This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft File: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft (raw, json) Hash identifier: yaaulEWua281yHsmrmrAZMjv811vX3WY313+RwUwB9s= Subject key identifier: 7D:2F:DE:52:EF:9B:D5:48:95:57:7D:55:D2:AD:DB:1E:2C:35:05:BA Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC Certificate issuer: /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Certificate serial: 465681247C142403C3069510AE47113DE64F0C75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft Manifest number: 027A Signing time: Fri 05 Dec 2025 04:31:10 +0000 Manifest this update: Fri 05 Dec 2025 04:26:10 +0000 Manifest next update: Mon 08 Dec 2025 13:14:10 +0000 Files and hashes: 1: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: IuY6Z6ZxkbRwQMJQpE9OThBrKqwMAexp3I1bhh6pQ9o=) 2: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: mfc1MWJrfS0i4jbp54vUDYFOgjfPW5TyC5UPp0KzzWY=) 3: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: 1DftqP7fwg1IcfyuMNUOovuIMKeX+ETObWgg15HcP+g=) 4: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl (hash: aRBr2qY7ad5V2A8GawPdTGSUBFGoVpC5wl+aCCd61Yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:56:81:24:7c:14:24:03:c3:06:95:10:ae:47:11:3d:e6:4f:0c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Validity Not Before: Dec 5 04:26:10 2025 GMT Not After : Dec 8 13:14:10 2025 GMT Subject: CN=7D2FDE52EF9BD54895577D55D2ADDB1E2C3505BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:35:5a:d3:cd:14:90:90:8c:7d:9d:44:88: 51:96:54:ca:15:76:33:8b:22:10:33:02:87:7b:e9: 87:30:f1:b9:a3:5e:7d:e4:c9:3a:c0:a7:ce:1f:8b: 2e:d0:3b:49:90:8d:a5:9e:f6:50:28:6a:b6:2d:74: e1:d9:3c:61:9a:08:e2:16:25:9e:30:3c:e8:c0:c7: ce:98:ac:a0:3c:4b:48:21:33:f0:f2:35:01:5c:f9: f5:ec:16:f4:87:e5:73:c6:5d:ac:70:87:a5:c6:26: ae:9f:bc:af:f9:bb:bf:90:ea:b5:05:bc:7d:28:95: f4:0e:c4:b6:c3:33:07:4e:15:f8:81:a0:2b:ea:e4: 89:1c:a5:68:07:d3:fc:2b:b8:07:2f:77:b2:31:44: fe:13:5b:2f:ea:cb:4b:61:9a:56:45:18:40:52:ed: 7d:11:ec:52:08:b1:e7:c7:80:cb:38:3d:3e:c0:1a: d8:1a:95:23:d3:7c:93:b5:5b:96:e4:c1:94:6c:a6: 1b:19:79:cc:c4:7c:ce:21:50:e6:f3:8d:39:e8:5b: 16:21:9a:9c:12:ce:8a:7c:11:e1:da:10:aa:bd:db: f8:ea:e6:78:a2:3c:9b:2d:a5:e9:eb:52:c1:7a:df: 84:51:06:7a:77:53:bf:26:77:87:f9:75:e8:8d:aa: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:DE:52:EF:9B:D5:48:95:57:7D:55:D2:AD:DB:1E:2C:35:05:BA X509v3 Authority Key Identifier: keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:78:67:83:07:d6:b9:e7:b4:62:c9:56:9d:f9:b0:b5:55:09: fa:ec:bc:a8:44:9f:5a:6c:b8:f2:3d:3e:4e:f2:99:67:c2:aa: 45:fb:27:8f:b2:3f:11:a0:c9:d2:b8:9c:62:7e:e3:6f:39:ae: 19:0d:ca:bc:53:8b:67:e1:ef:1c:73:82:dc:91:38:03:54:5c: 6b:bb:1a:2b:70:95:18:b6:59:4e:2c:12:f0:9d:ed:84:88:79: 3e:3e:58:c5:5a:eb:34:2d:6a:42:a9:08:5d:9b:5f:00:da:52: de:18:b5:c9:3b:ed:18:96:06:69:d1:72:83:37:97:ad:f3:37: f8:f4:55:98:8b:49:c2:5c:24:d8:b0:30:22:77:1f:b9:f3:4e: be:9c:0b:5f:3a:14:eb:56:39:e0:d9:f4:ca:59:13:00:1f:5a: 03:93:a7:0a:16:2e:f8:a7:b1:6a:dd:30:6b:f8:0d:65:bd:da: 78:48:de:8d:63:a8:c8:4a:7f:3a:6d:a1:87:a2:d6:89:be:a0: 82:76:9e:c3:3a:a5:ea:9b:c6:a6:7a:c3:1c:a6:d0:d6:27:6e: c9:41:c1:ca:9a:11:e2:42:33:cc:79:f2:2c:2f:35:86:8e:73: 87:8c:a8:ff:87:41:7a:43:2c:55:8f:c3:97:4a:09:8c:9c:e3: 9d:c0:3a:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlaBJHwUJAPDBpUQrkcRPeZPDHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhD NEZBRTNCQzAeFw0yNTEyMDUwNDI2MTBaFw0yNTEyMDgxMzE0MTBaMDMxMTAvBgNV BAMTKDdEMkZERTUyRUY5QkQ1NDg5NTU3N0Q1NUQyQUREQjFFMkMzNTA1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PzVa080UkJCMfZ1EiFGWVMoV djOLIhAzAod76Ycw8bmjXn3kyTrAp84fiy7QO0mQjaWe9lAoarYtdOHZPGGaCOIW JZ4wPOjAx86YrKA8S0ghM/DyNQFc+fXsFvSH5XPGXaxwh6XGJq6fvK/5u7+Q6rUF vH0olfQOxLbDMwdOFfiBoCvq5IkcpWgH0/wruAcvd7IxRP4TWy/qy0thmlZFGEBS 7X0R7FIIsefHgMs4PT7AGtgalSPTfJO1W5bkwZRsphsZeczEfM4hUObzjTnoWxYh mpwSzop8EeHaEKq92/jq5niiPJstpenrUsF634RRBnp3U78md4f5deiNqguXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfS/eUu+b1UiVV31V0q3bHiw1BbowHwYDVR0j BBgwFoAUxZMKE5vHKgRgPnI05qo5OMT647wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDQ0MGM4NS0zNDcxLTQ0NjEtYjU5MC0xNjAxZTE5ZjUzMTgvMC9DNTkzMEExMzlC QzcyQTA0NjAzRTcyMzRFNkFBMzkzOEM0RkFFM0JDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhDNEZB RTNCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ0NDBjODUtMzQ3MS00NDYxLWI1 OTAtMTYwMWUxOWY1MzE4LzAvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5 MzhDNEZBRTNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZ4Z4MH1rnntGLJVp35sLVVCfrsvKhEn1ps uPI9Pk7ymWfCqkX7J4+yPxGgydK4nGJ+4285rhkNyrxTi2fh7xxzgtyROANUXGu7 GitwlRi2WU4sEvCd7YSIeT4+WMVa6zQtakKpCF2bXwDaUt4Ytck77RiWBmnRcoM3 l63zN/j0VZiLScJcJNiwMCJ3H7nzTr6cC186FOtWOeDZ9MpZEwAfWgOTpwoWLvin sWrdMGv4DWW92nhI3o1jqMhKfzptoYei1om+oIJ2nsM6peqbxqZ6wxym0NYnbslB wcqaEeJCM8x58iwvNYaOc4eMqP+HQXpDLFWPw5dKCYyc453AOpo= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:47 2025 by rpki-client