This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: H8XHgC8eV/Lj3ZwNDMdAuHYt5RJSGETyenC0XBjsp9Y= Subject key identifier: 47:F5:54:20:08:E9:FC:9D:A9:EF:89:A4:A9:74:11:23:13:B1:A9:B1 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 0313A936C360197C31F523F709980BF3A78D0BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 022C Signing time: Fri 05 Dec 2025 16:22:03 +0000 Manifest this update: Fri 05 Dec 2025 16:17:03 +0000 Manifest next update: Tue 09 Dec 2025 02:36:03 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 2: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 3: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 4: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: rDywnTWZj4f05DBqHL1PDCogDBv8aF8vfG4O11Sf0w8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:13:a9:36:c3:60:19:7c:31:f5:23:f7:09:98:0b:f3:a7:8d:0b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Dec 5 16:17:03 2025 GMT Not After : Dec 9 02:36:03 2025 GMT Subject: CN=47F5542008E9FC9DA9EF89A4A974112313B1A9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:71:ca:1b:17:52:8e:13:a0:d9:83:1f:a7: 5e:1b:2e:ed:16:35:d9:93:9a:f7:50:b9:8f:64:5a: a8:c7:07:92:46:2c:5b:fe:af:c8:9b:75:ea:1e:db: 3a:59:c9:ec:7f:89:fd:9d:e1:97:64:b4:7d:8f:57: ca:bb:5b:4c:98:52:b1:a3:8d:a7:25:a7:99:37:10: db:7c:c2:21:37:9f:3f:cc:97:c4:2f:48:dd:58:2a: 78:e9:fa:a6:7b:3b:67:7c:bf:23:23:fc:78:3d:61: d8:0d:66:1b:0c:00:f5:78:33:72:89:19:b0:38:a6: b3:2d:b2:4f:a7:79:d8:b7:2a:5e:0b:fd:2a:e8:22: ff:27:a4:b7:ff:65:c1:73:11:c9:23:2c:9a:d2:ea: a5:80:a6:ed:0e:68:10:11:88:94:74:e5:2c:75:c3: 04:9a:2a:b5:5f:9a:a0:0d:cd:4c:d0:49:e9:72:e7: 5d:63:4b:db:8f:ab:c0:2c:47:08:62:51:05:38:d9: e2:a3:c3:4d:1d:ba:49:a5:01:a7:8c:79:5a:75:0b: 35:52:6c:24:3b:f1:98:f4:2a:f9:31:c1:5a:07:4c: 17:05:e8:c6:46:ff:78:72:8c:5d:40:67:4c:69:d5: 80:a5:3c:59:c0:b0:bf:07:b0:10:f2:20:0b:bd:3a: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F5:54:20:08:E9:FC:9D:A9:EF:89:A4:A9:74:11:23:13:B1:A9:B1 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9b:6e:52:19:8f:5b:8d:71:90:df:2d:3f:99:c2:1b:b8:49: 70:a5:86:fe:cc:b7:16:45:fa:62:ec:46:49:b2:82:9d:b3:35: f7:73:5e:09:79:02:75:b0:28:f7:49:fd:ad:64:54:4c:6b:83: 25:a5:52:b9:07:f8:ff:c4:59:77:29:73:ab:43:ce:b5:13:0d: 63:ad:49:05:44:4c:65:e0:fa:13:58:d8:f8:89:4c:84:eb:aa: 60:29:d8:c2:9f:f7:02:31:3e:8b:0f:55:eb:f4:3f:99:4c:81: c0:04:da:26:ce:ba:0c:fc:f2:24:62:3b:46:2f:c1:59:84:55: 7b:a9:d2:7d:7c:90:7f:55:aa:f1:b4:62:69:de:3c:0c:fc:2d: 1f:34:ac:0d:10:f2:34:51:b5:df:97:3b:3f:eb:ad:dd:76:40: 1e:12:e1:32:5f:38:0a:2b:b2:8f:d4:e4:0e:40:14:44:5e:81: 32:4d:94:0b:b6:6c:34:40:b6:42:ff:2a:5f:73:c6:7f:e3:09: 3b:a4:e8:dd:8c:ad:5d:49:0c:24:ce:cf:90:48:d7:03:23:75: 30:5c:23:43:8f:b3:3e:e6:3f:4b:73:2f:0a:91:42:10:48:ea: 89:c4:63:72:4f:3f:d6:c9:5b:99:ca:62:2a:03:8d:67:c1:7c: 7f:ce:79:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxOpNsNgGXwx9SP3CZgL86eNC+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTEyMDUxNjE3MDNaFw0yNTEyMDkwMjM2MDNaMDMxMTAvBgNV BAMTKDQ3RjU1NDIwMDhFOUZDOURBOUVGODlBNEE5NzQxMTIzMTNCMUE5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gXHKGxdSjhOg2YMfp14bLu0W NdmTmvdQuY9kWqjHB5JGLFv+r8ibdeoe2zpZyex/if2d4ZdktH2PV8q7W0yYUrGj jaclp5k3ENt8wiE3nz/Ml8QvSN1YKnjp+qZ7O2d8vyMj/Hg9YdgNZhsMAPV4M3KJ GbA4prMtsk+nedi3Kl4L/SroIv8npLf/ZcFzEckjLJrS6qWApu0OaBARiJR05Sx1 wwSaKrVfmqANzUzQSely511jS9uPq8AsRwhiUQU42eKjw00dukmlAaeMeVp1CzVS bCQ78Zj0KvkxwVoHTBcF6MZG/3hyjF1AZ0xp1YClPFnAsL8HsBDyIAu9OgLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/VUIAjp/J2p74mkqXQRIxOxqbEwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2bblIZj1uNcZDfLT+Zwhu4SXClhv7MtxZF +mLsRkmygp2zNfdzXgl5AnWwKPdJ/a1kVExrgyWlUrkH+P/EWXcpc6tDzrUTDWOt SQVETGXg+hNY2PiJTITrqmAp2MKf9wIxPosPVev0P5lMgcAE2ibOugz88iRiO0Yv wVmEVXup0n18kH9VqvG0YmnePAz8LR80rA0Q8jRRtd+XOz/rrd12QB4S4TJfOAor so/U5A5AFERegTJNlAu2bDRAtkL/Kl9zxn/jCTuk6N2MrV1JDCTOz5BI1wMjdTBc I0OPsz7mP0tzLwqRQhBI6onEY3JPP9bJW5nKYioDjWfBfH/OeVw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:18 2025 by rpki-client