This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: qKNRH8vMYMwppUfvROowVd7KQTj2X9mbePj3RVpqZFg= Subject key identifier: 81:65:B9:C0:30:4D:D0:62:ED:3D:99:F7:EB:B1:B4:B4:6E:49:13:C6 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 36B20BFEBA4E9F50A65F500AFAD56FA7CD6A250F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 01AE Signing time: Tue 16 Dec 2025 07:01:55 +0000 Manifest this update: Tue 16 Dec 2025 06:56:55 +0000 Manifest next update: Fri 19 Dec 2025 14:50:55 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: YrtAZSGjLqD/LwWQykPO2qbGtALDFF00+P+LGCMFYiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 14:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b2:0b:fe:ba:4e:9f:50:a6:5f:50:0a:fa:d5:6f:a7:cd:6a:25:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Dec 16 06:56:55 2025 GMT Not After : Dec 19 14:50:55 2025 GMT Subject: CN=8165B9C0304DD062ED3D99F7EBB1B4B46E4913C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:2b:e1:15:bf:9b:69:24:8f:4a:89:cd:6e: 3c:cf:df:f5:9a:a5:dc:86:a7:70:1e:2b:4b:f2:5a: bc:0e:bc:1e:69:8f:54:19:78:71:0b:86:a7:78:84: 76:88:81:f7:a4:97:8d:ce:d0:2e:cb:22:6b:73:c7: 86:ae:8a:61:d5:1b:1c:51:00:4b:0c:1f:3f:74:b8: 6b:df:76:60:01:71:ee:1d:67:e8:c4:8a:36:45:1e: 18:2d:7b:ef:39:6c:4d:f4:c7:6f:1f:ea:e9:80:6d: 01:6b:e3:bd:27:42:8c:e1:73:ae:db:2e:f0:86:cd: 79:a9:b0:de:74:54:af:f4:e4:9e:38:6b:1d:2f:68: 1b:12:b7:eb:9d:fa:95:91:ad:b3:f5:fb:d0:dd:d4: dd:d0:2f:9d:15:c0:86:de:c8:3f:9a:df:9b:93:cd: 3d:de:85:ed:07:19:23:66:5f:11:6c:09:9a:58:1e: 0a:d8:df:6d:80:a8:77:3c:0a:86:2c:b2:06:e3:cf: 33:5a:b7:b6:b1:61:41:aa:69:75:06:51:4b:84:93: 9e:c9:d6:bd:3d:c9:ce:f8:7a:be:c8:d6:82:52:fb: 14:88:89:17:d9:84:85:c7:a7:8b:fa:8d:a7:a8:0f: 06:2f:c3:1d:21:92:a1:f7:5e:2f:74:15:df:3f:4d: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:65:B9:C0:30:4D:D0:62:ED:3D:99:F7:EB:B1:B4:B4:6E:49:13:C6 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:87:70:47:80:32:1c:89:7e:d9:73:0f:f9:22:5f:5a:b0: 42:43:a1:50:d2:15:ad:41:40:c2:41:3d:6f:52:30:b8:89:6e: 05:c3:fd:bb:5c:58:69:f1:24:91:cf:6e:28:23:56:f2:1e:9b: dc:ea:a6:aa:94:54:1f:ab:01:6f:29:50:24:90:9b:19:45:ac: e3:1e:23:1e:e8:6f:61:0d:2a:f0:7f:21:ea:39:d0:1b:89:45: 9d:c2:43:f7:1a:5c:3e:db:15:d7:91:f7:a5:3d:87:bc:93:fa: 46:da:c3:66:7c:6e:48:78:b5:94:6d:75:f7:b2:55:6c:f5:ae: e5:58:1f:4d:ad:d7:46:68:35:80:78:a9:d1:8d:36:fa:c9:d8: 1d:a5:33:ba:c7:90:a7:37:ca:81:4a:42:10:96:39:9f:05:69: 76:39:f7:bf:6a:9e:4c:27:58:bf:42:00:03:8a:42:1a:de:5d: 6f:40:c8:53:fd:90:de:49:45:6a:65:ba:96:fe:1d:0a:33:2a: 48:03:ef:7a:ce:ca:f0:84:2a:32:ca:6d:87:0b:a7:3c:13:01: 32:e7:bf:9e:e3:7c:81:72:34:64:8c:4a:7d:ec:ab:2d:68:6d: f7:04:1d:be:64:de:f9:bd:67:71:45:48:d0:2b:8f:a5:8c:58: 64:5d:36:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrIL/rpOn1CmX1AK+tVvp81qJQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNTEyMTYwNjU2NTVaFw0yNTEyMTkxNDUwNTVaMDMxMTAvBgNV BAMTKDgxNjVCOUMwMzA0REQwNjJFRDNEOTlGN0VCQjFCNEI0NkU0OTEzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgivhFb+baSSPSonNbjzP3/Wa pdyGp3AeK0vyWrwOvB5pj1QZeHELhqd4hHaIgfekl43O0C7LImtzx4auimHVGxxR AEsMHz90uGvfdmABce4dZ+jEijZFHhgte+85bE30x28f6umAbQFr470nQozhc67b LvCGzXmpsN50VK/05J44ax0vaBsSt+ud+pWRrbP1+9Dd1N3QL50VwIbeyD+a35uT zT3ehe0HGSNmXxFsCZpYHgrY322AqHc8CoYssgbjzzNat7axYUGqaXUGUUuEk57J 1r09yc74er7I1oJS+xSIiRfZhIXHp4v6jaeoDwYvwx0hkqH3Xi90Fd8/TcNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWW5wDBN0GLtPZn367G0tG5JE8YwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaPh3BHgDIciX7Zcw/5Il9asEJDoVDSFa1B QMJBPW9SMLiJbgXD/btcWGnxJJHPbigjVvIem9zqpqqUVB+rAW8pUCSQmxlFrOMe Ix7ob2ENKvB/Ieo50BuJRZ3CQ/caXD7bFdeR96U9h7yT+kbaw2Z8bkh4tZRtdfey VWz1ruVYH02t10ZoNYB4qdGNNvrJ2B2lM7rHkKc3yoFKQhCWOZ8FaXY5979qnkwn WL9CAAOKQhreXW9AyFP9kN5JRWplupb+HQozKkgD73rOyvCEKjLKbYcLpzwTATLn v57jfIFyNGSMSn3sqy1obfcEHb5k3vm9Z3FFSNArj6WMWGRdNj8= -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:41 2025 by rpki-client