This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: 1dn/Lim1WXpG8WlvtyK9UAruZ9/uwtNZGJsYSL1nu30= Subject key identifier: C8:50:BA:7E:68:5E:1A:47:DC:AF:9E:F0:F2:B9:6C:5A:13:A6:B5:0A Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 3CA3A225E336FF5859005EC10FF746983D0DD471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 016B Signing time: Wed 03 Dec 2025 11:20:43 +0000 Manifest this update: Wed 03 Dec 2025 11:15:43 +0000 Manifest next update: Sat 06 Dec 2025 19:42:43 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: E1OTv+axZ6vDeWtBjkvIb9Q4zDWb0lDPw0ul7d0l8Lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a3:a2:25:e3:36:ff:58:59:00:5e:c1:0f:f7:46:98:3d:0d:d4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Dec 3 11:15:43 2025 GMT Not After : Dec 6 19:42:43 2025 GMT Subject: CN=C850BA7E685E1A47DCAF9EF0F2B96C5A13A6B50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:1b:36:34:0c:4b:2c:f4:77:40:b9:2d:2b: 8a:37:c5:ec:a1:14:6c:c8:90:5b:16:5a:fc:24:d9: 14:ac:8d:21:bc:12:c2:22:1e:b9:5f:7a:36:bf:66: 5b:86:07:4b:14:26:6e:67:ae:da:37:be:05:46:7e: c2:60:5c:1a:2b:f3:7d:81:12:77:81:91:13:96:3f: 30:ab:7d:e0:9f:34:58:74:c4:52:f0:d1:49:cd:03: cd:26:3a:81:cc:af:51:1f:03:d7:59:35:2e:2a:ee: 31:77:6a:f6:2d:f8:1a:a5:f6:6b:0a:d6:4c:16:88: 57:6a:f0:8f:fd:37:d0:e7:b6:47:18:17:33:4c:b5: c4:be:b6:c4:c7:c7:31:c7:77:71:e3:20:aa:e2:f9: 4c:cc:77:23:99:63:c7:3b:4e:c9:70:ef:2f:5c:07: a6:31:02:78:ff:33:6c:13:a1:1f:62:98:2b:58:39: 61:4b:46:9f:70:9f:c9:ea:4c:2a:8c:0a:b1:3f:33: fb:55:93:be:2b:65:f2:80:11:0d:e2:ce:68:58:7a: 77:b2:32:44:1a:79:68:11:4e:39:c9:11:92:c7:aa: b1:38:dd:60:1e:29:f9:ae:82:93:68:f6:4b:d5:98: 1f:d2:9d:9f:b1:1b:f0:ef:60:e2:8a:b4:d1:c2:c8: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:BA:7E:68:5E:1A:47:DC:AF:9E:F0:F2:B9:6C:5A:13:A6:B5:0A X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:54:1d:7c:e7:de:1b:db:84:e8:7d:4c:52:62:76:d9:84:70: b7:eb:4c:21:86:2e:7d:94:91:ea:7c:e7:94:93:35:da:26:ca: ee:4e:e7:e2:67:7d:c9:91:0b:0c:e2:09:89:6d:04:9d:42:0b: 74:3c:51:c5:1d:4d:2f:97:3f:98:74:a0:d1:30:4d:47:12:92: d0:eb:ff:73:aa:2b:04:a7:89:81:c4:72:96:42:74:22:72:c8: 2d:36:59:d1:3b:65:e9:6e:ed:3c:63:c8:71:70:a7:86:63:fb: 9c:9f:1f:bd:fe:c6:46:f7:d6:f1:f3:9d:3d:44:58:15:4a:ee: a5:74:02:a3:e3:78:a3:66:86:96:82:a5:fd:af:1f:eb:57:47: ba:b3:f9:5b:05:97:35:eb:63:cd:03:b2:26:e2:b8:41:c1:a4: be:61:88:69:eb:ef:5b:df:69:b5:07:d6:83:ab:8e:64:96:3f: cd:d2:16:54:99:b1:5c:10:92:22:86:c8:d2:ab:d8:12:a9:f3: ed:21:b0:16:95:85:b7:73:47:eb:97:16:93:1e:c0:91:25:f8: 26:4a:20:9e:c7:11:af:24:c2:b9:6e:8c:c0:86:2b:0d:2f:b2: 8a:dc:34:c5:3c:c1:10:88:d4:96:21:27:ef:f3:2d:54:40:d8: ad:04:9f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKOiJeM2/1hZAF7BD/dGmD0N1HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTEyMDMxMTE1NDNaFw0yNTEyMDYxOTQyNDNaMDMxMTAvBgNV BAMTKEM4NTBCQTdFNjg1RTFBNDdEQ0FGOUVGMEYyQjk2QzVBMTNBNkI1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65Rs2NAxLLPR3QLktK4o3xeyh FGzIkFsWWvwk2RSsjSG8EsIiHrlfeja/ZluGB0sUJm5nrto3vgVGfsJgXBor832B EneBkROWPzCrfeCfNFh0xFLw0UnNA80mOoHMr1EfA9dZNS4q7jF3avYt+Bql9msK 1kwWiFdq8I/9N9DntkcYFzNMtcS+tsTHxzHHd3HjIKri+UzMdyOZY8c7Tslw7y9c B6YxAnj/M2wToR9imCtYOWFLRp9wn8nqTCqMCrE/M/tVk74rZfKAEQ3izmhYeney MkQaeWgRTjnJEZLHqrE43WAeKfmugpNo9kvVmB/SnZ+xG/DvYOKKtNHCyGgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFC6fmheGkfcr57w8rlsWhOmtQowHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApUHXzn3hvbhOh9TFJidtmEcLfrTCGGLn2U kep855STNdomyu5O5+JnfcmRCwziCYltBJ1CC3Q8UcUdTS+XP5h0oNEwTUcSktDr /3OqKwSniYHEcpZCdCJyyC02WdE7Zelu7TxjyHFwp4Zj+5yfH73+xkb31vHznT1E WBVK7qV0AqPjeKNmhpaCpf2vH+tXR7qz+VsFlzXrY80DsibiuEHBpL5hiGnr71vf abUH1oOrjmSWP83SFlSZsVwQkiKGyNKr2BKp8+0hsBaVhbdzR+uXFpMewJEl+CZK IJ7HEa8kwrlujMCGKw0vsorcNMU8wRCI1JYhJ+/zLVRA2K0En0E= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client