This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: lpHNsEvXE8it9b16ALQ6glbBE7J/qChBxS7vSTqMloc= Subject key identifier: 1C:E2:26:FE:5D:7D:8E:0B:30:99:FB:99:6B:ED:8C:34:2E:C4:17:8E Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 280DA0E1BD5FD64761EC262154AF949FB7A9480C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 0206 Signing time: Sat 06 Dec 2025 19:41:17 +0000 Manifest this update: Sat 06 Dec 2025 19:36:17 +0000 Manifest next update: Wed 10 Dec 2025 05:43:17 +0000 Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: kf+HHawxAzQwvGzGvHWKGmdAsyKVraEOtQpwn4kJen4=) 2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0d:a0:e1:bd:5f:d6:47:61:ec:26:21:54:af:94:9f:b7:a9:48:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Dec 6 19:36:17 2025 GMT Not After : Dec 10 05:43:17 2025 GMT Subject: CN=1CE226FE5D7D8E0B3099FB996BED8C342EC4178E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:fc:25:d9:3d:ae:87:09:4a:23:df:06:77: 5e:c4:b9:d7:19:61:7c:f9:36:2a:3d:ac:e7:bd:c4: 05:64:b0:33:c3:46:93:f8:32:ba:f6:af:cd:66:4e: 77:8e:f1:6a:35:dc:3c:fb:ac:68:61:72:e4:76:ca: dd:7e:d4:c9:15:54:45:e0:bb:d6:bf:84:57:c8:44: 5c:6d:b2:0f:d5:2c:c4:0f:19:bc:51:6e:b2:b7:6a: de:b0:40:16:67:7b:85:81:a2:86:13:45:3c:01:1e: 94:6b:e2:aa:dd:d3:42:22:50:34:54:7f:3b:cb:97: d8:0f:95:15:d6:03:b5:5b:97:39:22:52:a5:17:1f: 43:bd:b7:ae:61:1c:ca:fe:4b:12:86:31:f5:f6:46: 2c:12:e9:d7:f7:fa:c2:94:ed:6d:2e:0d:2d:08:8c: 52:c0:7b:ee:00:6e:37:5a:39:bf:45:6e:5e:cf:22: 22:68:d3:b2:e2:dd:2b:a8:d6:b7:4c:6c:f2:64:88: 70:3a:ee:c3:d2:29:b7:77:90:51:60:38:6d:34:bd: fd:76:9f:42:1a:95:83:b9:ca:40:b5:d0:91:ad:36: 7d:b5:1b:bc:0a:cb:13:d9:01:50:d3:57:1c:14:c0: 41:80:50:ba:79:ec:73:e1:89:48:10:83:9d:b7:2c: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E2:26:FE:5D:7D:8E:0B:30:99:FB:99:6B:ED:8C:34:2E:C4:17:8E X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:de:bf:45:18:60:41:20:7c:d7:fd:3d:f1:26:cf:50:24:83: a7:8c:c4:5d:13:4d:e6:a0:e6:ea:c4:39:ab:11:e4:bb:e5:9f: 8a:f3:7d:26:43:9f:35:a9:30:e7:2c:ba:97:38:ab:6a:af:c8: 12:0b:88:5f:31:97:11:e6:1e:41:d8:69:e3:15:01:69:0a:0a: 40:4f:8a:b8:f7:8c:21:70:8b:2b:07:e1:ce:13:56:cc:8a:03: 34:5b:2c:da:f3:a3:37:d5:aa:ab:01:41:b6:fc:63:5e:bb:91: 0c:d7:6b:5f:c4:05:16:52:a1:90:22:94:50:23:2a:51:94:11: 30:ed:17:36:9e:59:fd:11:26:09:17:21:ee:1b:27:0d:b5:c2: 01:fd:92:6c:42:87:cd:c6:7e:b4:25:2d:bb:79:7a:e3:0b:d7: 86:f1:7d:81:4d:70:25:f4:22:11:8f:68:4e:9f:87:1c:13:06: 73:d4:ee:8e:d8:49:48:0e:18:48:56:b5:ee:d8:fb:a9:c5:09: c7:31:81:f6:1d:ea:d9:e2:e5:9f:2c:b0:be:b0:de:81:9d:37: 23:6b:51:a1:ff:95:fb:97:70:74:d3:37:e1:07:08:8e:fc:3f: 00:40:e4:2e:91:e3:39:e8:77:49:f2:62:4c:a4:9b:cd:9f:18: 79:d9:77:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKA2g4b1f1kdh7CYhVK+Un7epSAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTEyMDYxOTM2MTdaFw0yNTEyMTAwNTQzMTdaMDMxMTAvBgNV BAMTKDFDRTIyNkZFNUQ3RDhFMEIzMDk5RkI5OTZCRUQ4QzM0MkVDNDE3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Tfwl2T2uhwlKI98Gd17EudcZ YXz5Nio9rOe9xAVksDPDRpP4Mrr2r81mTneO8Wo13Dz7rGhhcuR2yt1+1MkVVEXg u9a/hFfIRFxtsg/VLMQPGbxRbrK3at6wQBZne4WBooYTRTwBHpRr4qrd00IiUDRU fzvLl9gPlRXWA7VblzkiUqUXH0O9t65hHMr+SxKGMfX2RiwS6df3+sKU7W0uDS0I jFLAe+4AbjdaOb9Fbl7PIiJo07Li3Suo1rdMbPJkiHA67sPSKbd3kFFgOG00vf12 n0IalYO5ykC10JGtNn21G7wKyxPZAVDTVxwUwEGAULp57HPhiUgQg523LBTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOIm/l19jgswmfuZa+2MNC7EF44wHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTev0UYYEEgfNf9PfEmz1Akg6eMxF0TTeag 5urEOasR5Lvln4rzfSZDnzWpMOcsupc4q2qvyBILiF8xlxHmHkHYaeMVAWkKCkBP irj3jCFwiysH4c4TVsyKAzRbLNrzozfVqqsBQbb8Y167kQzXa1/EBRZSoZAilFAj KlGUETDtFzaeWf0RJgkXIe4bJw21wgH9kmxCh83GfrQlLbt5euML14bxfYFNcCX0 IhGPaE6fhxwTBnPU7o7YSUgOGEhWte7Y+6nFCccxgfYd6tni5Z8ssL6w3oGdNyNr UaH/lfuXcHTTN+EHCI78PwBA5C6R4znod0nyYkykm82fGHnZd0s= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:46 2025 by rpki-client