This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: 1ceXf9LpiafNjZx5xUzqTrfQ4jx+upsiBjHelUXdz5w= Subject key identifier: C1:90:17:83:0A:16:73:F5:63:6A:15:E1:72:39:70:15:B9:0F:21:BC Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 01484ED8E6523205E7C00C213E241BD3A3B8DD37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 04E7 Signing time: Mon 15 Dec 2025 20:12:35 +0000 Manifest this update: Mon 15 Dec 2025 20:07:35 +0000 Manifest next update: Fri 19 Dec 2025 04:47:35 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: bvIc3jQM0E6KUha+4cL/8tizSdeuweq2s7BmrEodq4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 04:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:48:4e:d8:e6:52:32:05:e7:c0:0c:21:3e:24:1b:d3:a3:b8:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Dec 15 20:07:35 2025 GMT Not After : Dec 19 04:47:35 2025 GMT Subject: CN=C19017830A1673F5636A15E172397015B90F21BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:92:60:93:93:e6:8e:40:f3:11:2e:03:2a: e1:92:09:32:d0:0c:19:b8:33:2e:85:1b:5b:0c:c4: 06:36:f8:19:34:8e:79:cf:c3:d2:8d:4d:c0:02:b9: 29:67:cf:cd:a0:47:a5:d5:8d:26:09:cb:2f:9d:3a: 77:be:84:b8:d9:fb:3d:a5:d3:45:33:65:c9:b4:a2: ce:99:24:6a:d5:4e:13:05:ae:cb:88:6c:1c:8a:9a: e8:f0:9a:ff:35:7c:fc:34:37:53:2e:fc:21:ba:87: be:70:00:af:d4:f0:6b:8b:d2:cb:0f:78:e7:a9:7a: 27:bc:9b:6c:73:4d:1f:74:88:e0:27:cc:c4:02:52: c8:b7:22:a1:82:8c:e4:00:00:25:0c:48:bf:df:b0: 8a:1d:f0:26:ff:d8:6e:e1:ec:89:8e:ae:a7:93:76: c8:97:f6:5e:c8:a8:3a:7e:f3:be:d9:e8:7c:32:ad: 1f:ad:8a:42:73:4d:5b:bf:c7:56:23:e3:27:62:eb: 2c:cc:1d:e8:b0:98:5c:52:d0:03:62:54:dc:07:a9: ec:9a:21:e4:36:d1:2b:98:58:14:15:70:b1:69:4e: c8:03:5f:30:a7:46:0f:9c:2c:ee:6f:14:b8:86:8a: 70:6e:9d:39:7a:13:d6:43:bd:b4:f7:f0:41:11:51: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:17:83:0A:16:73:F5:63:6A:15:E1:72:39:70:15:B9:0F:21:BC X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:00:5d:76:b1:bc:3f:b9:ef:bb:0e:4f:87:4b:b7:a9:1f:c9: 7e:35:53:36:c7:4f:04:e8:93:60:57:24:fe:dd:1d:e5:c3:c2: 23:ae:49:7c:e5:47:43:9f:2a:f5:4e:41:19:0f:11:35:57:bc: 82:72:e0:ec:fd:cc:c6:9c:cb:2a:91:45:aa:33:80:2f:e2:e8: 27:8c:5b:c5:dc:99:ce:1b:04:61:98:93:88:37:99:e5:6b:19: 9f:b0:fb:1e:50:13:9c:ac:9f:8c:ac:16:0c:fe:b2:58:e3:7b: 0e:9e:27:09:da:20:02:4f:96:68:77:10:bb:ac:ba:2f:d3:90: 5f:74:43:b4:59:f2:28:f0:60:27:3e:5f:3c:56:d8:b8:05:9e: 7f:8d:ed:6e:3e:f8:58:69:94:04:72:e2:1d:24:6d:5d:8a:9e: 15:52:04:ed:5e:f9:d7:84:32:49:bc:d1:07:61:50:f1:05:99: a8:ab:17:07:13:47:cf:92:51:81:d5:ef:b1:3e:ad:14:c9:4d: 21:d7:dd:98:73:98:2f:00:40:64:5d:79:9d:5c:2e:3f:a7:aa: 06:ed:f0:90:be:e2:6c:29:c5:b5:0a:03:41:79:2e:4a:71:0f: ce:b4:e4:87:72:23:f5:ec:e9:8c:8e:57:84:df:4b:d7:08:d0: 94:c0:23:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUhO2OZSMgXnwAwhPiQb06O43TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNTEyMTUyMDA3MzVaFw0yNTEyMTkwNDQ3MzVaMDMxMTAvBgNV BAMTKEMxOTAxNzgzMEExNjczRjU2MzZBMTVFMTcyMzk3MDE1QjkwRjIxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUpJgk5PmjkDzES4DKuGSCTLQ DBm4My6FG1sMxAY2+Bk0jnnPw9KNTcACuSlnz82gR6XVjSYJyy+dOne+hLjZ+z2l 00UzZcm0os6ZJGrVThMFrsuIbByKmujwmv81fPw0N1Mu/CG6h75wAK/U8GuL0ssP eOepeie8m2xzTR90iOAnzMQCUsi3IqGCjOQAACUMSL/fsIod8Cb/2G7h7ImOrqeT dsiX9l7IqDp+877Z6HwyrR+tikJzTVu/x1Yj4ydi6yzMHeiwmFxS0ANiVNwHqeya IeQ20SuYWBQVcLFpTsgDXzCnRg+cLO5vFLiGinBunTl6E9ZDvbT38EERUWyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZAXgwoWc/VjahXhcjlwFbkPIbwwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0AXXaxvD+577sOT4dLt6kfyX41UzbHTwTo k2BXJP7dHeXDwiOuSXzlR0OfKvVOQRkPETVXvIJy4Oz9zMacyyqRRaozgC/i6CeM W8Xcmc4bBGGYk4g3meVrGZ+w+x5QE5ysn4ysFgz+sljjew6eJwnaIAJPlmh3ELus ui/TkF90Q7RZ8ijwYCc+XzxW2LgFnn+N7W4++FhplARy4h0kbV2KnhVSBO1e+deE Mkm80QdhUPEFmairFwcTR8+SUYHV77E+rRTJTSHX3ZhzmC8AQGRdeZ1cLj+nqgbt 8JC+4mwpxbUKA0F5LkpxD8605IdyI/Xs6YyOV4TfS9cI0JTAIyA= -----END CERTIFICATE-----Generated at Wed Dec 17 19:24:08 2025 by rpki-client