This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: EC9Xup1DBFhZCXC0pdxbmlkvEoV7okDrsl4sw3hB/0I= Subject key identifier: 3C:AA:33:70:1C:41:CD:E7:D4:17:38:5F:27:77:14:6C:A0:03:68:D0 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 5CCF98730C843E56F3BF08BBEEB08B8CBCC76738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 052E Signing time: Fri 05 Dec 2025 18:02:17 +0000 Manifest this update: Fri 05 Dec 2025 17:57:17 +0000 Manifest next update: Tue 09 Dec 2025 02:12:17 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: 6fp99hbx8SoTdhWJpdSuYFozqYx9HpwwyAuM7pDfdCY=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cf:98:73:0c:84:3e:56:f3:bf:08:bb:ee:b0:8b:8c:bc:c7:67:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Dec 5 17:57:17 2025 GMT Not After : Dec 9 02:12:17 2025 GMT Subject: CN=3CAA33701C41CDE7D417385F2777146CA00368D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:11:e1:56:19:81:2c:39:01:b0:73:78:bd: 9d:e1:83:8f:80:70:47:5c:0a:e8:37:68:a8:81:f6: 79:4c:9c:c4:d4:f9:45:85:43:36:45:a6:7e:12:b9: 65:ae:6c:c3:7f:1c:5b:a2:ce:4a:3c:ba:6b:ba:fa: e9:3d:3f:8f:88:ae:98:84:aa:d8:41:eb:47:d3:88: 9d:a2:26:ca:cb:e6:0f:ea:1c:34:84:a0:4d:cd:11: 92:e4:b2:39:49:cb:58:a7:f6:b8:9f:5d:be:be:96: 68:79:21:d8:cb:75:3e:67:73:e8:c2:4c:e2:d8:0f: 3c:9e:9c:fc:be:60:d1:c7:47:f4:56:05:93:17:f6: b4:50:fd:72:99:75:b6:a0:93:95:0e:f7:67:31:22: 6c:7c:9e:31:16:20:25:42:dc:43:d0:13:5b:36:77: 6f:38:ee:1a:aa:d3:91:3c:6c:17:26:47:3c:78:4b: 32:ac:40:16:aa:61:e7:9d:55:28:95:4f:d6:76:7b: ad:bc:e1:8c:66:aa:67:62:9e:5c:18:d6:69:22:b0: 1c:3c:0c:e5:4b:df:53:90:3b:41:1b:a4:04:43:78: cc:01:69:74:e1:ca:3c:5d:b2:6a:2d:b1:48:46:5c: bc:22:fb:6c:2e:41:9a:f9:50:d1:96:28:62:7f:3b: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:33:70:1C:41:CD:E7:D4:17:38:5F:27:77:14:6C:A0:03:68:D0 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0e:c0:65:80:53:4f:ac:d2:58:af:a5:73:3e:43:a0:44:79: f2:c7:8a:4c:94:fb:1d:0b:e6:e2:52:e8:3d:43:3e:95:c1:e0: ed:72:f4:06:7b:52:cf:c5:ab:c4:5c:97:e8:9d:13:30:11:82: 2c:e5:2d:59:84:1d:a7:90:74:1f:64:45:68:9d:53:cc:98:5b: 66:83:9d:5e:bf:82:d3:28:37:26:70:61:6c:52:c4:40:ea:0d: 87:77:f3:35:71:20:09:cc:16:15:2a:2f:d2:13:c1:c2:4d:66: 09:0e:ab:71:c5:3f:22:c6:42:be:05:e7:06:16:be:67:db:88: 5c:d0:3a:72:87:0a:2f:76:58:c2:25:46:7d:6c:bb:39:4b:7e: b5:64:5e:fd:91:eb:f0:e6:7b:e2:28:4a:ce:94:09:40:43:d9: bb:5d:48:74:b5:87:4e:0d:d6:b9:cb:d3:3c:2f:b0:e8:50:db: e2:47:01:e4:8e:59:4a:e4:a6:8d:c3:78:ca:b5:3b:17:3d:09: 8c:eb:ca:49:5a:4b:97:0c:e0:b1:c0:a5:dc:30:f1:1c:2b:d9: 37:3d:0a:bc:9a:31:de:03:20:9d:6c:68:83:b9:b6:ed:c2:6c: a9:e1:c5:23:2d:34:fd:c9:27:7c:98:26:fa:5c:cb:3f:c3:86: 5c:19:55:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXM+YcwyEPlbzvwi77rCLjLzHZzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTEyMDUxNzU3MTdaFw0yNTEyMDkwMjEyMTdaMDMxMTAvBgNV BAMTKDNDQUEzMzcwMUM0MUNERTdENDE3Mzg1RjI3NzcxNDZDQTAwMzY4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgxHhVhmBLDkBsHN4vZ3hg4+A cEdcCug3aKiB9nlMnMTU+UWFQzZFpn4SuWWubMN/HFuizko8umu6+uk9P4+IrpiE qthB60fTiJ2iJsrL5g/qHDSEoE3NEZLksjlJy1in9rifXb6+lmh5IdjLdT5nc+jC TOLYDzyenPy+YNHHR/RWBZMX9rRQ/XKZdbagk5UO92cxImx8njEWICVC3EPQE1s2 d2847hqq05E8bBcmRzx4SzKsQBaqYeedVSiVT9Z2e6284YxmqmdinlwY1mkisBw8 DOVL31OQO0EbpARDeMwBaXThyjxdsmotsUhGXLwi+2wuQZr5UNGWKGJ/O4mHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKozcBxBzefUFzhfJ3cUbKADaNAwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoOwGWAU0+s0livpXM+Q6BEefLHikyU+x0L 5uJS6D1DPpXB4O1y9AZ7Us/Fq8Rcl+idEzARgizlLVmEHaeQdB9kRWidU8yYW2aD nV6/gtMoNyZwYWxSxEDqDYd38zVxIAnMFhUqL9ITwcJNZgkOq3HFPyLGQr4F5wYW vmfbiFzQOnKHCi92WMIlRn1suzlLfrVkXv2R6/Dme+IoSs6UCUBD2btdSHS1h04N 1rnL0zwvsOhQ2+JHAeSOWUrkpo3DeMq1Oxc9CYzryklaS5cM4LHApdww8Rwr2Tc9 CryaMd4DIJ1saIO5tu3CbKnhxSMtNP3JJ3yYJvpcyz/DhlwZVfQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:33 2025 by rpki-client