This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: yF1easb1prv756qaeUTrOWYLyLp55zMA4ElrvuLml4k= Subject key identifier: 7C:CE:52:FC:99:9C:22:AD:34:1C:F2:7E:33:C2:61:69:10:67:74:64 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 5DCA711F861EDE5E3A4CFF18CE3322016EBB33B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01D3 Signing time: Sat 06 Dec 2025 16:51:09 +0000 Manifest this update: Sat 06 Dec 2025 16:46:09 +0000 Manifest next update: Wed 10 Dec 2025 01:26:09 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: r1W/Bmx3EhkqDj5yjlOaPZwlcy5fn/byZ5i/tJtpJI8=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: r4lFs0TNiF7PlJS0PWYOEttBGGT47VYExK2RXJ6gyEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ca:71:1f:86:1e:de:5e:3a:4c:ff:18:ce:33:22:01:6e:bb:33:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Dec 6 16:46:09 2025 GMT Not After : Dec 10 01:26:09 2025 GMT Subject: CN=7CCE52FC999C22AD341CF27E33C2616910677464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:5b:1e:a8:f3:64:d1:17:94:ae:29:28:6c: dd:3e:54:f2:27:5d:01:9f:f8:8e:a9:18:96:9b:a9: 1b:a5:09:ee:46:f2:6c:f3:fd:57:5b:03:17:7d:54: 5c:9e:4e:32:6c:a7:30:79:41:a5:91:89:00:67:80: 9c:d3:1a:b1:19:56:22:83:e8:c5:7f:8e:9d:70:c3: fd:36:9a:b8:a1:9d:cb:b6:f1:1c:4d:dd:9d:e0:17: 4f:dd:72:56:90:92:c5:a8:c3:81:cb:c3:75:b7:e8: 69:ee:aa:f0:34:cb:ef:2b:3a:e6:46:b3:c8:f8:95: f5:db:da:dc:d3:38:3e:38:a7:c3:13:3f:4f:5c:92: aa:32:aa:a3:a5:00:78:15:f4:7e:b5:30:cd:e8:36: 71:f6:f0:53:47:ee:97:a2:b9:ae:0c:38:83:a8:8e: 04:c3:3f:c4:fd:98:27:f6:13:9a:53:e1:d7:3b:08: 64:c1:c3:09:e6:c3:7f:bf:70:61:fc:84:a4:41:0d: f7:c0:89:6f:f5:94:7c:7c:71:e2:ef:a0:dd:05:5a: 51:af:a4:34:0d:77:b2:53:d5:34:8b:e9:21:e8:da: e6:b4:86:f6:38:12:b9:f1:c4:97:2c:94:db:6b:4b: 4b:4a:f4:cc:30:0e:c6:f3:14:51:41:4a:20:bb:43: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CE:52:FC:99:9C:22:AD:34:1C:F2:7E:33:C2:61:69:10:67:74:64 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c0:63:7e:d8:9c:0a:39:92:e1:96:97:d4:ac:7e:c4:ec:11: cc:c3:ef:97:f0:b3:c1:29:b0:c7:a2:40:5e:cc:7f:06:c8:d7: 77:61:f3:dc:ee:90:2c:98:69:b7:e3:fd:1f:66:80:fd:af:b3: 27:c0:7f:13:0f:43:a8:94:cb:ed:7d:38:55:96:90:cf:59:82: c0:41:83:6f:de:00:eb:63:d4:e6:5f:c9:80:01:3c:d4:3a:38: 01:fa:c0:34:14:64:b2:b4:59:0e:af:97:30:89:02:d3:b5:5e: 1f:38:8e:01:d2:43:46:e3:32:91:25:4b:e7:81:cf:d3:91:61: 1f:3d:89:1f:73:8d:fe:67:1c:fc:8f:2c:14:52:48:da:66:b3: b1:9e:df:c9:28:5e:a2:05:7a:11:45:82:47:88:ba:65:4c:ca: 22:60:66:45:38:58:4b:8a:57:43:36:ac:5d:9b:b7:11:16:17: 34:31:d2:b4:9e:1d:e1:57:62:bd:a7:9a:68:b9:0d:47:45:60: 10:62:ac:fd:09:c2:c9:b3:f0:27:d1:ec:71:58:3d:78:13:cd: 0b:fb:68:77:f8:61:cb:ce:af:71:7a:07:bc:46:59:99:35:a7: 77:ac:56:3a:69:bc:bd:53:eb:6c:7b:32:3a:21:2a:62:87:06: 71:3d:b9:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcpxH4Ye3l46TP8YzjMiAW67M7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTEyMDYxNjQ2MDlaFw0yNTEyMTAwMTI2MDlaMDMxMTAvBgNV BAMTKDdDQ0U1MkZDOTk5QzIyQUQzNDFDRjI3RTMzQzI2MTY5MTA2Nzc0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmFseqPNk0ReUrikobN0+VPIn XQGf+I6pGJabqRulCe5G8mzz/VdbAxd9VFyeTjJspzB5QaWRiQBngJzTGrEZViKD 6MV/jp1ww/02mrihncu28RxN3Z3gF0/dclaQksWow4HLw3W36GnuqvA0y+8rOuZG s8j4lfXb2tzTOD44p8MTP09ckqoyqqOlAHgV9H61MM3oNnH28FNH7peiua4MOIOo jgTDP8T9mCf2E5pT4dc7CGTBwwnmw3+/cGH8hKRBDffAiW/1lHx8ceLvoN0FWlGv pDQNd7JT1TSL6SHo2ua0hvY4ErnxxJcslNtrS0tK9MwwDsbzFFFBSiC7Q+ipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfM5S/JmcIq00HPJ+M8JhaRBndGQwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfAY37YnAo5kuGWl9SsfsTsEczD75fws8Ep sMeiQF7MfwbI13dh89zukCyYabfj/R9mgP2vsyfAfxMPQ6iUy+19OFWWkM9ZgsBB g2/eAOtj1OZfyYABPNQ6OAH6wDQUZLK0WQ6vlzCJAtO1Xh84jgHSQ0bjMpElS+eB z9ORYR89iR9zjf5nHPyPLBRSSNpms7Ge38koXqIFehFFgkeIumVMyiJgZkU4WEuK V0M2rF2btxEWFzQx0rSeHeFXYr2nmmi5DUdFYBBirP0Jwsmz8CfR7HFYPXgTzQv7 aHf4YcvOr3F6B7xGWZk1p3esVjppvL1T62x7MjohKmKHBnE9uUQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:22 2025 by rpki-client