This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: w6bJUZ8WT/8ZhnmZWzO6+tM2y/qKf+BL/Ku+VEqA0Oc= Subject key identifier: A6:7B:C8:9C:E2:17:62:C8:2A:A2:3B:1A:47:DE:B6:E6:52:EC:4F:F4 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 6E0EC120D6E38CC76CF7B69DCFD7E8B46E89FE03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 0278 Signing time: Fri 05 Dec 2025 22:41:54 +0000 Manifest this update: Fri 05 Dec 2025 22:36:54 +0000 Manifest next update: Tue 09 Dec 2025 03:32:54 +0000 Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: ttP0JRmgHPpORXdkyhRe4g2aV0F/BKzxuuMmJDrLNpU=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0e:c1:20:d6:e3:8c:c7:6c:f7:b6:9d:cf:d7:e8:b4:6e:89:fe:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Dec 5 22:36:54 2025 GMT Not After : Dec 9 03:32:54 2025 GMT Subject: CN=A67BC89CE21762C82AA23B1A47DEB6E652EC4FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:50:5e:0f:6c:d2:9f:08:9c:88:11:ce:aa: 0e:d4:f4:75:4b:0f:45:0c:89:3d:30:97:6b:a1:94: 33:5b:d4:c0:42:a5:a4:85:4a:a9:66:5c:0b:2f:47: b7:35:8c:e7:43:90:c1:13:67:39:8b:76:01:94:da: d7:f3:52:6d:51:18:7d:4c:a2:f9:8b:a7:d3:14:fb: 4e:0d:71:39:43:90:e7:0d:23:43:5e:0b:bc:a2:23: d8:c2:e8:21:d9:ae:1f:56:e8:c1:b6:ba:79:3f:36: 26:18:b7:13:88:98:25:72:c0:96:50:bb:26:68:51: a7:ba:85:d9:5a:42:44:50:ef:08:12:51:fd:00:bc: 71:6f:de:91:23:43:2c:eb:0a:53:94:eb:07:1f:89: da:39:b7:5e:62:df:f0:4c:88:14:60:d0:b4:6e:46: d4:1c:26:a9:c6:64:88:73:e8:30:ef:63:11:34:07: 37:1a:e8:25:80:77:37:ab:10:32:6f:b2:ff:5d:c8: b2:83:b4:cf:bd:80:eb:64:ff:a9:04:24:ac:84:89: 82:fd:42:44:07:d9:39:83:a2:80:15:a9:ec:ea:57: 60:47:93:53:51:44:6b:53:2a:76:97:5d:68:52:eb: 7f:fd:33:4d:53:54:61:1f:10:67:80:8e:0b:fb:95: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:C8:9C:E2:17:62:C8:2A:A2:3B:1A:47:DE:B6:E6:52:EC:4F:F4 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:25:f7:a4:b3:76:5c:13:4e:96:3b:97:44:c8:7b:a9:27:f2: 90:cd:23:9a:f2:07:57:f2:52:29:cd:99:c7:45:ea:95:61:46: 69:1c:27:de:15:98:c8:98:1a:b5:54:49:87:cf:b3:3a:75:5f: 77:11:94:3f:9e:44:90:d2:cf:f0:30:38:64:7e:94:0c:b3:81: b1:7d:c7:f3:a9:54:b9:67:ce:f5:09:b1:aa:2f:a1:16:4a:f8: b9:41:72:f0:53:2a:31:3b:a2:1f:27:48:c2:02:f2:1d:69:48: 32:34:9a:bc:13:76:71:b4:17:a6:42:59:78:09:b9:5b:f6:21: 30:68:46:da:f5:09:8c:02:a9:f0:a2:16:71:59:b0:81:57:f7: ae:cd:f3:93:e2:b5:19:a7:59:46:c5:96:bb:f2:b1:0e:d6:66: ba:55:f2:d9:89:36:17:79:6b:ea:fc:32:ef:6c:90:29:ba:75: 89:f7:4b:15:a5:86:26:f0:54:c7:ae:eb:0e:c6:8e:2a:3a:75: 1e:29:ba:02:2f:f5:ee:fb:f5:0d:71:91:bd:eb:f9:e4:ac:e2: f9:3e:3a:37:69:8b:e4:2f:20:c5:d4:32:63:45:69:54:e1:65: c3:6d:21:21:47:c6:b1:54:0f:f7:ff:b9:e5:88:d0:9d:0d:1e: 26:02:fb:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbg7BINbjjMds97adz9fotG6J/gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTEyMDUyMjM2NTRaFw0yNTEyMDkwMzMyNTRaMDMxMTAvBgNV BAMTKEE2N0JDODlDRTIxNzYyQzgyQUEyM0IxQTQ3REVCNkU2NTJFQzRGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRlBeD2zSnwiciBHOqg7U9HVL D0UMiT0wl2uhlDNb1MBCpaSFSqlmXAsvR7c1jOdDkMETZzmLdgGU2tfzUm1RGH1M ovmLp9MU+04NcTlDkOcNI0NeC7yiI9jC6CHZrh9W6MG2unk/NiYYtxOImCVywJZQ uyZoUae6hdlaQkRQ7wgSUf0AvHFv3pEjQyzrClOU6wcfido5t15i3/BMiBRg0LRu RtQcJqnGZIhz6DDvYxE0Bzca6CWAdzerEDJvsv9dyLKDtM+9gOtk/6kEJKyEiYL9 QkQH2TmDooAVqezqV2BHk1NRRGtTKnaXXWhS63/9M01TVGEfEGeAjgv7lcXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnvInOIXYsgqojsaR9625lLsT/QwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJol96SzdlwTTpY7l0TIe6kn8pDNI5ryB1fy UinNmcdF6pVhRmkcJ94VmMiYGrVUSYfPszp1X3cRlD+eRJDSz/AwOGR+lAyzgbF9 x/OpVLlnzvUJsaovoRZK+LlBcvBTKjE7oh8nSMIC8h1pSDI0mrwTdnG0F6ZCWXgJ uVv2ITBoRtr1CYwCqfCiFnFZsIFX967N85PitRmnWUbFlrvysQ7WZrpV8tmJNhd5 a+r8Mu9skCm6dYn3SxWlhibwVMeu6w7Gjio6dR4pugIv9e779Q1xkb3r+eSs4vk+ Ojdpi+QvIMXUMmNFaVThZcNtISFHxrFUD/f/ueWI0J0NHiYC+2c= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:21 2025 by rpki-client