This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: qgYNRLM4ts7rTmuzPcS1DkNlzJcBqCupu9wji4SqFdU= Subject key identifier: D9:A4:DC:9B:DE:72:F2:A2:9F:1B:BF:B8:9C:08:79:0E:08:E1:C6:E1 Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 29CB790708C6750FCCD424FAF4B8BDF7B5D1443C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 0200 Signing time: Fri 05 Dec 2025 04:30:51 +0000 Manifest this update: Fri 05 Dec 2025 04:25:51 +0000 Manifest next update: Mon 08 Dec 2025 08:28:51 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) 2: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: l/E4vZ1I03ZyIdWRznGlPg3a9PMK7IKIXSMecKZmiGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:79:07:08:c6:75:0f:cc:d4:24:fa:f4:b8:bd:f7:b5:d1:44:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Dec 5 04:25:51 2025 GMT Not After : Dec 8 08:28:51 2025 GMT Subject: CN=D9A4DC9BDE72F2A29F1BBFB89C08790E08E1C6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:e5:71:6b:b1:8d:a6:1b:b8:8d:b9:aa:47: a9:58:3b:c3:75:54:11:94:09:d0:c3:79:5f:b3:cf: c9:9e:65:d1:6c:8b:98:34:63:dd:c7:b1:26:c4:52: 61:d8:da:55:8f:40:04:19:8d:f3:b2:ed:59:8b:cf: 20:35:1c:f1:a5:c6:81:dd:f1:b0:0a:87:69:49:88: 51:6b:4f:a7:7f:d5:96:a0:47:a5:e4:b3:a4:04:3f: 27:4b:21:f2:ce:75:5f:ae:d4:d3:bf:7c:e9:51:49: f9:cf:a2:a0:bc:6d:17:23:79:ae:96:a9:43:8c:28: 02:4e:d5:80:a2:e7:71:f6:af:f6:e8:4b:57:c9:a7: ea:de:4d:01:f6:83:6c:a8:f3:14:1f:3b:4c:43:6e: 78:55:ca:23:21:f6:53:ba:c7:f0:d1:28:3f:79:f8: f2:c1:98:3b:0b:50:da:25:61:33:35:e3:47:ee:65: 6b:aa:14:5a:79:16:c5:3d:10:74:91:42:bb:de:1c: 7f:00:0f:38:97:6c:3a:17:73:55:54:ed:c7:72:87: 8f:1d:b3:d2:c1:e0:72:4b:50:5d:23:6e:5e:0b:21: 96:88:d2:85:9e:21:fa:f4:ba:86:1b:a9:b7:fc:c0: a8:41:76:28:e8:34:97:69:64:d6:4b:31:11:e7:62: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:DC:9B:DE:72:F2:A2:9F:1B:BF:B8:9C:08:79:0E:08:E1:C6:E1 X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bf:07:e2:37:41:6b:63:e8:e2:ef:7f:dd:42:ec:98:02:7b: 55:df:62:d5:91:91:b6:bf:99:6e:29:af:fb:8d:06:dd:bb:fe: 01:36:b3:bd:fb:42:26:3e:ca:69:bb:e3:29:31:9c:f0:60:e0: d2:be:20:f1:18:b0:3c:f2:f6:8f:ce:a8:57:01:c3:70:5d:94: e4:bd:2f:7e:5e:7f:c3:43:6e:b8:3e:82:aa:e7:f6:0c:7d:1f: b2:47:5a:64:38:c6:48:4a:90:d4:57:c2:83:85:66:97:0a:e5: 2b:3c:a0:98:75:57:66:15:26:d1:7c:f7:a7:24:32:ae:56:50: ee:e9:dc:3b:c6:02:d4:cf:f8:0c:05:6e:99:2a:a7:07:2a:fc: 14:cf:2d:ee:95:65:77:8b:36:78:ba:ea:07:58:31:45:d7:20: 28:cd:67:55:a4:15:4e:79:26:17:f3:9a:6a:f8:89:a0:ba:25: aa:8d:c7:4a:6c:d1:7d:23:1c:1d:a2:95:fc:97:b9:1a:1b:47: 63:11:58:ed:26:88:39:d6:2c:d6:c9:03:61:f1:81:d0:8f:1d: 46:b3:aa:90:b9:c4:1c:ae:1f:d5:5c:fd:d4:c0:34:3b:d1:f6: d9:10:5c:54:a4:47:36:d9:16:32:31:90:08:47:79:61:cb:95: bc:b9:ef:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKct5BwjGdQ/M1CT69Li997XRRDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTEyMDUwNDI1NTFaFw0yNTEyMDgwODI4NTFaMDMxMTAvBgNV BAMTKEQ5QTREQzlCREU3MkYyQTI5RjFCQkZCODlDMDg3OTBFMDhFMUM2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWuVxa7GNphu4jbmqR6lYO8N1 VBGUCdDDeV+zz8meZdFsi5g0Y93HsSbEUmHY2lWPQAQZjfOy7VmLzyA1HPGlxoHd 8bAKh2lJiFFrT6d/1ZagR6Xks6QEPydLIfLOdV+u1NO/fOlRSfnPoqC8bRcjea6W qUOMKAJO1YCi53H2r/boS1fJp+reTQH2g2yo8xQfO0xDbnhVyiMh9lO6x/DRKD95 +PLBmDsLUNolYTM140fuZWuqFFp5FsU9EHSRQrveHH8ADziXbDoXc1VU7cdyh48d s9LB4HJLUF0jbl4LIZaI0oWeIfr0uoYbqbf8wKhBdijoNJdpZNZLMRHnYuGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2aTcm95y8qKfG7+4nAh5DgjhxuEwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2/B+I3QWtj6OLvf91C7JgCe1XfYtWRkba/ mW4pr/uNBt27/gE2s737QiY+ymm74ykxnPBg4NK+IPEYsDzy9o/OqFcBw3BdlOS9 L35ef8NDbrg+gqrn9gx9H7JHWmQ4xkhKkNRXwoOFZpcK5Ss8oJh1V2YVJtF896ck Mq5WUO7p3DvGAtTP+AwFbpkqpwcq/BTPLe6VZXeLNni66gdYMUXXICjNZ1WkFU55 Jhfzmmr4iaC6JaqNx0ps0X0jHB2ilfyXuRobR2MRWO0miDnWLNbJA2HxgdCPHUaz qpC5xByuH9Vc/dTANDvR9tkQXFSkRzbZFjIxkAhHeWHLlby574w= -----END CERTIFICATE-----Generated at Sun Dec 7 07:48:15 2025 by rpki-client