This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: NiCuyhHx7Wvzpr08i0WGOaPZNQc3BqAiTF34cywAXu8= Subject key identifier: FB:76:91:9A:D8:80:A1:84:EA:25:37:45:7A:78:19:0C:03:30:4D:DC Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 7CE2B34FBA9684416716522A9A276AEA432A2411 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 04AE Signing time: Wed 31 Dec 2025 05:21:28 +0000 Manifest this update: Wed 31 Dec 2025 05:16:28 +0000 Manifest next update: Sat 03 Jan 2026 09:51:28 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) 3: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: 5Mu+08v927LPSJzbzfx6j6f61Ef1eVzhrIbRtJzeXeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e2:b3:4f:ba:96:84:41:67:16:52:2a:9a:27:6a:ea:43:2a:24:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Dec 31 05:16:28 2025 GMT Not After : Jan 3 09:51:28 2026 GMT Subject: CN=FB76919AD880A184EA2537457A78190C03304DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:f0:75:c5:48:76:11:4f:5a:68:6e:ec:5c: e1:61:3d:f0:2f:ed:29:7d:a0:42:5d:3c:47:a7:3d: 74:23:96:ce:f8:52:85:f1:ce:78:be:67:d3:3a:0e: 83:e5:00:9a:1f:53:7d:b9:7f:a2:6a:2a:46:50:da: 1f:b7:7f:25:83:4a:b1:29:17:4d:ee:89:70:4d:35: b7:ef:40:9d:5d:21:1e:c1:3d:50:e2:43:d4:7c:5e: 13:60:9d:45:9e:42:37:0a:c2:7c:74:1c:c4:92:ce: 26:7a:ef:0e:e1:dd:77:50:ce:ed:38:4d:f4:a5:e9: 3f:84:2c:65:9e:1d:a6:82:85:ee:df:4d:c6:d9:80: c7:4e:47:cc:6b:ac:83:59:5b:7f:c1:b0:97:df:7c: 23:f9:05:35:64:f5:cf:c8:45:0f:76:3c:d0:ed:e1: 96:c8:9e:2b:93:47:32:02:1a:78:bd:b8:01:ec:73: d4:80:d4:63:b0:d2:6c:db:47:85:70:af:69:32:0c: a8:b1:e1:7a:bd:71:2a:cb:a0:fd:5a:c2:b0:e4:4b: b9:cd:79:4b:9e:86:d3:43:69:c1:31:41:0b:ec:ae: 8e:74:03:c7:b9:a7:e8:d4:3c:aa:00:bf:f1:9b:b3: 20:9b:cd:05:dc:3c:08:04:71:c9:4b:b0:a4:6f:88: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:76:91:9A:D8:80:A1:84:EA:25:37:45:7A:78:19:0C:03:30:4D:DC X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a7:8a:fe:15:a3:ee:de:f8:ba:62:a6:98:39:78:51:c0:b5: b3:50:60:cc:23:d8:7c:a4:d4:62:f0:40:cb:d6:36:56:4d:fe: e2:db:5f:a2:69:87:ec:8e:dd:85:25:1f:35:d5:af:99:f4:b1: 1d:f8:fe:c3:1b:e6:ff:18:c0:04:b9:a7:dd:09:d2:79:ca:4f: 48:1f:8e:54:7d:e0:e9:97:f1:de:cd:ac:ba:7f:97:6a:16:37: 2d:56:57:de:3d:60:5e:38:5a:41:b8:99:cb:67:ab:1c:ea:84: 2e:da:85:42:74:79:ab:cb:9a:0f:cc:45:6e:42:3d:ca:05:da: cd:99:36:a6:20:ae:9c:78:69:70:87:c4:c0:97:9d:61:94:8c: f4:39:fe:b6:d8:b9:dd:f4:ec:39:11:dc:11:77:b1:14:c6:74: 00:9e:83:43:40:05:94:aa:0e:50:02:c2:32:b5:17:f6:49:df: 56:e9:9e:0e:f1:f5:ae:15:c2:f2:98:2b:18:a1:0e:1b:c9:dc: 0d:3e:e3:e7:6e:cf:16:4a:e6:19:ef:f3:df:39:05:1d:67:94: 0e:6e:85:2c:55:b6:69:2f:4b:42:9e:df:75:3c:ae:2c:7b:ba: bd:74:82:f3:85:a4:72:81:ce:16:61:05:a8:6e:87:4e:6c:6b: 6d:b8:5c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOKzT7qWhEFnFlIqmidq6kMqJBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTEyMzEwNTE2MjhaFw0yNjAxMDMwOTUxMjhaMDMxMTAvBgNV BAMTKEZCNzY5MTlBRDg4MEExODRFQTI1Mzc0NTdBNzgxOTBDMDMzMDREREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfb/B1xUh2EU9aaG7sXOFhPfAv 7Sl9oEJdPEenPXQjls74UoXxzni+Z9M6DoPlAJofU325f6JqKkZQ2h+3fyWDSrEp F03uiXBNNbfvQJ1dIR7BPVDiQ9R8XhNgnUWeQjcKwnx0HMSSziZ67w7h3XdQzu04 TfSl6T+ELGWeHaaChe7fTcbZgMdOR8xrrINZW3/BsJfffCP5BTVk9c/IRQ92PNDt 4ZbIniuTRzICGni9uAHsc9SA1GOw0mzbR4Vwr2kyDKix4Xq9cSrLoP1awrDkS7nN eUuehtNDacExQQvsro50A8e5p+jUPKoAv/GbsyCbzQXcPAgEcclLsKRviJkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+3aRmtiAoYTqJTdFengZDAMwTdwwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyniv4Vo+7e+Lpippg5eFHAtbNQYMwj2Hyk 1GLwQMvWNlZN/uLbX6Jph+yO3YUlHzXVr5n0sR34/sMb5v8YwAS5p90J0nnKT0gf jlR94OmX8d7NrLp/l2oWNy1WV949YF44WkG4mctnqxzqhC7ahUJ0eavLmg/MRW5C PcoF2s2ZNqYgrpx4aXCHxMCXnWGUjPQ5/rbYud307DkR3BF3sRTGdACeg0NABZSq DlACwjK1F/ZJ31bpng7x9a4VwvKYKxihDhvJ3A0+4+duzxZK5hnv8985BR1nlA5u hSxVtmkvS0Ke33U8rix7ur10gvOFpHKBzhZhBahuh05sa224XPE= -----END CERTIFICATE-----Generated at Wed Dec 31 20:27:18 2025 by rpki-client