This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: 8ifxpk2J7YGLQAm3ID/mVTrUmqf5BAtePPaZIoGRgt0= Subject key identifier: 5F:69:9C:A6:80:61:3A:BD:02:88:FC:A1:06:7F:69:FC:6E:80:34:32 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 111F463C117194172E84989692D160E4D58E7C9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: FB Signing time: Sat 06 Dec 2025 22:52:09 +0000 Manifest this update: Sat 06 Dec 2025 22:47:09 +0000 Manifest next update: Wed 10 Dec 2025 02:18:09 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: lJeabXZavlWL2xsDIL0LRRHx8vqmA5o+N0rjiY7zCMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1f:46:3c:11:71:94:17:2e:84:98:96:92:d1:60:e4:d5:8e:7c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Dec 6 22:47:09 2025 GMT Not After : Dec 10 02:18:09 2025 GMT Subject: CN=5F699CA680613ABD0288FCA1067F69FC6E803432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:4a:aa:e0:f7:f6:e5:9f:ee:b1:d9:42:36: ce:7c:9c:f2:a6:44:43:d1:df:2e:52:d8:90:44:bd: f1:d2:f2:58:b0:d5:23:2d:37:51:af:48:53:52:e0: 3c:3d:33:25:08:e1:e7:8a:91:8e:13:43:8c:37:62: 2e:59:20:21:9b:8f:25:57:0d:05:43:b9:f7:10:eb: 60:a3:6b:04:f4:b6:4b:ec:9d:59:b3:f5:73:f9:1f: c7:98:be:c6:68:54:34:91:02:aa:f2:9b:37:99:11: 5d:48:4a:f5:a5:cc:e4:1a:31:44:55:00:05:88:ca: d1:25:19:b9:c2:a8:6c:ef:60:9b:48:bc:54:19:10: 7b:e5:82:2c:44:0c:aa:83:41:65:62:03:b8:3a:e1: 87:e1:08:cb:fb:cd:ce:12:c9:ce:00:63:ed:6c:7a: 72:9a:ce:9c:f9:e2:9e:b4:80:d1:dd:54:a0:2a:64: 34:32:c4:af:8b:a2:c8:05:0c:97:fa:a7:2b:07:fb: ad:6e:af:3e:79:f0:29:78:96:72:c3:eb:4f:a2:b9: a5:f5:23:f4:e2:36:1d:03:2f:96:30:2d:c4:ad:73: 59:3e:7b:06:6d:19:a1:7c:d0:69:cb:66:06:56:28: f8:8b:f4:b3:91:d7:4f:a0:c1:94:18:a6:d5:35:cc: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:69:9C:A6:80:61:3A:BD:02:88:FC:A1:06:7F:69:FC:6E:80:34:32 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5b:ec:be:4f:e6:5f:a6:6b:0f:50:17:53:a5:5f:75:78:b1: a8:36:59:37:c3:49:38:e7:e3:1b:1e:c7:1b:e3:8c:c5:f7:c5: 1d:18:14:ef:6c:23:cf:6a:16:36:25:95:95:cf:53:c1:6e:b9: 87:e3:d5:e6:4f:a9:2e:7a:84:d9:81:0c:0f:a1:7e:2a:0f:63: 36:b8:f0:b2:07:9a:9b:e1:9d:50:ec:8a:e0:3d:35:21:6a:a6: 54:8f:43:79:44:b3:2b:91:5c:b2:db:46:ba:9c:20:d6:80:5f: 3c:ea:66:a8:a9:ef:04:79:20:e4:2f:92:27:09:23:ec:6e:d5: cd:ac:95:d4:aa:c3:98:4c:b0:f5:6e:7d:b5:84:1c:69:b3:d8: 66:2f:98:d1:6f:59:01:55:86:94:28:2d:e6:71:a9:02:13:de: c5:10:cd:fc:b9:e6:10:25:ca:6a:39:77:f1:f8:d4:c1:9d:15: 91:ba:7a:ba:95:e3:28:8f:a2:db:52:2d:26:8a:69:43:09:b9: 8a:2c:8c:b6:47:f1:cd:d3:1d:15:b0:e1:43:e5:27:59:fc:da: b3:3f:e8:4b:74:d7:23:83:da:24:16:17:c7:c3:46:7d:75:be: 77:63:ac:68:72:d3:9f:ff:bd:45:75:c5:76:94:00:85:9c:df: cd:d6:3c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER9GPBFxlBcuhJiWktFg5NWOfJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTEyMDYyMjQ3MDlaFw0yNTEyMTAwMjE4MDlaMDMxMTAvBgNV BAMTKDVGNjk5Q0E2ODA2MTNBQkQwMjg4RkNBMTA2N0Y2OUZDNkU4MDM0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW0qq4Pf25Z/usdlCNs58nPKm REPR3y5S2JBEvfHS8liw1SMtN1GvSFNS4Dw9MyUI4eeKkY4TQ4w3Yi5ZICGbjyVX DQVDufcQ62CjawT0tkvsnVmz9XP5H8eYvsZoVDSRAqrymzeZEV1ISvWlzOQaMURV AAWIytElGbnCqGzvYJtIvFQZEHvlgixEDKqDQWViA7g64YfhCMv7zc4Syc4AY+1s enKazpz54p60gNHdVKAqZDQyxK+LosgFDJf6pysH+61urz558Cl4lnLD60+iuaX1 I/TiNh0DL5YwLcStc1k+ewZtGaF80GnLZgZWKPiL9LOR10+gwZQYptU1zPz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2mcpoBhOr0CiPyhBn9p/G6ANDIwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdb7L5P5l+maw9QF1OlX3V4sag2WTfDSTjn 4xsexxvjjMX3xR0YFO9sI89qFjYllZXPU8FuuYfj1eZPqS56hNmBDA+hfioPYza4 8LIHmpvhnVDsiuA9NSFqplSPQ3lEsyuRXLLbRrqcINaAXzzqZqip7wR5IOQvkicJ I+xu1c2sldSqw5hMsPVufbWEHGmz2GYvmNFvWQFVhpQoLeZxqQIT3sUQzfy55hAl ymo5d/H41MGdFZG6erqV4yiPottSLSaKaUMJuYosjLZH8c3THRWw4UPlJ1n82rM/ 6Et01yOD2iQWF8fDRn11vndjrGhy05//vUV1xXaUAIWc383WPK0= -----END CERTIFICATE-----Generated at Sun Dec 7 16:48:31 2025 by rpki-client