This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: IDri2Zc2mHJjNIqygz2xXw9Y912anNV7/CKpTb0Z1VE= Subject key identifier: 2A:36:17:8C:D8:C8:A9:8C:5E:33:F4:7F:A4:43:3D:BD:CA:B5:11:D3 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 292E40BE089C1EF4C7C2901B03AC1C9F84E19495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 0171 Signing time: Wed 17 Dec 2025 00:20:42 +0000 Manifest this update: Wed 17 Dec 2025 00:15:42 +0000 Manifest next update: Sat 20 Dec 2025 06:29:42 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: HYmDxNO43sOdPVnsi0gE7AaqPSu6z3MV767HTKFH72I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2e:40:be:08:9c:1e:f4:c7:c2:90:1b:03:ac:1c:9f:84:e1:94:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Dec 17 00:15:42 2025 GMT Not After : Dec 20 06:29:42 2025 GMT Subject: CN=2A36178CD8C8A98C5E33F47FA4433DBDCAB511D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:4e:2a:df:92:ff:27:3f:18:10:cb:9c:23: fb:ce:9f:6b:c0:f6:a9:04:47:bb:3e:c2:39:8e:01: 28:1c:24:a2:0b:bc:c6:16:77:3b:61:9d:fe:df:5c: af:66:9b:ae:36:84:c1:f6:07:73:4d:b7:34:4c:35: 8e:d8:05:5f:21:cd:94:79:c8:74:59:2a:5f:fb:dd: 12:2c:d4:7e:e4:7c:28:d1:8d:e6:5b:8b:53:4a:26: 49:09:f0:5d:bd:c4:e9:02:bb:fc:dc:d5:86:36:b5: 10:22:ea:71:f6:96:41:ec:5a:db:1f:a2:b2:5d:d5: f6:17:0b:de:72:59:04:36:e1:dc:1f:93:64:2e:0e: 03:b1:b2:be:ac:2b:35:84:9c:30:02:e1:50:0b:67: 75:12:71:c7:55:c1:06:a4:ad:4e:e3:63:d1:63:b7: 7b:03:c4:8c:e3:91:be:36:93:97:bc:d5:98:2a:86: ad:e2:46:52:65:40:14:0e:64:6b:c5:a7:eb:15:4e: 57:48:c8:5a:35:c1:8b:38:37:3d:49:b1:94:e5:ce: 09:fa:2a:1f:47:80:b6:32:aa:87:fd:28:56:0e:ab: 1f:82:75:e4:61:f3:4c:4f:b3:ef:0e:ad:0e:69:ef: 58:c6:fc:e4:7a:b3:1d:61:89:c3:bd:89:11:37:72: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:17:8C:D8:C8:A9:8C:5E:33:F4:7F:A4:43:3D:BD:CA:B5:11:D3 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:73:0a:6d:e3:85:15:86:90:47:64:0b:07:6d:9a:25:30:6c: d3:bc:58:18:a1:4b:79:db:98:3c:64:33:33:3a:d9:f4:8a:3c: 0e:cf:ff:c4:b0:c7:29:b2:c0:bb:a9:f3:11:8c:f9:22:c3:2a: 9a:3a:0e:aa:34:07:b2:dc:f2:4b:29:27:ce:44:ba:45:59:7b: a8:7c:fc:34:f3:2e:fb:74:5c:3a:da:c0:79:c2:6e:37:80:8d: c7:8c:eb:91:c8:0d:1f:b4:08:5f:83:73:3c:8e:f8:15:25:c9: 98:45:b7:c1:1c:13:44:ed:67:5c:55:fa:39:9e:bc:5a:13:a4: a9:db:b8:ac:69:bb:97:cf:af:9a:f3:5a:41:a7:8f:4a:d7:5d: f3:40:8e:9b:b7:36:6f:89:27:ab:f9:98:26:9b:74:45:8e:cd: 55:c4:07:b0:95:84:96:d3:2a:ba:39:1a:c6:7c:12:ac:66:59: 6b:4f:e5:fc:6f:59:d1:63:8e:87:51:fb:5b:97:f7:94:de:2d: 09:02:e0:d7:a0:c4:cd:be:3a:9a:e8:e1:b8:c2:81:18:fc:0a: d3:ce:81:4f:9b:1f:42:c4:02:05:b7:09:49:f4:e8:8f:2e:b5: cb:b7:0e:52:c8:43:75:3d:07:4a:2c:d3:e7:67:ae:31:2d:2d: 45:de:83:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKS5AvgicHvTHwpAbA6wcn4ThlJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTEyMTcwMDE1NDJaFw0yNTEyMjAwNjI5NDJaMDMxMTAvBgNV BAMTKDJBMzYxNzhDRDhDOEE5OEM1RTMzRjQ3RkE0NDMzREJEQ0FCNTExRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOU4q35L/Jz8YEMucI/vOn2vA 9qkER7s+wjmOASgcJKILvMYWdzthnf7fXK9mm642hMH2B3NNtzRMNY7YBV8hzZR5 yHRZKl/73RIs1H7kfCjRjeZbi1NKJkkJ8F29xOkCu/zc1YY2tRAi6nH2lkHsWtsf orJd1fYXC95yWQQ24dwfk2QuDgOxsr6sKzWEnDAC4VALZ3USccdVwQakrU7jY9Fj t3sDxIzjkb42k5e81Zgqhq3iRlJlQBQOZGvFp+sVTldIyFo1wYs4Nz1JsZTlzgn6 Kh9HgLYyqof9KFYOqx+CdeRh80xPs+8OrQ5p71jG/OR6sx1hicO9iRE3covHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjYXjNjIqYxeM/R/pEM9vcq1EdMwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1zCm3jhRWGkEdkCwdtmiUwbNO8WBihS3nb mDxkMzM62fSKPA7P/8SwxymywLup8xGM+SLDKpo6Dqo0B7Lc8kspJ85EukVZe6h8 /DTzLvt0XDrawHnCbjeAjceM65HIDR+0CF+DczyO+BUlyZhFt8EcE0TtZ1xV+jme vFoTpKnbuKxpu5fPr5rzWkGnj0rXXfNAjpu3Nm+JJ6v5mCabdEWOzVXEB7CVhJbT Kro5GsZ8EqxmWWtP5fxvWdFjjodR+1uX95TeLQkC4NegxM2+Opro4bjCgRj8CtPO gU+bH0LEAgW3CUn06I8utcu3DlLIQ3U9B0os0+dnrjEtLUXeg+8= -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:12 2025 by rpki-client