This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: 0GVrvZMPHt8KW3jPWU023AfAn7QLf3D3K/bagX3oNuA= Subject key identifier: 1C:09:C4:63:D0:EE:0A:5A:E4:95:33:58:48:7F:28:B1:06:C5:44:C2 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 027BDAAAF9FBF44A4BFA26EB1902873D74E0330E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: D3 Signing time: Sat 06 Dec 2025 16:21:09 +0000 Manifest this update: Sat 06 Dec 2025 16:16:09 +0000 Manifest next update: Wed 10 Dec 2025 03:45:09 +0000 Files and hashes: 1: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA=) 2: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: fwvFToqxJVLiZzHU+cefrsmA+ilFQOAxJtkyyS6STtQ=) 3: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: 44UIGhT2CR88gEAMCeA+qiaxDEitDJdZzTyS4PAwJto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7b:da:aa:f9:fb:f4:4a:4b:fa:26:eb:19:02:87:3d:74:e0:33:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Dec 6 16:16:09 2025 GMT Not After : Dec 10 03:45:09 2025 GMT Subject: CN=1C09C463D0EE0A5AE4953358487F28B106C544C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:cd:0a:c1:6f:05:59:64:58:fd:3c:76:a4: 11:01:5e:e8:6a:29:02:47:4b:6f:1b:ce:f6:c9:45: 43:4d:42:78:be:d3:71:4a:e6:90:e9:ca:b2:bc:3f: ac:f9:8d:83:f8:25:0d:6f:b7:33:81:eb:8d:46:47: ac:12:8e:45:69:f9:a1:1d:ad:f4:9c:55:2a:60:ed: 10:37:cc:cd:39:6b:cd:ed:4d:7d:ef:93:b7:d4:92: a0:a1:db:00:2c:fc:92:84:e8:2e:28:f7:57:05:07: 16:88:67:ed:64:99:99:2a:53:ec:21:fa:ff:ec:7d: 95:a0:85:ca:ab:55:9a:9a:c5:06:fa:01:4c:c3:69: 47:51:2d:ba:10:bb:b9:7d:de:0d:ed:d9:52:34:67: 0e:8e:73:08:fb:a6:e9:e7:a9:0d:cf:60:2a:da:fe: e9:06:cb:cc:e8:32:b8:92:22:50:c6:c8:ce:5c:2a: 74:52:7a:6e:18:c0:a1:ca:6d:18:4c:10:6b:7f:85: a4:22:0a:9b:85:46:0a:6b:f7:5f:85:b2:1f:b5:3b: 1f:45:2b:73:4c:ae:f8:cf:f3:c8:69:d6:dc:1d:86: 2e:01:ec:be:59:bb:e7:d6:af:e6:84:dc:5a:67:7d: 61:e8:7a:4a:45:b3:52:a1:83:ff:b9:48:05:34:ec: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:C4:63:D0:EE:0A:5A:E4:95:33:58:48:7F:28:B1:06:C5:44:C2 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:3a:f6:ed:ab:dc:18:11:9c:f6:e7:f9:9a:aa:b4:05:e4:09: 1b:78:0c:25:b7:f6:28:e6:e2:58:42:c7:e1:10:20:cc:66:9a: d2:05:a4:81:4c:13:83:58:20:79:e7:8f:94:cb:57:eb:79:c5: e8:69:53:9a:d5:87:f1:ff:72:e2:c0:5f:82:38:c2:fb:86:67: 24:8f:fd:3e:81:ef:74:71:35:c3:99:36:bb:ea:fe:8b:b9:84: ee:a0:c3:e1:30:a2:d7:f2:41:c9:71:6c:a2:fc:bf:d9:ea:b1: 0d:70:3e:75:5c:a5:69:73:e6:e0:f7:bf:94:8e:aa:d8:7f:74: 0d:4e:9d:aa:9f:f8:b0:dd:fa:06:d2:c9:13:e2:46:68:13:ce: 0e:85:86:10:12:7b:86:37:1f:e5:f4:76:b4:a8:c5:32:6e:f5: c3:8b:4d:4e:49:fc:0f:ad:15:70:a3:e9:0a:d2:da:1d:41:88: 1e:dc:f5:9a:92:d7:73:05:5b:da:00:a5:05:c2:0c:43:24:22: b5:b8:db:62:08:0a:7c:05:ae:05:8f:86:52:33:16:d6:da:f2: fc:d5:79:cf:a8:bb:21:98:14:da:46:63:9e:1e:07:c3:0a:9c: 96:bc:8d:49:46:77:e8:ae:14:6c:84:59:4d:55:f7:10:09:06: 3e:52:ea:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnvaqvn79EpL+ibrGQKHPXTgMw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTEyMDYxNjE2MDlaFw0yNTEyMTAwMzQ1MDlaMDMxMTAvBgNV BAMTKDFDMDlDNDYzRDBFRTBBNUFFNDk1MzM1ODQ4N0YyOEIxMDZDNTQ0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCra80KwW8FWWRY/Tx2pBEBXuhq KQJHS28bzvbJRUNNQni+03FK5pDpyrK8P6z5jYP4JQ1vtzOB641GR6wSjkVp+aEd rfScVSpg7RA3zM05a83tTX3vk7fUkqCh2wAs/JKE6C4o91cFBxaIZ+1kmZkqU+wh +v/sfZWghcqrVZqaxQb6AUzDaUdRLboQu7l93g3t2VI0Zw6Ocwj7punnqQ3PYCra /ukGy8zoMriSIlDGyM5cKnRSem4YwKHKbRhMEGt/haQiCpuFRgpr91+Fsh+1Ox9F K3NMrvjP88hp1twdhi4B7L5Zu+fWr+aE3FpnfWHoekpFs1Khg/+5SAU07I3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAnEY9DuClrklTNYSH8osQbFRMIwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANI69u2r3BgRnPbn+ZqqtAXkCRt4DCW39ijm 4lhCx+EQIMxmmtIFpIFME4NYIHnnj5TLV+t5xehpU5rVh/H/cuLAX4I4wvuGZySP /T6B73RxNcOZNrvq/ou5hO6gw+EwotfyQclxbKL8v9nqsQ1wPnVcpWlz5uD3v5SO qth/dA1Onaqf+LDd+gbSyRPiRmgTzg6FhhASe4Y3H+X0drSoxTJu9cOLTU5J/A+t FXCj6QrS2h1BiB7c9ZqS13MFW9oApQXCDEMkIrW422IICnwFrgWPhlIzFtba8vzV ec+ouyGYFNpGY54eB8MKnJa8jUlGd+iuFGyEWU1V9xAJBj5S6uM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:00:51 2025 by rpki-client