This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: U+6Yxz4o1eVz3FjRxmxC6qjwaNZWLlzycOwq/Esbwmg= Subject key identifier: 62:06:AF:39:2A:F4:E5:F6:E8:58:6E:20:06:69:8C:76:43:5C:8D:C0 Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 3E96AA1E22B6B91133AD727A4F97D10D3E5B9A7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: A5 Signing time: Sun 07 Dec 2025 02:30:59 +0000 Manifest this update: Sun 07 Dec 2025 02:25:59 +0000 Manifest next update: Wed 10 Dec 2025 14:10:59 +0000 Files and hashes: 1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: +pbE6kl9czj9iO6XL24SjyIeMHDjMH4vrh77kaenHwk=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: dSXAsb0EYxBUtM1CoaRZWop2Ld4yRUPCa2RHmQsYyhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:96:aa:1e:22:b6:b9:11:33:ad:72:7a:4f:97:d1:0d:3e:5b:9a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Dec 7 02:25:59 2025 GMT Not After : Dec 10 14:10:59 2025 GMT Subject: CN=6206AF392AF4E5F6E8586E2006698C76435C8DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:7e:2c:b0:b8:2d:d1:fb:62:c9:a8:1b:e4: 38:2a:30:af:f2:5c:0c:38:b5:a5:e2:21:36:3f:a1: c1:cb:57:52:91:6d:a4:6a:11:d7:cb:61:40:aa:19: 3e:e2:9e:57:22:9c:d9:22:ad:5d:12:27:b1:a4:d6: dd:96:df:3d:71:f7:be:fa:fe:45:bb:17:6b:29:01: 56:02:d8:1d:01:32:ff:ac:80:c0:92:09:aa:c5:d0: 9d:87:ad:9f:9a:76:4c:23:84:71:ba:d5:cb:46:92: b8:8d:97:5a:34:3b:31:e3:24:a7:80:77:c0:5d:6a: bf:12:e8:19:5d:dc:44:0f:1a:54:02:92:22:c8:c3: bf:5b:16:22:47:f0:9d:f1:af:9a:77:c3:5e:e7:6a: ca:46:08:c9:29:23:b8:a5:cd:18:dd:52:88:b3:70: 50:4a:17:6c:41:0a:63:cf:6a:53:81:36:ce:e9:e1: b3:4e:c9:7d:6d:8b:ef:80:e0:bc:f9:19:f5:38:57: 5c:40:d4:42:8e:17:1a:98:9a:a1:29:dd:ac:83:10: e7:ea:57:00:83:04:f8:b3:f4:88:78:bb:02:c8:c1: a9:e3:5b:7b:4f:84:bb:33:cc:d2:f6:8a:22:38:c6: 00:15:f3:87:1e:c1:48:4a:ea:3c:30:28:2a:b1:f2: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:AF:39:2A:F4:E5:F6:E8:58:6E:20:06:69:8C:76:43:5C:8D:C0 X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e2:9a:61:97:3d:80:54:0f:c1:0d:5f:c2:f3:ad:c4:ba:1d: ee:06:8f:81:8f:72:9c:c3:99:cd:e0:85:55:ba:72:c3:18:1f: 38:15:05:62:8b:2c:bd:31:99:d6:9a:b6:b8:0a:32:d9:d3:b0: 45:f0:b0:b6:56:2c:2e:98:5d:1b:7f:59:90:7f:48:51:d7:06: 81:eb:23:39:26:81:92:96:d2:1f:3a:9d:03:d4:4d:89:47:c6: 48:ff:86:bc:d8:5d:3d:39:30:75:56:5c:16:91:00:c6:3c:1b: c2:06:26:2a:41:12:c4:a7:50:27:a3:db:e9:f5:2f:d8:20:bf: c9:0f:fa:f2:bc:64:32:c9:51:32:4d:04:53:71:f7:4f:38:ed: 44:ab:a7:1a:1b:69:7f:0f:82:64:61:14:bc:fc:68:aa:ac:31: 3c:6c:2e:c0:03:6e:70:ed:17:8b:77:a5:cc:b5:38:65:0f:5a: fd:b1:f9:ad:10:0f:d3:ba:57:33:58:4c:e5:36:f7:51:99:40: 4e:d7:f4:59:79:98:74:03:8f:ae:17:b9:72:48:41:04:38:67: 61:fd:9e:88:62:88:48:6b:db:bd:6b:d7:eb:17:62:ef:27:24: 2e:e6:62:72:af:0b:8d:ad:c5:a8:88:02:9b:0a:9b:c7:dc:94: fe:09:ba:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpaqHiK2uREzrXJ6T5fRDT5bmn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNTEyMDcwMjI1NTlaFw0yNTEyMTAxNDEwNTlaMDMxMTAvBgNV BAMTKDYyMDZBRjM5MkFGNEU1RjZFODU4NkUyMDA2Njk4Qzc2NDM1QzhEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirn4ssLgt0ftiyagb5DgqMK/y XAw4taXiITY/ocHLV1KRbaRqEdfLYUCqGT7inlcinNkirV0SJ7Gk1t2W3z1x9776 /kW7F2spAVYC2B0BMv+sgMCSCarF0J2HrZ+adkwjhHG61ctGkriNl1o0OzHjJKeA d8Bdar8S6Bld3EQPGlQCkiLIw79bFiJH8J3xr5p3w17naspGCMkpI7ilzRjdUoiz cFBKF2xBCmPPalOBNs7p4bNOyX1ti++A4Lz5GfU4V1xA1EKOFxqYmqEp3ayDEOfq VwCDBPiz9Ih4uwLIwanjW3tPhLszzNL2iiI4xgAV84cewUhK6jwwKCqx8ryRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYgavOSr05fboWG4gBmmMdkNcjcAwHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvimmGXPYBUD8ENX8LzrcS6He4Gj4GPcpzD mc3ghVW6csMYHzgVBWKLLL0xmdaatrgKMtnTsEXwsLZWLC6YXRt/WZB/SFHXBoHr IzkmgZKW0h86nQPUTYlHxkj/hrzYXT05MHVWXBaRAMY8G8IGJipBEsSnUCej2+n1 L9ggv8kP+vK8ZDLJUTJNBFNx90847USrpxobaX8PgmRhFLz8aKqsMTxsLsADbnDt F4t3pcy1OGUPWv2x+a0QD9O6VzNYTOU291GZQE7X9Fl5mHQDj64XuXJIQQQ4Z2H9 nohiiEhr271r1+sXYu8nJC7mYnKvC42txaiIApsKm8fclP4JukA= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:48 2025 by rpki-client