This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: i/u7XcPSMEi7Yz4Ar8SleF9nPuMRaQcrj+4LsuTILD4= Subject key identifier: 9C:E7:52:17:1C:A3:52:57:52:F9:63:0D:A2:9F:5D:06:32:29:F5:2D Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 77ED0C05CB9562EA3706ED435350423D066A52EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: FE Signing time: Thu 04 Dec 2025 12:12:22 +0000 Manifest this update: Thu 04 Dec 2025 12:07:22 +0000 Manifest next update: Sun 07 Dec 2025 17:23:22 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: Atb07v7231vn78sfeHjaeRpeM2sqpoO5b59qaRtEis4=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 17:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ed:0c:05:cb:95:62:ea:37:06:ed:43:53:50:42:3d:06:6a:52:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Dec 4 12:07:22 2025 GMT Not After : Dec 7 17:23:22 2025 GMT Subject: CN=9CE752171CA3525752F9630DA29F5D063229F52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:0b:eb:43:a7:a5:a9:9d:68:21:ad:5b:da: 1d:4d:de:a1:dc:72:6e:22:00:75:ad:4b:c1:33:3f: 0d:74:83:c5:af:fb:fd:43:14:86:bc:59:37:b6:e5: 85:15:18:47:6d:98:27:08:78:f6:24:25:9d:e5:c2: 0e:42:99:5c:65:77:27:db:7c:49:60:8b:ce:c3:65: ca:52:40:71:7d:8e:a4:c4:38:28:bc:a3:bb:a6:23: 1d:46:90:b6:cf:ad:2d:e0:74:59:99:56:a1:cb:eb: 67:00:66:ec:a6:48:46:c3:28:4b:88:f8:de:a4:ef: cb:4d:f4:d2:8e:fa:30:45:4f:5e:c5:6b:63:bf:21: f8:5c:ca:70:f7:0b:83:db:8c:bd:67:1d:a1:87:fc: 8e:12:2f:8f:af:a8:e9:1f:e1:13:d5:37:67:01:f5: 54:42:0f:02:1c:bb:6d:e6:52:b1:0c:eb:d0:c0:04: a4:28:59:0a:29:e6:25:f8:e0:f2:d9:42:62:d2:b9: 0c:6b:6e:98:cc:86:7f:88:3a:de:26:c3:94:e5:9c: 60:d5:1d:c6:d4:b7:00:b3:25:e0:0c:56:e7:00:b7: a1:86:a0:67:d9:85:e4:3a:2c:89:56:23:81:f1:5d: 3c:0b:09:04:a9:4c:68:4c:53:72:d9:19:96:21:a3: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:52:17:1C:A3:52:57:52:F9:63:0D:A2:9F:5D:06:32:29:F5:2D X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:76:cd:64:20:c8:ff:89:37:18:b1:c7:55:5c:b2:13:1b:6d: 45:96:e7:e7:46:26:f4:49:da:67:bb:90:5e:1f:9f:ab:11:73: 32:31:b6:51:c4:ea:d8:4d:9b:9a:b7:f6:92:62:00:6c:af:ee: a3:2d:96:89:e7:24:ec:1a:7f:fe:d6:e1:f9:e0:0b:ed:3c:0e: 09:d0:c7:c0:75:15:4d:85:e3:16:c7:db:1c:6e:df:46:f6:4c: ba:e5:7b:c7:b0:da:79:27:4a:c4:1c:03:ad:6c:0c:f1:13:b4: 36:be:25:b4:b8:fa:77:79:40:3c:db:d0:63:1f:99:a8:83:72: 9c:4c:7b:7b:e8:c3:8e:a4:c8:01:98:af:e9:08:f9:3c:14:60: 14:9a:a7:78:be:8e:bc:e8:b8:f4:30:63:fb:83:91:82:26:33: 0b:85:56:9f:5e:2e:dd:b6:d5:2f:11:8d:c9:d4:70:ec:24:be: d0:82:9f:90:b8:7b:7c:d7:21:63:06:1c:9c:ae:3f:ba:35:54: 06:76:9b:97:a3:c1:6a:4e:62:a6:17:b9:82:b6:ab:c5:81:c2: 3d:f0:12:a2:a2:f8:ba:9c:8b:50:ec:f0:59:13:2f:eb:d3:e6: ae:53:c6:09:49:ef:f5:b7:17:7f:2e:20:2c:e7:db:86:45:70: 75:fa:f5:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+0MBcuVYuo3Bu1DU1BCPQZqUuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTEyMDQxMjA3MjJaFw0yNTEyMDcxNzIzMjJaMDMxMTAvBgNV BAMTKDlDRTc1MjE3MUNBMzUyNTc1MkY5NjMwREEyOUY1RDA2MzIyOUY1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKwvrQ6elqZ1oIa1b2h1N3qHc cm4iAHWtS8EzPw10g8Wv+/1DFIa8WTe25YUVGEdtmCcIePYkJZ3lwg5CmVxldyfb fElgi87DZcpSQHF9jqTEOCi8o7umIx1GkLbPrS3gdFmZVqHL62cAZuymSEbDKEuI +N6k78tN9NKO+jBFT17Fa2O/IfhcynD3C4PbjL1nHaGH/I4SL4+vqOkf4RPVN2cB 9VRCDwIcu23mUrEM69DABKQoWQop5iX44PLZQmLSuQxrbpjMhn+IOt4mw5TlnGDV HcbUtwCzJeAMVucAt6GGoGfZheQ6LIlWI4HxXTwLCQSpTGhMU3LZGZYhoxVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOdSFxyjUldS+WMNop9dBjIp9S0wHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV2zWQgyP+JNxixx1VcshMbbUWW5+dGJvRJ 2me7kF4fn6sRczIxtlHE6thNm5q39pJiAGyv7qMtlonnJOwaf/7W4fngC+08DgnQ x8B1FU2F4xbH2xxu30b2TLrle8ew2nknSsQcA61sDPETtDa+JbS4+nd5QDzb0GMf maiDcpxMe3vow46kyAGYr+kI+TwUYBSap3i+jrzouPQwY/uDkYImMwuFVp9eLt22 1S8RjcnUcOwkvtCCn5C4e3zXIWMGHJyuP7o1VAZ2m5ejwWpOYqYXuYK2q8WBwj3w EqKi+Lqci1Ds8FkTL+vT5q5TxglJ7/W3F38uICzn24ZFcHX69VI= -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:46 2025 by rpki-client