This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft File: 5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json) Hash identifier: 5R0McBnmQczin+xyHG/Ua/0B6RBshHUTwDXlhKcmmdE= Subject key identifier: 43:3D:5D:46:22:2D:33:9B:2C:23:DF:FD:E5:C9:62:6A:DF:B8:34:04 Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530 Certificate serial: 60A9C765388C03BD724B30E6B3ED27275C2905B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft Manifest number: 01D0 Signing time: Fri 05 Dec 2025 17:21:22 +0000 Manifest this update: Fri 05 Dec 2025 17:16:22 +0000 Manifest next update: Mon 08 Dec 2025 18:51:22 +0000 Files and hashes: 1: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: CD07bV+Caj5WixElfOaaK9RCxLKfB3pq6ZZ85rVq26Y=) 2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: GpDEKCgBX9XD+jiRaKE2yJjAbdJ9JvSIqiEv2cy9Py0=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: fswipt2GzpbLxNVSKLJNBtjumryj1H079NPKIHEQz6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a9:c7:65:38:8c:03:bd:72:4b:30:e6:b3:ed:27:27:5c:29:05:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530 Validity Not Before: Dec 5 17:16:22 2025 GMT Not After : Dec 8 18:51:22 2025 GMT Subject: CN=433D5D46222D339B2C23DFFDE5C9626ADFB83404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:03:3e:65:a5:2b:48:21:e0:45:5b:8f:75: ab:51:bb:62:33:fe:35:93:ef:5e:87:c5:50:e2:92: 05:08:cb:a8:5f:dd:19:e5:6f:af:f9:5b:e7:5d:13: 10:aa:f6:a4:a9:d6:41:09:46:37:d9:66:72:e0:4c: 9e:d6:c3:d2:67:ba:9a:f2:a8:c2:53:d5:e3:f7:04: 3d:2e:ba:7a:a2:36:03:79:73:1c:86:b6:00:3c:20: 24:f8:b8:49:1f:66:63:de:82:14:6e:a3:3c:d2:30: 62:f9:39:90:a4:b6:3c:55:f2:dc:59:53:07:b2:65: ea:37:c2:3b:a1:46:27:b7:20:f7:03:ae:89:6f:ef: 00:f2:ae:ea:b1:09:85:1b:b7:72:c4:a3:95:bc:2b: e6:4f:a6:cd:35:b9:8a:0b:38:ed:9b:5a:b4:b7:b6: 57:de:2a:ea:48:2e:0d:96:26:b4:48:80:33:c4:6b: e0:9b:16:80:21:a8:2e:43:37:95:97:c7:1b:3a:dc: ed:f1:a3:c2:31:e4:a4:ae:bd:92:87:c3:f1:d8:ae: f6:26:a9:e8:31:66:dd:c2:d0:32:a5:ec:ec:bc:3f: 43:29:92:09:26:a2:59:db:bd:39:6d:ab:57:ba:ec: 7c:44:6c:5b:fe:2a:60:cf:35:e4:f0:cd:c8:28:be: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:5D:46:22:2D:33:9B:2C:23:DF:FD:E5:C9:62:6A:DF:B8:34:04 X509v3 Authority Key Identifier: keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:71:c9:4d:78:df:e4:a7:b5:b0:9e:74:b3:0c:08:4c:de:a8: 9f:40:36:94:04:d9:71:5e:81:bf:44:0f:9e:41:0f:c8:07:09: 5b:84:6a:70:aa:1e:b0:32:a5:8f:95:e7:35:85:8e:a9:ec:b7: 3d:f9:13:51:9e:85:c6:45:c3:0d:b3:b4:96:2e:23:23:04:37: 84:69:a7:39:e8:2a:59:c4:24:2f:28:99:b6:a5:06:7c:33:74: 33:c0:e5:e4:30:95:71:13:e9:81:27:23:5f:c6:87:ad:f6:29: a6:6f:e3:43:c1:65:a4:f5:31:f0:87:6a:8f:d4:b0:fa:a3:3a: 07:73:6c:7b:b4:63:77:d1:3f:30:41:9c:7f:76:22:ee:c6:3f: 24:f6:61:ea:c0:1d:3d:7a:0b:8a:b0:81:07:19:cd:2a:f1:12: ba:45:db:0e:d8:a3:0b:2c:50:35:cd:37:f9:4e:59:6a:a0:81: fb:97:b8:ca:d1:1a:19:75:74:51:80:0a:c6:ea:58:42:31:01: 44:59:8c:7a:52:2f:fb:0d:90:3a:56:db:a3:00:e2:91:12:0d: 30:eb:8d:75:7e:a0:ce:63:24:78:b2:e8:83:95:38:14:13:85: b9:a6:65:9c:69:42:bd:20:2f:93:ad:b8:c2:07:8c:d0:a1:85: 6e:c2:bb:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKnHZTiMA71ySzDms+0nJ1wpBbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG NjA1RjUzMDAeFw0yNTEyMDUxNzE2MjJaFw0yNTEyMDgxODUxMjJaMDMxMTAvBgNV BAMTKDQzM0Q1RDQ2MjIyRDMzOUIyQzIzREZGREU1Qzk2MjZBREZCODM0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXgM+ZaUrSCHgRVuPdatRu2Iz /jWT716HxVDikgUIy6hf3Rnlb6/5W+ddExCq9qSp1kEJRjfZZnLgTJ7Ww9Jnupry qMJT1eP3BD0uunqiNgN5cxyGtgA8ICT4uEkfZmPeghRuozzSMGL5OZCktjxV8txZ UweyZeo3wjuhRie3IPcDrolv7wDyruqxCYUbt3LEo5W8K+ZPps01uYoLOO2bWrS3 tlfeKupILg2WJrRIgDPEa+CbFoAhqC5DN5WXxxs63O3xo8Ix5KSuvZKHw/HYrvYm qegxZt3C0DKl7Oy8P0MpkgkmolnbvTltq1e67HxEbFv+KmDPNeTwzcgovhtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQz1dRiItM5ssI9/95cliat+4NAQwHwYDVR0j BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2 QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1 RjUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5Mjcy RkVGNjA1RjUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBxyU143+SntbCedLMMCEzeqJ9ANpQE2XFe gb9ED55BD8gHCVuEanCqHrAypY+V5zWFjqnstz35E1GehcZFww2ztJYuIyMEN4Rp pznoKlnEJC8ombalBnwzdDPA5eQwlXET6YEnI1/Gh632KaZv40PBZaT1MfCHao/U sPqjOgdzbHu0Y3fRPzBBnH92Iu7GPyT2YerAHT16C4qwgQcZzSrxErpF2w7Yowss UDXNN/lOWWqggfuXuMrRGhl1dFGACsbqWEIxAURZjHpSL/sNkDpW26MA4pESDTDr jXV+oM5jJHiy6IOVOBQThbmmZZxpQr0gL5OtuMIHjNChhW7Cu78= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:24 2025 by rpki-client