This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: hr8i4mO6glOmsoj6nW6ynRbzC5Kx5Sb32+LEU7HGots= Subject key identifier: A5:29:C2:41:FF:A8:6D:13:9C:E3:8B:33:57:38:05:76:EE:D3:50:81 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 2D577B6CB8203F7A721574317D21E60ACB3EC664 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 7A Signing time: Tue 16 Dec 2025 06:52:40 +0000 Manifest this update: Tue 16 Dec 2025 06:47:39 +0000 Manifest next update: Fri 19 Dec 2025 17:12:39 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 4: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: vb8JsEx/N+f3qS9zbVh5Hv8yWvZ3X1MhP29wn3aR2Og=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:57:7b:6c:b8:20:3f:7a:72:15:74:31:7d:21:e6:0a:cb:3e:c6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Dec 16 06:47:39 2025 GMT Not After : Dec 19 17:12:39 2025 GMT Subject: CN=A529C241FFA86D139CE38B3357380576EED35081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:54:99:b3:d8:bb:5d:eb:08:20:3a:84:d4:d2: 7c:26:84:04:28:a8:93:7b:8b:d7:b0:ee:96:55:5c: 26:9c:5b:38:db:b4:56:96:b4:d0:e2:75:f8:6f:be: 8e:d2:7b:46:45:bb:0e:0b:0e:db:8c:cb:5e:e9:a4: 75:67:19:e9:25:ea:a3:f7:c0:9f:6d:ab:ee:18:1a: 27:c7:e2:2c:20:4f:40:7a:0d:af:8b:8e:9c:4a:11: cf:bf:20:d7:3b:41:b1:6b:67:7b:d5:61:a0:43:a4: 18:b6:67:97:3e:73:aa:bf:c0:7b:7b:df:6d:bc:82: 1f:47:da:dc:28:65:59:f3:e1:f8:9b:af:c1:d9:0c: 07:eb:b5:d6:ac:c1:d6:36:96:e0:c5:3d:da:8c:40: cf:2a:e0:d7:f1:ff:3f:ca:88:a4:ac:66:c1:85:0b: bd:27:64:26:2f:44:81:d4:77:a2:c4:55:42:32:41: af:1b:ef:69:67:63:c6:0b:89:97:d2:c5:46:09:d4: 01:a5:bf:ad:da:6b:8b:d5:c2:ef:9a:71:4c:70:a1: dd:12:dc:a0:0c:8e:2b:11:98:be:74:1b:d0:fc:25: 05:aa:80:83:cd:26:2d:62:b9:ba:7c:1b:ef:0d:56: b7:cf:8b:d0:fe:09:45:fd:ae:65:11:27:c8:38:7d: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:C2:41:FF:A8:6D:13:9C:E3:8B:33:57:38:05:76:EE:D3:50:81 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dd:e2:be:a6:da:00:a5:0c:79:8a:9e:6d:2d:67:40:16:8e: cc:00:c8:f7:47:b0:a3:f2:b2:3c:e9:1f:27:1f:42:cb:f2:16: cf:34:87:9a:49:7a:2a:49:d9:93:b9:13:7e:c0:b3:a7:7e:fa: cd:0b:61:e3:06:b0:4a:ab:dd:8b:e8:53:f3:26:ea:4c:7b:14: 54:84:24:44:98:c0:e0:f1:19:78:fb:38:0c:01:33:d9:5d:48: f4:7e:b6:5f:61:cd:a6:cf:f4:60:c6:db:b8:14:5c:85:cc:3d: 95:46:d8:95:75:41:56:0b:52:7a:16:36:cf:8e:77:e8:55:fb: e3:54:a8:5e:0d:1a:83:c9:27:2f:87:be:2a:f3:99:97:01:04: 1b:c9:e0:90:b1:dd:80:fc:a8:3f:7d:ba:a6:5e:e7:e6:bc:bd: 63:21:14:30:5c:a3:93:26:2f:de:58:62:8e:ef:3d:ce:5f:d7: 5a:3b:f3:6a:f5:47:da:55:6a:65:a7:1c:8c:ce:9c:4f:93:e5: e5:04:c1:cb:be:64:d2:0b:a7:a3:71:a8:b0:20:2f:09:a1:32: fa:65:2d:57:41:99:42:73:d7:dc:c8:a5:5f:cb:df:94:08:e2: 95:03:5b:02:bf:f6:2b:87:3c:ab:ca:58:c5:62:cb:9f:b3:66: 86:6f:04:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVd7bLggP3pyFXQxfSHmCss+xmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTEyMTYwNjQ3MzlaFw0yNTEyMTkxNzEyMzlaMDMxMTAvBgNV BAMTKEE1MjlDMjQxRkZBODZEMTM5Q0UzOEIzMzU3MzgwNTc2RUVEMzUwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyVJmz2Ltd6wggOoTU0nwmhAQo qJN7i9ew7pZVXCacWzjbtFaWtNDidfhvvo7Se0ZFuw4LDtuMy17ppHVnGekl6qP3 wJ9tq+4YGifH4iwgT0B6Da+LjpxKEc+/INc7QbFrZ3vVYaBDpBi2Z5c+c6q/wHt7 3228gh9H2twoZVnz4fibr8HZDAfrtdaswdY2luDFPdqMQM8q4Nfx/z/KiKSsZsGF C70nZCYvRIHUd6LEVUIyQa8b72lnY8YLiZfSxUYJ1AGlv63aa4vVwu+acUxwod0S 3KAMjisRmL50G9D8JQWqgIPNJi1iubp8G+8NVrfPi9D+CUX9rmURJ8g4fZRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSnCQf+obROc44szVzgFdu7TUIEwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvd4r6m2gClDHmKnm0tZ0AWjswAyPdHsKPy sjzpHycfQsvyFs80h5pJeipJ2ZO5E37As6d++s0LYeMGsEqr3YvoU/Mm6kx7FFSE JESYwODxGXj7OAwBM9ldSPR+tl9hzabP9GDG27gUXIXMPZVG2JV1QVYLUnoWNs+O d+hV++NUqF4NGoPJJy+HvirzmZcBBBvJ4JCx3YD8qD99uqZe5+a8vWMhFDBco5Mm L95YYo7vPc5f11o782r1R9pVamWnHIzOnE+T5eUEwcu+ZNILp6NxqLAgLwmhMvpl LVdBmUJz19zIpV/L35QI4pUDWwK/9iuHPKvKWMViy5+zZoZvBGg= -----END CERTIFICATE-----Generated at Thu Dec 18 19:07:28 2025 by rpki-client