This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: fvcHe1R05nrVl5aZMdMhutDVoUufHIJCFrOaEkVpM34= Subject key identifier: 2E:97:21:A3:D6:94:7E:A4:7D:28:CD:06:5F:44:7D:E6:69:0E:16:AF Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 7F61E597F12C2233D26863584F7CA207DA8D0F0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04E9 Signing time: Fri 05 Dec 2025 18:50:48 +0000 Manifest this update: Fri 05 Dec 2025 18:45:48 +0000 Manifest next update: Mon 08 Dec 2025 23:58:48 +0000 Files and hashes: 1: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 2: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 3: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 4: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 5: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) 6: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: xDpoz7CSHDz+G6w5l/oAXR1AXdfrns1fL4baBekczSI=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:61:e5:97:f1:2c:22:33:d2:68:63:58:4f:7c:a2:07:da:8d:0f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Dec 5 18:45:48 2025 GMT Not After : Dec 8 23:58:48 2025 GMT Subject: CN=2E9721A3D6947EA47D28CD065F447DE6690E16AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:c5:ba:22:3a:ee:03:62:9b:78:1a:e9:18: 4d:36:64:82:e2:c1:f7:6d:17:31:d5:71:39:04:18: 4b:e5:66:84:bf:f9:d7:f4:ae:46:58:f8:36:05:62: 06:89:85:c4:b4:5f:4e:d3:06:ff:e2:29:a6:a8:1e: 3a:1e:04:c1:82:42:ea:e1:2d:72:ca:88:f9:4d:b7: 46:58:f0:73:23:5b:6b:5a:e7:e7:4d:5d:6d:81:d6: 07:63:3f:6d:b4:62:75:ad:e2:eb:a4:7b:c3:1c:38: 1b:b6:88:86:d5:56:9f:75:cf:bb:a8:52:f3:2d:45: 32:eb:cc:9f:91:db:7d:d8:e3:61:1e:94:a1:a5:e1: b6:bb:b0:fd:ee:59:01:9d:86:a8:ed:a6:8a:ab:ae: 6e:49:91:b7:bc:88:83:b0:7b:d4:81:51:5b:03:c7: bb:eb:d9:03:fb:29:bd:54:12:06:ca:55:a6:42:83: 29:57:ec:07:ae:39:5c:cc:91:65:10:37:2f:1d:29: 5a:d3:2e:3b:08:44:ba:6e:26:de:62:15:ff:4c:3e: ed:3b:02:e5:d1:e1:1a:e9:c6:76:da:a6:50:d2:4d: cc:c2:ca:d3:93:e8:04:53:ea:b3:cb:73:37:f0:31: f9:86:22:86:7d:06:47:8b:32:5d:22:e0:59:bc:c5: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:97:21:A3:D6:94:7E:A4:7D:28:CD:06:5F:44:7D:E6:69:0E:16:AF X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:86:06:d3:1c:e9:72:3f:dc:4e:8f:a1:ad:0d:c7:14:50:92: 81:dc:ce:fd:8e:0e:e0:f5:3e:be:df:1b:bc:00:ab:ae:a5:5b: e2:31:5f:d1:27:64:28:e1:ee:f1:cc:b1:ae:58:e8:21:69:c9: 9c:9f:4f:65:ea:ce:88:0f:79:12:e1:f6:14:69:53:00:9e:c4: 49:cf:88:d2:1d:0e:c6:77:6d:a1:ce:87:92:68:7c:1c:34:f0: 31:70:55:d9:f0:30:4c:bb:c3:cd:9f:8a:13:42:33:17:88:e1: 86:a6:85:2c:d8:e5:dc:dc:03:c2:79:9f:ed:42:b7:7a:a1:99: ca:7a:76:8a:3e:fe:b0:90:7a:e1:0f:a3:a8:0f:53:ae:1f:4d: f4:dd:87:6a:91:15:c3:1c:38:09:56:dc:ae:c3:83:c3:c6:89: 7d:85:6f:0d:e0:f4:bf:03:b6:a4:54:99:af:04:6f:32:00:23: 5f:87:90:07:47:05:da:cc:b5:24:d6:31:96:a2:f2:87:4d:d2: 9e:ce:40:42:65:c7:96:a6:f1:8b:84:1e:8b:b8:47:4c:2f:f4: e9:6a:23:29:1f:58:d4:2b:a9:dc:7e:d5:5b:fa:e7:8e:49:a1: 52:c8:8c:07:fb:a2:f7:21:e6:ff:82:e1:f8:98:7b:bc:5b:56: d0:2f:63:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2Hll/EsIjPSaGNYT3yiB9qNDwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTEyMDUxODQ1NDhaFw0yNTEyMDgyMzU4NDhaMDMxMTAvBgNV BAMTKDJFOTcyMUEzRDY5NDdFQTQ3RDI4Q0QwNjVGNDQ3REU2NjkwRTE2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiu8W6IjruA2KbeBrpGE02ZILi wfdtFzHVcTkEGEvlZoS/+df0rkZY+DYFYgaJhcS0X07TBv/iKaaoHjoeBMGCQurh LXLKiPlNt0ZY8HMjW2ta5+dNXW2B1gdjP220YnWt4uuke8McOBu2iIbVVp91z7uo UvMtRTLrzJ+R233Y42EelKGl4ba7sP3uWQGdhqjtpoqrrm5Jkbe8iIOwe9SBUVsD x7vr2QP7Kb1UEgbKVaZCgylX7AeuOVzMkWUQNy8dKVrTLjsIRLpuJt5iFf9MPu07 AuXR4RrpxnbaplDSTczCytOT6ART6rPLczfwMfmGIoZ9BkeLMl0i4Fm8xT09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpcho9aUfqR9KM0GX0R95mkOFq8wHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaGBtMc6XI/3E6Poa0NxxRQkoHczv2ODuD1 Pr7fG7wAq66lW+IxX9EnZCjh7vHMsa5Y6CFpyZyfT2XqzogPeRLh9hRpUwCexEnP iNIdDsZ3baHOh5JofBw08DFwVdnwMEy7w82fihNCMxeI4YamhSzY5dzcA8J5n+1C t3qhmcp6doo+/rCQeuEPo6gPU64fTfTdh2qRFcMcOAlW3K7Dg8PGiX2Fbw3g9L8D tqRUma8EbzIAI1+HkAdHBdrMtSTWMZai8odN0p7OQEJlx5am8YuEHou4R0wv9Olq IykfWNQrqdx+1Vv6545JoVLIjAf7ovch5v+C4fiYe7xbVtAvY74= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:19 2025 by rpki-client