This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: 8iNHO7WCXojDcvBtCdTK7QC8rXL18qf96GzYk1x8V7o= Subject key identifier: E5:FA:09:3B:AF:82:C6:74:30:9A:A1:C5:18:82:FF:B4:3A:14:9E:F5 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 4A35E85920724F9DF020686D5F33061B11726690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01F0 Signing time: Fri 05 Dec 2025 22:01:31 +0000 Manifest this update: Fri 05 Dec 2025 21:56:31 +0000 Manifest next update: Tue 09 Dec 2025 01:44:31 +0000 Files and hashes: 1: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) 2: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) 4: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: +n9PKCg1a54KM5MMAQhn8qs/YJ/cURXZPX21jzq/B94=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:35:e8:59:20:72:4f:9d:f0:20:68:6d:5f:33:06:1b:11:72:66:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Dec 5 21:56:31 2025 GMT Not After : Dec 9 01:44:31 2025 GMT Subject: CN=E5FA093BAF82C674309AA1C51882FFB43A149EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:64:1d:f9:57:f7:0d:33:e0:90:12:e0:5f: 2c:06:27:8e:ca:1b:74:e0:28:80:45:28:a8:4c:83: 48:b4:aa:d4:29:37:0e:d8:ff:f3:98:41:a0:c7:e3: 8d:9c:2c:e4:3b:88:0d:9b:97:f0:82:18:1b:b1:70: 33:16:40:b2:61:06:37:7b:ad:85:cc:d8:2b:da:c1: 41:e1:e0:d5:f2:25:16:09:cf:5b:4f:13:34:f6:8b: b5:07:d2:4f:54:4a:da:10:e2:44:3e:97:83:c1:42: f7:76:7e:f3:e6:e8:a0:ce:c2:3f:cf:00:18:03:4e: 0b:a8:e3:33:31:73:82:c9:7a:bd:a4:50:44:ca:22: 3c:70:18:da:5c:46:43:69:1f:56:5e:7d:fd:74:dd: 5e:a9:03:99:e7:fa:05:c4:1f:23:52:52:1f:65:98: cd:85:cc:30:7e:fd:d6:f3:b0:d4:56:8f:54:2a:72: 32:68:7b:df:8e:2a:8c:e9:6f:8b:79:71:19:29:3b: 40:de:66:0f:ba:b1:93:65:34:04:1a:30:df:2e:4f: 53:88:c2:d2:f9:74:57:37:2a:a6:de:1f:21:95:e0: 2c:d5:43:6c:5d:2d:2c:2f:c4:3a:ee:7d:93:27:95: ae:d0:8c:2c:24:2b:c7:29:b5:be:c6:d1:c2:64:56: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:09:3B:AF:82:C6:74:30:9A:A1:C5:18:82:FF:B4:3A:14:9E:F5 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:41:a9:89:2c:d7:fd:4f:97:8b:7c:f2:7f:59:73:5e:cc: fb:f4:f9:58:ca:a7:49:70:07:42:11:77:87:9b:a8:c1:d6:2e: 97:32:4e:fb:d9:66:92:ff:7a:6d:4e:96:13:f8:46:97:77:9e: 80:12:5c:97:c3:9c:1f:8c:7d:c7:5c:e5:17:c5:94:91:e2:94: 2c:be:72:7e:d4:5b:23:d0:9f:4f:72:f5:c6:a2:44:23:d9:44: 65:34:48:d6:de:df:db:96:ae:e5:05:eb:28:8d:f2:61:71:6a: b7:33:29:14:02:eb:e9:c9:5b:43:33:f0:5b:c9:2b:a0:27:04: 0a:fe:7e:a4:6a:23:c3:0b:90:22:19:41:00:74:6e:24:e6:36: 98:a4:15:b6:fc:ba:04:54:21:31:fe:8e:f0:d6:ce:b8:b9:d5: ab:ae:20:99:79:bb:d6:32:3d:c6:05:b3:50:a7:ae:9f:92:b6: eb:60:6e:05:13:e8:4c:0f:e0:9d:a9:df:de:8c:57:10:06:15: 9f:a4:ad:b3:5d:62:f6:e7:82:c2:f8:c0:10:21:74:d9:68:c3: 11:c4:c2:d2:8d:d2:3c:9d:17:41:1a:e9:5f:b7:5c:61:76:85: a8:12:dd:23:11:f3:1e:42:cc:ed:50:91:88:f1:f3:3a:74:1e: d8:93:49:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjXoWSByT53wIGhtXzMGGxFyZpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTEyMDUyMTU2MzFaFw0yNTEyMDkwMTQ0MzFaMDMxMTAvBgNV BAMTKEU1RkEwOTNCQUY4MkM2NzQzMDlBQTFDNTE4ODJGRkI0M0ExNDlFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SWQd+Vf3DTPgkBLgXywGJ47K G3TgKIBFKKhMg0i0qtQpNw7Y//OYQaDH442cLOQ7iA2bl/CCGBuxcDMWQLJhBjd7 rYXM2CvawUHh4NXyJRYJz1tPEzT2i7UH0k9UStoQ4kQ+l4PBQvd2fvPm6KDOwj/P ABgDTguo4zMxc4LJer2kUETKIjxwGNpcRkNpH1Zeff103V6pA5nn+gXEHyNSUh9l mM2FzDB+/dbzsNRWj1QqcjJoe9+OKozpb4t5cRkpO0DeZg+6sZNlNAQaMN8uT1OI wtL5dFc3KqbeHyGV4CzVQ2xdLSwvxDrufZMnla7QjCwkK8cptb7G0cJkVppzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5foJO6+CxnQwmqHFGIL/tDoUnvUwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3lQamJLNf9T5eLfPJ/WXNezPv0+VjKp0lw B0IRd4ebqMHWLpcyTvvZZpL/em1OlhP4Rpd3noASXJfDnB+Mfcdc5RfFlJHilCy+ cn7UWyPQn09y9caiRCPZRGU0SNbe39uWruUF6yiN8mFxarczKRQC6+nJW0Mz8FvJ K6AnBAr+fqRqI8MLkCIZQQB0biTmNpikFbb8ugRUITH+jvDWzri51auuIJl5u9Yy PcYFs1Cnrp+StutgbgUT6EwP4J2p396MVxAGFZ+krbNdYvbngsL4wBAhdNlowxHE wtKN0jydF0Ea6V+3XGF2hagS3SMR8x5CzO1QkYjx8zp0HtiTScs= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:43 2025 by rpki-client