This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: 61iNeILuNoiXmZ6sc4jGRFai20v0ZRG6319zXGdRkAw= Subject key identifier: 37:3A:B9:4B:82:B6:F4:71:9B:A9:FA:2B:F5:A5:90:3F:05:12:FF:4A Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 4F4624F37F061776B3CC88574A3F78B22120C094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 0200 Signing time: Thu 04 Dec 2025 20:11:05 +0000 Manifest this update: Thu 04 Dec 2025 20:06:05 +0000 Manifest next update: Mon 08 Dec 2025 07:18:05 +0000 Files and hashes: 1: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: zj95QJq8nuEKr4h6wG5jIW1TDpd99uxVJShVMJ3D+lE=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:46:24:f3:7f:06:17:76:b3:cc:88:57:4a:3f:78:b2:21:20:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Dec 4 20:06:05 2025 GMT Not After : Dec 8 07:18:05 2025 GMT Subject: CN=373AB94B82B6F4719BA9FA2BF5A5903F0512FF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:20:3a:24:36:87:d7:ae:ba:7b:e0:b9:85: 98:49:a7:76:d1:6a:63:a4:ed:b5:6d:72:9b:26:68: 72:91:d1:8e:42:32:7d:11:8b:d6:06:e1:3f:02:1c: bc:e5:e5:7c:0a:2c:59:77:9e:3b:ee:35:58:2a:89: ee:60:97:38:8a:eb:44:20:97:38:5c:b7:97:dc:83: 59:97:fa:d6:e6:11:2c:94:57:50:5d:59:e9:68:0d: 32:90:4a:cb:99:cc:7e:7c:5e:c2:e5:a8:f4:6c:9b: db:0e:9b:df:cf:3f:eb:b4:4a:d1:cd:0b:0c:40:09: ed:44:10:01:e4:78:6e:2f:4e:2d:99:bc:db:ca:ef: f9:72:5d:aa:26:9b:13:a2:2f:86:25:27:46:0e:c1: df:bb:1b:7e:db:99:cb:f0:c5:72:32:a5:50:f0:d2: 3a:bf:89:e2:6d:c3:42:fa:23:19:07:9d:23:a2:63: af:a0:ec:ff:03:79:ba:c6:fb:f8:28:c2:3a:03:7a: 8b:c6:fd:2c:45:67:13:01:59:f0:cf:d3:29:d4:f9: 60:4b:24:c5:a9:80:41:3a:72:18:f5:46:76:31:4e: f1:f1:72:a8:7a:0a:4b:ca:5f:dd:a0:e9:12:b8:d7: 10:41:8f:2f:6a:7d:e1:0c:fc:3b:39:ea:ca:5f:7c: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:B9:4B:82:B6:F4:71:9B:A9:FA:2B:F5:A5:90:3F:05:12:FF:4A X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ce:de:6c:14:a0:8a:7a:9f:f4:e1:0a:45:c9:99:b8:af:fa: 2f:7a:8f:7d:fa:55:93:4b:97:ed:4c:59:8e:b2:66:53:78:3d: 87:59:3f:fc:6b:c2:3b:b4:a6:ec:0d:68:05:8e:c6:2e:6d:00: e9:cf:3d:ee:a8:5d:54:28:b9:5b:53:81:d5:1e:3c:44:c2:f4: e6:1e:30:1b:b1:39:0c:4a:e4:48:5b:74:83:e0:72:70:4f:a3: 7e:58:96:c6:8a:ab:7e:fe:f2:3c:d4:48:fe:cd:3e:fb:8c:5f: 2a:72:9f:be:9d:f4:7f:6b:c8:e2:6a:88:1e:e4:5f:9a:46:32: 43:8d:09:f1:b8:72:c5:de:a9:0b:dc:c8:da:7d:60:80:af:31: 48:18:1c:57:f7:3f:04:b2:09:10:d7:3c:6d:e2:6d:3a:d1:68: 61:ac:94:63:28:4a:42:a1:57:03:67:9d:64:7b:1f:c0:ba:70: d2:81:44:b9:b1:29:cf:a0:80:c1:e1:53:c5:e5:5e:d2:81:13: 40:e9:ec:57:34:84:34:0c:6c:93:4f:e8:c7:c7:47:8c:bc:b4: 33:81:dc:9b:cd:52:ef:9a:2d:88:d2:ff:52:65:02:ef:ef:c4: d7:b8:d5:24:12:92:69:84:5f:f5:ec:ba:aa:c4:dc:e5:66:40: 5e:4b:4f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0Yk838GF3azzIhXSj94siEgwJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTEyMDQyMDA2MDVaFw0yNTEyMDgwNzE4MDVaMDMxMTAvBgNV BAMTKDM3M0FCOTRCODJCNkY0NzE5QkE5RkEyQkY1QTU5MDNGMDUxMkZGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4iA6JDaH1666e+C5hZhJp3bR amOk7bVtcpsmaHKR0Y5CMn0Ri9YG4T8CHLzl5XwKLFl3njvuNVgqie5glziK60Qg lzhct5fcg1mX+tbmESyUV1BdWeloDTKQSsuZzH58XsLlqPRsm9sOm9/PP+u0StHN CwxACe1EEAHkeG4vTi2ZvNvK7/lyXaommxOiL4YlJ0YOwd+7G37bmcvwxXIypVDw 0jq/ieJtw0L6IxkHnSOiY6+g7P8DebrG+/gowjoDeovG/SxFZxMBWfDP0ynU+WBL JMWpgEE6chj1RnYxTvHxcqh6CkvKX92g6RK41xBBjy9qfeEM/Ds56spffKlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzq5S4K29HGbqfor9aWQPwUS/0owHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfO3mwUoIp6n/ThCkXJmbiv+i96j336VZNL l+1MWY6yZlN4PYdZP/xrwju0puwNaAWOxi5tAOnPPe6oXVQouVtTgdUePETC9OYe MBuxOQxK5EhbdIPgcnBPo35YlsaKq37+8jzUSP7NPvuMXypyn76d9H9ryOJqiB7k X5pGMkONCfG4csXeqQvcyNp9YICvMUgYHFf3PwSyCRDXPG3ibTrRaGGslGMoSkKh VwNnnWR7H8C6cNKBRLmxKc+ggMHhU8XlXtKBE0Dp7Fc0hDQMbJNP6MfHR4y8tDOB 3JvNUu+aLYjS/1JlAu/vxNe41SQSkmmEX/XsuqrE3OVmQF5LT58= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:26 2025 by rpki-client