This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: UJqkQBqYwuGGqoNZ/boll/3T4M8MVNx566O/Idpm+m0= Subject key identifier: 86:D6:51:76:3C:F8:CA:48:77:A1:2A:EF:0E:9E:F4:BA:CF:45:E4:CE Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 7DBAF0B2592F4977CEA408A8AB6FCAB246021407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 0208 Signing time: Fri 05 Dec 2025 03:31:54 +0000 Manifest this update: Fri 05 Dec 2025 03:26:54 +0000 Manifest next update: Mon 08 Dec 2025 09:51:54 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: q6ic0Pf+ze33ZsfvXLWOTuKQV0P/EUL1jfItjWaXYBE=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ba:f0:b2:59:2f:49:77:ce:a4:08:a8:ab:6f:ca:b2:46:02:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Dec 5 03:26:54 2025 GMT Not After : Dec 8 09:51:54 2025 GMT Subject: CN=86D651763CF8CA4877A12AEF0E9EF4BACF45E4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:49:28:35:d2:d4:1f:77:3f:cc:45:e5:03: 85:c8:b6:25:bd:07:4a:f1:b5:52:2b:46:ca:95:79: 7a:35:d5:0b:5e:fa:9f:87:ee:a1:06:2c:32:38:87: 8a:74:26:bc:7d:c7:67:1b:4e:02:17:45:26:21:9a: b6:08:ad:07:2e:74:ca:9a:fd:c4:33:2a:43:0a:03: 23:f6:d4:3d:5e:a6:a5:1c:d5:85:13:08:fd:ac:95: 78:65:67:d5:56:f7:36:9f:45:cc:ed:8c:92:71:2d: de:3d:6c:8b:4c:6a:3d:70:0f:19:d4:6e:d7:a3:fa: 89:b1:b8:06:a2:28:d3:d5:fb:1b:41:e8:34:53:6c: 7a:96:64:83:d0:aa:df:1b:81:55:e1:9a:d8:fe:e4: a1:a8:c5:26:39:02:d4:84:7f:7d:27:ba:bf:b6:5c: 7a:0f:d5:9d:bf:ed:62:dc:52:d4:f6:38:95:d1:b7: 68:69:9b:d2:bc:6a:ce:c4:af:4f:7f:94:35:c7:0f: 68:17:94:44:e1:03:ef:72:24:8e:47:ea:a1:ec:94: 79:1c:61:f1:06:2e:14:15:fc:5d:a7:ac:8d:2b:15: 31:70:3e:50:31:2d:f3:bc:d1:99:44:0d:26:18:ae: 9d:27:7e:14:bc:3f:35:86:72:80:e6:12:dc:eb:62: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:51:76:3C:F8:CA:48:77:A1:2A:EF:0E:9E:F4:BA:CF:45:E4:CE X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:27:7e:77:53:74:5e:4b:c9:35:b0:62:9b:ec:e7:68:08:9d: 18:9b:cf:87:10:7d:7f:d6:f9:e8:4a:44:2b:7f:f1:d0:ff:8f: 58:05:5e:af:c4:b2:b0:aa:ac:63:71:5c:2a:1e:ef:f0:67:9b: aa:9a:f4:bd:7f:9b:09:5a:95:b4:b5:4d:4a:3c:e5:f9:04:ce: 20:62:d0:33:1a:65:fe:eb:ae:a5:e8:a0:9b:cc:e1:35:c9:c6: de:d6:86:0f:37:88:f2:89:ff:c0:f4:19:78:18:79:66:04:b5: 5b:2f:b0:09:9d:f7:41:a3:52:f7:bd:a3:1f:71:b2:48:e9:70: c9:76:37:e2:d5:22:62:18:b9:c5:1b:14:3a:e4:43:69:2d:ba: 4c:c4:d5:45:e0:fb:45:fc:80:1b:bc:dc:2e:39:3d:33:91:1e: 67:17:61:50:d2:6f:f2:f8:ab:08:3d:7d:b0:d2:45:60:eb:98: f6:a0:4b:5e:21:b0:0f:2f:b7:07:03:16:73:a1:ef:77:38:50: f0:7e:86:c5:f0:9b:d9:83:a0:93:97:11:6c:5e:82:17:d2:d4: 14:b5:23:f0:32:54:92:d7:33:f2:33:3a:88:2d:39:fb:d4:c0: 34:4d:10:cf:69:b6:2f:39:5d:d8:21:84:ab:31:98:bb:72:4c: 82:6d:8e:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbrwslkvSXfOpAioq2/KskYCFAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTEyMDUwMzI2NTRaFw0yNTEyMDgwOTUxNTRaMDMxMTAvBgNV BAMTKDg2RDY1MTc2M0NGOENBNDg3N0ExMkFFRjBFOUVGNEJBQ0Y0NUU0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QkkoNdLUH3c/zEXlA4XItiW9 B0rxtVIrRsqVeXo11Qte+p+H7qEGLDI4h4p0Jrx9x2cbTgIXRSYhmrYIrQcudMqa /cQzKkMKAyP21D1epqUc1YUTCP2slXhlZ9VW9zafRcztjJJxLd49bItMaj1wDxnU btej+omxuAaiKNPV+xtB6DRTbHqWZIPQqt8bgVXhmtj+5KGoxSY5AtSEf30nur+2 XHoP1Z2/7WLcUtT2OJXRt2hpm9K8as7Er09/lDXHD2gXlEThA+9yJI5H6qHslHkc YfEGLhQV/F2nrI0rFTFwPlAxLfO80ZlEDSYYrp0nfhS8PzWGcoDmEtzrYlrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtZRdjz4ykh3oSrvDp70us9F5M4wHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsnfndTdF5LyTWwYpvs52gInRibz4cQfX/W +ehKRCt/8dD/j1gFXq/EsrCqrGNxXCoe7/Bnm6qa9L1/mwlalbS1TUo85fkEziBi 0DMaZf7rrqXooJvM4TXJxt7Whg83iPKJ/8D0GXgYeWYEtVsvsAmd90GjUve9ox9x skjpcMl2N+LVImIYucUbFDrkQ2ktukzE1UXg+0X8gBu83C45PTORHmcXYVDSb/L4 qwg9fbDSRWDrmPagS14hsA8vtwcDFnOh73c4UPB+hsXwm9mDoJOXEWxeghfS1BS1 I/AyVJLXM/IzOogtOfvUwDRNEM9pti85XdghhKsxmLtyTIJtjvw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:45 2025 by rpki-client