This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: N+3LIlEg4uU17bzPjHWK65G1I9B94IW78AkBU021HY8= Subject key identifier: 72:DE:04:B0:C0:28:EA:CB:95:3A:24:E0:B8:BC:BB:62:05:A6:2B:0A Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 2C773E4802B9EEE23C8C2836287E1152890D32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 0128 Signing time: Thu 04 Dec 2025 19:31:41 +0000 Manifest this update: Thu 04 Dec 2025 19:26:41 +0000 Manifest next update: Mon 08 Dec 2025 02:49:41 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) 3: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: qlOB2xpcti2NWBQIV3g9EA1yQ72mOKsbrougOcRzu7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:77:3e:48:02:b9:ee:e2:3c:8c:28:36:28:7e:11:52:89:0d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Dec 4 19:26:41 2025 GMT Not After : Dec 8 02:49:41 2025 GMT Subject: CN=72DE04B0C028EACB953A24E0B8BCBB6205A62B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:fe:04:02:9a:ac:f2:03:c7:0b:c2:83:1a: 75:c4:ad:24:3e:73:ad:c9:21:67:cf:84:0b:32:e4: f8:63:b2:74:ae:1b:ca:46:19:cd:ec:4c:50:5d:c1: 34:b4:bd:ae:92:91:76:30:a9:c0:76:e5:e7:60:32: 50:ea:a7:a2:cf:e9:f9:1f:2f:a7:b6:53:b2:94:89: 00:82:06:98:e9:65:c0:e7:9b:b7:75:3b:be:a3:99: 0c:90:b3:71:0a:ec:86:0f:80:8a:30:4b:bd:fb:8e: 8b:89:50:0e:7e:32:0f:b0:52:99:65:af:0f:db:d2: ba:a2:87:7d:d6:94:5c:98:38:97:25:49:45:4e:24: 66:29:e5:17:c8:65:f5:17:d5:19:52:eb:03:d3:f3: 4d:c5:2c:bb:9e:1d:c3:ae:f2:e4:99:98:2b:4e:a8: 8e:45:44:41:f5:a5:e4:34:fb:13:df:9f:00:26:58: 33:1b:a1:6c:dd:9b:3f:46:50:bb:ee:c4:b4:8c:9a: fc:db:c1:80:68:6d:cb:2c:76:e3:53:c8:77:19:a0: 19:0c:a3:5b:69:79:c7:9b:a3:1a:96:6a:3b:2b:e4: b0:29:2a:e1:b4:ed:fc:1d:b7:e0:9d:d3:33:f9:43: dc:e9:6d:fa:5a:49:ed:61:da:4b:2c:98:a9:44:6a: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DE:04:B0:C0:28:EA:CB:95:3A:24:E0:B8:BC:BB:62:05:A6:2B:0A X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:37:1d:04:e6:6c:7a:44:21:4b:0e:5c:e5:1e:8d:3b:7c:14: 55:22:50:b9:db:7b:25:67:ad:61:a2:24:99:1b:44:05:7a:17: c0:7a:a7:f0:a8:37:e9:e9:12:d5:ef:c5:2a:13:1b:0c:2a:1c: d9:01:67:45:c1:72:49:55:b1:fa:8a:c0:83:8e:81:e1:ac:44: 0e:42:7a:94:04:d3:49:2c:f5:b1:33:00:a7:3f:ad:df:3d:06: c9:29:ff:68:e4:32:f1:05:c8:9d:34:85:c1:f9:6e:91:bb:b6: df:83:e3:ec:a3:ff:67:38:82:bc:cb:28:93:6b:05:77:7f:b9: 6c:05:51:20:cf:19:3b:16:f1:5b:eb:76:7b:ef:53:08:71:d7: 71:fc:93:4f:2f:9c:94:c5:a9:c9:3a:de:9b:c8:b2:a7:9e:e2: 44:17:52:d3:e4:70:4a:77:70:9f:75:02:86:10:de:2c:f3:d3: ef:0b:f6:74:b2:6e:19:59:98:ec:a0:2b:2f:f8:83:a9:47:57: 01:36:da:d9:c1:f0:a7:a7:6e:f3:ff:b8:f7:24:c5:00:da:6c: 0c:a4:08:68:7e:e5:39:62:8a:80:be:df:93:08:8a:2a:96:4e: 44:c8:66:98:b9:f0:84:91:f5:72:32:99:9b:9d:39:9e:5d:56: 65:6d:5e:39 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLHc+SAK57uI8jCg2KH4RUokNMjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGNUQ3MUVDNzc5MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIx Q0Q4ODMyMB4XDTI1MTIwNDE5MjY0MVoXDTI1MTIwODAyNDk0MVowMzExMC8GA1UE AxMoNzJERTA0QjBDMDI4RUFDQjk1M0EyNEUwQjhCQ0JCNjIwNUE2MkIwQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6S/gQCmqzyA8cLwoMadcStJD5z rckhZ8+ECzLk+GOydK4bykYZzexMUF3BNLS9rpKRdjCpwHbl52AyUOqnos/p+R8v p7ZTspSJAIIGmOllwOebt3U7vqOZDJCzcQrshg+AijBLvfuOi4lQDn4yD7BSmWWv D9vSuqKHfdaUXJg4lyVJRU4kZinlF8hl9RfVGVLrA9PzTcUsu54dw67y5JmYK06o jkVEQfWl5DT7E9+fACZYMxuhbN2bP0ZQu+7EtIya/NvBgGhtyyx241PIdxmgGQyj W2l5x5ujGpZqOyvksCkq4bTt/B234J3TM/lD3Olt+lpJ7WHaSyyYqURqFLUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRy3gSwwCjqy5U6JOC4vLtiBaYrCjAfBgNVHSME GDAWgBT11x7HeSKpCA8Xw6Fvvl9psc2IMjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNh ZTgzNjczLTA5NmEtNDQwYy1iMjdhLTliZTY0YjEzYjRlNS8wL0Y1RDcxRUM3Nzky MkE5MDgwRjE3QzNBMTZGQkU1RjY5QjFDRDg4MzIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GNUQ3MUVDNzc5MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4 ODMyLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zYWU4MzY3My0wOTZhLTQ0MGMtYjI3 YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5MjJBOTA4MEYxN0MzQTE2RkJFNUY2 OUIxQ0Q4ODMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEArDcdBOZsekQhSw5c5R6NO3wUVSJQudt7JWet YaIkmRtEBXoXwHqn8Kg36ekS1e/FKhMbDCoc2QFnRcFySVWx+orAg46B4axEDkJ6 lATTSSz1sTMApz+t3z0GySn/aOQy8QXInTSFwflukbu234Pj7KP/ZziCvMsok2sF d3+5bAVRIM8ZOxbxW+t2e+9TCHHXcfyTTy+clMWpyTrem8iyp57iRBdS0+RwSndw n3UChhDeLPPT7wv2dLJuGVmY7KArL/iDqUdXATba2cHwp6du8/+49yTFANpsDKQI aH7lOWKKgL7fkwiKKpZORMhmmLnwhJH1cjKZm505nl1WZW1eOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:06 2025 by rpki-client