This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: gP2ufj43s8SPEpDzkJKtj2++WLIY6E1D8H/8GHMOR7o= Subject key identifier: 08:BB:28:E6:A5:1D:15:21:41:63:8E:71:BF:C9:78:F4:8A:FA:42:CD Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 1D204499263D7D6B4751C651FB0162029E2B8EAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 0198 Signing time: Mon 01 Dec 2025 12:22:04 +0000 Manifest this update: Mon 01 Dec 2025 12:17:04 +0000 Manifest next update: Thu 04 Dec 2025 23:44:04 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 2: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: 2MbaR2QcEmLB9YTlCa9r4xc3rDIQbyU7O1gNFhq1u0A=) 3: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:20:44:99:26:3d:7d:6b:47:51:c6:51:fb:01:62:02:9e:2b:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Dec 1 12:17:04 2025 GMT Not After : Dec 4 23:44:04 2025 GMT Subject: CN=08BB28E6A51D152141638E71BFC978F48AFA42CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:5d:02:53:18:63:90:7d:8b:e7:17:f8:fd: 4e:56:ed:cd:3b:63:b9:5e:71:7b:94:21:c4:d5:8e: dd:16:f8:9f:29:ab:d3:40:47:41:30:e0:ac:de:54: c8:20:95:af:ba:80:75:d1:13:6b:de:53:c8:44:bd: 1c:c6:7a:cd:8d:52:1f:a0:34:ef:65:9b:a3:da:16: 9c:13:0f:e2:14:f5:77:26:35:de:bb:58:f1:fd:37: d1:df:a1:8a:87:f8:00:92:51:5b:8c:e1:f5:96:e8: a2:5a:47:e1:f3:04:7f:32:d9:f8:4f:58:85:b1:b4: c3:af:42:ee:d8:35:01:37:0e:70:0a:98:91:8e:d5: d1:f5:d8:d8:b0:a8:b0:02:6b:fe:76:32:80:12:d3: 72:4f:d7:71:cf:3b:48:b6:dd:da:1e:c3:03:a3:26: 03:df:09:bb:0b:c0:40:0f:e1:52:ad:fe:17:60:30: d2:02:0f:81:52:25:a3:ff:ed:c4:69:0c:1f:8b:b3: 88:5d:a5:33:66:a6:a2:f1:dc:84:9e:4b:d8:3e:b3: f3:05:15:43:17:c8:bf:b7:7b:97:ce:52:52:53:63: 19:47:7b:b7:fe:6e:91:a9:35:e5:0e:9d:92:9d:bc: c3:70:8d:57:30:0f:ba:5b:4c:9b:e6:88:95:2c:48: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:28:E6:A5:1D:15:21:41:63:8E:71:BF:C9:78:F4:8A:FA:42:CD X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d2:32:ae:62:2b:37:1e:23:6c:ff:cb:81:ac:b6:fb:da:11: 9c:57:a2:7b:56:4c:21:74:eb:af:65:80:9d:94:3d:96:9c:d5: fe:e1:42:e3:5a:0a:10:27:10:f6:c0:67:72:01:2f:cd:15:09: cf:22:7d:6f:a8:ad:82:5c:f5:89:3a:0f:2e:3d:2e:fd:c2:0c: 1a:de:fb:d4:6f:11:4d:cb:6b:60:45:59:a3:8e:fb:37:53:7b: 32:e3:b3:8c:94:32:ae:7f:c7:58:c6:a0:be:dd:8c:b3:f7:28: a2:7f:99:bc:47:ce:1b:89:12:af:ce:fe:0e:66:4a:91:58:02: d0:45:99:26:d1:ee:ee:ac:c2:0d:c6:b1:33:77:52:69:9e:39: f7:57:9c:fe:fd:7b:bb:9b:d2:a8:d9:a4:48:5d:72:4d:16:69: 96:db:5e:fe:a1:bd:bf:33:10:ab:11:f9:02:1a:73:33:9f:a4: c0:fb:c3:4f:ba:39:5c:16:2f:a4:62:f1:6f:80:c1:77:b0:36: 49:b1:ef:41:d9:61:12:e2:f7:8f:6f:f2:57:90:c9:7c:f2:8c: 06:9c:b9:aa:03:4a:ee:b1:77:7e:05:0f:ae:19:a1:b9:d1:34: 1b:c9:9c:76:88:b3:6e:b2:6b:ea:a1:bd:58:25:ce:52:75:2c: e0:e0:77:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSBEmSY9fWtHUcZR+wFiAp4rjqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTEyMDExMjE3MDRaFw0yNTEyMDQyMzQ0MDRaMDMxMTAvBgNV BAMTKDA4QkIyOEU2QTUxRDE1MjE0MTYzOEU3MUJGQzk3OEY0OEFGQTQyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEV0CUxhjkH2L5xf4/U5W7c07 Y7lecXuUIcTVjt0W+J8pq9NAR0Ew4KzeVMggla+6gHXRE2veU8hEvRzGes2NUh+g NO9lm6PaFpwTD+IU9XcmNd67WPH9N9HfoYqH+ACSUVuM4fWW6KJaR+HzBH8y2fhP WIWxtMOvQu7YNQE3DnAKmJGO1dH12NiwqLACa/52MoAS03JP13HPO0i23doewwOj JgPfCbsLwEAP4VKt/hdgMNICD4FSJaP/7cRpDB+Ls4hdpTNmpqLx3ISeS9g+s/MF FUMXyL+3e5fOUlJTYxlHe7f+bpGpNeUOnZKdvMNwjVcwD7pbTJvmiJUsSCwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLso5qUdFSFBY45xv8l49Ir6Qs0wHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3SMq5iKzceI2z/y4GstvvaEZxXontWTCF0 669lgJ2UPZac1f7hQuNaChAnEPbAZ3IBL80VCc8ifW+orYJc9Yk6Dy49Lv3CDBre +9RvEU3La2BFWaOO+zdTezLjs4yUMq5/x1jGoL7djLP3KKJ/mbxHzhuJEq/O/g5m SpFYAtBFmSbR7u6swg3GsTN3UmmeOfdXnP79e7ub0qjZpEhdck0WaZbbXv6hvb8z EKsR+QIaczOfpMD7w0+6OVwWL6Ri8W+AwXewNkmx70HZYRLi949v8leQyXzyjAac uaoDSu6xd34FD64ZobnRNBvJnHaIs26ya+qhvVglzlJ1LODgd0Q= -----END CERTIFICATE-----Generated at Wed Dec 3 16:05:18 2025 by rpki-client