This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: /zgq6PYVvcHGlh6Fl4fBXdyJw77OTk2Qy6HkhlowsX8= Subject key identifier: AA:05:04:90:2B:2B:FD:56:84:02:FE:33:55:40:A0:F7:57:7A:AF:BD Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 32AEF82783BDD40A2584B1FC24567DED4CEF12BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 020B Signing time: Thu 18 Dec 2025 03:31:13 +0000 Manifest this update: Thu 18 Dec 2025 03:26:13 +0000 Manifest next update: Sun 21 Dec 2025 06:39:13 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 2: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: iU3af8c/xt5o5wr5IayX4+P+pvrpobm96bMOk6EQxZM=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ae:f8:27:83:bd:d4:0a:25:84:b1:fc:24:56:7d:ed:4c:ef:12:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Dec 18 03:26:13 2025 GMT Not After : Dec 21 06:39:13 2025 GMT Subject: CN=AA0504902B2BFD568402FE335540A0F7577AAFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:46:ed:98:f4:0e:0f:91:83:f8:fb:12:fb: 53:4e:30:e6:c3:bb:7f:60:4f:65:43:37:8d:09:85: f9:53:6a:74:e0:06:07:d2:93:4a:3c:73:b2:8d:1a: 56:99:fe:d2:bf:6b:0c:2d:f4:9b:61:09:5a:72:4c: 08:9d:ba:ca:03:24:1e:4f:b6:44:a9:5b:a5:88:ab: 34:fe:e3:2d:80:ae:76:73:a8:ca:c8:62:ac:2d:f5: f1:75:16:62:96:97:9b:23:4d:ce:0a:19:7c:25:09: cf:0c:12:4c:b2:48:ea:87:ce:cf:47:70:70:87:d3: 12:9d:75:1d:55:cb:52:83:e1:84:65:2e:f7:a4:d0: c7:c5:8e:1c:ae:c8:34:2e:ee:4e:da:64:25:02:54: 9e:43:02:b1:68:72:55:1a:18:d1:14:80:0e:07:ab: f1:33:86:9c:70:66:97:4c:b1:49:69:04:de:25:c3: 1c:73:1e:85:e1:cf:c1:a9:54:0d:f0:0c:5e:f3:8c: a6:dd:45:86:c7:af:a7:60:1b:cb:bc:94:da:59:d8: c9:9d:7f:2f:d4:70:8b:8d:76:8a:5e:87:13:21:f9: 4b:0b:5e:b6:6d:99:45:95:7e:c5:d6:44:04:60:21: 90:2e:8c:a3:d3:f5:d9:63:3a:93:42:09:63:ea:8f: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:05:04:90:2B:2B:FD:56:84:02:FE:33:55:40:A0:F7:57:7A:AF:BD X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cd:bf:d8:47:b9:98:92:b0:9f:b9:f1:57:3d:2e:df:d5:0b: c8:dc:b3:8d:ba:96:a5:3e:98:75:b9:9c:04:a3:46:df:53:ba: 92:5e:65:c5:57:55:eb:fa:2c:53:9f:c3:64:d6:71:5f:4f:b2: 9d:69:26:96:3e:b7:75:88:78:29:81:b3:4e:43:c9:37:c9:4e: e3:8c:88:9f:d7:ee:4c:3b:27:43:03:1a:5e:28:88:a7:33:88: e0:0b:89:57:52:67:07:4e:64:67:84:f0:6f:75:b6:f3:9b:82: 4c:e4:f1:a9:da:ec:22:82:7a:f5:10:38:b0:b4:f9:89:c6:22: f1:08:76:7b:a9:28:a7:95:d7:63:64:8a:8d:1a:2e:41:10:aa: a6:50:b7:74:07:c3:7a:ab:3a:2f:26:be:7d:1b:eb:11:23:a2: c6:6b:4c:25:61:8a:5b:24:69:8e:9f:46:3e:54:99:e8:62:03: f4:be:fa:e9:32:b9:81:40:69:27:d0:e2:ec:af:73:fa:2f:58: 8e:d3:04:bd:8f:2b:17:c4:52:0c:ae:07:31:a9:bf:d4:c7:87: 89:ba:53:f9:19:7b:73:2f:ec:f0:f8:83:31:16:5d:55:4c:08: 1f:03:ca:df:71:91:44:d6:63:f4:71:82:23:35:36:19:94:5b: f0:d6:c5:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMq74J4O91AolhLH8JFZ97UzvErswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTEyMTgwMzI2MTNaFw0yNTEyMjEwNjM5MTNaMDMxMTAvBgNV BAMTKEFBMDUwNDkwMkIyQkZENTY4NDAyRkUzMzU1NDBBMEY3NTc3QUFGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI10btmPQOD5GD+PsS+1NOMObD u39gT2VDN40JhflTanTgBgfSk0o8c7KNGlaZ/tK/awwt9JthCVpyTAidusoDJB5P tkSpW6WIqzT+4y2ArnZzqMrIYqwt9fF1FmKWl5sjTc4KGXwlCc8MEkyySOqHzs9H cHCH0xKddR1Vy1KD4YRlLvek0MfFjhyuyDQu7k7aZCUCVJ5DArFoclUaGNEUgA4H q/EzhpxwZpdMsUlpBN4lwxxzHoXhz8GpVA3wDF7zjKbdRYbHr6dgG8u8lNpZ2Mmd fy/UcIuNdopehxMh+UsLXrZtmUWVfsXWRARgIZAujKPT9dljOpNCCWPqjyfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgUEkCsr/VaEAv4zVUCg91d6r70wHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPNv9hHuZiSsJ+58Vc9Lt/VC8jcs426lqU+ mHW5nASjRt9TupJeZcVXVev6LFOfw2TWcV9Psp1pJpY+t3WIeCmBs05DyTfJTuOM iJ/X7kw7J0MDGl4oiKcziOALiVdSZwdOZGeE8G91tvObgkzk8ana7CKCevUQOLC0 +YnGIvEIdnupKKeV12Nkio0aLkEQqqZQt3QHw3qrOi8mvn0b6xEjosZrTCVhilsk aY6fRj5UmehiA/S++ukyuYFAaSfQ4uyvc/ovWI7TBL2PKxfEUgyuBzGpv9THh4m6 U/kZe3Mv7PD4gzEWXVVMCB8Dyt9xkUTWY/RxgiM1NhmUW/DWxX8= -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:32 2025 by rpki-client