This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: nBpW9Ys0DbLotQW4Kpf9GVMDYWBz+zLZ7NuRcjdfmxg= Subject key identifier: 13:6C:1B:02:D2:BC:7D:24:0E:E0:0E:26:E9:6D:95:35:69:32:9E:37 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 5CDF31B813BDD9A3CF089658ADE16288AE24D7B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0538 Signing time: Fri 05 Dec 2025 20:41:14 +0000 Manifest this update: Fri 05 Dec 2025 20:36:14 +0000 Manifest next update: Tue 09 Dec 2025 06:18:14 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) 2: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: LdvTkN1+BlLGqIJbFqZ+d4lC8yW8Y2PoAUYzeXMbZkE=) 3: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk=) 4: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:df:31:b8:13:bd:d9:a3:cf:08:96:58:ad:e1:62:88:ae:24:d7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Dec 5 20:36:14 2025 GMT Not After : Dec 9 06:18:14 2025 GMT Subject: CN=136C1B02D2BC7D240EE00E26E96D953569329E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:f7:3b:f2:f8:c0:fb:c8:90:23:e6:de:5b: 0a:77:69:d5:c6:a1:3e:49:73:be:2f:5a:18:0c:5b: 4d:d5:6a:1c:33:85:59:3e:a2:21:d4:42:af:5c:da: ef:8c:b3:05:02:ed:cf:5a:74:09:ca:6f:ce:2e:6a: 70:b3:fc:42:db:d6:b1:4d:01:5e:e3:73:ca:08:97: f2:07:b9:c6:be:ee:62:f2:24:d1:2c:58:1e:b6:7b: 05:cc:5a:c7:76:30:fc:36:22:b7:c6:12:f1:44:a4: f4:0a:7a:83:d0:6e:64:a0:51:16:54:68:ab:e7:50: 6a:e4:20:64:4f:0d:ff:59:6e:a6:1f:e5:3e:8b:ce: 11:7f:51:e8:10:29:b1:9b:97:b6:fc:68:2a:75:9d: 6d:b8:ba:6d:74:b7:06:7e:db:fc:81:98:bf:74:f7: 85:83:39:32:2f:86:e0:39:bf:4f:69:08:13:88:b9: 91:2b:d9:27:32:e0:21:a3:bc:4f:c5:94:7b:f0:2c: 7b:0b:0b:1b:ff:54:2f:6e:6b:2e:e2:28:bf:24:c8: ae:f8:68:35:ff:e2:1d:23:01:77:99:5b:b4:8f:7c: 78:63:47:32:40:a3:f6:09:ec:8c:44:80:a5:6c:26: a8:34:3e:45:71:f2:ec:9d:47:15:0f:ca:ff:9a:83: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:1B:02:D2:BC:7D:24:0E:E0:0E:26:E9:6D:95:35:69:32:9E:37 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b7:5a:04:43:c2:c3:bc:27:4e:7f:d9:ce:7a:1d:a4:62:14: bf:46:d3:c8:4f:7b:4c:19:2c:6b:c6:60:b8:3c:b2:3a:31:cb: 1e:5f:38:f1:a2:81:44:59:07:3f:bd:0c:fb:a0:f3:ed:5a:39: 26:79:2c:76:7a:93:b3:06:a1:58:71:1b:5f:3f:e3:7a:1f:d7: 76:49:0a:f0:27:f2:d1:2c:b8:bf:55:91:cb:47:c0:94:be:66: 35:b6:05:0d:06:86:6f:b9:af:7f:92:38:0b:ea:69:ca:ea:57: 55:20:63:14:5d:3f:4d:8b:d8:ee:8e:da:85:72:1a:32:0a:1f: 0e:86:63:c1:b6:45:14:35:d2:cd:ec:48:26:d2:61:97:4e:6b: b0:b5:0e:4e:f0:44:e8:12:17:2f:b5:3a:8b:c3:59:7d:98:96: c4:3a:b3:ae:7b:b0:7c:81:9a:c9:39:4c:02:64:83:29:48:e0: fe:f0:32:9a:51:1b:2a:8a:c2:b1:e7:3d:45:0e:0f:17:93:f8: eb:59:9a:62:d7:ee:31:6c:55:95:8e:7a:d2:ee:3e:ed:45:32: c7:af:64:ad:a1:e4:61:4a:1e:cd:fc:52:2a:f3:53:1c:c8:7f: f6:59:9b:a2:ee:7f:71:65:d8:93:b1:83:06:4f:df:32:3e:81: bc:1c:be:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN8xuBO92aPPCJZYreFiiK4k17QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTEyMDUyMDM2MTRaFw0yNTEyMDkwNjE4MTRaMDMxMTAvBgNV BAMTKDEzNkMxQjAyRDJCQzdEMjQwRUUwMEUyNkU5NkQ5NTM1NjkzMjlFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnhfc78vjA+8iQI+beWwp3adXG oT5Jc74vWhgMW03VahwzhVk+oiHUQq9c2u+MswUC7c9adAnKb84uanCz/ELb1rFN AV7jc8oIl/IHuca+7mLyJNEsWB62ewXMWsd2MPw2IrfGEvFEpPQKeoPQbmSgURZU aKvnUGrkIGRPDf9ZbqYf5T6LzhF/UegQKbGbl7b8aCp1nW24um10twZ+2/yBmL90 94WDOTIvhuA5v09pCBOIuZEr2Scy4CGjvE/FlHvwLHsLCxv/VC9uay7iKL8kyK74 aDX/4h0jAXeZW7SPfHhjRzJAo/YJ7IxEgKVsJqg0PkVx8uydRxUPyv+ag6X7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2wbAtK8fSQO4A4m6W2VNWkynjcwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW3WgRDwsO8J05/2c56HaRiFL9G08hPe0wZ LGvGYLg8sjoxyx5fOPGigURZBz+9DPug8+1aOSZ5LHZ6k7MGoVhxG18/43of13ZJ CvAn8tEsuL9VkctHwJS+ZjW2BQ0Ghm+5r3+SOAvqacrqV1UgYxRdP02L2O6O2oVy GjIKHw6GY8G2RRQ10s3sSCbSYZdOa7C1Dk7wROgSFy+1OovDWX2YlsQ6s657sHyB msk5TAJkgylI4P7wMppRGyqKwrHnPUUODxeT+OtZmmLX7jFsVZWOetLuPu1FMsev ZK2h5GFKHs38UirzUxzIf/ZZm6Luf3Fl2JOxgwZP3zI+gbwcvtQ= -----END CERTIFICATE-----Generated at Sun Dec 7 08:20:39 2025 by rpki-client