This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: hwOp4HecH+gvJ3uQI3/MdY5CojN3u5G8wbQzZ67w6Wk= Subject key identifier: 17:D0:F7:C0:E6:98:41:DA:22:1F:45:BE:59:27:9E:18:39:72:B0:CE Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 21497C677DC46B7DC182FA0D30AE21DF5A5FB322 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 020A Signing time: Fri 05 Dec 2025 22:21:48 +0000 Manifest this update: Fri 05 Dec 2025 22:16:48 +0000 Manifest next update: Tue 09 Dec 2025 03:36:48 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) 2: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: EZ4TD1k7YG45quXxvn+exhRdbPRq5Q8G9GaM+xVGVT0=) 3: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) 4: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 5: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:49:7c:67:7d:c4:6b:7d:c1:82:fa:0d:30:ae:21:df:5a:5f:b3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Dec 5 22:16:48 2025 GMT Not After : Dec 9 03:36:48 2025 GMT Subject: CN=17D0F7C0E69841DA221F45BE59279E183972B0CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:b4:39:07:16:28:96:6d:da:b0:d5:39:db: b1:0f:d8:1e:21:89:be:c9:7e:9d:26:9e:0f:a0:6d: 73:0a:bc:c1:6b:f7:44:fd:40:15:c6:75:60:36:56: 8e:13:46:70:70:ce:fe:ab:df:74:7f:51:bb:52:ee: a8:62:e5:14:78:b5:24:20:15:43:1e:00:7d:03:cb: f5:ef:31:03:a9:2a:e1:06:8c:7b:35:29:2e:69:2a: a1:29:41:33:ef:84:21:04:b8:d9:8b:3c:7d:4a:2b: 72:0d:c1:84:da:0e:b5:52:69:06:85:f1:b1:a6:2d: 6b:1c:80:73:16:e7:db:94:09:85:21:b6:c4:d1:41: 64:5e:4c:a3:70:e1:e9:c2:db:45:42:57:0c:d8:cc: 67:51:15:dd:37:e3:4a:0c:b7:24:53:2d:9d:09:2b: b0:e7:e9:99:40:ed:4b:ef:90:6b:46:d5:d4:82:97: 63:84:d5:fc:78:01:75:90:86:c9:3d:c0:45:91:49: 6d:b6:ec:4b:97:17:2e:8b:55:5e:39:fc:a0:44:10: 8e:d7:f2:c9:f3:63:8d:2e:85:92:e9:0c:01:b1:2c: 5a:19:fe:ca:34:82:b4:93:8a:24:ec:77:53:1c:e3: be:48:e6:89:c8:e1:8c:d9:d1:80:cf:2a:c1:81:fb: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:F7:C0:E6:98:41:DA:22:1F:45:BE:59:27:9E:18:39:72:B0:CE X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2d:13:0c:3f:71:3f:00:4d:fd:1b:53:ec:e6:a2:a4:99:81: 94:3d:76:e3:83:54:9e:80:b2:f8:80:c7:2a:0e:e3:e6:e2:6a: 23:d6:68:ac:32:1c:25:ef:44:32:fa:ef:70:f5:7b:0a:76:48: 43:ed:e5:f2:69:bb:b8:fc:2d:97:a0:ea:38:1b:b6:68:f7:b7: c7:76:aa:b2:a9:0b:6c:34:32:81:16:f6:7e:bf:f1:46:33:f1: 80:7c:ef:6f:b2:28:a6:42:dc:51:d8:c2:9a:a9:84:b6:57:79: 16:60:cb:3b:13:b5:44:e4:9d:94:da:7f:5a:7a:a3:dc:e6:6e: 9e:7a:82:98:0a:b5:ae:19:2e:db:4f:1a:1b:bb:90:88:5e:a1: ae:67:37:b9:42:21:92:bb:33:8b:c4:f1:63:22:0f:57:a5:7d: a8:b2:2a:e8:1a:b7:88:00:27:74:3a:05:3d:55:2c:04:6a:50: 52:e0:c5:4c:22:88:a4:3c:f8:19:92:12:16:a7:a3:8a:f3:05: c2:e3:87:e1:f1:38:4f:1c:37:f3:56:bb:28:41:cb:77:4d:54: 9d:9f:d7:94:38:8a:62:12:d6:15:9c:db:40:9f:81:1f:ed:b5: 20:11:a8:6b:f4:4d:05:60:e4:66:56:f6:c9:56:2f:ba:97:bb: f9:da:cd:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUl8Z33Ea33BgvoNMK4h31pfsyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTEyMDUyMjE2NDhaFw0yNTEyMDkwMzM2NDhaMDMxMTAvBgNV BAMTKDE3RDBGN0MwRTY5ODQxREEyMjFGNDVCRTU5Mjc5RTE4Mzk3MkIwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnr7Q5BxYolm3asNU527EP2B4h ib7Jfp0mng+gbXMKvMFr90T9QBXGdWA2Vo4TRnBwzv6r33R/UbtS7qhi5RR4tSQg FUMeAH0Dy/XvMQOpKuEGjHs1KS5pKqEpQTPvhCEEuNmLPH1KK3INwYTaDrVSaQaF 8bGmLWscgHMW59uUCYUhtsTRQWReTKNw4enC20VCVwzYzGdRFd0340oMtyRTLZ0J K7Dn6ZlA7UvvkGtG1dSCl2OE1fx4AXWQhsk9wEWRSW227EuXFy6LVV45/KBEEI7X 8snzY40uhZLpDAGxLFoZ/so0grSTiiTsd1Mc475I5onI4YzZ0YDPKsGB+2t3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9D3wOaYQdoiH0W+WSeeGDlysM4wHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGItEww/cT8ATf0bU+zmoqSZgZQ9duODVJ6A sviAxyoO4+biaiPWaKwyHCXvRDL673D1ewp2SEPt5fJpu7j8LZeg6jgbtmj3t8d2 qrKpC2w0MoEW9n6/8UYz8YB872+yKKZC3FHYwpqphLZXeRZgyzsTtUTknZTaf1p6 o9zmbp56gpgKta4ZLttPGhu7kIheoa5nN7lCIZK7M4vE8WMiD1elfaiyKugat4gA J3Q6BT1VLARqUFLgxUwiiKQ8+BmSEhano4rzBcLjh+HxOE8cN/NWuyhBy3dNVJ2f 15Q4imIS1hWc20CfgR/ttSARqGv0TQVg5GZW9slWL7qXu/nazXQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:04 2025 by rpki-client