This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: c+gwwzvwtL2NtnYFX2w8N2mWOmfenMV/zUXYi2G3g34= Subject key identifier: CB:3A:02:60:71:66:8B:60:7A:78:6E:D0:01:1C:6F:93:D6:ED:84:CF Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 73B7821265C5D0DB660AD8E902DFC854B71B6E20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 5C Signing time: Fri 05 Dec 2025 05:31:04 +0000 Manifest this update: Fri 05 Dec 2025 05:26:04 +0000 Manifest next update: Mon 08 Dec 2025 07:31:04 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) 2: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: N7gF1B2KOXUllKQ5kI8PmMLIWIt1iEZk/j24BpaodJk=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b7:82:12:65:c5:d0:db:66:0a:d8:e9:02:df:c8:54:b7:1b:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Dec 5 05:26:04 2025 GMT Not After : Dec 8 07:31:04 2025 GMT Subject: CN=CB3A026071668B607A786ED0011C6F93D6ED84CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:cc:c2:73:98:52:08:ac:8e:87:26:90:dc: 7f:a8:ef:fb:6c:9a:99:ae:19:77:92:9c:b4:a8:69: 72:8b:91:75:95:6f:37:29:af:e5:85:d6:57:a5:3b: a8:3a:95:3c:13:ed:db:8b:80:b5:be:27:85:ca:99: 8a:33:72:48:44:99:73:87:03:65:b0:c8:11:2f:2b: 32:94:48:36:f1:b8:0e:56:40:ea:8b:77:bc:0e:e7: c7:ee:d1:c4:1b:08:d3:75:5e:6a:b6:c7:4b:a0:27: 96:dd:4d:3d:f5:9c:d0:b4:e3:8a:06:20:18:48:e2: af:5e:8e:70:ae:16:35:a5:0a:c8:75:35:6b:32:c4: cb:bb:6d:f0:63:b9:cd:9c:c9:c0:33:f8:62:02:66: 50:c1:0e:1a:37:51:6b:98:e7:df:f7:aa:3e:e5:f1: 19:33:00:55:f1:29:89:dd:c9:c6:25:da:22:83:11: 87:c9:09:ae:34:47:ee:40:78:46:78:93:2b:7d:08: e8:4f:5d:23:90:8b:70:0d:1d:68:72:7b:92:cb:0e: 49:35:92:ab:38:85:b3:be:2e:56:07:a5:22:ad:0f: 6e:c4:b1:cb:97:c5:a2:b1:43:25:ec:c6:d3:37:3e: c3:27:38:79:dc:94:b4:de:89:d1:df:f1:53:38:3a: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:02:60:71:66:8B:60:7A:78:6E:D0:01:1C:6F:93:D6:ED:84:CF X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ab:bc:12:54:f0:8f:9d:14:2c:77:fb:d9:d8:aa:10:4f:a7: 21:85:ee:5a:9f:c2:09:91:c0:5a:95:21:cb:ff:09:fc:ce:c0: ae:18:28:56:e8:b1:30:53:17:93:eb:44:e3:15:a6:3c:89:12: e3:30:b3:23:4e:d5:f3:6c:87:13:74:5c:9d:62:94:a7:06:0e: 1d:f5:40:92:d4:d0:86:96:1a:21:4b:32:03:db:c1:c3:28:f8: ad:77:d9:81:29:3b:95:29:e3:f3:7b:d6:24:ec:ff:51:85:3a: eb:6f:e7:46:fd:c4:85:a6:63:08:43:33:59:24:90:ce:67:94: 5f:6e:21:a8:fd:d8:5f:90:2b:4b:f5:06:76:28:38:4c:6e:a5: a7:f3:7b:8e:67:c9:57:69:6a:af:71:8f:8e:b7:5d:0d:8d:f4: ab:23:b8:b9:0a:70:3d:c4:35:b8:a3:de:34:1f:ee:7a:a7:79: e8:f2:fd:79:78:18:b2:39:07:36:d1:31:e4:4a:80:1a:be:06: f4:ee:68:74:07:c0:dd:5d:3e:bb:68:8e:11:5d:80:5f:82:8e: 79:8f:9f:56:90:29:51:04:b1:b3:6b:88:ef:b1:93:15:b4:94: 86:0a:98:38:7a:a2:d8:6a:48:78:dd:8a:04:e1:17:11:f1:13: 0c:4f:2a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7eCEmXF0NtmCtjpAt/IVLcbbiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTEyMDUwNTI2MDRaFw0yNTEyMDgwNzMxMDRaMDMxMTAvBgNV BAMTKENCM0EwMjYwNzE2NjhCNjA3QTc4NkVEMDAxMUM2RjkzRDZFRDg0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82szCc5hSCKyOhyaQ3H+o7/ts mpmuGXeSnLSoaXKLkXWVbzcpr+WF1lelO6g6lTwT7duLgLW+J4XKmYozckhEmXOH A2WwyBEvKzKUSDbxuA5WQOqLd7wO58fu0cQbCNN1Xmq2x0ugJ5bdTT31nNC044oG IBhI4q9ejnCuFjWlCsh1NWsyxMu7bfBjuc2cycAz+GICZlDBDho3UWuY59/3qj7l 8RkzAFXxKYndycYl2iKDEYfJCa40R+5AeEZ4kyt9COhPXSOQi3ANHWhye5LLDkk1 kqs4hbO+LlYHpSKtD27EscuXxaKxQyXsxtM3PsMnOHnclLTeidHf8VM4Ovw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyzoCYHFmi2B6eG7QARxvk9bthM8wHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIarvBJU8I+dFCx3+9nYqhBPpyGF7lqfwgmR wFqVIcv/CfzOwK4YKFbosTBTF5PrROMVpjyJEuMwsyNO1fNshxN0XJ1ilKcGDh31 QJLU0IaWGiFLMgPbwcMo+K132YEpO5Up4/N71iTs/1GFOutv50b9xIWmYwhDM1kk kM5nlF9uIaj92F+QK0v1BnYoOExupafze45nyVdpaq9xj463XQ2N9KsjuLkKcD3E Nbij3jQf7nqneejy/Xl4GLI5BzbRMeRKgBq+BvTuaHQHwN1dPrtojhFdgF+CjnmP n1aQKVEEsbNriO+xkxW0lIYKmDh6othqSHjdigThFxHxEwxPKhQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:48:17 2025 by rpki-client