This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: 7j9uDBYP9r4d3k32Mp8yLOSpl32ftD3xA1Sz6OnAAhk= Subject key identifier: 27:50:ED:7C:08:1F:AD:BE:70:8B:8B:CC:4F:5C:AE:06:A2:B2:FE:18 Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 252B5BF004EDDBBC7334D49B61D8BB23736F0E8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: E4 Signing time: Fri 05 Dec 2025 13:01:36 +0000 Manifest this update: Fri 05 Dec 2025 12:56:36 +0000 Manifest next update: Mon 08 Dec 2025 17:23:36 +0000 Files and hashes: 1: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 2: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 3: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 4: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: D+kQbAP7wRFJ2zLYuhHsmIWQaZ90WmLJlYFgHJP++NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2b:5b:f0:04:ed:db:bc:73:34:d4:9b:61:d8:bb:23:73:6f:0e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Dec 5 12:56:36 2025 GMT Not After : Dec 8 17:23:36 2025 GMT Subject: CN=2750ED7C081FADBE708B8BCC4F5CAE06A2B2FE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:c6:7a:6e:78:27:3e:95:8f:16:e8:9b:77: c5:84:59:71:72:c2:96:45:33:0e:3b:a5:9f:bb:cd: b9:2a:bb:15:57:70:ba:51:e4:8e:67:8a:b8:53:e2: 2f:e4:ee:a5:40:ad:96:b6:67:d7:58:40:59:9f:88: b9:ee:ad:79:15:70:38:b3:10:ff:3b:3f:2d:21:45: 8d:e7:4c:01:b1:ea:f4:81:1d:98:74:c7:d9:8d:5d: 90:45:9c:7b:61:6b:1a:6d:64:a8:4d:17:c9:8b:c9: 46:24:50:57:1b:83:a7:09:60:5d:42:c6:3f:d9:18: c2:88:93:d0:cb:c7:ab:f8:73:3c:62:3d:cd:de:c4: f2:1f:24:db:1c:8b:98:67:40:1e:3b:af:62:ba:af: cc:93:a9:5c:bf:33:bd:29:10:14:41:93:f3:9e:1a: 78:f8:94:64:48:e1:d8:85:f4:f1:91:58:5e:00:46: 8f:55:f1:99:da:1d:37:4d:0b:c1:6e:0b:5a:a5:cb: 6f:5d:c8:0f:42:c2:5d:66:3c:9c:b7:ae:aa:30:56: ee:91:af:b0:b4:45:99:b3:f8:90:d4:ac:22:0e:01: f4:e4:f0:3c:4e:9d:06:29:48:76:c2:15:5a:98:ad: 13:c1:f4:d4:96:35:bc:ae:96:d0:1e:33:86:fc:bf: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:50:ED:7C:08:1F:AD:BE:70:8B:8B:CC:4F:5C:AE:06:A2:B2:FE:18 X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:01:72:d1:2d:9f:d5:ca:f3:b9:d4:70:7e:28:5a:93:20:9a: 6c:00:56:dc:bb:bf:8a:9d:c8:32:9a:e9:3f:81:c5:ea:54:7a: 9d:9d:f4:30:ec:b7:4f:c0:05:53:18:c3:45:c6:91:1c:14:68: d0:ea:f7:3e:8a:1b:46:54:b3:3b:34:70:ed:d8:33:74:b1:87: 80:16:77:da:e4:f0:6b:dd:cb:2d:82:d3:2e:9a:51:94:d2:cb: 44:5a:16:39:29:05:6d:c9:97:b4:d2:56:9e:bf:bc:eb:f6:98: cc:74:39:1f:8d:4f:3b:7e:de:f7:a8:4d:a5:6f:05:05:da:6e: 21:29:c5:be:02:96:0c:f7:d3:d9:49:59:27:b1:c7:67:be:bf: 89:66:c3:01:2c:a5:b7:e3:2c:53:e2:d5:59:90:f1:4d:e1:b8: 72:47:c1:d1:34:e6:02:9a:7c:f2:d4:c6:5c:ba:1a:f6:e6:e9: 34:a0:eb:15:4e:af:55:af:b3:3b:b8:27:0c:02:12:6e:ff:91: 80:5b:d4:74:d5:1a:8f:91:9d:10:53:6c:0a:5a:49:8d:1f:81: b0:37:01:2d:35:7f:a6:91:c0:b8:fe:04:4c:ae:a1:26:a8:56: 28:ca:cc:fc:ee:07:f4:44:d7:33:a0:36:d8:e8:d3:c0:6a:95: 09:f8:b2:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJStb8ATt27xzNNSbYdi7I3NvDoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTEyMDUxMjU2MzZaFw0yNTEyMDgxNzIzMzZaMDMxMTAvBgNV BAMTKDI3NTBFRDdDMDgxRkFEQkU3MDhCOEJDQzRGNUNBRTA2QTJCMkZFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcsZ6bngnPpWPFuibd8WEWXFy wpZFMw47pZ+7zbkquxVXcLpR5I5nirhT4i/k7qVArZa2Z9dYQFmfiLnurXkVcDiz EP87Py0hRY3nTAGx6vSBHZh0x9mNXZBFnHthaxptZKhNF8mLyUYkUFcbg6cJYF1C xj/ZGMKIk9DLx6v4czxiPc3exPIfJNsci5hnQB47r2K6r8yTqVy/M70pEBRBk/Oe Gnj4lGRI4diF9PGRWF4ARo9V8ZnaHTdNC8FuC1qly29dyA9Cwl1mPJy3rqowVu6R r7C0RZmz+JDUrCIOAfTk8DxOnQYpSHbCFVqYrRPB9NSWNbyultAeM4b8v7YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ1DtfAgfrb5wi4vMT1yuBqKy/hgwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwBctEtn9XK87nUcH4oWpMgmmwAVty7v4qd yDKa6T+BxepUep2d9DDst0/ABVMYw0XGkRwUaNDq9z6KG0ZUszs0cO3YM3Sxh4AW d9rk8Gvdyy2C0y6aUZTSy0RaFjkpBW3Jl7TSVp6/vOv2mMx0OR+NTzt+3veoTaVv BQXabiEpxb4Clgz309lJWSexx2e+v4lmwwEspbfjLFPi1VmQ8U3huHJHwdE05gKa fPLUxly6Gvbm6TSg6xVOr1Wvszu4JwwCEm7/kYBb1HTVGo+RnRBTbApaSY0fgbA3 AS01f6aRwLj+BEyuoSaoVijKzPzuB/RE1zOgNtjo08BqlQn4sj4= -----END CERTIFICATE-----Generated at Sat Dec 6 21:22:08 2025 by rpki-client