This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: +Yyo3exAU3SbB6rfYiYIc/I2Guy06tr/kuvGfi2VqDQ= Subject key identifier: F0:3C:69:11:BB:E2:11:2A:E5:C3:33:0B:3E:22:F1:CA:F8:86:C7:40 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 25F35EC6B039952C4B69E73FA699FA4AD059135A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 032C Signing time: Fri 05 Dec 2025 14:00:57 +0000 Manifest this update: Fri 05 Dec 2025 13:55:57 +0000 Manifest next update: Mon 08 Dec 2025 22:04:57 +0000 Files and hashes: 1: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 3: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: Tx1Nxg7W+opYiPYRXcj26xx/V6qFL/OYl+KBss4jnCg=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f3:5e:c6:b0:39:95:2c:4b:69:e7:3f:a6:99:fa:4a:d0:59:13:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Dec 5 13:55:57 2025 GMT Not After : Dec 8 22:04:57 2025 GMT Subject: CN=F03C6911BBE2112AE5C3330B3E22F1CAF886C740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:73:8e:2c:93:f0:dd:f5:35:fc:5c:a1:84: 1b:5f:a7:2f:c7:78:39:07:d9:36:02:83:55:a2:7d: f6:e9:ef:d3:77:45:af:b8:51:38:64:db:8f:0d:d6: 04:1e:b2:22:e6:64:26:d7:05:4e:f6:49:84:b6:42: 7b:0d:d6:e3:48:63:fd:a6:26:38:2a:12:39:06:17: 78:96:da:a8:25:53:2c:10:63:2b:b4:34:86:7d:7b: f1:fc:d9:0d:ac:b4:a2:f3:f3:5b:a9:ea:8b:c6:70: 84:a8:9d:d2:de:0c:ff:3c:d0:66:fc:29:9c:a3:24: 14:e1:7d:fb:c0:b7:8a:bb:57:b5:9f:60:a7:12:77: 64:f6:ce:74:11:dd:f3:78:69:49:6c:e9:9e:eb:09: 34:f5:4c:56:f9:a5:34:df:8f:67:cc:d4:61:fe:59: 5f:0e:c8:aa:09:c1:6c:13:f0:0a:3a:9d:0b:b5:4b: ef:45:e5:8e:1b:37:aa:45:2b:f6:c9:7e:32:f0:90: d3:7d:da:ba:bd:70:83:1b:f8:85:a0:a3:19:42:24: cc:ab:a9:52:2a:fe:ed:87:31:4d:7b:13:67:e3:86: 41:c5:21:eb:90:10:22:60:d4:15:ea:ac:96:e2:f2: f6:b4:39:8a:06:85:44:57:34:33:ad:08:44:d7:68: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:69:11:BB:E2:11:2A:E5:C3:33:0B:3E:22:F1:CA:F8:86:C7:40 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:90:61:41:5e:4d:d3:cf:0d:9e:17:ff:be:fa:22:9c:89:c1: 70:76:bc:b6:37:a2:f4:49:d2:36:51:72:b4:b7:a7:fc:97:88: 83:05:32:e5:27:12:a3:16:db:0b:b9:86:4d:fd:c3:15:dc:bc: a8:e7:b8:d8:6c:5c:e2:1b:b1:0b:3a:c1:48:0f:06:b9:bb:c0: a5:0f:8f:4b:6e:74:ea:3f:89:6e:78:60:2d:5e:50:82:b6:e4: 69:a8:d8:a6:52:81:08:91:10:17:78:29:77:9b:3c:50:7a:84: b8:47:06:65:ee:d0:fa:f3:ba:f4:a0:e8:15:0f:6b:35:7d:1a: aa:6a:e3:f3:e1:93:eb:0a:a3:3c:72:bf:99:f3:c9:67:b0:ed: e0:0c:7f:b5:76:ce:bd:35:2f:bb:75:06:a9:1a:44:90:87:95: eb:6a:da:69:24:57:f9:a7:dc:44:32:6a:16:82:85:5e:9e:c9: bf:1b:27:f5:83:4b:e6:f4:ec:46:9c:e4:1b:f2:ea:8c:07:2c: 63:77:d1:f4:e6:9a:9b:6f:f8:f4:3f:05:8f:80:87:4f:24:8f: 01:39:f2:06:89:32:b9:5f:95:85:50:d7:9c:1e:97:5c:30:47: 19:37:20:bb:48:73:f6:3c:24:c8:f3:ee:db:0b:08:46:f9:3c: 9c:8c:c4:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfNexrA5lSxLaec/ppn6StBZE1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTEyMDUxMzU1NTdaFw0yNTEyMDgyMjA0NTdaMDMxMTAvBgNV BAMTKEYwM0M2OTExQkJFMjExMkFFNUMzMzMwQjNFMjJGMUNBRjg4NkM3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NnOOLJPw3fU1/FyhhBtfpy/H eDkH2TYCg1Wiffbp79N3Ra+4UThk248N1gQesiLmZCbXBU72SYS2QnsN1uNIY/2m JjgqEjkGF3iW2qglUywQYyu0NIZ9e/H82Q2stKLz81up6ovGcISondLeDP880Gb8 KZyjJBThffvAt4q7V7WfYKcSd2T2znQR3fN4aUls6Z7rCTT1TFb5pTTfj2fM1GH+ WV8OyKoJwWwT8Ao6nQu1S+9F5Y4bN6pFK/bJfjLwkNN92rq9cIMb+IWgoxlCJMyr qVIq/u2HMU17E2fjhkHFIeuQECJg1BXqrJbi8va0OYoGhURXNDOtCETXaJOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DxpEbviESrlwzMLPiLxyviGx0AwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaQYUFeTdPPDZ4X/776IpyJwXB2vLY3ovRJ 0jZRcrS3p/yXiIMFMuUnEqMW2wu5hk39wxXcvKjnuNhsXOIbsQs6wUgPBrm7wKUP j0tudOo/iW54YC1eUIK25Gmo2KZSgQiREBd4KXebPFB6hLhHBmXu0PrzuvSg6BUP azV9Gqpq4/Phk+sKozxyv5nzyWew7eAMf7V2zr01L7t1BqkaRJCHletq2mkkV/mn 3EQyahaChV6eyb8bJ/WDS+b07Eac5Bvy6owHLGN30fTmmptv+PQ/BY+Ah08kjwE5 8gaJMrlflYVQ15wel1wwRxk3ILtIc/Y8JMjz7tsLCEb5PJyMxBM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:48 2025 by rpki-client