This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: WTpoGyFKr5JPXE3h7G1cZQKlUei1JmUeQn5zQ1V+ICc= Subject key identifier: 60:FB:F1:DC:57:F0:C0:BB:02:6A:73:59:25:C1:88:D9:8B:D3:BC:C8 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 5E91824EBBD7449B0E76FC91A424E0171E6F161F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0533 Signing time: Thu 04 Dec 2025 14:41:50 +0000 Manifest this update: Thu 04 Dec 2025 14:36:50 +0000 Manifest next update: Sun 07 Dec 2025 20:55:50 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: 9TK2Sy3bnZK7LaKwErYQHbk9pqqDLe/WcRkuTSQPaCE=) 2: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 3: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 20:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:82:4e:bb:d7:44:9b:0e:76:fc:91:a4:24:e0:17:1e:6f:16:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Dec 4 14:36:50 2025 GMT Not After : Dec 7 20:55:50 2025 GMT Subject: CN=60FBF1DC57F0C0BB026A735925C188D98BD3BCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:d1:04:f1:d4:1f:de:e3:d5:28:cf:76:98: 8d:9c:07:4b:c7:0b:ca:e8:6a:26:e1:4d:7b:15:20: 38:45:55:51:e2:8f:1a:38:a2:c6:e0:bd:ea:7d:5f: b1:b0:41:75:62:26:d3:6c:ba:b8:29:3c:07:12:fb: f1:68:92:23:99:1e:04:db:13:e2:ac:e6:56:0c:45: 66:0a:ea:6f:98:82:18:ec:75:bd:7a:44:71:2f:de: 66:b8:8f:2f:71:b2:23:a0:ee:48:4d:90:9c:5b:ee: 96:66:1a:3e:4c:9f:89:b7:c1:b9:20:ad:cb:45:54: 9e:ac:d2:d9:e2:2f:a2:cd:a5:7f:ae:4d:ca:bd:8a: 5b:0b:ce:44:28:78:2f:48:31:4c:49:3e:22:b8:da: b7:10:b3:a9:7e:02:30:50:06:bc:39:a0:b2:af:af: bb:c6:e9:59:d4:17:5c:0a:71:91:e7:c3:39:a4:11: 5f:6c:c5:f7:ef:45:5e:04:bb:de:42:60:db:17:c6: b7:e1:0c:fd:ef:6b:f3:92:96:2e:95:be:a0:b8:f5: e1:cf:08:72:5c:eb:b4:f1:d5:af:91:1f:d8:d8:a2: 81:21:56:01:c8:c7:42:ce:c8:30:3a:02:9a:a7:87: 27:f8:ca:8c:a5:39:7a:95:79:d9:05:07:25:ec:40: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FB:F1:DC:57:F0:C0:BB:02:6A:73:59:25:C1:88:D9:8B:D3:BC:C8 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:47:f2:51:e3:86:24:2b:fb:df:9f:f5:35:92:8e:6e:69:7d: 39:2e:cc:17:32:6a:a2:74:44:28:ad:6e:b5:57:21:62:a1:a0: 2f:32:f4:db:8a:98:c6:19:68:45:f3:f3:2a:fd:2d:f5:26:69: da:79:9f:ce:fb:1c:db:f1:73:0b:5f:11:7c:f0:f5:23:9b:ac: 27:50:5a:95:53:30:95:60:fb:77:ae:ad:44:f1:24:2a:79:54: c6:82:c7:7a:49:94:24:42:3b:38:eb:e6:69:ab:58:3b:87:a1: 8c:09:1a:f2:cb:97:ad:0f:ad:64:c8:cc:a2:5a:44:5d:d2:b0: 8a:8f:0b:37:65:82:1b:a6:63:35:72:3a:1f:0b:6a:65:05:da: b6:39:f1:22:ba:80:3b:ee:87:ad:88:87:78:0d:71:d0:7a:57: 0c:4e:a5:85:1a:c6:fb:f0:95:b6:6f:9f:6a:97:ae:04:9a:ef: d9:ff:6f:6a:3f:f0:ed:70:08:5e:95:f8:2c:39:5f:48:3a:fb: 93:e1:99:6a:64:60:08:b6:0d:fb:e8:75:7e:81:06:89:ee:93: 7d:bd:81:15:63:39:f9:a2:50:38:30:94:26:ed:d0:02:46:5e: 61:36:4f:48:45:53:39:94:d2:0b:02:3c:08:51:9f:b3:69:39: a5:da:03:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpGCTrvXRJsOdvyRpCTgFx5vFh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTEyMDQxNDM2NTBaFw0yNTEyMDcyMDU1NTBaMDMxMTAvBgNV BAMTKDYwRkJGMURDNTdGMEMwQkIwMjZBNzM1OTI1QzE4OEQ5OEJEM0JDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcS9EE8dQf3uPVKM92mI2cB0vH C8roaibhTXsVIDhFVVHijxo4osbgvep9X7GwQXViJtNsurgpPAcS+/FokiOZHgTb E+Ks5lYMRWYK6m+Yghjsdb16RHEv3ma4jy9xsiOg7khNkJxb7pZmGj5Mn4m3wbkg rctFVJ6s0tniL6LNpX+uTcq9ilsLzkQoeC9IMUxJPiK42rcQs6l+AjBQBrw5oLKv r7vG6VnUF1wKcZHnwzmkEV9sxffvRV4Eu95CYNsXxrfhDP3va/OSli6VvqC49eHP CHJc67Tx1a+RH9jYooEhVgHIx0LOyDA6Apqnhyf4yoylOXqVedkFByXsQCDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPvx3FfwwLsCanNZJcGI2YvTvMgwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpH8lHjhiQr+9+f9TWSjm5pfTkuzBcyaqJ0 RCitbrVXIWKhoC8y9NuKmMYZaEXz8yr9LfUmadp5n877HNvxcwtfEXzw9SObrCdQ WpVTMJVg+3eurUTxJCp5VMaCx3pJlCRCOzjr5mmrWDuHoYwJGvLLl60PrWTIzKJa RF3SsIqPCzdlghumYzVyOh8LamUF2rY58SK6gDvuh62Ih3gNcdB6VwxOpYUaxvvw lbZvn2qXrgSa79n/b2o/8O1wCF6V+Cw5X0g6+5PhmWpkYAi2DfvodX6BBonuk329 gRVjOfmiUDgwlCbt0AJGXmE2T0hFUzmU0gsCPAhRn7NpOaXaA1Y= -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:21 2025 by rpki-client