:39:88:f6:28:af:fa:11: 3d:90:69:c3:48:7f:2b:54:15:9e:43:30:f1:6a:2c: 9e:40:a4:6d:41:c8:1e:c8:55:ce:38:eb:ac:b7:68: 05:e3:9b:42:67:b9:04:92:35:25:e8:cf:d9:16:4b: f3:fa:33:95:92:68:bc:0b:f3:fb:08:03:f7:34:9a: aa:53:1a:da:8f:7d:f0:9a:eb:e7:9e:06:a1:d2:0a: e4:1e:11:42:81:c7:0f:22:a6:b6:df:6b:3b:fe:6e: d2:1d:4a:44:25:5c:c9:7b:8f:7a:ff:81:15:01:57: 1e:36:ea:f1:59:65:92:64:0b:25:84:f0:ff:da:ec: 44:98:09:51:2c:25:53:f6:69:2e:de:44:cd:25:34: 6e:47:8c:00:8c:83:db:e4:25:15:05:c0:ab:1e:d3: a0:f2:1f:59:05:34:e7:5e:e1:db:03:29:64:41:f4: 55:d4:83:24:bf:e7:63:49:9d:11:16:da:79:1d:c9: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:F3:C5:97:ED:38:0C:64:F1:55:EA:E7:39:A1:68:39:40:22:86 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4c:c2:c6:32:6f:ab:40:51:3e:f7:d7:23:ee:cc:bf:bb:05: c3:94:d9:0e:22:9e:52:be:39:68:aa:cd:c4:3f:e5:b8:47:7e: ef:84:0e:1f:8b:98:e1:d4:b5:3b:42:2d:ff:d8:82:4e:42:dc: 8b:3b:b5:23:38:07:8c:a1:0a:27:a8:00:ae:ce:c1:0a:5b:b9: f5:e7:af:4d:b2:ff:f2:64:ce:28:1c:f9:84:31:da:4f:d4:77: 80:63:36:be:ac:9c:7a:a4:33:64:58:21:1d:16:b8:28:5c:a0: 7f:5c:7b:36:4c:aa:af:26:47:d7:c4:d1:ac:b3:c8:61:0b:5a: 28:5e:95:8a:aa:5b:42:8a:96:f1:07:c9:33:34:06:1e:03:49: 47:13:b5:9e:01:94:34:4f:99:66:3c:f9:b3:c4:24:05:23:84: b1:a6:f7:2a:87:c5:80:3e:cc:7d:67:5f:ea:e5:65:0a:32:45: c7:d6:3b:29:1f:e8:32:bb:11:a2:cb:3d:f8:26:fb:2e:a3:96: 03:58:2d:fe:03:18:e6:6b:e7:ae:de:e4:4a:05:66:21:fd:04: 38:39:6d:14:9e:2b:b3:f7:1d:d3:28:38:96:09:aa:25:47:42: e1:5e:15:45:19:59:f1:2a:6f:38:34:f5:7e:5d:c6:a9:a9:45: 1a:d6:71:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLnEJAgj5WE4VKuPRPzQ8gCRtWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTEyMDYyMDQ2MzdaFw0yNTEyMDkyMjAzMzdaMDMxMTAvBgNV BAMTKEUzREJGM0M1OTdFRDM4MEM2NEYxNTVFQUU3MzlBMTY4Mzk0MDIyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVaU3uQPbQUrqoio6iagA3rze uusVQFeebUZfYaIA/F/9ovqR11FVbIPcTp5/eZOHATo6tLaoqz3fo1sMK3ETyBhS OYj2KK/6ET2QacNIfytUFZ5DMPFqLJ5ApG1ByB7IVc4466y3aAXjm0JnuQSSNSXo z9kWS/P6M5WSaLwL8/sIA/c0mqpTGtqPffCa6+eeBqHSCuQeEUKBxw8iprbfazv+ btIdSkQlXMl7j3r/gRUBVx426vFZZZJkCyWE8P/a7ESYCVEsJVP2aS7eRM0lNG5H jACMg9vkJRUFwKse06DyH1kFNOde4dsDKWRB9FXUgyS/52NJnREW2nkdycKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49vzxZftOAxk8VXq5zmhaDlAIoYwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtMwsYyb6tAUT731yPuzL+7BcOU2Q4inlK+ OWiqzcQ/5bhHfu+EDh+LmOHUtTtCLf/Ygk5C3Is7tSM4B4yhCieoAK7OwQpbufXn r02y//Jkzigc+YQx2k/Ud4BjNr6snHqkM2RYIR0WuChcoH9cezZMqq8mR9fE0ayz yGELWihelYqqW0KKlvEHyTM0Bh4DSUcTtZ4BlDRPmWY8+bPEJAUjhLGm9yqHxYA+ zH1nX+rlZQoyRcfWOykf6DK7EaLLPfgm+y6jlgNYLf4DGOZr567e5EoFZiH9BDg5 bRSeK7P3HdMoOJYJqiVHQuFeFUUZWfEqbzg09X5dxqmpRRrWcRw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:15 2025 by rpki-client