This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: uoSfMI5g0uKcjIi77+yxU6xZZJ7YtIPdq3bt42w8c2w= Subject key identifier: 09:C6:A7:17:CE:EF:0B:30:62:8F:A8:38:92:45:AE:71:42:75:9E:82 Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 496F6B613CE3648725E87242C31B38B47BC7048B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 04A3 Signing time: Sat 06 Dec 2025 09:30:56 +0000 Manifest this update: Sat 06 Dec 2025 09:25:56 +0000 Manifest next update: Tue 09 Dec 2025 10:18:56 +0000 Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: 5NhVEBrWAh2gL6SxD01JJusncJbVJ8fJJc8b5WWhsRg=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) 3: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:6b:61:3c:e3:64:87:25:e8:72:42:c3:1b:38:b4:7b:c7:04:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Dec 6 09:25:56 2025 GMT Not After : Dec 9 10:18:56 2025 GMT Subject: CN=09C6A717CEEF0B30628FA8389245AE7142759E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:a2:74:54:c8:a0:ed:47:65:45:97:4a:56: 1b:d2:0c:1b:6c:58:26:7c:a6:f4:1e:bf:1f:10:8c: d8:3d:2a:70:dc:af:6c:a1:56:c2:d4:63:a4:a4:53: 30:e0:e4:78:86:12:50:ae:f4:b1:d5:79:ad:a3:6e: bb:a4:84:73:a4:c5:e1:d6:1b:44:a7:1a:27:13:d2: 66:c3:f3:9d:8f:d5:a6:f9:e2:88:d3:38:9b:99:81: 76:1b:92:58:93:ed:dd:65:c8:48:5b:47:ba:7d:35: 52:41:ed:03:fb:4c:97:5c:54:7d:f3:3e:bf:3a:f3: 99:c1:6e:b3:c8:79:84:97:c8:da:34:89:43:74:bc: f7:46:fe:6b:e7:b9:e9:a7:86:7c:ec:92:f5:2a:b1: 88:73:7f:75:bf:4a:2c:5f:47:20:b5:d1:82:95:90: e4:4c:98:1e:b9:dd:c3:df:d5:88:b6:f6:8b:fe:25: b8:a0:c2:2c:c5:fe:b3:d7:ca:a6:3e:65:61:a3:e1: e4:51:d1:8f:e4:b1:8b:9a:75:0a:2c:3c:22:0f:77: 7b:a9:bb:df:35:17:31:28:68:b9:b1:2f:5d:07:76: 55:a8:29:9e:36:19:2f:bb:34:30:56:35:3b:0d:8c: 0f:e8:9b:5f:24:41:c0:7b:9a:25:b6:d3:b3:71:e7: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:A7:17:CE:EF:0B:30:62:8F:A8:38:92:45:AE:71:42:75:9E:82 X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:e6:95:7e:dc:b9:83:db:10:e0:9e:3d:ac:f2:06:90:8b: 1d:21:ea:47:cc:d4:d7:cb:0a:dc:1f:b8:49:8a:df:1b:31:aa: 0d:28:f7:aa:3c:42:8b:17:f3:10:83:25:45:6d:47:d4:3c:b9: 67:f1:fa:f1:5c:c3:3d:67:2d:b0:a4:b1:d7:74:e3:12:dc:fa: 58:f4:62:f3:da:f2:a2:b4:59:9f:52:01:c9:94:58:d6:c4:0b: 4b:81:22:91:25:54:de:f2:ca:8d:73:f7:6b:2a:f6:12:f8:02: be:20:b6:8b:af:24:23:46:22:62:a1:96:94:09:11:eb:ad:14: 17:33:81:b2:96:76:d9:dc:01:7a:d2:f0:df:28:63:83:6b:3d: ee:6a:6e:d3:f2:ea:2b:1b:78:5e:c3:6a:bf:88:82:64:56:f3: c7:00:f8:2f:2d:b9:ea:75:9b:e7:2c:49:50:56:65:c4:67:bf: c9:a0:4f:7a:ea:38:c8:a5:58:da:2e:55:11:d7:55:32:a0:2f: 68:d9:6b:bd:97:e4:33:d8:60:cc:4a:ac:d2:e2:01:fe:ba:12: 2e:c6:6c:81:bf:f7:6a:da:32:a2:7e:5c:fe:2e:e7:fb:09:08: 2b:21:99:b7:51:0d:57:cc:e1:df:3e:81:35:d6:74:98:2c:1b: 53:9e:8d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW9rYTzjZIcl6HJCwxs4tHvHBIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTEyMDYwOTI1NTZaFw0yNTEyMDkxMDE4NTZaMDMxMTAvBgNV BAMTKDA5QzZBNzE3Q0VFRjBCMzA2MjhGQTgzODkyNDVBRTcxNDI3NTlFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConqJ0VMig7UdlRZdKVhvSDBts WCZ8pvQevx8QjNg9KnDcr2yhVsLUY6SkUzDg5HiGElCu9LHVea2jbrukhHOkxeHW G0SnGicT0mbD852P1ab54ojTOJuZgXYbkliT7d1lyEhbR7p9NVJB7QP7TJdcVH3z Pr8685nBbrPIeYSXyNo0iUN0vPdG/mvnuemnhnzskvUqsYhzf3W/SixfRyC10YKV kORMmB653cPf1Yi29ov+JbigwizF/rPXyqY+ZWGj4eRR0Y/ksYuadQosPCIPd3up u981FzEoaLmxL10HdlWoKZ42GS+7NDBWNTsNjA/om18kQcB7miW207Nx594zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcanF87vCzBij6g4kkWucUJ1noIwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMp5pV+3LmD2xDgnj2s8gaQix0h6kfM1NfL CtwfuEmK3xsxqg0o96o8QosX8xCDJUVtR9Q8uWfx+vFcwz1nLbCksdd04xLc+lj0 YvPa8qK0WZ9SAcmUWNbEC0uBIpElVN7yyo1z92sq9hL4Ar4gtouvJCNGImKhlpQJ EeutFBczgbKWdtncAXrS8N8oY4NrPe5qbtPy6isbeF7Dar+IgmRW88cA+C8tuep1 m+csSVBWZcRnv8mgT3rqOMilWNouVRHXVTKgL2jZa72X5DPYYMxKrNLiAf66Ei7G bIG/92raMqJ+XP4u5/sJCCshmbdRDVfM4d8+gTXWdJgsG1OejVs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:37 2025 by rpki-client