This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: CwZqCZmIMwUJBmR4AyzQ0ZzZVWylbla5+f8YN3MjfNA= Subject key identifier: 12:34:9E:23:C8:65:E6:64:3D:8F:D6:D5:68:85:44:C4:0A:8D:91:CE Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 198F7A5FE57AD20BF987E036B53FEE230853A521 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0539 Signing time: Wed 31 Dec 2025 13:42:18 +0000 Manifest this update: Wed 31 Dec 2025 13:37:18 +0000 Manifest next update: Sat 03 Jan 2026 17:39:18 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: G7EZavcp7DuUg6E0/DHfddt7ww7ZUWNvokHqv+A6E6A=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 17:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8f:7a:5f:e5:7a:d2:0b:f9:87:e0:36:b5:3f:ee:23:08:53:a5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Dec 31 13:37:18 2025 GMT Not After : Jan 3 17:39:18 2026 GMT Subject: CN=12349E23C865E6643D8FD6D5688544C40A8D91CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a7:ef:ee:22:ee:8e:c8:49:7c:09:17:6d:c3: 4f:a7:b7:36:07:ed:56:b4:9c:da:ec:8b:e4:01:e1: b9:65:a4:92:b0:23:cb:c0:66:0c:8e:97:1a:6d:57: c8:5b:a0:e8:db:22:96:af:a9:e7:26:ef:19:10:63: c5:93:3d:86:63:3e:d7:a1:f1:2c:61:2f:f0:3b:21: 45:91:6f:ab:ba:f0:0d:61:80:8d:37:4d:77:9f:e9: 35:e2:5d:34:53:df:19:1a:ec:0d:40:77:76:a2:e4: 88:a5:03:a9:17:26:be:a4:37:37:8a:9e:99:8a:ae: 17:02:68:dc:11:16:1b:ad:69:10:07:7c:3f:74:b8: ac:39:01:d3:85:da:7e:75:c5:87:74:0e:3c:ed:d8: 75:0b:e8:6e:ac:e4:ad:3c:97:a9:27:41:97:43:41: d9:b5:cc:05:3f:d7:ac:b1:e4:d5:ec:a1:96:01:cd: 19:52:d5:38:91:09:45:9b:1c:ed:e9:ac:d1:9b:4c: 17:8b:8c:6e:0e:3a:b5:db:fe:93:ed:c4:20:bf:b4: ce:98:40:77:6d:58:6d:45:66:11:44:89:41:a4:a9: c8:f7:9f:da:a5:49:4e:6d:ac:29:64:58:45:29:87: 58:9a:49:4c:46:9a:e9:4c:5d:bd:9b:57:75:be:20: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:9E:23:C8:65:E6:64:3D:8F:D6:D5:68:85:44:C4:0A:8D:91:CE X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6b:79:4d:0c:ba:3c:c0:4a:68:87:e4:7f:ac:0b:8e:74:00: a0:1c:2c:ab:20:42:b3:9f:e9:19:05:4f:cf:26:d3:0b:35:cb: 67:75:d4:51:65:05:29:06:cf:53:4b:94:1f:30:fc:99:cc:56: d8:1f:f2:65:ff:25:0b:d1:1e:21:37:64:e4:71:d8:3b:70:cf: 94:36:f8:28:d9:bb:35:e4:d7:f2:cf:fe:b7:b2:c9:32:89:d0: 32:42:e2:18:8c:96:2e:f0:85:ce:98:47:bc:7b:5e:56:81:6b: 75:9b:37:a7:84:d5:3a:63:97:28:8e:9d:55:df:15:ec:09:2f: d8:c4:8f:b0:2d:d1:c9:5f:93:a1:04:55:7a:4a:af:97:00:a3: ee:0d:ce:78:44:24:d0:c0:b9:39:df:92:f4:31:75:2b:07:54: c8:3f:05:65:28:11:23:9b:1e:a8:3c:de:90:62:72:92:f1:57: ed:f9:8c:33:1a:8e:ab:aa:6a:24:e9:61:81:fa:30:2a:19:db: 8c:dc:6a:82:19:12:49:f2:ca:ca:1d:3b:9a:57:25:43:28:1d: bb:fa:1d:0d:92:9d:ce:a6:f7:c5:a5:fd:db:34:0a:1b:f2:dd: 6c:12:26:a4:48:6e:d5:09:a0:69:9a:a0:ae:76:83:69:9e:f4: e3:67:56:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGY96X+V60gv5h+A2tT/uIwhTpSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTEyMzExMzM3MThaFw0yNjAxMDMxNzM5MThaMDMxMTAvBgNV BAMTKDEyMzQ5RTIzQzg2NUU2NjQzRDhGRDZENTY4ODU0NEM0MEE4RDkxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzp+/uIu6OyEl8CRdtw0+ntzYH 7Va0nNrsi+QB4bllpJKwI8vAZgyOlxptV8hboOjbIpavqecm7xkQY8WTPYZjPteh 8SxhL/A7IUWRb6u68A1hgI03TXef6TXiXTRT3xka7A1Ad3ai5IilA6kXJr6kNzeK npmKrhcCaNwRFhutaRAHfD90uKw5AdOF2n51xYd0Djzt2HUL6G6s5K08l6knQZdD Qdm1zAU/16yx5NXsoZYBzRlS1TiRCUWbHO3prNGbTBeLjG4OOrXb/pPtxCC/tM6Y QHdtWG1FZhFEiUGkqcj3n9qlSU5trClkWEUph1iaSUxGmulMXb2bV3W+IGdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjSeI8hl5mQ9j9bVaIVExAqNkc4wHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtreU0MujzASmiH5H+sC450AKAcLKsgQrOf 6RkFT88m0ws1y2d11FFlBSkGz1NLlB8w/JnMVtgf8mX/JQvRHiE3ZORx2Dtwz5Q2 +CjZuzXk1/LP/reyyTKJ0DJC4hiMli7whc6YR7x7XlaBa3WbN6eE1TpjlyiOnVXf FewJL9jEj7At0clfk6EEVXpKr5cAo+4NznhEJNDAuTnfkvQxdSsHVMg/BWUoESOb Hqg83pBicpLxV+35jDMajquqaiTpYYH6MCoZ24zcaoIZEknyysodO5pXJUMoHbv6 HQ2Snc6m98Wl/ds0Chvy3WwSJqRIbtUJoGmaoK52g2me9ONnVic= -----END CERTIFICATE-----Generated at Wed Dec 31 20:27:32 2025 by rpki-client