This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: WxYFgxdTDN+lAcXocuXOSkHiMxH1oAKmn7H4HO4PYZ0= Subject key identifier: B0:21:E0:30:74:A8:2E:8F:1B:B6:4A:EA:0A:8F:54:C0:D8:89:F9:F6 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 381BD520DDB56BBD2FCE99AF3774A0E773B79539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 052A Signing time: Thu 04 Dec 2025 23:10:49 +0000 Manifest this update: Thu 04 Dec 2025 23:05:49 +0000 Manifest next update: Mon 08 Dec 2025 11:03:49 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: 7V4Uytbum68GYoUfpR5WcYkfhDwKBuSuqtHsxXOFfBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:d5:20:dd:b5:6b:bd:2f:ce:99:af:37:74:a0:e7:73:b7:95:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Dec 4 23:05:49 2025 GMT Not After : Dec 8 11:03:49 2025 GMT Subject: CN=B021E03074A82E8F1BB64AEA0A8F54C0D889F9F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:3c:4f:b8:75:50:80:2f:ca:99:b4:8a:39: 22:5d:85:65:66:dd:8e:45:8f:72:e2:65:4d:c6:fb: 2b:55:80:63:e3:00:00:83:1d:be:05:9d:89:78:d5: a5:3f:2a:73:c5:5e:80:fd:d5:13:a3:a6:c3:14:a1: 3f:84:bc:c5:7e:ff:62:46:dc:b8:11:ca:44:88:a5: 84:ca:29:16:34:11:65:3d:ca:03:aa:ed:31:97:8e: 1f:fe:3f:f5:6e:7e:3a:1c:5b:42:f9:17:e6:8b:da: 29:45:cb:96:1c:57:a0:11:e6:e9:f2:0c:83:19:94: b8:7a:63:3b:ed:9b:b9:f5:68:6d:97:75:fd:18:90: 16:76:52:2e:a8:37:c8:e6:ad:10:03:f5:93:b8:1a: bd:47:8e:f0:fc:09:cc:9a:2c:aa:08:c1:c0:cc:4d: ae:fd:df:83:83:95:e5:b6:87:31:c3:d5:03:e1:91: 1c:f8:ce:3f:f0:d8:df:18:08:ed:50:d6:cf:34:ed: 2a:7e:da:38:de:ac:4e:87:6a:0c:b7:f8:95:5a:08: f3:36:e7:69:5d:5f:54:28:73:95:c5:80:4f:30:d3: d9:8d:76:88:98:1e:4a:57:b6:f0:00:7f:bd:8f:2a: 09:69:7e:6d:7f:3d:7a:7f:9c:19:4c:d0:55:11:7d: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:E0:30:74:A8:2E:8F:1B:B6:4A:EA:0A:8F:54:C0:D8:89:F9:F6 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c3:46:c5:69:bf:18:00:54:29:42:80:47:21:ed:c0:d3:53: 19:95:e6:f4:3f:b3:d5:7c:bd:28:37:58:62:3e:dd:67:a0:ce: cc:a5:10:df:4c:be:5d:2c:ac:1a:27:0f:0b:9e:a4:f5:cc:1d: 80:09:8a:87:8a:07:3d:32:f0:97:1f:65:d4:67:3a:f6:3e:45: 6c:25:41:83:a5:9b:d6:f1:d9:fa:07:12:ed:66:da:34:22:a9: 40:a2:c0:d0:74:59:6d:42:6d:db:b3:ff:0f:c8:68:77:cd:a3: 99:c6:ac:11:cf:b6:1c:0e:b3:52:2b:77:e7:86:75:29:8e:22: 58:04:a9:97:b6:95:d3:6f:8f:f5:b9:09:f4:de:ef:79:95:62: 3b:8d:21:e7:ef:a8:c6:4c:5e:f6:5c:cb:bf:7e:71:51:53:b7: ff:f7:55:36:95:10:e6:b3:69:a2:36:35:66:67:fa:80:f0:53: 94:dc:08:11:6e:c1:0e:7e:1c:46:94:13:8d:e1:2e:c7:5d:9a: ad:27:4a:a8:f8:a5:70:58:f5:eb:87:0e:2f:51:49:bf:ad:d6: e6:41:c4:ef:99:87:b7:81:04:b0:02:a5:95:0f:83:ca:55:1d: 57:36:21:3c:d8:fd:d3:1c:a7:41:f6:c6:dc:b4:bb:cb:1f:64: ac:23:49:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBvVIN21a70vzpmvN3Sg53O3lTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTEyMDQyMzA1NDlaFw0yNTEyMDgxMTAzNDlaMDMxMTAvBgNV BAMTKEIwMjFFMDMwNzRBODJFOEYxQkI2NEFFQTBBOEY1NEMwRDg4OUY5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpjxPuHVQgC/KmbSKOSJdhWVm 3Y5Fj3LiZU3G+ytVgGPjAACDHb4FnYl41aU/KnPFXoD91ROjpsMUoT+EvMV+/2JG 3LgRykSIpYTKKRY0EWU9ygOq7TGXjh/+P/VufjocW0L5F+aL2ilFy5YcV6AR5uny DIMZlLh6Yzvtm7n1aG2Xdf0YkBZ2Ui6oN8jmrRAD9ZO4Gr1HjvD8CcyaLKoIwcDM Ta7934ODleW2hzHD1QPhkRz4zj/w2N8YCO1Q1s807Sp+2jjerE6Hagy3+JVaCPM2 52ldX1Qoc5XFgE8w09mNdoiYHkpXtvAAf72PKglpfm1/PXp/nBlM0FURfcH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCHgMHSoLo8btkrqCo9UwNiJ+fYwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/DRsVpvxgAVClCgEch7cDTUxmV5vQ/s9V8 vSg3WGI+3WegzsylEN9Mvl0srBonDwuepPXMHYAJioeKBz0y8JcfZdRnOvY+RWwl QYOlm9bx2foHEu1m2jQiqUCiwNB0WW1Cbduz/w/IaHfNo5nGrBHPthwOs1Ird+eG dSmOIlgEqZe2ldNvj/W5CfTe73mVYjuNIefvqMZMXvZcy79+cVFTt//3VTaVEOaz aaI2NWZn+oDwU5TcCBFuwQ5+HEaUE43hLsddmq0nSqj4pXBY9euHDi9RSb+t1uZB xO+Zh7eBBLACpZUPg8pVHVc2ITzY/dMcp0H2xty0u8sfZKwjSWg= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:53 2025 by rpki-client