This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json)
Hash identifier: pT8tC2NHFCOWoG2C34XRd7rUFnoC//GxQzRw8FJqV1k=
Subject key identifier: 95:95:A8:41:4D:A8:74:32:4E:9E:64:11:5E:14:91:3E:FE:BD:D9:E3
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial: 0D925F8CB5D598427FC59E08535EB4CDCFAC18BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
Manifest number: 0531
Signing time: Sat 06 Dec 2025 01:42:28 +0000
Manifest this update: Sat 06 Dec 2025 01:37:28 +0000
Manifest next update: Tue 09 Dec 2025 01:45:28 +0000
Files and hashes: 1: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=)
2: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=)
3: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: k7L8g5Bi96ZAQ+53BY/OxOyY0zwg8DvZ6ZWLFOzDws4=)
4: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=)
5: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 01:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:92:5f:8c:b5:d5:98:42:7f:c5:9e:08:53:5e:b4:cd:cf:ac:18:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Validity
Not Before: Dec 6 01:37:28 2025 GMT
Not After : Dec 9 01:45:28 2025 GMT
Subject: CN=9595A8414DA874324E9E64115E14913EFEBDD9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:7d:a7:62:da:21:85:4b:5a:42:a8:ae:5a:
f0:a7:d5:0f:b7:78:16:25:14:d2:9a:5e:9b:e6:80:
8c:d3:c1:ef:8a:e7:e1:0c:3c:46:6d:93:78:e0:18:
0a:d9:59:c2:a9:b8:ba:aa:fd:ca:a9:5d:69:1a:11:
70:10:27:61:39:32:c8:67:ef:d2:d5:34:3a:c7:6a:
82:4d:59:b2:06:b8:eb:5c:91:79:93:d1:3b:32:a5:
48:ea:7d:93:e4:35:b7:8d:8b:66:f1:ef:bd:ce:fb:
75:d4:f3:da:7c:75:d4:97:6d:5f:f8:16:d8:44:c1:
3c:64:53:f6:9d:4c:35:45:5c:0b:fd:b2:68:b6:0a:
c3:57:fd:92:27:ba:55:d3:9b:41:1e:a0:69:78:4c:
2b:ef:6e:af:23:bb:52:ec:43:84:da:d0:7a:16:70:
31:ad:f8:4c:63:85:dd:7a:0e:7c:61:9a:f6:e0:3b:
b3:6e:47:db:cd:77:eb:d6:4d:d9:26:b8:0f:06:68:
ce:b1:92:a5:b3:0d:52:27:a6:7f:bf:cf:18:b4:97:
ca:31:e9:b6:6d:59:b8:e5:28:a3:ed:66:71:09:8a:
94:68:d6:6f:d2:d9:1e:97:0b:3f:90:a2:60:e5:49:
04:d6:79:8c:a8:52:eb:dd:7a:0d:be:16:63:c9:8a:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:A8:41:4D:A8:74:32:4E:9E:64:11:5E:14:91:3E:FE:BD:D9:E3
X509v3 Authority Key Identifier:
keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:5d:49:6f:8a:4b:0c:20:f1:26:d2:51:9e:0e:77:78:fe:
2a:12:89:a0:30:24:d7:82:c3:2b:6d:50:84:9d:84:20:40:4f:
f2:70:bc:2d:ca:a6:16:eb:50:9a:97:d5:1f:35:73:67:68:55:
5e:59:c3:bb:12:b6:b8:f6:27:2a:68:8d:ce:eb:2b:93:e9:6b:
4c:6b:48:0e:bb:0d:41:de:f7:3f:9c:60:bf:46:72:50:6d:6d:
52:b3:0b:cc:14:e4:0b:1b:8d:d2:70:bb:77:8d:32:47:22:e1:
42:b0:4e:08:01:47:19:0d:cd:ea:22:1d:78:24:aa:71:60:c2:
d1:45:bc:41:5f:d0:ed:18:b1:2a:9d:eb:75:db:c0:34:82:48:
b7:69:87:2d:41:8c:35:a9:ee:19:d5:14:cc:0f:51:f1:7a:8a:
aa:1d:f2:c1:e0:83:7d:a0:a0:ff:67:0a:06:6d:0b:33:0b:00:
02:df:a7:ab:e0:ae:2f:84:6b:ba:06:09:65:c0:92:9b:a9:8f:
bb:e1:b7:4d:14:5d:53:13:1d:f8:a9:19:a4:0d:47:2c:32:34:
8f:9d:f5:a2:d9:b9:50:bb:db:67:0a:0b:52:ef:6b:a2:3b:41:
fa:36:5e:7d:9e:5e:e8:61:e6:83:d5:80:e3:4e:18:f6:ea:d5:
c4:b1:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:01 2025 by rpki-client