This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: ogNrwGaAKPOy13+MrmLnqMKaME4RXmconD7vgOfh1jI= Subject key identifier: 30:0A:D3:09:8B:2B:86:A4:61:5B:B6:F5:A5:EA:D0:4E:27:F0:0B:E3 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 20E410623BE9542A7A941D4CA08E9D531AA36943 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01D2 Signing time: Sat 06 Dec 2025 07:10:38 +0000 Manifest this update: Sat 06 Dec 2025 07:05:38 +0000 Manifest next update: Tue 09 Dec 2025 16:27:38 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: nIQTp9gE88CX+ekPg6KRnuVmJ+uMhnG8SxGLygP/4lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e4:10:62:3b:e9:54:2a:7a:94:1d:4c:a0:8e:9d:53:1a:a3:69:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Dec 6 07:05:38 2025 GMT Not After : Dec 9 16:27:38 2025 GMT Subject: CN=300AD3098B2B86A4615BB6F5A5EAD04E27F00BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:6c:c3:b3:3d:7e:5e:50:e6:75:5f:da:c0: 67:c1:28:e9:5a:2e:f2:b3:56:38:ab:55:e7:2e:26: 3f:12:21:c6:f3:63:2c:84:80:c9:04:71:68:c1:99: 58:0f:1f:76:9d:59:18:58:c4:e4:63:75:85:df:1f: 03:75:54:a3:9f:70:ea:ab:e7:68:06:8a:0f:dd:cc: d4:03:ea:b3:51:75:13:92:9e:7b:1c:f2:96:c5:ce: 07:89:52:97:e4:0e:31:f1:a7:93:f1:45:4b:a0:9b: 3e:53:54:f7:bc:ee:2a:c2:2c:4d:d3:53:f0:02:a4: a8:1a:e0:8e:e3:30:9f:81:0e:f8:d0:43:64:59:bf: f1:a4:bb:94:2c:b1:7b:0e:77:89:1d:9d:22:66:a2: b8:48:4e:32:89:b6:de:9b:35:b2:23:21:ea:f3:5b: 59:8b:54:6c:f8:b4:80:97:6b:7e:d7:4a:65:fe:64: 8c:a5:cf:23:2f:87:2a:b6:b7:6b:24:18:a1:f0:d7: bf:3a:df:c9:09:4e:21:0e:39:1a:fc:13:24:48:3e: c2:74:dd:fd:09:a2:c3:89:bc:fe:63:cc:d3:7d:00: 28:7a:f7:b5:28:64:67:7f:17:3d:fa:6d:bb:99:96: e5:d6:bb:a0:c1:02:39:82:a8:64:db:c5:2a:16:89: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0A:D3:09:8B:2B:86:A4:61:5B:B6:F5:A5:EA:D0:4E:27:F0:0B:E3 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e0:0d:b6:c7:40:06:41:18:83:f4:9f:da:d9:58:1b:88:04: 4f:6c:45:89:85:60:d1:23:42:3b:07:a6:f5:5c:27:94:d3:ec: a6:89:40:32:cc:c1:8c:cb:40:43:7a:ee:ab:8d:3c:41:9c:d8: 31:9f:fa:0c:7a:ac:1a:22:de:a3:25:a8:36:d3:12:b9:e1:7a: 57:46:4f:d1:d0:de:a2:8e:90:b7:fd:c2:e8:48:9f:44:c2:5e: b7:3c:81:74:12:70:8c:52:25:46:d9:2a:1c:e1:f3:e7:14:e5: d8:17:c9:b0:ba:65:38:e5:79:f4:b4:7a:9f:a9:2d:97:d7:64: 68:fd:ea:5b:b2:0a:31:d4:c5:9b:39:00:5d:4c:8f:e2:fe:9a: 46:e5:bd:0e:30:cd:dd:1f:b5:81:18:f0:2f:87:f1:12:4e:11: c6:28:a8:49:3a:08:42:c5:8e:b6:a4:11:31:be:c7:fb:78:17: 8c:05:99:00:45:e7:13:43:76:ff:0f:9d:c7:35:11:7f:2a:3a: 73:23:d8:96:c2:8d:80:11:a8:6f:d3:1d:49:a9:26:52:3f:22: f5:9b:63:f4:b5:81:22:31:de:21:32:81:18:7e:77:d2:ae:61: 7a:b2:4a:a2:ed:21:e5:b6:3b:13:6a:bb:5d:90:6d:26:27:ef: 4d:0e:ce:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOQQYjvpVCp6lB1MoI6dUxqjaUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTEyMDYwNzA1MzhaFw0yNTEyMDkxNjI3MzhaMDMxMTAvBgNV BAMTKDMwMEFEMzA5OEIyQjg2QTQ2MTVCQjZGNUE1RUFEMDRFMjdGMDBCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xWzDsz1+XlDmdV/awGfBKOla LvKzVjirVecuJj8SIcbzYyyEgMkEcWjBmVgPH3adWRhYxORjdYXfHwN1VKOfcOqr 52gGig/dzNQD6rNRdROSnnsc8pbFzgeJUpfkDjHxp5PxRUugmz5TVPe87irCLE3T U/ACpKga4I7jMJ+BDvjQQ2RZv/Gku5QssXsOd4kdnSJmorhITjKJtt6bNbIjIerz W1mLVGz4tICXa37XSmX+ZIylzyMvhyq2t2skGKHw178638kJTiEOORr8EyRIPsJ0 3f0JosOJvP5jzNN9ACh697UoZGd/Fz36bbuZluXWu6DBAjmCqGTbxSoWiVhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMArTCYsrhqRhW7b1perQTifwC+MwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDgDbbHQAZBGIP0n9rZWBuIBE9sRYmFYNEj QjsHpvVcJ5TT7KaJQDLMwYzLQEN67quNPEGc2DGf+gx6rBoi3qMlqDbTErnheldG T9HQ3qKOkLf9wuhIn0TCXrc8gXQScIxSJUbZKhzh8+cU5dgXybC6ZTjlefS0ep+p LZfXZGj96luyCjHUxZs5AF1Mj+L+mkblvQ4wzd0ftYEY8C+H8RJOEcYoqEk6CELF jrakETG+x/t4F4wFmQBF5xNDdv8Pncc1EX8qOnMj2JbCjYARqG/THUmpJlI/IvWb Y/S1gSIx3iEygRh+d9KuYXqySqLtIeW2OxNqu12QbSYn700OzoU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:36 2025 by rpki-client