This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: K8AdPTBveyjscpMtWBU+G7unTOaa+DxsKJqwlPMuveg= Subject key identifier: FD:1D:6D:6E:21:63:FA:4E:6A:B2:48:62:5F:B6:49:B2:EF:7C:E3:CA Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 59EFCCC7D69032D06AD409CB408092ADB76D377E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 019F Signing time: Fri 05 Dec 2025 05:11:04 +0000 Manifest this update: Fri 05 Dec 2025 05:06:04 +0000 Manifest next update: Mon 08 Dec 2025 16:42:04 +0000 Files and hashes: 1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: vmOz/xvRiDoWT9GfqJcEdXtLFwBwOB5IyTdeDU/7nBw=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ef:cc:c7:d6:90:32:d0:6a:d4:09:cb:40:80:92:ad:b7:6d:37:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: Dec 5 05:06:04 2025 GMT Not After : Dec 8 16:42:04 2025 GMT Subject: CN=FD1D6D6E2163FA4E6AB248625FB649B2EF7CE3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:5f:4d:ff:f4:71:94:cd:6c:91:8b:ab:b9: c2:64:86:b6:eb:f2:cd:b4:88:76:54:3c:79:c8:c9: 61:29:a0:f5:6d:e4:b3:8c:00:e9:c1:f0:f7:56:7b: 37:a5:36:b9:ca:e1:a8:be:0a:27:e7:e1:80:7a:7b: 29:7a:da:04:99:67:7c:8d:05:dd:16:24:0c:df:0b: 7b:eb:3f:1e:17:89:33:85:c9:d4:fc:05:cf:eb:87: 26:2a:9f:c8:44:09:ec:9a:38:96:37:fa:1f:21:1b: a5:e8:1e:c8:fa:c5:62:07:73:03:7c:e1:ae:c4:11: 73:24:f1:f2:59:66:e0:de:5f:5f:2f:f4:dd:7e:5e: 22:08:43:68:6c:34:ca:7f:c1:7b:a4:3d:90:a8:9e: 38:eb:18:fa:23:76:40:a4:aa:53:82:58:28:8c:1b: 12:26:8c:62:b9:1a:72:7b:f3:d9:d8:4d:90:8e:be: 2c:78:7d:d5:69:bb:b7:b4:ec:55:bf:6b:58:7a:6b: 3a:d6:ee:71:f3:70:43:5d:30:39:b8:52:5e:64:1f: 3d:0b:8d:24:d5:1a:91:f9:e0:03:7d:b6:11:e0:47: 1c:17:af:67:e4:38:f8:29:21:4f:b1:14:2e:d3:cb: 91:a2:5a:7d:79:b6:95:eb:b3:a4:ae:a7:da:b8:da: 42:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1D:6D:6E:21:63:FA:4E:6A:B2:48:62:5F:B6:49:B2:EF:7C:E3:CA X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:ab:4f:22:aa:fd:b0:bc:c3:40:24:bf:d6:05:4a:c0:52: 0d:18:f3:ea:a1:79:57:b7:e4:4c:fc:fe:c2:a5:71:2a:f3:9c: 2d:0d:fd:23:ee:f0:d5:0f:68:f8:93:1e:06:24:8a:7d:1f:0b: 63:ad:dd:de:55:fb:a9:31:71:b0:ba:f6:90:59:de:c3:68:88: a5:f8:e7:5b:d9:5b:42:f8:16:32:f4:16:8f:d7:30:aa:40:2c: 73:1f:03:44:04:77:b8:09:ba:a1:96:fe:66:67:44:ba:14:00: 91:3e:be:0e:cc:76:d7:c0:de:b3:2a:cc:ae:d9:94:8f:28:e7: 47:6b:f0:05:e2:07:b1:60:a7:01:24:3d:a2:6a:23:5d:0c:37: 30:9e:e4:af:fd:ab:1f:18:eb:13:68:22:f7:3e:62:a8:98:ae: 09:c9:81:64:6a:67:19:bf:89:5f:66:c2:ab:37:11:29:28:b1: db:0d:d6:a4:0c:be:9f:b1:43:46:8a:39:8f:43:47:0d:16:84: 93:8e:9d:32:30:2d:ab:b6:50:16:6d:54:41:f6:24:75:7f:83: f7:80:87:fa:d4:68:8d:62:49:f5:d8:74:9a:9e:d0:13:49:ea: db:0b:dd:99:f1:8e:68:3f:c1:cb:10:3c:0c:bc:e3:a8:ca:2e: a4:94:d3:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWe/Mx9aQMtBq1AnLQICSrbdtN34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTEyMDUwNTA2MDRaFw0yNTEyMDgxNjQyMDRaMDMxMTAvBgNV BAMTKEZEMUQ2RDZFMjE2M0ZBNEU2QUIyNDg2MjVGQjY0OUIyRUY3Q0UzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zV9N//RxlM1skYurucJkhrbr 8s20iHZUPHnIyWEpoPVt5LOMAOnB8PdWezelNrnK4ai+Cifn4YB6eyl62gSZZ3yN Bd0WJAzfC3vrPx4XiTOFydT8Bc/rhyYqn8hECeyaOJY3+h8hG6XoHsj6xWIHcwN8 4a7EEXMk8fJZZuDeX18v9N1+XiIIQ2hsNMp/wXukPZConjjrGPojdkCkqlOCWCiM GxImjGK5GnJ789nYTZCOvix4fdVpu7e07FW/a1h6azrW7nHzcENdMDm4Ul5kHz0L jSTVGpH54AN9thHgRxwXr2fkOPgpIU+xFC7Ty5GiWn15tpXrs6Sup9q42kLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/R1tbiFj+k5qskhiX7ZJsu9848owHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgqq08iqv2wvMNAJL/WBUrAUg0Y8+qheVe3 5Ez8/sKlcSrznC0N/SPu8NUPaPiTHgYkin0fC2Ot3d5V+6kxcbC69pBZ3sNoiKX4 51vZW0L4FjL0Fo/XMKpALHMfA0QEd7gJuqGW/mZnRLoUAJE+vg7MdtfA3rMqzK7Z lI8o50dr8AXiB7FgpwEkPaJqI10MNzCe5K/9qx8Y6xNoIvc+YqiYrgnJgWRqZxm/ iV9mwqs3ESkosdsN1qQMvp+xQ0aKOY9DRw0WhJOOnTIwLau2UBZtVEH2JHV/g/eA h/rUaI1iSfXYdJqe0BNJ6tsL3Znxjmg/wcsQPAy846jKLqSU00k= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client