This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: i7oglOy0ZExhZ5lP9/StpT2IZHJW4Ikxi7sngzBa8So= Subject key identifier: C6:A9:CA:DC:51:BB:D8:C1:28:18:89:28:93:B4:22:7F:CE:5B:89:11 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 137635C75215B349608371CC9840892275206FB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 035A Signing time: Tue 02 Dec 2025 09:32:13 +0000 Manifest this update: Tue 02 Dec 2025 09:27:13 +0000 Manifest next update: Fri 05 Dec 2025 11:22:13 +0000 Files and hashes: 1: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: TnMhHz7GWp0zNpuXl9JwdhlOEz/NIH++Tci7U86xLSM=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:76:35:c7:52:15:b3:49:60:83:71:cc:98:40:89:22:75:20:6f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Dec 2 09:27:13 2025 GMT Not After : Dec 5 11:22:13 2025 GMT Subject: CN=C6A9CADC51BBD8C12818892893B4227FCE5B8911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:2e:55:3a:df:0f:69:ff:b0:c8:9e:e6:bb: 7c:26:1f:3b:d7:dd:f3:a6:0a:a3:f0:17:e4:0d:4b: 93:7b:e0:96:d7:99:9a:c6:5d:89:9b:bb:b3:6a:22: 19:ed:c5:9a:16:df:b2:98:dd:dc:da:26:8c:75:a2: 12:76:3f:87:f0:ee:0f:87:d1:03:06:2c:f4:5b:9c: 72:b9:25:17:74:2c:73:1b:f1:00:0e:e9:14:f8:c7: 21:18:2f:80:1e:64:a0:ff:1b:d5:99:ab:82:d7:04: aa:c7:42:5b:1c:67:5d:b4:f0:b5:bd:b2:88:e1:f9: 5b:5a:cb:a2:fe:05:40:ec:c5:45:52:19:0b:c3:7d: 6e:96:b0:9f:60:c8:d9:20:7b:6e:79:63:cc:1c:84: 0f:c9:5f:4f:e2:39:72:74:13:ef:4a:80:b0:c2:44: a4:72:03:e5:49:1a:db:ee:24:bd:97:44:41:25:f2: c7:13:cc:6b:02:a0:7a:b0:b8:1d:90:8c:d5:28:9b: 1d:24:84:7e:83:ba:d5:47:dd:50:40:74:a7:0b:11: 75:9c:08:16:1b:eb:71:c6:69:12:a4:6e:55:64:79: d8:32:4c:ed:2b:af:b4:7b:35:67:d5:86:86:2b:7d: 6a:96:9e:4e:79:69:64:00:e5:67:f1:61:0a:b7:bc: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A9:CA:DC:51:BB:D8:C1:28:18:89:28:93:B4:22:7F:CE:5B:89:11 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6a:94:6f:19:d0:82:11:ea:8c:fc:24:00:79:c5:63:88:14: f1:7b:e4:45:85:33:f5:05:59:1e:c0:02:d9:83:5f:82:e7:df: 5e:b9:f8:ab:ac:2b:29:43:a1:fd:5d:4a:07:f3:38:ac:98:97: dc:10:97:b3:5a:84:de:c0:c4:56:a6:d8:3c:57:3e:6e:e5:e7: d7:03:e2:61:56:e3:d2:2e:7d:f4:b8:b9:d2:0b:29:1a:41:d8: a7:39:54:e2:0a:76:e9:30:57:cc:e1:ec:4b:db:14:02:ee:30: f6:5b:46:1b:14:33:8f:bf:ce:12:4b:13:6a:69:6c:de:d3:98: 6e:75:c5:2e:c7:64:60:77:72:1f:70:f9:54:a6:6f:50:80:07: 45:29:b6:4d:77:cf:b1:c1:b6:c2:8b:f3:0d:af:f2:cc:52:c2: 47:99:6c:98:07:5b:04:6c:61:8a:6b:4f:26:8e:42:bd:14:7f: 95:95:7a:02:a6:60:f0:99:a4:70:74:e3:44:7a:d7:bf:e6:99: 3f:58:f1:9a:65:d3:1b:73:b4:14:e5:71:d0:50:fa:41:d9:28: 58:c5:8b:df:0b:34:82:7c:00:e7:3d:9d:ae:40:3d:f5:53:2c: d6:25:58:73:13:3f:98:86:62:03:ab:b9:39:be:04:7a:73:6a: be:20:6e:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3Y1x1IVs0lgg3HMmECJInUgb7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTEyMDIwOTI3MTNaFw0yNTEyMDUxMTIyMTNaMDMxMTAvBgNV BAMTKEM2QTlDQURDNTFCQkQ4QzEyODE4ODkyODkzQjQyMjdGQ0U1Qjg5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9US5VOt8Paf+wyJ7mu3wmHzvX 3fOmCqPwF+QNS5N74JbXmZrGXYmbu7NqIhntxZoW37KY3dzaJox1ohJ2P4fw7g+H 0QMGLPRbnHK5JRd0LHMb8QAO6RT4xyEYL4AeZKD/G9WZq4LXBKrHQlscZ1208LW9 sojh+Vtay6L+BUDsxUVSGQvDfW6WsJ9gyNkge255Y8wchA/JX0/iOXJ0E+9KgLDC RKRyA+VJGtvuJL2XREEl8scTzGsCoHqwuB2QjNUomx0khH6DutVH3VBAdKcLEXWc CBYb63HGaRKkblVkedgyTO0rr7R7NWfVhoYrfWqWnk55aWQA5WfxYQq3vJ6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqnK3FG72MEoGIkok7Qif85biREwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZqlG8Z0IIR6oz8JAB5xWOIFPF75EWFM/UF WR7AAtmDX4Ln3165+KusKylDof1dSgfzOKyYl9wQl7NahN7AxFam2DxXPm7l59cD 4mFW49IuffS4udILKRpB2Kc5VOIKdukwV8zh7EvbFALuMPZbRhsUM4+/zhJLE2pp bN7TmG51xS7HZGB3ch9w+VSmb1CAB0Uptk13z7HBtsKL8w2v8sxSwkeZbJgHWwRs YYprTyaOQr0Uf5WVegKmYPCZpHB040R617/mmT9Y8Zpl0xtztBTlcdBQ+kHZKFjF i98LNIJ8AOc9na5APfVTLNYlWHMTP5iGYgOruTm+BHpzar4gbh8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:00 2025 by rpki-client