This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: AqG3Ibay2Zhv87wl1lrbKQlNQ9u2Le9bUynuG4o6ZpQ= Subject key identifier: DC:08:02:29:57:0D:A7:2A:00:38:A8:73:07:0A:79:22:A0:CF:72:B9 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 20C3CB6B31C8F9235DE510D6C00041E8B78B3688 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 22:20:39 +0000 Manifest this update: Thu 18 Dec 2025 22:15:39 +0000 Manifest next update: Mon 22 Dec 2025 10:06:39 +0000 Files and hashes: 1: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: dJSO3MqGQ2XVBiWfrcrZwxot3+ASHQiFIUlT+RqH+LY=) 2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) 3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: iw3Cyi1VQGI3NXc1Y1g7ynB6mTlTdwiAa9nkvlJ8yLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c3:cb:6b:31:c8:f9:23:5d:e5:10:d6:c0:00:41:e8:b7:8b:36:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Dec 18 22:15:39 2025 GMT Not After : Dec 22 10:06:39 2025 GMT Subject: CN=DC080229570DA72A0038A873070A7922A0CF72B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:2c:b2:ce:99:18:1f:29:a7:1c:81:14:48: 2f:46:b5:21:57:21:df:84:61:2a:71:ca:af:47:43: c5:90:8d:06:f9:0c:85:59:97:47:9c:46:44:b5:7a: 51:04:b2:18:86:7f:d1:ca:0e:74:19:83:1f:92:66: 1f:93:f2:df:22:4f:b7:a0:bd:84:0e:f9:c5:3c:9a: fd:f2:2e:0c:d2:6e:8a:04:25:fb:8d:db:18:4f:7d: 5a:a8:51:a8:10:e4:20:bb:76:51:eb:ea:6d:5e:ff: bc:16:44:60:eb:80:8f:60:55:8b:4b:6c:e2:4c:e0: 2d:7c:02:4a:73:3f:8b:47:17:7c:b1:b7:79:79:1a: 02:73:95:7b:9d:f2:9a:53:c8:e0:4c:7b:e5:70:1e: 7e:1d:6c:22:1f:b2:ff:65:98:8a:ac:c1:77:9a:02: fe:3f:fe:2d:63:10:ac:fc:a4:0c:b2:d6:ec:8d:ad: f4:af:61:31:25:eb:d9:a8:7e:da:75:e7:0a:3f:56: 01:e0:f2:98:ca:23:11:5e:8b:59:8e:d6:72:fe:fc: 5e:f5:10:77:45:be:44:c1:d6:d0:b7:51:0a:38:37: cc:6a:bd:53:bb:d0:ba:bc:d6:bf:25:f6:30:1c:47: 02:11:f9:fa:8b:65:74:a4:d3:a5:45:0c:65:56:83: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:08:02:29:57:0D:A7:2A:00:38:A8:73:07:0A:79:22:A0:CF:72:B9 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b0:c8:c2:02:94:24:e6:75:ed:a9:ad:fe:e4:30:da:38:52: da:d4:0f:f6:43:1a:18:72:09:ef:3f:0e:d4:2f:9b:dd:61:73: 0a:f9:36:61:fd:dc:a2:9c:76:80:2d:bf:b2:07:d8:a9:22:20: 89:13:c6:ea:c3:a8:0d:48:12:92:60:08:4b:3e:38:fe:91:64: 50:6c:b1:56:5f:30:4e:d5:e4:67:be:7a:85:41:5c:98:71:91: bd:82:e8:d6:42:36:93:cd:c6:00:67:f9:21:4a:1c:58:69:48: 09:17:b9:b6:f0:1c:5c:96:fe:e2:9a:d8:f6:1f:d4:44:91:b5: 81:27:f4:2c:28:14:cf:ac:d6:bb:c8:ff:20:00:23:7e:db:a5: 96:96:ad:9a:5d:ba:0c:f1:bf:f3:f2:9b:ff:27:b0:34:a6:7a: 49:80:bf:47:85:7a:00:a2:76:62:e4:b7:94:6e:18:d1:4a:e9: 26:9f:e9:9b:07:0a:43:23:f7:43:42:55:35:d8:14:70:ce:df: be:a8:8c:ce:d3:e0:d7:f4:b4:1e:7a:17:70:cd:e3:ff:7f:54: bf:44:b3:32:7d:f0:d0:f3:ca:76:84:4a:60:c2:53:63:ec:e5: c3:49:85:09:56:9d:7d:44:3a:b4:26:f7:0a:99:30:f1:ea:c7: ee:b5:a1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMPLazHI+SNd5RDWwABB6LeLNogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTEyMTgyMjE1MzlaFw0yNTEyMjIxMDA2MzlaMDMxMTAvBgNV BAMTKERDMDgwMjI5NTcwREE3MkEwMDM4QTg3MzA3MEE3OTIyQTBDRjcyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQiyyzpkYHymnHIEUSC9GtSFX Id+EYSpxyq9HQ8WQjQb5DIVZl0ecRkS1elEEshiGf9HKDnQZgx+SZh+T8t8iT7eg vYQO+cU8mv3yLgzSbooEJfuN2xhPfVqoUagQ5CC7dlHr6m1e/7wWRGDrgI9gVYtL bOJM4C18AkpzP4tHF3yxt3l5GgJzlXud8ppTyOBMe+VwHn4dbCIfsv9lmIqswXea Av4//i1jEKz8pAyy1uyNrfSvYTEl69moftp15wo/VgHg8pjKIxFei1mO1nL+/F71 EHdFvkTB1tC3UQo4N8xqvVO70Lq81r8l9jAcRwIR+fqLZXSk06VFDGVWg3dFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3AgCKVcNpyoAOKhzBwp5IqDPcrkwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6wyMIClCTmde2prf7kMNo4UtrUD/ZDGhhy Ce8/DtQvm91hcwr5NmH93KKcdoAtv7IH2KkiIIkTxurDqA1IEpJgCEs+OP6RZFBs sVZfME7V5Ge+eoVBXJhxkb2C6NZCNpPNxgBn+SFKHFhpSAkXubbwHFyW/uKa2PYf 1ESRtYEn9CwoFM+s1rvI/yAAI37bpZaWrZpdugzxv/Pym/8nsDSmekmAv0eFegCi dmLkt5RuGNFK6Saf6ZsHCkMj90NCVTXYFHDO376ojM7T4Nf0tB56F3DN4/9/VL9E szJ98NDzynaESmDCU2Ps5cNJhQlWnX1EOrQm9wqZMPHqx+61oSg= -----END CERTIFICATE-----Generated at Fri Dec 19 07:22:23 2025 by rpki-client