This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: mLDeiFem7/yHQ4FtdfnKHLF20IxgCvjwYixBJlHr1gM= Subject key identifier: 9B:BC:06:BC:05:A7:AD:18:11:37:F0:5F:EC:1D:A8:CD:78:5A:3F:A3 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 0A4D4FCE2FA648A132AC342A0E1FC973CFCBB19F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03C0 Signing time: Sat 06 Dec 2025 22:02:35 +0000 Manifest this update: Sat 06 Dec 2025 21:57:35 +0000 Manifest next update: Wed 10 Dec 2025 03:17:35 +0000 Files and hashes: 1: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: KvP52tnQiUsWPrW5T8+CxtU9YczXSFK6PYwcohNzjeU=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4d:4f:ce:2f:a6:48:a1:32:ac:34:2a:0e:1f:c9:73:cf:cb:b1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Dec 6 21:57:35 2025 GMT Not After : Dec 10 03:17:35 2025 GMT Subject: CN=9BBC06BC05A7AD181137F05FEC1DA8CD785A3FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:7d:d8:b5:3a:26:ac:1b:5f:26:54:37:73: 93:d2:14:d5:ee:57:ef:e1:3c:e0:6b:ae:f2:eb:01: b5:dd:e7:7f:8f:db:4f:27:84:1b:fa:04:0c:a4:83: e1:d6:a9:4f:45:9a:b7:de:a0:63:67:58:7c:c4:0e: 5b:df:59:f3:9d:e7:53:cb:68:98:cc:15:d9:f9:0c: 4f:1e:ed:65:0d:91:55:4d:e4:ff:2d:6f:9a:d7:36: 53:f2:a9:c1:a2:d8:dd:5a:46:4a:41:53:9f:ac:a5: ff:e8:9a:02:a3:c2:2c:5c:fa:17:55:ba:5e:81:9c: 93:d1:22:8f:3f:0c:f9:bb:b9:12:46:f8:8a:df:7b: e3:dc:a8:3b:1d:58:57:99:d5:44:81:fd:e4:54:a1: 3d:fe:5d:95:2a:2f:37:bd:75:95:66:0e:35:02:5d: e9:b9:3f:a8:57:46:c0:b8:d5:1c:41:b8:02:11:0d: 5b:7f:7d:5c:b7:c9:bf:f4:96:94:fe:85:e0:5a:b2: 98:c5:37:4d:72:20:6f:9b:f7:11:06:e6:75:d7:18: db:2b:2a:d9:dd:7a:1a:9e:50:0d:34:66:4d:0c:5c: 86:88:ea:d2:76:bb:22:22:b5:8c:46:99:b1:1a:46: 69:a4:b2:c2:45:a4:99:ff:1e:c6:fa:13:a6:80:a3: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:06:BC:05:A7:AD:18:11:37:F0:5F:EC:1D:A8:CD:78:5A:3F:A3 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:57:ac:b6:fa:7d:be:c8:b4:bd:80:ab:e9:56:72:d6:b2:45: 82:ef:9e:08:d7:0f:63:34:a9:a3:85:38:54:af:b2:f6:a9:b4: 63:7c:6f:49:95:ad:7a:e7:6a:ce:33:81:e0:45:2d:82:64:fa: 49:77:e9:69:70:66:8a:c8:2b:4b:39:96:21:7c:24:ee:c6:09: 69:61:cb:cb:b3:98:c3:6d:1f:d3:b6:3b:8b:f6:81:06:c6:99: 7f:90:7e:0d:50:22:ad:7c:90:26:09:3b:cc:e8:b8:88:36:62: 17:bf:97:e7:26:55:7e:43:5f:59:fc:07:a4:dd:28:68:f9:24: 93:5a:62:58:29:7e:5b:f6:f5:34:ce:32:f5:70:b5:34:17:23: c7:aa:9a:b9:99:01:23:93:d5:9e:7e:0d:2e:17:f9:d3:af:a6: b8:38:79:f5:c1:07:c3:13:6f:d3:e2:d0:ed:a9:03:ac:16:31: d8:6e:98:10:29:f5:8e:ee:a2:a2:10:9f:50:0f:36:51:e6:4b: e9:3f:9b:5d:6f:60:24:d7:6d:d8:5d:eb:39:40:1a:6f:75:17: 43:e4:83:ac:9c:86:26:96:3f:02:29:3b:d3:41:d6:e4:53:76: 8e:38:78:e3:23:86:9d:f9:48:92:40:77:e7:bf:85:37:70:3d: 9d:27:0a:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk1Pzi+mSKEyrDQqDh/Jc8/LsZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTEyMDYyMTU3MzVaFw0yNTEyMTAwMzE3MzVaMDMxMTAvBgNV BAMTKDlCQkMwNkJDMDVBN0FEMTgxMTM3RjA1RkVDMURBOENENzg1QTNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxX3YtTomrBtfJlQ3c5PSFNXu V+/hPOBrrvLrAbXd53+P208nhBv6BAykg+HWqU9FmrfeoGNnWHzEDlvfWfOd51PL aJjMFdn5DE8e7WUNkVVN5P8tb5rXNlPyqcGi2N1aRkpBU5+spf/omgKjwixc+hdV ul6BnJPRIo8/DPm7uRJG+Irfe+PcqDsdWFeZ1USB/eRUoT3+XZUqLze9dZVmDjUC Xem5P6hXRsC41RxBuAIRDVt/fVy3yb/0lpT+heBaspjFN01yIG+b9xEG5nXXGNsr KtndehqeUA00Zk0MXIaI6tJ2uyIitYxGmbEaRmmkssJFpJn/Hsb6E6aAo09tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7wGvAWnrRgRN/Bf7B2ozXhaP6MwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdXrLb6fb7ItL2Aq+lWctayRYLvngjXD2M0 qaOFOFSvsvaptGN8b0mVrXrnas4zgeBFLYJk+kl36WlwZorIK0s5liF8JO7GCWlh y8uzmMNtH9O2O4v2gQbGmX+Qfg1QIq18kCYJO8zouIg2Yhe/l+cmVX5DX1n8B6Td KGj5JJNaYlgpflv29TTOMvVwtTQXI8eqmrmZASOT1Z5+DS4X+dOvprg4efXBB8MT b9Pi0O2pA6wWMdhumBAp9Y7uoqIQn1APNlHmS+k/m11vYCTXbdhd6zlAGm91F0Pk g6ychiaWPwIpO9NB1uRTdo44eOMjhp35SJJAd+e/hTdwPZ0nCqE= -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:31 2025 by rpki-client