This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json) Hash identifier: EJpZtYxKp/XcxyCxEbRUL7D9paY8WaFk6XkT1awdaUw= Subject key identifier: B3:84:45:B2:53:FD:75:35:C4:29:9F:88:CB:1D:94:65:3F:EF:20:97 Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 55387E1B637BA586E1E7B69592E7DAA7DD4780D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft Manifest number: 0530 Signing time: Sun 14 Dec 2025 15:01:57 +0000 Manifest this update: Sun 14 Dec 2025 14:56:57 +0000 Manifest next update: Wed 17 Dec 2025 18:34:57 +0000 Files and hashes: 1: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: q5mhDdFCxTgaSg2bnuOZd3qwh2AkkJT+miUFSWzhmJU=) 2: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:38:7e:1b:63:7b:a5:86:e1:e7:b6:95:92:e7:da:a7:dd:47:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Dec 14 14:56:57 2025 GMT Not After : Dec 17 18:34:57 2025 GMT Subject: CN=B38445B253FD7535C4299F88CB1D94653FEF2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:65:f3:72:b4:1a:12:da:be:d0:9a:b4:cb: 9f:d2:46:d6:62:56:c3:7c:fe:76:3c:cb:1a:fa:e4: e8:a0:2b:a2:a4:a0:72:be:ad:d8:b8:63:1a:b8:f8: 2a:32:68:bd:c6:c6:4d:98:8a:0a:d5:e1:73:fd:7b: 4e:25:0a:9a:d0:03:6b:59:76:4d:36:b2:65:f1:f0: eb:fd:3c:b4:a8:a4:f4:96:55:d8:e5:ef:63:20:13: 82:94:68:b4:de:82:ea:62:24:8e:16:e3:54:c2:6a: 98:ba:d5:b0:d9:d0:2e:39:d7:4a:dd:1d:ab:7c:30: d4:a5:da:ed:6c:a6:50:fe:c2:a5:2d:8b:b2:7e:f6: a3:1a:56:fa:e9:62:24:78:c5:cb:3d:45:04:4a:a3: 21:60:c2:4c:d8:b0:c3:ac:00:f1:da:b2:52:68:ab: d6:3f:99:8f:2a:f2:99:f3:17:22:f9:58:34:20:6b: 4d:76:2f:51:b2:67:25:7e:7e:b9:a4:11:23:8b:ae: 10:cb:93:07:55:6d:a9:89:a6:84:01:43:72:41:e0: ab:7e:45:af:15:37:c8:83:d1:4e:78:9a:a5:d2:74: 97:bb:8b:25:52:1e:3d:94:9c:14:05:eb:70:01:21: 58:d4:b4:64:2c:e5:10:bc:c2:81:c6:49:00:4f:13: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:84:45:B2:53:FD:75:35:C4:29:9F:88:CB:1D:94:65:3F:EF:20:97 X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:eb:9d:06:33:40:5e:f9:52:e6:aa:ae:8d:3d:39:f0:b5:79: a8:8c:fa:e4:1c:1e:9c:58:3c:27:af:29:42:89:8e:6f:14:bd: 25:7d:03:94:9b:92:40:fc:d6:ca:3b:7e:d4:f4:a4:24:2b:34: b0:58:31:2e:7b:26:8c:a1:17:60:67:31:a9:96:f2:6b:ac:67: 9d:65:97:ba:4f:b2:94:ca:bc:44:c6:1c:ef:50:27:7e:5e:82: 9d:e8:8f:51:45:5d:18:17:b7:19:72:76:c7:1f:fc:a0:4a:7d: b9:2b:13:d1:dc:a9:b5:93:5e:85:75:25:ba:d8:b0:12:d8:5d: 94:fd:75:f4:63:31:70:b7:c7:83:43:cb:7c:3c:3d:17:7f:89: 16:8f:6a:c7:ce:01:14:7d:bb:4a:2e:fd:d2:c9:d5:91:ff:23: 3a:1d:55:8b:d3:a7:68:2e:4c:45:19:2d:32:a7:23:74:00:d9: db:ca:71:4d:32:19:e8:10:ae:61:a5:36:b0:37:84:50:9c:98: 47:74:e9:78:aa:70:d0:c3:21:ee:c8:8e:3d:f4:a3:f2:a9:30: bb:5f:20:62:8a:f3:42:9b:7e:52:f1:45:1f:b7:35:f3:d3:b3: 30:14:52:43:fd:ab:63:7e:c5:b1:5a:a0:aa:d8:ee:d9:39:95: 54:53:1f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTh+G2N7pYbh57aVkufap91HgNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNTEyMTQxNDU2NTdaFw0yNTEyMTcxODM0NTdaMDMxMTAvBgNV BAMTKEIzODQ0NUIyNTNGRDc1MzVDNDI5OUY4OENCMUQ5NDY1M0ZFRjIwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MmXzcrQaEtq+0Jq0y5/SRtZi VsN8/nY8yxr65OigK6KkoHK+rdi4Yxq4+CoyaL3Gxk2YigrV4XP9e04lCprQA2tZ dk02smXx8Ov9PLSopPSWVdjl72MgE4KUaLTegupiJI4W41TCapi61bDZ0C4510rd Hat8MNSl2u1splD+wqUti7J+9qMaVvrpYiR4xcs9RQRKoyFgwkzYsMOsAPHaslJo q9Y/mY8q8pnzFyL5WDQga012L1GyZyV+frmkESOLrhDLkwdVbamJpoQBQ3JB4Kt+ Ra8VN8iD0U54mqXSdJe7iyVSHj2UnBQF63ABIVjUtGQs5RC8woHGSQBPEwoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4RFslP9dTXEKZ+Iyx2UZT/vIJcwHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAw NjA5QkYzQjlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnrnQYzQF75Uuaqro09OfC1eaiM+uQcHpxY PCevKUKJjm8UvSV9A5SbkkD81so7ftT0pCQrNLBYMS57JoyhF2BnMamW8musZ51l l7pPspTKvETGHO9QJ35egp3oj1FFXRgXtxlydscf/KBKfbkrE9HcqbWTXoV1JbrY sBLYXZT9dfRjMXC3x4NDy3w8PRd/iRaPasfOARR9u0ou/dLJ1ZH/IzodVYvTp2gu TEUZLTKnI3QA2dvKcU0yGegQrmGlNrA3hFCcmEd06XiqcNDDIe7Ijj30o/KpMLtf IGKK80KbflLxRR+3NfPTszAUUkP9q2N+xbFaoKrY7tk5lVRTH2w= -----END CERTIFICATE-----Generated at Mon Dec 15 15:29:53 2025 by rpki-client