This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: x8rMyedrK7V5czmCae6mFHEBSc8EARVXNjac0MlAPuE= Subject key identifier: 19:BD:88:F5:B9:53:5B:BF:3A:E5:53:95:B1:86:F6:7A:2F:3F:21:85 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 510223FA54AB5D9BE1BBDC31174346B0C9703416 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0259 Signing time: Sat 06 Dec 2025 20:02:30 +0000 Manifest this update: Sat 06 Dec 2025 19:57:30 +0000 Manifest next update: Wed 10 Dec 2025 05:03:30 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: i7RMDdt8jUS7HtiiEcFokyHHqqojwIBGjAB1n73EXtM=) 4: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 5: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 6: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:02:23:fa:54:ab:5d:9b:e1:bb:dc:31:17:43:46:b0:c9:70:34:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Dec 6 19:57:30 2025 GMT Not After : Dec 10 05:03:30 2025 GMT Subject: CN=19BD88F5B9535BBF3AE55395B186F67A2F3F2185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:64:9c:82:6f:24:30:b6:c0:01:30:1f:17: 19:f8:9a:c4:ff:2c:b8:5d:c4:ed:93:ce:b2:a4:b5: f1:37:b4:7f:94:76:cb:57:ce:35:bc:a1:c1:88:51: 1d:0a:cb:a2:b1:33:37:c9:d3:2e:24:8b:9a:8b:b9: 2e:cb:b0:19:43:32:3e:c5:8f:a0:20:b6:99:77:96: 34:a0:70:75:ff:5d:b3:ba:83:99:ed:c3:df:49:b9: 4a:a9:66:33:7d:d7:c6:57:dd:d6:bf:1d:ac:7b:31: bb:81:c8:fc:a6:ac:f5:8a:75:78:ae:e4:87:fe:04: ee:a9:56:f6:6f:24:51:f6:18:89:3e:e2:21:3c:c5: 15:7c:2c:7b:0a:48:95:8c:63:7b:8b:9c:69:f0:54: 03:ec:cf:83:42:7a:b5:dc:b6:84:e0:87:3b:48:7f: 8f:46:67:eb:5b:20:fc:29:c0:e2:d8:51:2c:d8:16: 5d:21:97:a0:5d:81:ad:30:c0:b8:f1:18:17:a5:14: bc:63:4a:12:87:cd:d4:78:5a:9c:0c:bd:10:f9:58: a9:5b:1f:c9:ed:12:c4:7c:9a:83:83:64:8a:0a:88: b1:98:a2:9c:03:c4:3e:4d:36:d2:aa:3e:2e:de:9c: 9c:85:da:15:87:b9:54:11:99:0a:c2:5e:1c:76:a6: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:88:F5:B9:53:5B:BF:3A:E5:53:95:B1:86:F6:7A:2F:3F:21:85 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bc:40:1f:25:5e:a9:a6:43:a2:a0:28:c4:cb:f3:08:c4:5a: 1e:8a:4e:70:21:0c:8f:c6:09:5d:bb:54:58:ec:c7:a0:49:d8: 2c:21:6d:4a:20:c4:98:d7:7b:6a:83:a3:7b:7f:67:9b:bd:8d: f1:9d:57:57:bf:00:11:c0:8d:91:b5:e1:a8:91:3d:96:12:6f: c3:8e:09:e0:29:8c:b3:25:e5:d1:06:5f:f0:6f:a3:a0:a5:6b: 6d:39:d8:24:24:e5:8c:0c:b5:b7:19:9b:bb:be:2f:ea:b3:43: 4b:8b:b2:24:55:ec:91:cd:0d:9f:85:2f:e3:f5:37:d3:2a:72: a6:6b:97:12:77:b8:80:81:0b:10:0b:00:fd:0a:05:19:84:2b: 81:a8:6b:5a:6f:8d:49:47:eb:49:4f:a1:6e:ce:f6:2a:f3:b7: 77:85:8e:39:f8:20:ea:1b:06:11:a9:08:48:5f:8f:f4:ca:b8: 24:1c:8d:f1:0b:fa:e3:65:4f:16:de:5f:0a:3a:57:15:d4:b9: 02:bb:0c:b6:73:b0:89:07:a1:f5:1f:50:e1:cd:d6:e4:36:97: 26:cf:a0:e5:d7:c5:91:e7:a6:a1:c8:06:3e:39:7f:c5:7f:bc: 2f:12:72:aa:1f:54:51:df:b2:df:ec:16:b2:80:23:f9:5b:4b: 95:d8:50:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQIj+lSrXZvhu9wxF0NGsMlwNBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTEyMDYxOTU3MzBaFw0yNTEyMTAwNTAzMzBaMDMxMTAvBgNV BAMTKDE5QkQ4OEY1Qjk1MzVCQkYzQUU1NTM5NUIxODZGNjdBMkYzRjIxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LGScgm8kMLbAATAfFxn4msT/ LLhdxO2TzrKktfE3tH+UdstXzjW8ocGIUR0Ky6KxMzfJ0y4ki5qLuS7LsBlDMj7F j6Agtpl3ljSgcHX/XbO6g5ntw99JuUqpZjN918ZX3da/Hax7MbuByPymrPWKdXiu 5If+BO6pVvZvJFH2GIk+4iE8xRV8LHsKSJWMY3uLnGnwVAPsz4NCerXctoTghztI f49GZ+tbIPwpwOLYUSzYFl0hl6Bdga0wwLjxGBelFLxjShKHzdR4WpwMvRD5WKlb H8ntEsR8moODZIoKiLGYopwDxD5NNtKqPi7enJyF2hWHuVQRmQrCXhx2pm3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGb2I9blTW7865VOVsYb2ei8/IYUwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe8QB8lXqmmQ6KgKMTL8wjEWh6KTnAhDI/G CV27VFjsx6BJ2CwhbUogxJjXe2qDo3t/Z5u9jfGdV1e/ABHAjZG14aiRPZYSb8OO CeApjLMl5dEGX/Bvo6Cla2052CQk5YwMtbcZm7u+L+qzQ0uLsiRV7JHNDZ+FL+P1 N9MqcqZrlxJ3uICBCxALAP0KBRmEK4Goa1pvjUlH60lPoW7O9irzt3eFjjn4IOob BhGpCEhfj/TKuCQcjfEL+uNlTxbeXwo6VxXUuQK7DLZzsIkHofUfUOHN1uQ2lybP oOXXxZHnpqHIBj45f8V/vC8ScqofVFHfst/sFrKAI/lbS5XYUJg= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:48 2025 by rpki-client