This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: cbKj9QdP6JDXiqLxDzCtC+5A8sY7AZDbELPDbxxPNmE= Subject key identifier: 92:AE:8D:59:78:D4:E4:48:3C:F7:FA:E5:8D:F6:ED:9B:C8:35:C6:6F Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 27CEA71ADD10B026CF5470D1621D7280E45D9B68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: F9 Signing time: Tue 02 Dec 2025 14:54:13 +0000 Manifest this update: Tue 02 Dec 2025 14:49:13 +0000 Manifest next update: Fri 05 Dec 2025 22:27:13 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: eQiabtkqLu8WTMwTemd74GNHKNMQw6rdxkCz5haK7Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ce:a7:1a:dd:10:b0:26:cf:54:70:d1:62:1d:72:80:e4:5d:9b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Dec 2 14:49:13 2025 GMT Not After : Dec 5 22:27:13 2025 GMT Subject: CN=92AE8D5978D4E4483CF7FAE58DF6ED9BC835C66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:54:dd:4e:ba:02:46:4d:8d:d5:ea:39:b7: ad:e4:c1:d9:e3:8e:72:df:de:25:4f:6a:f9:66:f9: ae:dd:03:4d:06:ff:ef:44:64:54:8a:5a:68:bd:48: 66:46:a2:6c:cf:0a:cd:26:b1:d4:d9:07:9a:dc:b2: 79:95:72:91:70:15:8b:e0:95:12:e6:e1:e5:d3:07: 1f:55:c8:59:fa:2d:89:9c:11:fe:9c:a9:65:91:84: 4e:f4:bd:61:6e:79:bd:fa:3c:1a:36:92:58:48:6d: 41:e9:ed:b5:ca:bd:ff:d5:f1:b9:e9:60:ef:c2:d4: 28:42:0d:b3:a4:a5:a6:85:74:20:24:cb:4e:ea:9f: 1f:0c:0c:6a:bd:cc:0d:f3:d5:1a:a8:ae:20:44:48: d6:62:09:cc:39:48:20:49:52:80:37:f7:00:0e:19: 5e:52:62:b8:85:64:9b:52:9f:df:77:2b:e3:f0:a0: 83:d4:79:76:c4:f2:85:2f:3c:d7:cf:59:c4:a6:ad: 8e:6d:9d:a1:8b:d3:fd:8c:35:4a:aa:20:59:bb:3a: eb:47:d3:b9:09:d7:71:93:31:57:4d:dc:4c:b8:73: aa:ad:67:67:62:f1:9a:3b:eb:e4:97:1e:7f:b8:bc: ec:1b:0e:24:a5:bb:2f:43:33:8b:eb:a5:88:18:a7: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:8D:59:78:D4:E4:48:3C:F7:FA:E5:8D:F6:ED:9B:C8:35:C6:6F X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:8d:9a:41:9d:fc:ab:a5:28:f8:d9:e0:72:f8:f3:06:65: 93:68:74:b6:28:a0:b2:d9:f7:d1:9d:b9:c7:4c:a8:8f:59:56: a5:4e:4e:7e:db:7a:61:df:be:29:ca:86:c4:2e:69:a8:26:f3: 80:7b:36:90:da:77:92:e1:27:c3:b3:7b:68:9e:d3:a2:40:8f: d3:a4:63:65:83:54:16:53:e4:4e:de:d1:86:ba:ea:f6:9f:25: 96:69:42:6f:7a:af:52:a1:be:bb:25:35:78:07:3c:59:61:ec: 73:39:4b:39:26:13:d0:c7:91:ee:fc:80:f4:c0:8e:c5:4e:01: ff:f8:71:38:b7:65:7c:79:c2:c3:e3:01:3a:29:57:70:cb:a6: 6f:dd:de:a4:b9:2e:c7:e8:40:2b:53:38:0c:45:05:10:28:09: 4b:77:2f:e7:6a:8d:82:a3:c3:2f:c7:c7:ab:50:14:24:6c:0f: 3e:4b:98:02:bf:c5:f8:70:7a:02:e4:7f:24:16:da:ba:4d:09: 59:3f:a4:8f:85:9f:10:23:9e:d4:6c:1d:8b:c1:ff:e5:04:ba: 7d:3a:a1:e7:20:2e:cf:86:82:7f:f8:17:1c:7f:1a:9d:b9:fb: fd:ce:2b:b3:c3:5f:26:1d:50:35:20:94:5b:36:d4:db:97:f0: 8a:f8:95:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ86nGt0QsCbPVHDRYh1ygORdm2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTEyMDIxNDQ5MTNaFw0yNTEyMDUyMjI3MTNaMDMxMTAvBgNV BAMTKDkyQUU4RDU5NzhENEU0NDgzQ0Y3RkFFNThERjZFRDlCQzgzNUM2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4lTdTroCRk2N1eo5t63kwdnj jnLf3iVPavlm+a7dA00G/+9EZFSKWmi9SGZGomzPCs0msdTZB5rcsnmVcpFwFYvg lRLm4eXTBx9VyFn6LYmcEf6cqWWRhE70vWFueb36PBo2klhIbUHp7bXKvf/V8bnp YO/C1ChCDbOkpaaFdCAky07qnx8MDGq9zA3z1RqoriBESNZiCcw5SCBJUoA39wAO GV5SYriFZJtSn993K+PwoIPUeXbE8oUvPNfPWcSmrY5tnaGL0/2MNUqqIFm7OutH 07kJ13GTMVdN3Ey4c6qtZ2di8Zo76+SXHn+4vOwbDiSluy9DM4vrpYgYp1xXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq6NWXjU5Eg89/rljfbtm8g1xm8wHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA2jZpBnfyrpSj42eBy+PMGZZNodLYooLLZ 99GducdMqI9ZVqVOTn7bemHfvinKhsQuaagm84B7NpDad5LhJ8Oze2ie06JAj9Ok Y2WDVBZT5E7e0Ya66vafJZZpQm96r1KhvrslNXgHPFlh7HM5SzkmE9DHke78gPTA jsVOAf/4cTi3ZXx5wsPjATopV3DLpm/d3qS5LsfoQCtTOAxFBRAoCUt3L+dqjYKj wy/Hx6tQFCRsDz5LmAK/xfhwegLkfyQW2rpNCVk/pI+FnxAjntRsHYvB/+UEun06 oecgLs+Ggn/4Fxx/Gp25+/3OK7PDXyYdUDUglFs21NuX8Ir4lfQ= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:53 2025 by rpki-client