This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft File: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft (raw, json) Hash identifier: st5Ud/eCWsKqrdA7kn0taKOYWi8ywuWo6ek+G4PUmf4= Subject key identifier: A2:4E:FB:A1:B5:02:01:34:56:96:31:6B:81:C7:FD:8A:0A:31:FF:DA Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 Certificate issuer: /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Certificate serial: 5D94B4208ED98823BE6892480D2D2DAD08F217C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft Manifest number: 0318 Signing time: Wed 17 Dec 2025 13:50:02 +0000 Manifest this update: Wed 17 Dec 2025 13:45:02 +0000 Manifest next update: Sat 20 Dec 2025 23:03:02 +0000 Files and hashes: 1: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: TY8TkomaykZ0zGgKDRDg1fDMn5MYQ0XJuAyZNqy9elE=) 2: 510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl (hash: O18A8h1b+wJvbOYsGIVYRnqe0dU1IqaDiXF0V4ok+gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:94:b4:20:8e:d9:88:23:be:68:92:48:0d:2d:2d:ad:08:f2:17:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7 Validity Not Before: Dec 17 13:45:02 2025 GMT Not After : Dec 20 23:03:02 2025 GMT Subject: CN=A24EFBA1B50201345696316B81C7FD8A0A31FFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:fb:fe:3d:0a:98:27:ea:b2:0b:45:29:b2: 98:da:79:c8:da:f5:07:c9:76:ee:d5:24:38:b2:42: 7f:5a:3e:0c:b5:f4:be:c4:92:1d:0c:16:1d:49:7a: c9:fb:0e:b8:a1:2a:77:93:99:55:e2:4d:90:75:af: aa:39:ec:fc:00:9c:36:7f:a6:8d:d8:23:fe:d6:43: c7:e8:36:0f:40:9a:fe:92:ba:8b:a0:16:9b:7d:e6: 2e:20:fb:27:58:fe:40:51:93:ae:59:76:2a:a4:99: ad:fa:0e:e7:a3:27:e7:76:73:5b:49:53:ca:79:5e: 76:d0:e0:c9:49:f6:f8:4a:11:00:e5:9b:33:ad:a3: 60:22:58:18:2b:ff:45:03:5c:06:89:9d:ab:75:88: 52:76:f9:03:4f:e3:d3:fd:4b:4b:ef:b6:12:12:c3: 00:6b:09:fe:9d:c2:6a:72:17:f8:1a:7a:87:a4:4a: b9:85:a7:cc:17:27:f2:b2:63:34:97:51:f3:ad:94: 8c:e1:f9:bc:f3:f9:1a:dd:2d:12:9f:25:4f:fb:87: d5:74:a1:bd:bf:bc:8e:02:86:fe:65:e3:05:99:cd: f2:df:26:43:2c:9e:ec:e3:a0:17:bf:9e:ea:b2:09: 09:4a:3d:ff:6a:5b:6f:3a:00:ff:35:37:eb:6e:3b: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:FB:A1:B5:02:01:34:56:96:31:6B:81:C7:FD:8A:0A:31:FF:DA X509v3 Authority Key Identifier: keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:70:bd:a5:34:0d:af:cc:3f:de:93:dd:89:fb:51:c6:84:1a: 20:c7:6f:81:4c:ed:56:04:71:2d:47:e6:68:0b:db:fd:33:6d: 3e:13:ee:62:48:d2:f6:75:a6:f2:8e:6b:34:cc:15:ee:4b:03: b2:6d:42:8c:ed:0a:52:b8:4a:69:4f:1b:c2:14:e3:d0:80:a4: 5a:56:09:31:c4:6d:97:67:e0:c1:09:7d:19:99:b3:ac:b0:fd: 03:ef:26:ee:82:fe:e0:52:62:cd:79:72:19:21:af:c7:65:13: b8:09:e6:e5:0d:70:ab:77:69:b9:71:80:e7:5e:38:70:bf:ab: 35:31:d7:fc:02:f3:13:ac:46:8f:0a:f3:ab:bb:d5:19:8a:92: a8:2d:40:f1:ed:e7:4f:f5:57:6c:83:2e:00:d5:47:ae:5a:a9: f5:21:cd:e3:80:af:2f:3a:e3:58:7b:e2:d6:97:83:0e:ee:68: fd:ec:7c:06:4b:14:39:53:e8:ee:b3:3a:8a:93:45:78:41:e7: a5:78:0e:31:44:ae:3f:7e:8a:96:77:68:20:40:90:d9:a7:9c: d0:2b:b0:cb:9e:78:a6:08:e1:fc:df:3c:ae:ab:f5:d7:5c:a7: e9:49:3b:1c:af:72:61:58:a5:b8:30:30:34:8a:5b:5b:b0:e4: 20:77:f7:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZS0II7ZiCO+aJJIDS0trQjyF8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1 QTA1QjFCNzAeFw0yNTEyMTcxMzQ1MDJaFw0yNTEyMjAyMzAzMDJaMDMxMTAvBgNV BAMTKEEyNEVGQkExQjUwMjAxMzQ1Njk2MzE2QjgxQzdGRDhBMEEzMUZGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsvv+PQqYJ+qyC0Upspjaecja 9QfJdu7VJDiyQn9aPgy19L7Ekh0MFh1Jesn7DrihKneTmVXiTZB1r6o57PwAnDZ/ po3YI/7WQ8foNg9Amv6SuougFpt95i4g+ydY/kBRk65Zdiqkma36DuejJ+d2c1tJ U8p5XnbQ4MlJ9vhKEQDlmzOto2AiWBgr/0UDXAaJnat1iFJ2+QNP49P9S0vvthIS wwBrCf6dwmpyF/gaeoekSrmFp8wXJ/KyYzSXUfOtlIzh+bzz+RrdLRKfJU/7h9V0 ob2/vI4Chv5l4wWZzfLfJkMsnuzjoBe/nuqyCQlKPf9qW286AP81N+tuO0/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUok77obUCATRWljFrgcf9igox/9owHwYDVR0j BBgwFoAUUQ/ZFDW36TBSs4bSoauwEloFsbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjMwNTRmNi04ZDA5LTRkMTItYjE5Yi01MDBkNmQ5MjFmYzEvMC81MTBGRDkxNDM1 QjdFOTMwNTJCMzg2RDJBMUFCQjAxMjVBMDVCMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIwMTI1QTA1 QjFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvNTEwRkQ5MTQzNUI3RTkzMDUyQjM4NkQyQTFBQkIw MTI1QTA1QjFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNwvaU0Da/MP96T3Yn7UcaEGiDHb4FM7VYE cS1H5mgL2/0zbT4T7mJI0vZ1pvKOazTMFe5LA7JtQoztClK4SmlPG8IU49CApFpW CTHEbZdn4MEJfRmZs6yw/QPvJu6C/uBSYs15chkhr8dlE7gJ5uUNcKt3ablxgOde OHC/qzUx1/wC8xOsRo8K86u71RmKkqgtQPHt50/1V2yDLgDVR65aqfUhzeOAry86 41h74taXgw7uaP3sfAZLFDlT6O6zOoqTRXhB56V4DjFErj9+ipZ3aCBAkNmnnNAr sMueeKYI4fzfPK6r9ddcp+lJOxyvcmFYpbgwMDSKW1uw5CB396w= -----END CERTIFICATE-----Generated at Thu Dec 18 12:46:40 2025 by rpki-client