This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: r98cJdrOFSDjlB7HeoM30AKybYYRPYE0WsKtPrYTQvQ= Subject key identifier: 2A:B2:B4:B9:B9:73:BB:CE:F4:CE:C2:93:01:A5:38:E2:A1:1D:18:C3 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 73CE1565E2886776EF551C9F5AE2ED38AB180480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0142 Signing time: Sat 06 Dec 2025 16:30:40 +0000 Manifest this update: Sat 06 Dec 2025 16:25:40 +0000 Manifest next update: Tue 09 Dec 2025 20:28:40 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: 6U7RSWpGcaUsvxpakQ/pEfe8JUQFJ6GjD1l4uQpTdHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ce:15:65:e2:88:67:76:ef:55:1c:9f:5a:e2:ed:38:ab:18:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Dec 6 16:25:40 2025 GMT Not After : Dec 9 20:28:40 2025 GMT Subject: CN=2AB2B4B9B973BBCEF4CEC29301A538E2A11D18C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:ac:aa:4d:50:c2:5a:a8:29:1a:32:fc:85: 35:60:e9:20:55:d3:3e:53:93:70:0e:3c:94:6a:e5: a9:82:97:88:4d:92:c8:7b:2f:c9:e8:4d:8b:84:d1: 9e:a0:88:ea:30:07:0e:75:85:ba:74:9d:ec:0d:b1: 98:e8:ad:36:bb:9c:05:b5:69:66:66:f3:df:70:8b: 54:6a:6f:b2:f2:81:98:30:1e:f8:cd:2a:9e:75:f7: 56:f0:cc:7d:93:22:4d:64:36:3b:60:d0:75:71:38: 78:48:0d:2d:f9:f6:cb:61:a5:4c:b3:3e:05:c4:e5: 15:40:ca:79:9e:49:24:ab:cb:5b:19:33:92:cf:45: ac:9f:d9:6f:eb:97:44:5a:39:79:b4:35:69:68:05: 33:57:b1:de:64:08:c1:95:da:a4:b3:76:2b:6f:58: dc:23:7f:ef:05:3c:8e:aa:67:3c:38:7c:cb:00:cf: 32:5a:38:c8:02:50:16:86:0f:3b:b5:43:d0:64:cd: 26:12:ad:16:28:fe:95:07:3e:0c:67:1d:0b:91:ef: e7:d9:48:47:21:38:04:d4:3c:11:cb:a3:b9:1b:a1: 01:e9:a7:1e:ec:cb:54:09:d0:09:90:87:79:ef:b8: 70:d2:aa:b8:9d:a3:39:4a:a9:1e:03:71:46:14:01: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:B4:B9:B9:73:BB:CE:F4:CE:C2:93:01:A5:38:E2:A1:1D:18:C3 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1d:20:32:ce:ad:b0:34:0c:35:0f:38:77:53:32:6e:aa:b0: 8c:19:05:5d:0b:34:3c:f3:1d:c3:05:43:5e:33:b0:f1:af:5d: 79:09:18:54:8c:6f:65:c6:de:a2:f4:5e:0e:1f:a5:af:57:0e: a3:a8:c0:48:37:4a:a0:09:1e:c3:b9:59:1f:5d:a0:98:b3:f4: ca:0d:52:ba:c5:0b:60:d8:55:c9:58:91:9c:a4:8b:30:59:3f: 13:9e:f5:86:ac:0f:95:95:70:94:75:49:98:9c:5a:2d:a7:64: be:36:3e:d4:29:de:2a:5c:aa:dd:8b:3e:13:29:76:eb:f7:cd: 53:47:6c:87:65:51:7d:cd:e7:37:f6:de:d3:7f:1d:0b:28:d1: 1f:9a:22:58:d9:0a:37:f6:62:65:0d:6f:4c:22:66:e5:d3:3a: 69:f8:fc:26:16:a6:dd:21:41:5d:d9:24:61:0e:6e:7f:11:24: e1:cd:1e:f8:31:12:93:3c:58:82:97:79:30:8e:c3:fd:92:85: fc:6a:c2:79:d2:38:89:ed:57:91:c7:74:53:ac:ad:46:b1:09: f5:7d:f4:8e:28:20:b0:d2:3d:32:fa:aa:a8:09:26:fb:09:c3: 43:25:32:fc:07:33:ca:f7:5f:a1:b4:8b:ce:ba:cc:13:bc:24: 4c:95:de:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc84VZeKIZ3bvVRyfWuLtOKsYBIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTEyMDYxNjI1NDBaFw0yNTEyMDkyMDI4NDBaMDMxMTAvBgNV BAMTKDJBQjJCNEI5Qjk3M0JCQ0VGNENFQzI5MzAxQTUzOEUyQTExRDE4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyayqTVDCWqgpGjL8hTVg6SBV 0z5Tk3AOPJRq5amCl4hNksh7L8noTYuE0Z6giOowBw51hbp0newNsZjorTa7nAW1 aWZm899wi1Rqb7LygZgwHvjNKp5191bwzH2TIk1kNjtg0HVxOHhIDS359sthpUyz PgXE5RVAynmeSSSry1sZM5LPRayf2W/rl0RaOXm0NWloBTNXsd5kCMGV2qSzditv WNwjf+8FPI6qZzw4fMsAzzJaOMgCUBaGDzu1Q9BkzSYSrRYo/pUHPgxnHQuR7+fZ SEchOATUPBHLo7kboQHppx7sy1QJ0AmQh3nvuHDSqridozlKqR4DcUYUAbfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrK0ublzu870zsKTAaU44qEdGMMwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4dIDLOrbA0DDUPOHdTMm6qsIwZBV0LNDzz HcMFQ14zsPGvXXkJGFSMb2XG3qL0Xg4fpa9XDqOowEg3SqAJHsO5WR9doJiz9MoN UrrFC2DYVclYkZykizBZPxOe9YasD5WVcJR1SZicWi2nZL42PtQp3ipcqt2LPhMp duv3zVNHbIdlUX3N5zf23tN/HQso0R+aIljZCjf2YmUNb0wiZuXTOmn4/CYWpt0h QV3ZJGEObn8RJOHNHvgxEpM8WIKXeTCOw/2ShfxqwnnSOIntV5HHdFOsrUaxCfV9 9I4oILDSPTL6qqgJJvsJw0MlMvwHM8r3X6G0i866zBO8JEyV3v8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:36:40 2025 by rpki-client