This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: Z/QOllFqPAsfWReul9oUz58VSHX+7kmNPKvKStr2sA8= Subject key identifier: FB:4D:37:75:7B:05:57:BA:9B:50:AB:3C:EB:0A:23:88:CD:00:CE:75 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 3574F7EE0A24711FA1FE95071E91AB7156C3B6BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: FE Signing time: Sat 13 Dec 2025 10:22:05 +0000 Manifest this update: Sat 13 Dec 2025 10:17:05 +0000 Manifest next update: Tue 16 Dec 2025 10:26:05 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: eWzKhNGKqT8ZfcFsMhsYXn1TZdqebI/4FK/d23Hzzh4=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 10:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:74:f7:ee:0a:24:71:1f:a1:fe:95:07:1e:91:ab:71:56:c3:b6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Dec 13 10:17:05 2025 GMT Not After : Dec 16 10:26:05 2025 GMT Subject: CN=FB4D37757B0557BA9B50AB3CEB0A2388CD00CE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:ad:e6:4c:7f:7d:39:7d:d9:be:08:6e:5f: c3:5a:7b:87:02:0a:43:44:fa:25:b6:83:38:14:da: fe:01:6f:ee:8a:eb:33:7f:46:68:d4:1a:71:22:6a: d0:e3:67:3f:1a:69:81:ca:32:17:d4:10:57:93:04: 32:82:04:3e:6c:51:27:10:03:0b:28:63:5a:7d:8c: e1:ca:5f:31:ff:b6:52:d8:d8:7a:6a:99:51:db:f6: ef:c2:3d:bb:be:62:de:51:78:a0:52:f8:58:5a:d2: 62:1e:ca:da:56:f8:d0:8d:83:a0:67:5d:77:1b:b6: aa:eb:02:6a:c8:e3:1d:7e:3a:2d:f0:88:92:eb:87: f8:c0:9d:2b:33:6e:ae:5d:4e:3f:16:96:58:71:0f: 75:24:28:74:d8:62:84:6b:9f:1c:4e:ff:5f:99:7a: ab:68:56:24:cd:08:5e:41:d2:a5:df:ce:7a:a2:4d: 26:f3:cd:dc:82:d5:cf:92:99:b7:aa:fb:71:6d:01: 42:55:d4:72:58:9b:c2:ad:98:11:4b:2b:40:7d:81: bc:1c:31:c4:2a:6f:98:21:9c:ae:a0:a6:c8:fd:d5: 70:e8:d2:88:1a:4a:8e:a7:fc:89:34:f9:8d:fb:4c: 40:b0:cd:63:12:49:8c:ba:54:d2:e5:b4:2a:77:16: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4D:37:75:7B:05:57:BA:9B:50:AB:3C:EB:0A:23:88:CD:00:CE:75 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:cc:eb:48:82:9c:93:50:cf:9d:b0:65:06:a3:cc:d8:d7: 20:26:dd:dd:05:71:25:ce:e4:30:78:0e:af:68:86:b0:fb:50: a0:e8:5e:2a:15:ce:ba:3e:30:07:a8:c5:6d:42:42:04:88:dc: 24:e1:a0:eb:71:94:3d:5b:cb:b4:12:bf:da:06:e2:39:2b:8d: 33:a1:d1:5a:3f:f6:46:bb:52:1d:9a:34:cb:c2:7a:16:1f:2b: 66:3b:4f:64:06:7f:a8:12:ce:ac:b3:5d:ac:d5:14:cb:fd:cb: f2:f7:5b:bf:c9:da:b7:5e:1f:9a:55:a3:74:43:f3:1e:25:dc: da:5f:6e:20:b2:95:c8:10:66:80:d2:34:8c:a1:23:5c:3e:b7: 37:f3:5d:19:95:13:ba:eb:4e:7d:38:a8:ac:fd:60:cb:d1:0c: 13:b3:22:ac:6f:5b:6f:9d:43:ad:5d:ad:42:4f:0a:db:4c:32: d7:24:05:0f:a5:c3:e9:89:68:f9:64:d8:5c:2b:b1:7b:73:85: 8f:34:cd:d0:1a:40:7a:12:0c:90:0a:a5:54:0e:74:c4:92:d1: a3:ec:e0:52:41:86:49:4c:ca:ba:9d:9a:f1:44:e3:f5:f8:b3: 9a:16:d9:19:21:3a:97:95:f0:b9:d0:aa:6d:8e:4d:73:79:82: 72:0a:58:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXT37gokcR+h/pUHHpGrcVbDtr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTEyMTMxMDE3MDVaFw0yNTEyMTYxMDI2MDVaMDMxMTAvBgNV BAMTKEZCNEQzNzc1N0IwNTU3QkE5QjUwQUIzQ0VCMEEyMzg4Q0QwMENFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sK3mTH99OX3ZvghuX8Nae4cC CkNE+iW2gzgU2v4Bb+6K6zN/RmjUGnEiatDjZz8aaYHKMhfUEFeTBDKCBD5sUScQ AwsoY1p9jOHKXzH/tlLY2HpqmVHb9u/CPbu+Yt5ReKBS+Fha0mIeytpW+NCNg6Bn XXcbtqrrAmrI4x1+Oi3wiJLrh/jAnSszbq5dTj8WllhxD3UkKHTYYoRrnxxO/1+Z eqtoViTNCF5B0qXfznqiTSbzzdyC1c+Smbeq+3FtAUJV1HJYm8KtmBFLK0B9gbwc McQqb5ghnK6gpsj91XDo0ogaSo6n/Ik0+Y37TECwzWMSSYy6VNLltCp3FvQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+003dXsFV7qbUKs86wojiM0AznUwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdAzOtIgpyTUM+dsGUGo8zY1yAm3d0FcSXO 5DB4Dq9ohrD7UKDoXioVzro+MAeoxW1CQgSI3CThoOtxlD1by7QSv9oG4jkrjTOh 0Vo/9ka7Uh2aNMvCehYfK2Y7T2QGf6gSzqyzXazVFMv9y/L3W7/J2rdeH5pVo3RD 8x4l3NpfbiCylcgQZoDSNIyhI1w+tzfzXRmVE7rrTn04qKz9YMvRDBOzIqxvW2+d Q61drUJPCttMMtckBQ+lw+mJaPlk2FwrsXtzhY80zdAaQHoSDJAKpVQOdMSS0aPs 4FJBhklMyrqdmvFE4/X4s5oW2RkhOpeV8LnQqm2OTXN5gnIKWNQ= -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:27 2025 by rpki-client