This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: tWSoNq/lJLrMGBDj1/rNr2zWOej+sqFmoDuPh1f2jGQ= Subject key identifier: 4B:73:3C:41:05:73:C5:88:FC:3F:A6:FA:67:72:2B:90:02:EB:7B:D4 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 5C71B8F7B7B8F3CB04450D60DC5E2F713CE52E12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0242 Signing time: Thu 04 Dec 2025 22:31:40 +0000 Manifest this update: Thu 04 Dec 2025 22:26:40 +0000 Manifest next update: Mon 08 Dec 2025 04:05:40 +0000 Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) 2: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: GW+1qTxR0QBszDOaJzztusMraQthw4LK3HfhT6GScmE=) 3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:71:b8:f7:b7:b8:f3:cb:04:45:0d:60:dc:5e:2f:71:3c:e5:2e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Dec 4 22:26:40 2025 GMT Not After : Dec 8 04:05:40 2025 GMT Subject: CN=4B733C410573C588FC3FA6FA67722B9002EB7BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b0:9e:c0:c7:55:6f:ec:41:4a:46:d0:5a:84: 54:20:34:6b:86:f2:98:a9:d3:39:7b:ba:0e:c1:ca: b4:74:6e:3a:8e:a0:87:b5:22:73:a7:a2:65:89:01: 96:28:4f:c2:c7:ee:e7:3d:b1:0e:97:8c:f6:39:fd: 47:c8:f9:b9:bd:cc:3b:e2:2e:d9:ae:6f:16:44:2e: f8:71:b4:70:de:93:08:26:23:98:6f:d7:f4:55:d8: 0e:1f:d9:4e:86:1c:04:4d:28:e9:13:7b:82:ee:3d: 79:c7:1f:de:b2:f1:2d:72:ba:8c:a3:c2:c3:a5:7a: 83:6b:9c:c0:b4:e7:75:53:dc:0c:8d:b7:9c:c3:f6: b1:7f:85:ec:e8:48:fd:4e:56:68:df:59:31:7b:e4: 70:e0:2d:f2:c2:34:20:92:1f:1b:bb:80:56:2a:1f: e3:84:0e:d8:ee:e6:11:74:0a:0f:97:b6:c9:f7:c3: 71:77:35:32:38:6c:ec:c1:34:2c:33:f9:22:84:3d: 70:1b:b0:50:72:b8:a0:57:7a:7b:3f:00:9e:09:c8: b7:33:a8:7f:4c:e2:2a:b1:27:87:0b:a5:9d:ec:0a: 18:a7:5d:7d:35:c8:99:27:bc:e9:39:b4:89:02:47: 1f:cf:ff:95:2c:84:52:5a:63:1b:12:9c:97:40:2b: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:73:3C:41:05:73:C5:88:FC:3F:A6:FA:67:72:2B:90:02:EB:7B:D4 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a3:09:12:c6:af:c2:a1:e4:05:13:d3:ac:c4:6e:4c:0c:6e: b9:6e:88:e3:22:ee:a3:e2:0a:54:7f:ae:74:60:19:f7:b0:0c: 65:04:bc:bb:02:3e:64:db:44:ee:9c:3a:dd:d6:d3:3d:4b:26: 8a:97:da:ea:67:88:2e:7a:51:b4:18:b7:69:b5:e1:d4:15:aa: b6:4b:2e:57:a1:7d:76:10:65:f2:c2:09:17:2e:6c:34:fa:c7: 88:8b:25:c6:02:ab:99:69:ea:61:d3:ab:89:4e:e2:49:33:e7: 50:d7:64:cf:2c:cf:e8:db:4b:2d:74:ba:86:a3:7d:f7:fd:d4: 27:21:6d:9a:13:d9:81:be:8f:c1:3c:0a:f6:6c:a5:12:c0:f2: 44:ec:45:7f:57:09:79:8f:8b:0a:50:d0:94:a1:da:65:66:02: 65:22:aa:ad:ae:5e:ec:be:db:f5:44:81:e2:a3:37:52:2c:59: 01:d6:01:34:e3:32:ba:73:e4:7e:53:c1:9c:8c:b0:b8:1e:8a: 4c:19:f4:67:b0:65:7f:80:1a:d4:07:8a:e7:8a:78:fd:99:9c: cb:7c:d9:10:54:fd:d3:65:6c:5b:ed:16:23:d8:c8:3b:1f:71: 0d:5c:af:0b:85:ae:b1:fe:df:ec:bf:c1:0f:d6:d2:29:c9:00: e7:b6:86:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHG497e488sERQ1g3F4vcTzlLhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEyMDQyMjI2NDBaFw0yNTEyMDgwNDA1NDBaMDMxMTAvBgNV BAMTKDRCNzMzQzQxMDU3M0M1ODhGQzNGQTZGQTY3NzIyQjkwMDJFQjdCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7sJ7Ax1Vv7EFKRtBahFQgNGuG 8pip0zl7ug7ByrR0bjqOoIe1InOnomWJAZYoT8LH7uc9sQ6XjPY5/UfI+bm9zDvi LtmubxZELvhxtHDekwgmI5hv1/RV2A4f2U6GHARNKOkTe4LuPXnHH96y8S1yuoyj wsOleoNrnMC053VT3AyNt5zD9rF/hezoSP1OVmjfWTF75HDgLfLCNCCSHxu7gFYq H+OEDtju5hF0Cg+Xtsn3w3F3NTI4bOzBNCwz+SKEPXAbsFByuKBXens/AJ4JyLcz qH9M4iqxJ4cLpZ3sChinXX01yJknvOk5tIkCRx/P/5UshFJaYxsSnJdAK9irAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3M8QQVzxYj8P6b6Z3IrkALre9QwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqjCRLGr8Kh5AUT06zEbkwMbrluiOMi7qPi ClR/rnRgGfewDGUEvLsCPmTbRO6cOt3W0z1LJoqX2upniC56UbQYt2m14dQVqrZL LlehfXYQZfLCCRcubDT6x4iLJcYCq5lp6mHTq4lO4kkz51DXZM8sz+jbSy10uoaj fff91CchbZoT2YG+j8E8CvZspRLA8kTsRX9XCXmPiwpQ0JSh2mVmAmUiqq2uXuy+ 2/VEgeKjN1IsWQHWATTjMrpz5H5TwZyMsLgeikwZ9GewZX+AGtQHiueKeP2ZnMt8 2RBU/dNlbFvtFiPYyDsfcQ1crwuFrrH+3+y/wQ/W0inJAOe2hrU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:33 2025 by rpki-client