This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: V1pM7B4kAuEDHdKB2mbY+X+D/glxnMuPWC/vQ0QXNno= Subject key identifier: 21:1C:02:E6:4F:3C:1F:97:F9:F6:7C:CA:EA:B1:3F:59:10:7B:92:EE Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 5FF2C45C1E8298C6EC4DFB474984B8263E550B50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0532 Signing time: Fri 05 Dec 2025 15:11:40 +0000 Manifest this update: Fri 05 Dec 2025 15:06:40 +0000 Manifest next update: Mon 08 Dec 2025 19:35:40 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: 9IundLG7WIXd3FPDWFxEn7v9Zt8AdI82+oLa6e3kXFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:c4:5c:1e:82:98:c6:ec:4d:fb:47:49:84:b8:26:3e:55:0b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Dec 5 15:06:40 2025 GMT Not After : Dec 8 19:35:40 2025 GMT Subject: CN=211C02E64F3C1F97F9F67CCAEAB13F59107B92EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:fd:03:c9:99:05:41:be:06:00:11:c3:a6: 97:76:2a:f6:91:c4:8f:ba:86:f8:e4:a6:de:02:c8: ab:0e:0b:77:eb:72:52:81:03:e5:17:87:b8:50:2e: 26:aa:6b:9d:65:13:71:57:96:fc:2c:94:83:b6:db: e0:c2:ec:c4:1f:82:9d:f5:c1:6b:8a:e0:cc:dc:50: 07:2b:4b:a3:c2:e4:dd:49:1b:f3:9d:98:e5:24:9b: 60:58:68:c9:32:60:3b:de:05:26:9e:6a:9d:f6:b6: f8:b7:9f:1d:6c:59:9b:c5:ee:a3:a8:fd:70:8f:59: f7:03:57:18:13:bb:20:4b:f9:97:a1:12:aa:fd:ba: cb:52:f7:bf:cc:86:01:1d:52:9d:6e:f0:a3:50:c4: 73:2d:b8:53:bb:df:ab:1c:5f:ff:a1:2c:0c:78:62: fa:46:6a:ae:c9:8c:d1:f9:59:4c:3a:80:bd:35:b8: dd:0a:4a:cc:d7:fa:a7:f2:8c:3e:6d:d5:9e:f5:0e: a4:3f:59:5a:9b:bb:03:b5:8c:74:4e:0e:91:70:89: c5:b1:11:b2:78:0b:fa:e7:2c:5f:b6:74:8a:48:c9: c7:08:56:22:95:dd:67:bf:c2:fa:2f:84:0f:89:4a: cb:8c:a2:63:18:57:b0:26:42:f8:ce:58:f1:05:55: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1C:02:E6:4F:3C:1F:97:F9:F6:7C:CA:EA:B1:3F:59:10:7B:92:EE X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:8c:94:ed:f1:0c:54:66:d0:a9:ca:d0:56:e1:17:69:c1: 04:e9:a7:9b:e9:38:4f:15:cc:6c:fc:a8:ac:06:49:ec:dc:a8: dc:7f:94:d3:26:bf:21:f4:e7:97:24:57:a6:3e:e8:67:91:17: 68:7b:90:aa:dd:ad:c9:34:0e:36:08:53:b8:8c:d5:cf:2a:e0: 62:11:f2:79:a2:b5:5e:7e:71:b3:85:06:62:c9:98:d0:ff:2e: df:32:5a:a3:e0:0a:59:0d:12:ab:a5:23:74:05:00:cc:c8:b1: a8:1f:dd:42:68:09:5f:d1:dd:fe:0a:06:7c:f7:02:7e:d2:47: db:74:76:4e:31:53:85:f0:fd:e0:d8:c1:1f:0d:01:4f:24:51: 86:5f:b4:90:78:49:e7:c5:2b:d1:25:95:c7:d3:ca:be:5e:f2: a9:ac:61:d6:14:fe:b6:07:7a:21:84:21:5a:c1:a8:8c:46:76: 6e:74:60:98:ab:31:54:51:f1:ff:43:10:77:2d:12:7f:c0:b3: 0e:00:17:6e:c9:1e:ce:24:84:f8:53:3e:63:1f:4a:ad:3e:d4: 37:b9:ef:20:77:d5:8a:49:93:7b:7a:f5:85:2f:f0:c2:fd:ee: b7:f8:d4:ee:e5:4e:42:07:9a:35:2b:4c:ed:de:bc:20:d6:3d: 80:3b:58:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/LEXB6CmMbsTftHSYS4Jj5VC1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTEyMDUxNTA2NDBaFw0yNTEyMDgxOTM1NDBaMDMxMTAvBgNV BAMTKDIxMUMwMkU2NEYzQzFGOTdGOUY2N0NDQUVBQjEzRjU5MTA3QjkyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjv0DyZkFQb4GABHDppd2KvaR xI+6hvjkpt4CyKsOC3frclKBA+UXh7hQLiaqa51lE3FXlvwslIO22+DC7MQfgp31 wWuK4MzcUAcrS6PC5N1JG/OdmOUkm2BYaMkyYDveBSaeap32tvi3nx1sWZvF7qOo /XCPWfcDVxgTuyBL+ZehEqr9ustS97/MhgEdUp1u8KNQxHMtuFO736scX/+hLAx4 YvpGaq7JjNH5WUw6gL01uN0KSszX+qfyjD5t1Z71DqQ/WVqbuwO1jHRODpFwicWx EbJ4C/rnLF+2dIpIyccIViKV3We/wvovhA+JSsuMomMYV7AmQvjOWPEFVTjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIRwC5k88H5f59nzK6rE/WRB7ku4wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZxjJTt8QxUZtCpytBW4RdpwQTpp5vpOE8V zGz8qKwGSezcqNx/lNMmvyH055ckV6Y+6GeRF2h7kKrdrck0DjYIU7iM1c8q4GIR 8nmitV5+cbOFBmLJmND/Lt8yWqPgClkNEqulI3QFAMzIsagf3UJoCV/R3f4KBnz3 An7SR9t0dk4xU4Xw/eDYwR8NAU8kUYZftJB4SefFK9EllcfTyr5e8qmsYdYU/rYH eiGEIVrBqIxGdm50YJirMVRR8f9DEHctEn/Asw4AF27JHs4khPhTPmMfSq0+1De5 7yB31YpJk3t69YUv8ML97rf41O7lTkIHmjUrTO3evCDWPYA7WIo= -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:58 2025 by rpki-client