This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft File: F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json) Hash identifier: e7AKqQO2VKaKo4dttRdUJ4fa8/O9dWAmPk/jsNv5FkA= Subject key identifier: 6D:18:A8:E0:76:45:C4:C9:82:DD:FB:EA:98:1A:F3:D1:17:8E:DA:46 Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 195AB5FE952331696B3BA316DEDF269B90F1DF51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft Manifest number: AD Signing time: Fri 05 Dec 2025 15:01:28 +0000 Manifest this update: Fri 05 Dec 2025 14:56:28 +0000 Manifest next update: Tue 09 Dec 2025 01:35:28 +0000 Files and hashes: 1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: IcWkQYDLFcPwwtzYdPcj5i2iEcvHXh39BUHPHZLmTXs=) 2: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: 5IQ9JNSUY6CqIxgTQl74Hs/rjNm1S2RG6POGyYKO5WA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5a:b5:fe:95:23:31:69:6b:3b:a3:16:de:df:26:9b:90:f1:df:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Dec 5 14:56:28 2025 GMT Not After : Dec 9 01:35:28 2025 GMT Subject: CN=6D18A8E07645C4C982DDFBEA981AF3D1178EDA46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:82:48:1b:91:dc:66:9e:f0:c1:9d:34:f5: ae:59:5d:91:42:6f:a6:7e:c9:cc:98:d5:3d:aa:77: 24:fb:46:01:94:e1:fb:0d:59:bd:8a:cb:c7:27:68: 4a:eb:4f:11:b4:fd:d1:da:d5:95:79:85:8c:c1:d1: 73:d3:a3:44:0b:c8:d2:73:6e:7c:97:c0:99:d8:d9: 0a:3a:00:98:b8:88:4c:ae:e2:af:ed:52:0b:00:86: aa:3b:8e:5a:30:70:a8:fb:84:18:7f:b3:d3:8a:71: a1:0f:86:91:7f:f0:c5:68:b1:14:fd:47:8d:af:b8: 83:ad:ec:c8:6e:42:63:32:61:5c:7b:2c:e9:d5:98: 82:43:a8:27:ff:5b:b7:71:83:69:96:dd:e5:2c:3a: 26:22:22:f1:a6:5c:27:20:4d:01:0e:b5:e6:bd:d0: fe:4e:80:af:76:7c:07:b6:e3:5a:60:29:fd:7f:c4: 40:3f:d1:62:fb:77:8a:7f:f2:2d:a2:31:79:3d:62: 21:d5:a2:21:67:73:a6:64:f9:2c:17:84:60:a5:8b: 42:0c:79:ea:37:ce:32:83:45:07:2d:36:af:fe:3a: 47:bb:67:1d:9e:b8:f9:ca:77:74:2f:83:0e:f8:a2: 7b:ee:1b:b3:97:7a:d2:f2:a4:9d:d3:2e:bc:3b:be: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:A8:E0:76:45:C4:C9:82:DD:FB:EA:98:1A:F3:D1:17:8E:DA:46 X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fa:03:ff:32:04:8e:97:0e:88:ab:71:3e:38:71:f8:13:48: 80:80:cc:b3:84:80:b4:ed:35:ac:4b:9e:96:5b:8f:fc:33:74: c1:fb:4d:bf:6a:b2:1b:3f:2c:0e:a1:bd:3c:a2:2c:72:76:fc: 53:94:dd:8f:c2:fa:50:61:6c:53:65:43:99:36:78:51:64:c4: 9a:a7:9d:3a:0c:d4:25:fe:46:4b:e2:46:5e:0d:ad:64:21:6a: 0d:76:85:04:33:c4:53:92:2d:e5:86:99:dc:6d:0e:c3:3d:40: b5:ee:0d:6c:3c:69:0a:0b:ef:17:79:59:d7:81:8c:08:e0:9f: ef:1f:26:a2:cd:bc:ab:ce:7a:3b:7e:fb:94:6f:5f:93:5e:e6: 6b:ee:fe:9c:80:73:c2:bd:27:60:42:db:8e:cc:e2:ef:74:af: 7d:f1:ba:49:bd:e5:64:c6:3a:69:49:51:51:05:2c:fb:82:65: 0c:75:28:a3:f2:e3:c5:c9:5d:e0:49:58:e3:7c:2b:58:0b:45: 26:9f:3e:f1:60:fc:ab:21:dc:fe:3d:0e:51:4a:79:66:e2:b8: 26:31:2e:b2:08:ea:76:e9:02:c0:f9:62:49:1e:c7:85:3a:5f: 89:e0:99:1c:35:3f:64:0a:1c:56:af:d3:1b:23:d6:3f:30:38: f5:7b:9e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVq1/pUjMWlrO6MW3t8mm5Dx31EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNTEyMDUxNDU2MjhaFw0yNTEyMDkwMTM1MjhaMDMxMTAvBgNV BAMTKDZEMThBOEUwNzY0NUM0Qzk4MkRERkJFQTk4MUFGM0QxMTc4RURBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DYJIG5HcZp7wwZ009a5ZXZFC b6Z+ycyY1T2qdyT7RgGU4fsNWb2Ky8cnaErrTxG0/dHa1ZV5hYzB0XPTo0QLyNJz bnyXwJnY2Qo6AJi4iEyu4q/tUgsAhqo7jlowcKj7hBh/s9OKcaEPhpF/8MVosRT9 R42vuIOt7MhuQmMyYVx7LOnVmIJDqCf/W7dxg2mW3eUsOiYiIvGmXCcgTQEOtea9 0P5OgK92fAe241pgKf1/xEA/0WL7d4p/8i2iMXk9YiHVoiFnc6Zk+SwXhGCli0IM eeo3zjKDRQctNq/+Oke7Zx2euPnKd3Qvgw74onvuG7OXetLypJ3TLrw7vg93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbRio4HZFxMmC3fvqmBrz0ReO2kYwHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4 QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/6A/8yBI6XDoircT44cfgTSICAzLOEgLTt NaxLnpZbj/wzdMH7Tb9qshs/LA6hvTyiLHJ2/FOU3Y/C+lBhbFNlQ5k2eFFkxJqn nToM1CX+RkviRl4NrWQhag12hQQzxFOSLeWGmdxtDsM9QLXuDWw8aQoL7xd5WdeB jAjgn+8fJqLNvKvOejt++5RvX5Ne5mvu/pyAc8K9J2BC247M4u90r33xukm95WTG OmlJUVEFLPuCZQx1KKPy48XJXeBJWON8K1gLRSafPvFg/Ksh3P49DlFKeWbiuCYx LrII6nbpAsD5Ykkex4U6X4ngmRw1P2QKHFav0xsj1j8wOPV7nqc= -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:55 2025 by rpki-client