This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: SG0kWo5WLBFYUZZmGUVm2/tGm3T/yYBU1RxjoQdEBUk= Subject key identifier: 6A:F6:40:16:6B:21:13:21:09:7E:FE:5F:87:34:6E:51:4F:9F:38:5C Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 66F0D23A4A9E67FD368D752BE67BBC05BCC04EDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 0476 Signing time: Sat 06 Dec 2025 22:11:19 +0000 Manifest this update: Sat 06 Dec 2025 22:06:19 +0000 Manifest next update: Tue 09 Dec 2025 23:44:19 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: hZtrZC2FyBwXrmP/nms+VSTbHVY8OlpzNBLxS8iCvUA=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f0:d2:3a:4a:9e:67:fd:36:8d:75:2b:e6:7b:bc:05:bc:c0:4e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Dec 6 22:06:19 2025 GMT Not After : Dec 9 23:44:19 2025 GMT Subject: CN=6AF640166B211321097EFE5F87346E514F9F385C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:5b:a1:ca:c4:25:ce:c1:f3:6b:70:80:c2: 41:dc:89:06:7c:ae:15:cd:67:11:4d:7e:ba:f0:0e: 07:6b:e2:30:88:28:f5:54:d2:e0:e3:99:1b:1b:bd: 57:97:af:86:40:37:c7:2a:e6:4a:e6:d6:51:68:20: 8d:79:39:37:bf:90:9c:b2:e2:4d:ca:6e:d7:c5:04: 3c:0d:b6:17:38:d1:40:f7:16:76:a7:53:21:ce:8a: c1:f4:1c:ed:74:b4:f8:84:10:0c:d1:f5:9d:f1:c1: 22:1d:27:66:1b:9b:cc:03:3e:2a:8f:0d:8f:88:e5: 85:17:b0:04:e8:14:02:2e:32:9b:aa:ce:1f:9e:57: d7:ab:48:6d:67:4b:a5:2c:e8:63:e3:64:d1:54:6a: eb:6c:01:d4:e8:e2:e9:2c:a1:d4:fc:21:0f:86:4b: d3:94:e0:a4:b7:41:a6:0c:ff:39:2a:13:73:83:b3: f1:2f:ff:db:a8:26:2d:b4:69:f0:77:eb:75:17:b9: 74:55:5f:d7:53:2a:0f:c5:13:74:75:6c:72:54:23: 8b:97:ea:fd:d3:4a:84:57:ae:2f:e9:cb:8d:d1:50: 61:d8:b0:81:68:82:e7:0b:db:6a:84:4e:3f:2b:32: f9:cf:c9:74:41:3d:54:32:62:04:64:ac:f0:a9:b2: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:40:16:6B:21:13:21:09:7E:FE:5F:87:34:6E:51:4F:9F:38:5C X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f7:5e:6b:ae:15:5c:a7:86:08:2b:df:fe:f0:71:b5:ef:5a: fa:eb:7d:5b:f9:6c:18:43:4f:d8:71:88:22:4b:9b:dd:61:47: bf:a2:d4:40:94:2d:15:f6:db:dc:ed:16:27:f5:e7:bf:4d:c1: 01:89:f3:94:b0:31:4f:be:b5:3a:69:c5:7b:15:7e:84:82:14: 47:b5:b1:95:d4:ae:c0:c3:73:b4:7a:6b:da:2d:e8:a8:b5:2a: 3c:7d:3d:f4:f6:b4:d8:05:4b:7e:18:1c:40:69:3e:e2:9d:ad: 79:67:60:d9:1e:37:b9:02:cf:ce:05:7f:c5:68:9d:2f:6b:aa: 3c:dc:c1:7e:2e:ca:3e:b7:c3:f0:f6:38:d8:b2:3b:98:f9:e1: 35:ad:a6:50:09:2e:22:2d:73:45:bf:b4:a3:e9:13:79:cd:02: 8e:15:8f:bb:3a:0d:af:ed:de:3d:a8:94:7c:e4:0b:65:32:3b: 3f:96:81:f8:48:3f:70:06:7d:6e:19:29:3f:24:6e:c5:a7:ff: ad:a9:6d:9b:7e:78:94:48:a2:ed:5a:80:b1:86:00:cf:e2:da: 09:ea:65:62:04:63:a5:1b:8f:05:30:9f:d7:4e:c0:00:e3:3d: 1d:0f:c8:c3:61:d2:84:d7:98:51:bc:5c:20:8f:97:2d:18:2a: 99:cf:14:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvDSOkqeZ/02jXUr5nu8BbzATt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTEyMDYyMjA2MTlaFw0yNTEyMDkyMzQ0MTlaMDMxMTAvBgNV BAMTKDZBRjY0MDE2NkIyMTEzMjEwOTdFRkU1Rjg3MzQ2RTUxNEY5RjM4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSH1uhysQlzsHza3CAwkHciQZ8 rhXNZxFNfrrwDgdr4jCIKPVU0uDjmRsbvVeXr4ZAN8cq5krm1lFoII15OTe/kJyy 4k3KbtfFBDwNthc40UD3FnanUyHOisH0HO10tPiEEAzR9Z3xwSIdJ2Ybm8wDPiqP DY+I5YUXsAToFAIuMpuqzh+eV9erSG1nS6Us6GPjZNFUautsAdTo4uksodT8IQ+G S9OU4KS3QaYM/zkqE3ODs/Ev/9uoJi20afB363UXuXRVX9dTKg/FE3R1bHJUI4uX 6v3TSoRXri/py43RUGHYsIFogucL22qETj8rMvnPyXRBPVQyYgRkrPCpsvtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUavZAFmshEyEJfv5fhzRuUU+fOFwwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/3XmuuFVynhggr3/7wcbXvWvrrfVv5bBhD T9hxiCJLm91hR7+i1ECULRX229ztFif1579NwQGJ85SwMU++tTppxXsVfoSCFEe1 sZXUrsDDc7R6a9ot6Ki1Kjx9PfT2tNgFS34YHEBpPuKdrXlnYNkeN7kCz84Ff8Vo nS9rqjzcwX4uyj63w/D2ONiyO5j54TWtplAJLiItc0W/tKPpE3nNAo4Vj7s6Da/t 3j2olHzkC2UyOz+WgfhIP3AGfW4ZKT8kbsWn/62pbZt+eJRIou1agLGGAM/i2gnq ZWIEY6UbjwUwn9dOwADjPR0PyMNh0oTXmFG8XCCPly0YKpnPFAc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:40 2025 by rpki-client