This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: N+ebe8mTrQu6zfGqTa6i9IAMbBXN1x8/kGKV7EVzS1k= Subject key identifier: 8B:20:66:0B:13:3F:4B:84:D8:18:62:81:C4:91:6C:F0:8D:E8:2B:74 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 63824E4A05743F06091591EF3159A13671D6A95A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 0158 Signing time: Tue 02 Dec 2025 18:41:18 +0000 Manifest this update: Tue 02 Dec 2025 18:36:18 +0000 Manifest next update: Sat 06 Dec 2025 06:11:18 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) 2: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: h1gDo6yHLYQ1OKx1ox6/uHx1t17/gH4DUBVwf3yAJtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:82:4e:4a:05:74:3f:06:09:15:91:ef:31:59:a1:36:71:d6:a9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Dec 2 18:36:18 2025 GMT Not After : Dec 6 06:11:18 2025 GMT Subject: CN=8B20660B133F4B84D8186281C4916CF08DE82B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:58:45:61:2c:cc:93:87:7a:a0:ed:17:7a: 0b:ab:8d:3e:a3:61:5b:d2:ac:45:29:7d:d2:4c:ba: e4:c1:bf:d8:f3:c6:bf:7e:7b:98:8a:81:44:2d:74: 8a:aa:72:aa:2a:ad:f4:5b:7e:54:48:33:b2:c8:39: fe:c9:3a:bc:ea:89:1d:87:5d:68:af:0b:0c:e2:27: df:80:f3:cd:f7:bc:a0:a8:b7:92:a3:17:9d:7b:8a: 99:d1:f9:77:37:49:50:ed:a8:77:9f:65:00:8d:4c: 0e:53:45:d8:19:a1:6f:5c:cd:70:e7:59:4b:0c:98: dc:5a:ce:2b:d1:d9:b2:91:c8:cb:bd:73:42:c8:07: 66:f4:a6:1b:9e:09:dd:33:77:8f:0c:88:9e:13:9c: b3:4f:c8:a0:25:fd:46:a3:f0:cb:bd:95:af:0d:64: 50:bc:3f:0e:53:7e:fd:2c:e0:ea:78:cc:aa:ed:d4: 69:8a:08:30:00:0c:7d:d1:08:d6:f9:71:e3:78:e1: 41:b1:41:d3:3f:c6:7d:61:9f:7c:6c:cb:55:11:a2: 39:7e:aa:8a:17:ef:4e:ea:c0:22:d9:87:38:ed:67: d6:7e:05:29:11:c5:e9:2d:c5:5c:78:89:af:eb:6e: 19:48:60:09:30:a5:08:2e:ba:9f:4a:27:55:5c:3c: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:66:0B:13:3F:4B:84:D8:18:62:81:C4:91:6C:F0:8D:E8:2B:74 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a6:63:a4:20:7b:db:31:3c:23:58:56:e4:30:ae:a7:a8:2b: 34:bb:ce:11:66:b3:57:b4:e8:66:1d:71:1b:d6:b9:a7:0f:4a: c2:5e:f2:28:42:2a:f9:af:ba:0e:96:48:05:9f:2b:99:b7:64: ad:2a:08:e4:d8:7f:f0:07:c2:00:8e:7c:73:a6:03:72:af:90: f9:01:22:64:25:d6:2b:cb:27:a6:68:bf:a9:38:bd:54:7e:73: 38:f3:96:01:3e:91:56:c2:35:0b:62:f3:4d:54:5b:46:6c:4c: 5b:ba:cd:b2:e5:10:31:ce:0a:af:e6:a7:5f:d6:b3:a7:84:86: ef:dd:ed:b9:fd:31:5e:bd:4e:4e:1d:15:a4:f4:35:60:59:8a: 5f:f6:78:15:b0:eb:5f:7b:f5:af:aa:6a:06:4f:bc:be:32:ec: bf:e7:d4:e4:0f:ab:36:cb:65:f0:b6:24:44:4e:02:c0:47:9e: 16:d7:7b:a6:61:63:ef:9f:50:c3:4e:6c:34:9f:52:df:72:fa: 26:e8:38:1d:8d:95:18:e9:e7:ff:45:50:7d:d0:b4:1e:42:c3: 15:0b:2c:13:8b:c9:eb:bc:ad:bd:96:22:43:6e:8a:53:6f:7c: 7d:19:14:6e:98:f7:1d:6b:f7:e3:db:a7:f2:46:45:6b:cb:00: f5:9d:6b:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4JOSgV0PwYJFZHvMVmhNnHWqVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTEyMDIxODM2MThaFw0yNTEyMDYwNjExMThaMDMxMTAvBgNV BAMTKDhCMjA2NjBCMTMzRjRCODREODE4NjI4MUM0OTE2Q0YwOERFODJCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkp1hFYSzMk4d6oO0XegurjT6j YVvSrEUpfdJMuuTBv9jzxr9+e5iKgUQtdIqqcqoqrfRbflRIM7LIOf7JOrzqiR2H XWivCwziJ9+A8833vKCot5KjF517ipnR+Xc3SVDtqHefZQCNTA5TRdgZoW9czXDn WUsMmNxazivR2bKRyMu9c0LIB2b0phueCd0zd48MiJ4TnLNPyKAl/Uaj8Mu9la8N ZFC8Pw5Tfv0s4Op4zKrt1GmKCDAADH3RCNb5ceN44UGxQdM/xn1hn3xsy1URojl+ qooX707qwCLZhzjtZ9Z+BSkRxektxVx4ia/rbhlIYAkwpQguup9KJ1VcPGrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiyBmCxM/S4TYGGKBxJFs8I3oK3QwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6mY6Qge9sxPCNYVuQwrqeoKzS7zhFms1e0 6GYdcRvWuacPSsJe8ihCKvmvug6WSAWfK5m3ZK0qCOTYf/AHwgCOfHOmA3KvkPkB ImQl1ivLJ6Zov6k4vVR+czjzlgE+kVbCNQti801UW0ZsTFu6zbLlEDHOCq/mp1/W s6eEhu/d7bn9MV69Tk4dFaT0NWBZil/2eBWw61979a+qagZPvL4y7L/n1OQPqzbL ZfC2JEROAsBHnhbXe6ZhY++fUMNObDSfUt9y+iboOB2NlRjp5/9FUH3QtB5CwxUL LBOLyeu8rb2WIkNuilNvfH0ZFG6Y9x1r9+Pbp/JGRWvLAPWda1o= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:34 2025 by rpki-client