This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: dcO9fXRqnTPZVs4pV5FhYpz6nBxqtb4TXebRzEXzzy0= Subject key identifier: 22:E1:E1:41:DC:90:A8:B5:91:B5:AB:E5:16:50:7B:8A:AF:AF:05:6B Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 1A0B017A8BC6A03EA8B3C6AE3925FBF61195AF14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0268 Signing time: Sat 06 Dec 2025 19:41:36 +0000 Manifest this update: Sat 06 Dec 2025 19:36:36 +0000 Manifest next update: Wed 10 Dec 2025 01:02:36 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: YGbtlM42GpeXJWwNS5HnaEAi9mnZKsNiOe/sp7sIMh8=) 2: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) 3: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: +lehz5/P1WeSP+lCksXzBEFnvHFKyWNi/abHbL0Pz74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0b:01:7a:8b:c6:a0:3e:a8:b3:c6:ae:39:25:fb:f6:11:95:af:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Dec 6 19:36:36 2025 GMT Not After : Dec 10 01:02:36 2025 GMT Subject: CN=22E1E141DC90A8B591B5ABE516507B8AAFAF056B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:8a:b1:19:fd:5a:a4:97:c8:47:d8:8f:ca: de:c2:55:16:65:fe:9d:55:04:a0:dc:cd:3a:7b:63: b1:6b:7f:7b:aa:4b:be:c1:f1:69:25:51:c4:c0:2c: d1:2e:35:ae:f3:1b:02:96:6e:82:8f:e7:ad:a0:3d: 94:a0:ea:96:86:0e:c0:98:8e:11:f5:48:8e:51:6f: 88:0f:83:37:75:05:4b:6e:ee:4c:29:7f:d2:e8:53: 5b:42:c5:ea:7e:33:55:60:82:19:22:85:88:54:0d: 3f:bd:36:16:87:f5:85:5c:b1:80:46:60:81:b4:05: bf:fc:46:63:58:16:87:67:e6:50:c2:01:a4:df:9c: 2b:a3:2e:bf:04:3c:d8:fe:96:64:85:92:a9:49:fc: 9f:40:d5:0d:2a:27:73:c2:2e:4b:52:e4:1d:11:1b: 68:a2:5c:e1:ad:1f:9f:7e:29:39:10:86:ee:5c:b7: a5:9a:11:d6:2b:a4:0a:5c:0a:2a:39:91:02:0f:11: f8:69:28:48:c8:1d:95:01:af:b2:08:dc:25:c5:2f: 5e:1e:91:98:04:14:08:6b:b6:1d:a1:fb:a2:e6:e0: 26:33:d1:fc:d4:12:09:b9:88:e7:62:56:a0:e9:a2: 3e:85:4c:b5:d2:c5:00:db:2f:5f:72:1e:24:72:10: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:E1:41:DC:90:A8:B5:91:B5:AB:E5:16:50:7B:8A:AF:AF:05:6B X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:cc:2a:97:9e:bc:85:67:20:b9:e8:69:77:e6:a6:60:a5:29: a0:42:ac:e8:c4:eb:52:3d:ad:3b:7c:02:a9:22:a3:13:4a:d6: ad:cc:55:7b:a6:cc:4d:a9:40:90:01:21:c4:1e:07:28:f5:6a: 1c:62:56:2a:96:d4:19:01:60:c8:cc:f2:f2:eb:a7:39:fd:db: f9:1d:e9:26:bb:e0:cc:d5:86:84:48:d2:9d:e0:a1:93:60:1a: 4f:e2:0b:4e:58:31:1f:fb:4d:c8:97:13:89:24:c0:68:c2:5d: 34:f8:07:f0:ff:63:a9:64:c8:84:88:4f:9f:0c:a6:f5:16:ba: 87:10:5f:4c:55:89:72:8f:7e:ea:37:bd:42:c8:e7:40:d2:d3: 2c:b2:36:0f:5a:6d:f2:4f:b2:ed:5d:95:46:50:f4:fb:6d:20: 7d:fb:a5:f2:29:58:a6:aa:05:8b:60:99:5a:22:c9:0c:98:e1: 3d:25:74:e5:c9:59:35:1c:d0:98:01:bf:4b:e8:7b:11:89:09: 06:0c:0a:ae:2b:b0:1b:3e:d8:1f:6f:59:7f:9b:ed:02:78:3f: 53:76:e1:75:e1:d8:96:d4:51:ea:9f:bc:17:b7:2c:c6:a6:51: 63:8e:52:dd:76:94:4b:0d:56:99:95:e1:69:70:95:d9:95:27: fb:eb:cd:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgsBeovGoD6os8auOSX79hGVrxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTEyMDYxOTM2MzZaFw0yNTEyMTAwMTAyMzZaMDMxMTAvBgNV BAMTKDIyRTFFMTQxREM5MEE4QjU5MUI1QUJFNTE2NTA3QjhBQUZBRjA1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYYqxGf1apJfIR9iPyt7CVRZl /p1VBKDczTp7Y7Frf3uqS77B8WklUcTALNEuNa7zGwKWboKP562gPZSg6paGDsCY jhH1SI5Rb4gPgzd1BUtu7kwpf9LoU1tCxep+M1VgghkihYhUDT+9NhaH9YVcsYBG YIG0Bb/8RmNYFodn5lDCAaTfnCujLr8EPNj+lmSFkqlJ/J9A1Q0qJ3PCLktS5B0R G2iiXOGtH59+KTkQhu5ct6WaEdYrpApcCio5kQIPEfhpKEjIHZUBr7II3CXFL14e kZgEFAhrth2h+6Lm4CYz0fzUEgm5iOdiVqDpoj6FTLXSxQDbL19yHiRyEA77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuHhQdyQqLWRtavlFlB7iq+vBWswHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTMKpeevIVnILnoaXfmpmClKaBCrOjE61I9 rTt8AqkioxNK1q3MVXumzE2pQJABIcQeByj1ahxiViqW1BkBYMjM8vLrpzn92/kd 6Sa74MzVhoRI0p3goZNgGk/iC05YMR/7TciXE4kkwGjCXTT4B/D/Y6lkyISIT58M pvUWuocQX0xViXKPfuo3vULI50DS0yyyNg9abfJPsu1dlUZQ9PttIH37pfIpWKaq BYtgmVoiyQyY4T0ldOXJWTUc0JgBv0voexGJCQYMCq4rsBs+2B9vWX+b7QJ4P1N2 4XXh2JbUUeqfvBe3LMamUWOOUt12lEsNVpmV4WlwldmVJ/vrzWs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:45 2025 by rpki-client