This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: jODCEdJ8KImR86JkB3J+nnwqQzYGi8n5l+FbpHFeHws= Subject key identifier: 08:7E:C4:7C:EF:F6:C6:03:3E:B4:CE:43:2A:7D:7E:DC:D6:A7:7C:5C Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 27F6F1C351484F3A42FEB2A91810EAC2685165C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 022B Signing time: Thu 04 Dec 2025 19:01:20 +0000 Manifest this update: Thu 04 Dec 2025 18:56:20 +0000 Manifest next update: Mon 08 Dec 2025 02:22:20 +0000 Files and hashes: 1: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=) 2: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: iTqF8wvDlysakwTYn0QrToEd3WC/PXgleOQbAzol884=) 3: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f6:f1:c3:51:48:4f:3a:42:fe:b2:a9:18:10:ea:c2:68:51:65:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Dec 4 18:56:20 2025 GMT Not After : Dec 8 02:22:20 2025 GMT Subject: CN=087EC47CEFF6C6033EB4CE432A7D7EDCD6A77C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:1b:83:a7:89:0f:f1:4b:03:8f:ee:33:ed: 58:e2:79:b6:c2:7d:43:a9:88:5e:77:6e:9b:4b:c8: 99:2c:0e:e4:25:09:f9:a1:82:9b:28:ca:d1:40:ee: e8:d7:38:84:02:95:2b:15:85:c1:ed:10:e2:8c:6d: 92:3a:16:22:6c:d9:b7:a4:15:28:48:7e:5a:4f:66: 2c:91:ef:0e:62:5a:4a:96:f1:f7:f6:ec:be:21:30: 28:a9:da:66:d7:22:a0:cd:31:50:4b:d7:7c:04:d9: da:94:54:ae:60:8f:1c:e5:cf:30:49:99:77:9e:a8: e2:88:48:d2:15:6b:fc:ac:89:3b:da:03:b8:4c:a0: 75:cd:6f:8d:7e:b5:7b:21:a9:81:08:c5:8c:b0:2f: 28:56:43:67:c4:7b:d8:52:7c:c3:d6:c2:07:3c:0c: ba:8c:f5:4b:71:85:01:c3:27:94:b1:75:01:ed:5d: 35:95:72:48:e2:a5:f4:75:0a:32:8e:4f:1c:6e:77: b6:1c:b0:db:8f:ef:41:7e:81:6a:71:d4:c3:a8:66: de:18:95:e1:0b:e6:fd:bf:0e:23:44:89:04:82:a8: 7c:cd:70:88:da:e9:3a:72:2b:26:29:7f:0b:83:4f: 62:5b:f5:c9:bf:4c:7f:92:d2:c7:e4:e5:89:ee:c9: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7E:C4:7C:EF:F6:C6:03:3E:B4:CE:43:2A:7D:7E:DC:D6:A7:7C:5C X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:91:60:e8:25:76:ea:c0:59:8c:cd:39:c5:4e:b3:c0:83: db:57:17:5e:f3:31:fe:14:7f:8c:84:c7:69:82:10:f7:17:6c: 26:b0:19:83:fa:cb:40:78:f6:43:6f:df:2c:3c:2e:8e:f7:0f: 63:5f:9f:64:e8:4e:b6:e5:93:11:03:54:93:73:b1:d9:95:9b: b4:e1:82:b3:76:d4:d1:5c:9f:c7:f0:e2:be:b5:60:4a:b1:81: 10:33:94:05:33:eb:25:82:4e:2a:d2:c5:72:6c:7a:20:e7:1f: eb:99:20:a6:b9:c5:09:65:86:e5:e9:c9:54:07:fe:6f:77:3c: f7:55:d3:a3:a2:06:d5:2c:de:60:2a:df:0a:2d:86:16:51:0d: a7:1f:5d:13:ae:f4:82:42:dc:92:03:e0:92:d6:23:c8:ea:0a: 9d:ae:85:f4:79:63:79:96:4f:da:17:58:89:01:d3:09:0a:6d: 8e:7a:9d:e9:1a:87:f2:20:8d:c0:43:9a:17:4c:b4:34:51:5a: 91:df:2b:98:7a:ec:b6:39:ca:96:5b:a9:30:ca:c2:6e:74:01: b6:73:85:8e:ef:55:ef:2f:8b:ab:a7:aa:63:39:98:14:f5:43: 7c:68:5b:11:63:5c:18:81:f1:ce:6e:07:53:01:e0:a0:da:4e: 13:9d:11:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/bxw1FITzpC/rKpGBDqwmhRZcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTEyMDQxODU2MjBaFw0yNTEyMDgwMjIyMjBaMDMxMTAvBgNV BAMTKDA4N0VDNDdDRUZGNkM2MDMzRUI0Q0U0MzJBN0Q3RURDRDZBNzdDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fxuDp4kP8UsDj+4z7VjiebbC fUOpiF53bptLyJksDuQlCfmhgpsoytFA7ujXOIQClSsVhcHtEOKMbZI6FiJs2bek FShIflpPZiyR7w5iWkqW8ff27L4hMCip2mbXIqDNMVBL13wE2dqUVK5gjxzlzzBJ mXeeqOKISNIVa/ysiTvaA7hMoHXNb41+tXshqYEIxYywLyhWQ2fEe9hSfMPWwgc8 DLqM9UtxhQHDJ5SxdQHtXTWVckjipfR1CjKOTxxud7YcsNuP70F+gWpx1MOoZt4Y leEL5v2/DiNEiQSCqHzNcIja6TpyKyYpfwuDT2Jb9cm/TH+S0sfk5YnuyYS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCH7EfO/2xgM+tM5DKn1+3NanfFwwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPikWDoJXbqwFmMzTnFTrPAg9tXF17zMf4U f4yEx2mCEPcXbCawGYP6y0B49kNv3yw8Lo73D2Nfn2ToTrblkxEDVJNzsdmVm7Th grN21NFcn8fw4r61YEqxgRAzlAUz6yWCTirSxXJseiDnH+uZIKa5xQllhuXpyVQH /m93PPdV06OiBtUs3mAq3wothhZRDacfXROu9IJC3JID4JLWI8jqCp2uhfR5Y3mW T9oXWIkB0wkKbY56nekah/IgjcBDmhdMtDRRWpHfK5h67LY5ypZbqTDKwm50AbZz hY7vVe8vi6unqmM5mBT1Q3xoWxFjXBiB8c5uB1MB4KDaThOdEaY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:57 2025 by rpki-client