This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json) Hash identifier: mozxsJtBQSX3RuCzZALRo9XOr8DvTI7BIP4/4KgEpLw= Subject key identifier: 07:B5:20:3F:AF:CD:18:4D:AB:F7:E8:48:60:9C:73:CE:8C:B9:65:E6 Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Certificate serial: 4109533D8A491173FB712881914F73F7DC3E9C1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 08:31:05 +0000 Manifest this update: Fri 05 Dec 2025 08:26:05 +0000 Manifest next update: Mon 08 Dec 2025 16:25:05 +0000 Files and hashes: 1: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: JEiaqrAZXK3bx3xwo2q2XbzVW65nzqIUtxlhvfKZhjA=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:53:3d:8a:49:11:73:fb:71:28:81:91:4f:73:f7:dc:3e:9c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Validity Not Before: Dec 5 08:26:05 2025 GMT Not After : Dec 8 16:25:05 2025 GMT Subject: CN=07B5203FAFCD184DABF7E848609C73CE8CB965E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:b7:51:2e:39:e1:c5:f9:cb:fc:19:73:d6: 77:ab:82:bd:30:86:59:3b:0b:eb:d9:4b:4c:56:64: c8:97:95:ae:ec:4b:6e:b0:e3:cd:54:bb:c8:13:bc: 2c:82:50:66:1d:1a:52:37:25:84:b4:ca:c4:70:b3: f2:ea:76:9b:ff:da:0d:8e:23:04:7e:51:f1:cf:f8: 12:e5:0a:0a:f6:08:c5:14:19:f1:5a:11:ec:a1:43: fb:f9:c7:59:bb:a1:cf:1e:b2:ed:60:8e:bd:28:e0: 99:eb:88:5d:19:f3:10:d8:dd:c4:f8:9b:32:62:54: 29:53:ae:67:78:87:ca:55:fd:48:09:fd:fa:34:98: b4:63:7b:47:de:56:be:cd:f5:e5:06:00:cd:50:d0: 99:23:14:18:3d:50:a9:50:37:e8:76:d3:34:c0:90: 4c:fd:0a:9f:8a:31:76:2f:bb:9d:7b:d1:8a:a5:d1: aa:2b:f9:5b:e0:5b:ba:3b:fe:86:f5:44:e7:01:f9: 8a:5a:4f:8f:5a:ad:e5:c9:6f:f0:b6:38:8c:b9:82: 37:11:1a:fb:54:ad:5a:0d:95:f8:1e:e7:17:6d:66: 6f:81:fe:58:f1:81:2b:36:f9:26:8d:93:17:52:c8: 9a:ff:3c:4a:3a:29:1b:d3:41:ea:4a:2f:a7:ee:fa: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:20:3F:AF:CD:18:4D:AB:F7:E8:48:60:9C:73:CE:8C:B9:65:E6 X509v3 Authority Key Identifier: keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:96:68:a3:25:11:85:e8:17:4e:7f:3e:a6:02:19:a8:69:4f: 26:1f:ab:00:b1:f8:30:6d:bc:6b:af:d3:d1:10:34:32:50:e5: c7:d4:8b:bc:37:22:80:e8:0c:63:7f:bf:12:2f:48:66:03:0f: c9:9b:5b:8c:41:d0:db:ea:d6:29:88:32:c1:ea:16:7f:e1:25: 99:6a:86:0f:02:64:7e:69:87:22:86:c0:da:77:e2:a9:bf:ab: 5e:21:57:ae:03:1a:d2:df:82:18:0a:1b:db:56:38:33:2c:93: e1:5f:77:57:92:75:c1:98:8c:84:8f:4d:f4:25:68:f0:c2:31: 2b:38:d0:6e:b5:fe:87:2c:88:29:88:40:5c:38:09:80:a9:55: 3a:04:6d:30:e5:8f:a7:ab:f7:67:f8:15:c6:27:0e:e0:f1:14: 05:cc:28:46:9a:70:18:67:5c:75:44:52:c8:9a:56:e9:55:22: 94:90:b9:7f:75:0d:cb:2e:f7:3d:b9:c2:ae:36:57:b0:9e:b9: 3d:44:e4:64:08:96:8c:42:70:ce:d0:42:7f:09:f4:13:74:20: c9:bc:cc:5a:52:78:e0:13:29:8e:75:39:f4:3c:08:33:be:8a: 4a:06:17:31:71:ff:b2:fd:06:db:62:0d:92:b0:98:90:fd:8e: 8d:16:0c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQlTPYpJEXP7cSiBkU9z99w+nB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdB OTZGMzZDRTAeFw0yNTEyMDUwODI2MDVaFw0yNTEyMDgxNjI1MDVaMDMxMTAvBgNV BAMTKDA3QjUyMDNGQUZDRDE4NERBQkY3RTg0ODYwOUM3M0NFOENCOTY1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gbdRLjnhxfnL/Blz1nergr0w hlk7C+vZS0xWZMiXla7sS26w481Uu8gTvCyCUGYdGlI3JYS0ysRws/Lqdpv/2g2O IwR+UfHP+BLlCgr2CMUUGfFaEeyhQ/v5x1m7oc8esu1gjr0o4JnriF0Z8xDY3cT4 mzJiVClTrmd4h8pV/UgJ/fo0mLRje0feVr7N9eUGAM1Q0JkjFBg9UKlQN+h20zTA kEz9Cp+KMXYvu5170Yql0aor+VvgW7o7/ob1ROcB+YpaT49areXJb/C2OIy5gjcR GvtUrVoNlfge5xdtZm+B/ljxgSs2+SaNkxdSyJr/PEo6KRvTQepKL6fu+gaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7UgP6/NGE2r9+hIYJxzzoy5ZeYwHwYDVR0j BBgwFoAUXyLSCE93S2jZ3pdjOXtWV6lvNs4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWIxYTc5MC1kY2VkLTQ2NGEtODk1ZC05MDM1YTBjYzVmMmYvMC81RjIyRDIwODRG Nzc0QjY4RDlERTk3NjMzOTdCNTY1N0E5NkYzNkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdBOTZG MzZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2 NTdBOTZGMzZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6WaKMlEYXoF05/PqYCGahpTyYfqwCx+DBt vGuv09EQNDJQ5cfUi7w3IoDoDGN/vxIvSGYDD8mbW4xB0Nvq1imIMsHqFn/hJZlq hg8CZH5phyKGwNp34qm/q14hV64DGtLfghgKG9tWODMsk+Ffd1eSdcGYjISPTfQl aPDCMSs40G61/ocsiCmIQFw4CYCpVToEbTDlj6er92f4FcYnDuDxFAXMKEaacBhn XHVEUsiaVulVIpSQuX91Dcsu9z25wq42V7CeuT1E5GQIloxCcM7QQn8J9BN0IMm8 zFpSeOATKY51OfQ8CDO+ikoGFzFx/7L9BttiDZKwmJD9jo0WDLY= -----END CERTIFICATE-----Generated at Sun Dec 7 03:03:58 2025 by rpki-client