This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: OIgqhbuOvY02FXBxDaJiI2motqaaY5J9jwU3o3NLjio= Subject key identifier: 8C:9B:E0:17:EA:8F:05:50:9B:EC:61:46:06:95:41:27:99:92:30:95 Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 0FAFCE389BF93C3A0D420C61D1AD7F433498087C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: FD Signing time: Thu 04 Dec 2025 21:51:07 +0000 Manifest this update: Thu 04 Dec 2025 21:46:07 +0000 Manifest next update: Sun 07 Dec 2025 23:09:07 +0000 Files and hashes: 1: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: i7zDSxE5FdVmd4wrKAqiuNYZ0EAWbDFvNyC9bvi9jgU=) 2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: 4USC1AQzGKvJLoaILHyi8/vcN8nVPul2782sFf1fdxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:af:ce:38:9b:f9:3c:3a:0d:42:0c:61:d1:ad:7f:43:34:98:08:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Dec 4 21:46:07 2025 GMT Not After : Dec 7 23:09:07 2025 GMT Subject: CN=8C9BE017EA8F05509BEC61460695412799923095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:fb:f4:95:30:ea:34:61:00:6d:9b:dd:c8: fd:00:3b:48:ec:78:b4:db:0c:e2:25:fd:4b:a6:95: 2a:54:32:84:e9:c7:cb:84:fd:3e:59:db:6d:68:1a: bc:ec:e2:35:3a:ee:bd:e8:ab:75:d4:b7:a1:e8:83: f8:54:16:b5:6b:2c:be:23:26:0d:d5:6a:3d:db:f1: 33:32:ef:e2:63:3c:05:d5:70:ef:84:59:28:a0:58: b1:90:15:82:6b:ad:31:a6:fc:da:e0:22:6c:ec:4d: 28:f0:13:3d:fb:a2:09:ec:e9:51:95:ae:40:eb:e6: 17:c2:fd:ab:07:a5:bf:7a:e6:f6:b8:fa:be:d4:57: 93:39:c4:60:7a:0b:52:d7:2e:c8:f6:1f:1e:7f:48: 34:cc:79:e5:db:aa:c7:be:32:ab:b9:1b:88:ba:a9: b6:f4:46:96:a8:b3:ad:86:a5:fe:cd:a0:a1:8a:d8: 19:4f:95:6a:04:e4:94:d6:60:bc:69:20:80:3e:56: 69:6d:2b:75:96:9d:61:b4:98:56:a6:b6:c9:2a:ef: b8:01:78:9b:e0:e6:70:d8:e3:00:ad:89:06:ce:ba: 12:ac:8c:7b:e9:1b:30:cf:11:8d:67:fb:3d:08:90: 82:60:10:da:48:de:8b:8a:83:92:92:3f:fb:20:e0: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:E0:17:EA:8F:05:50:9B:EC:61:46:06:95:41:27:99:92:30:95 X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:62:c4:23:9b:a6:4e:64:f7:85:da:6d:cf:6f:3f:86:97:71: dd:b0:2b:30:bf:90:9a:aa:63:b8:a3:f3:1d:0e:28:62:d7:77: f6:f9:6a:06:87:b1:2f:a1:f8:70:d1:43:1f:d2:75:81:e7:4e: 0c:fe:cd:0d:c9:02:27:d6:4e:a2:88:d3:21:c1:d5:5e:8e:9e: 16:99:d6:22:0f:91:2c:3e:82:7f:d1:7f:34:81:59:8a:31:45: 77:61:0c:14:b2:86:a6:ec:66:ab:06:0a:04:26:2a:ed:ae:4e: e9:86:cd:94:aa:fa:5f:42:71:30:b4:2e:5d:77:2a:09:a9:88: 4a:3c:49:a3:82:29:c1:50:0a:7b:96:11:43:e4:88:36:20:d6: b1:64:23:21:f9:a4:04:fa:7c:77:c3:9a:b3:b6:b5:5d:fa:df: 9d:e0:9b:3a:42:12:10:39:80:6e:3a:2f:5d:04:70:a7:c8:2c: 43:76:53:0e:57:21:a0:a3:1f:2b:f4:cc:23:be:29:bf:73:51: 9e:d0:c5:8b:d5:a0:42:05:70:ac:57:18:2c:a4:ce:ff:35:f2: 5d:82:0b:da:13:e7:b6:1d:ad:f2:7d:d1:10:90:bd:04:df:36: 80:ae:c6:19:d4:23:ab:70:17:d3:a6:32:17:28:14:51:76:08: 88:01:ab:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6/OOJv5PDoNQgxh0a1/QzSYCHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNTEyMDQyMTQ2MDdaFw0yNTEyMDcyMzA5MDdaMDMxMTAvBgNV BAMTKDhDOUJFMDE3RUE4RjA1NTA5QkVDNjE0NjA2OTU0MTI3OTk5MjMwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVvv0lTDqNGEAbZvdyP0AO0js eLTbDOIl/UumlSpUMoTpx8uE/T5Z221oGrzs4jU67r3oq3XUt6Hog/hUFrVrLL4j Jg3Vaj3b8TMy7+JjPAXVcO+EWSigWLGQFYJrrTGm/NrgImzsTSjwEz37ogns6VGV rkDr5hfC/asHpb965va4+r7UV5M5xGB6C1LXLsj2Hx5/SDTMeeXbqse+Mqu5G4i6 qbb0Rpaos62Gpf7NoKGK2BlPlWoE5JTWYLxpIIA+VmltK3WWnWG0mFamtskq77gB eJvg5nDY4wCtiQbOuhKsjHvpGzDPEY1n+z0IkIJgENpI3ouKg5KSP/sg4IlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJvgF+qPBVCb7GFGBpVBJ5mSMJUwHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBixCObpk5k94Xabc9vP4aXcd2wKzC/kJqq Y7ij8x0OKGLXd/b5agaHsS+h+HDRQx/SdYHnTgz+zQ3JAifWTqKI0yHB1V6OnhaZ 1iIPkSw+gn/RfzSBWYoxRXdhDBSyhqbsZqsGCgQmKu2uTumGzZSq+l9CcTC0Ll13 KgmpiEo8SaOCKcFQCnuWEUPkiDYg1rFkIyH5pAT6fHfDmrO2tV36353gmzpCEhA5 gG46L10EcKfILEN2Uw5XIaCjHyv0zCO+Kb9zUZ7QxYvVoEIFcKxXGCykzv818l2C C9oT57YdrfJ90RCQvQTfNoCuxhnUI6twF9OmMhcoFFF2CIgBq5Y= -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:53 2025 by rpki-client