This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: UcZDM1kUwyMzScQPJhlOhnNAb/tcIDiJe39/rbxqALo= Subject key identifier: 10:D3:24:E4:99:33:D8:F4:5D:66:71:0F:F0:2B:7B:AF:F4:EC:85:D1 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 3CDEB0F2D287F2118806CEE678E8C0C82187F37C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0366 Signing time: Fri 05 Dec 2025 19:50:41 +0000 Manifest this update: Fri 05 Dec 2025 19:45:41 +0000 Manifest next update: Tue 09 Dec 2025 00:55:41 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: NtJIKRnUBIcpzM3/hSgp8XiZzrtm3TFdFbZLei4VTcU=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:de:b0:f2:d2:87:f2:11:88:06:ce:e6:78:e8:c0:c8:21:87:f3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Dec 5 19:45:41 2025 GMT Not After : Dec 9 00:55:41 2025 GMT Subject: CN=10D324E49933D8F45D66710FF02B7BAFF4EC85D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:a3:24:38:62:46:8a:92:2a:69:ea:0e:f6: 43:ed:a0:7b:ac:cc:ec:20:3d:22:c8:68:16:d9:a0: ca:5e:b7:0c:45:65:69:7e:c4:a0:0b:f4:e3:f1:0c: 45:6a:de:8f:e5:90:56:a9:05:c0:bc:a9:4a:bb:f6: a2:08:09:ea:7a:46:b7:2e:5c:40:bf:0d:21:dd:d2: 94:8e:0c:a6:78:0a:36:30:08:25:d4:34:21:8f:b2: 43:7d:73:f0:69:69:30:80:78:ed:0d:35:a8:42:9d: 42:ac:1f:7c:f7:d4:85:4a:86:08:5d:ee:e7:d0:83: 27:6f:2c:07:7f:9d:8c:81:c3:55:4f:53:55:f5:90: bc:a1:c4:4b:77:2c:66:8c:a9:7d:f5:0c:51:85:6c: 19:7b:b1:ae:df:0a:e6:83:0e:ef:0b:6c:ea:4a:30: 4a:b4:a5:25:23:f1:58:c4:c4:18:96:5e:6d:dc:bc: 74:f1:6e:b1:83:78:87:4a:47:e1:22:a2:b3:cd:e1: b4:4a:09:6b:47:45:96:72:b3:d3:2d:ec:ba:03:1c: b4:7b:66:a6:c8:17:4e:74:37:cc:bf:3f:96:e1:8a: a9:4e:03:65:d1:c1:4e:0b:af:b1:bb:02:90:e6:c5: 7d:1a:c5:b8:e1:f4:5a:fd:7d:87:b9:70:e3:58:56: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D3:24:E4:99:33:D8:F4:5D:66:71:0F:F0:2B:7B:AF:F4:EC:85:D1 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:33:79:41:12:12:3b:4c:9a:54:fa:67:bd:75:82:d1:2f:51: eb:7a:e6:5f:77:88:52:7c:c7:ef:6a:a3:6c:70:61:1e:ee:bc: 23:76:3b:5c:56:0f:08:10:5c:ca:e4:21:89:95:00:7a:e5:93: 06:bb:6b:0d:ae:42:13:b7:da:4b:10:88:49:66:9e:db:e6:29: 66:19:7b:65:b9:17:ab:34:4d:cd:66:11:10:46:a4:d6:d7:0b: 34:89:9e:b8:39:10:93:3a:82:71:1f:db:13:59:c0:a9:d9:b0: e6:77:ed:a5:5e:f7:00:f9:b1:6e:45:bd:e6:d7:3c:6c:2f:1a: 5c:e0:26:bd:62:7c:dc:6b:87:25:52:41:8c:22:e5:f1:b9:0e: 5c:aa:3f:98:77:2d:53:bb:ed:24:ee:5f:83:2f:c3:1a:8b:9c: cd:18:6f:a9:2e:c4:1e:a4:74:16:13:be:00:8a:90:f2:bd:e0: 84:15:3b:d3:70:d9:6f:21:a7:7d:b3:46:d3:90:dd:02:54:48: dc:ad:bd:cc:9d:8b:c1:64:52:e4:af:14:27:26:08:e6:1e:99: 73:9e:0e:03:5e:c4:a0:f1:1b:1b:3f:7e:5f:6c:86:b8:74:e5: 84:68:32:d9:13:73:c4:df:a1:7d:26:5c:1d:45:d5:51:e0:0d: 60:76:ee:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPN6w8tKH8hGIBs7meOjAyCGH83wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTEyMDUxOTQ1NDFaFw0yNTEyMDkwMDU1NDFaMDMxMTAvBgNV BAMTKDEwRDMyNEU0OTkzM0Q4RjQ1RDY2NzEwRkYwMkI3QkFGRjRFQzg1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ66MkOGJGipIqaeoO9kPtoHus zOwgPSLIaBbZoMpetwxFZWl+xKAL9OPxDEVq3o/lkFapBcC8qUq79qIICep6Rrcu XEC/DSHd0pSODKZ4CjYwCCXUNCGPskN9c/BpaTCAeO0NNahCnUKsH3z31IVKhghd 7ufQgydvLAd/nYyBw1VPU1X1kLyhxEt3LGaMqX31DFGFbBl7sa7fCuaDDu8LbOpK MEq0pSUj8VjExBiWXm3cvHTxbrGDeIdKR+EiorPN4bRKCWtHRZZys9Mt7LoDHLR7 ZqbIF050N8y/P5bhiqlOA2XRwU4Lr7G7ApDmxX0axbjh9Fr9fYe5cONYVvOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENMk5Jkz2PRdZnEP8Ct7r/TshdEwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMczeUESEjtMmlT6Z711gtEvUet65l93iFJ8 x+9qo2xwYR7uvCN2O1xWDwgQXMrkIYmVAHrlkwa7aw2uQhO32ksQiElmntvmKWYZ e2W5F6s0Tc1mERBGpNbXCzSJnrg5EJM6gnEf2xNZwKnZsOZ37aVe9wD5sW5FvebX PGwvGlzgJr1ifNxrhyVSQYwi5fG5DlyqP5h3LVO77STuX4MvwxqLnM0Yb6kuxB6k dBYTvgCKkPK94IQVO9Nw2W8hp32zRtOQ3QJUSNytvcydi8FkUuSvFCcmCOYemXOe DgNexKDxGxs/fl9shrh05YRoMtkTc8TfoX0mXB1F1VHgDWB27vU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:55 2025 by rpki-client