This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: ctQn3c1hzgRoZmoiDS5oGAhw3Yuc2yqwVVCCU1gc7ug= Subject key identifier: 1A:5E:41:E0:D2:37:8D:D9:16:31:56:DE:F3:60:E8:25:C2:E3:E8:37 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 1B01283F4DD14441A5F85022DDCE78AB707CE3D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0529 Signing time: Mon 01 Dec 2025 18:30:48 +0000 Manifest this update: Mon 01 Dec 2025 18:25:48 +0000 Manifest next update: Fri 05 Dec 2025 01:24:48 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: C7qKT+L19S1zzZSkI/PJqt2gxK3M9Wc3iXFoqjEjmL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:01:28:3f:4d:d1:44:41:a5:f8:50:22:dd:ce:78:ab:70:7c:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Dec 1 18:25:48 2025 GMT Not After : Dec 5 01:24:48 2025 GMT Subject: CN=1A5E41E0D2378DD9163156DEF360E825C2E3E837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:4e:41:6c:fb:e2:aa:29:51:b7:0e:9a:14: eb:1f:02:24:a8:ee:ba:b3:14:ac:c0:07:34:cf:c7: ee:0a:89:35:9e:60:a1:7b:d3:4e:a1:52:0a:aa:34: 72:d6:87:f2:fc:be:a0:00:ce:14:58:cd:b6:fb:9b: 2c:95:f5:8b:1b:25:08:bd:5c:01:db:ac:9a:8e:34: 1c:08:85:34:53:4c:14:5c:a2:04:49:48:d9:3b:ef: 42:22:5c:5a:3e:4a:14:52:b3:a4:87:2a:95:9f:40: 23:20:01:89:c5:6b:7c:82:03:af:77:03:bc:61:62: 61:c5:73:02:0e:01:c2:8a:83:ef:72:a5:33:cd:57: 29:87:e1:f9:7f:b3:7d:b3:cc:89:dc:fe:f4:7f:c2: a6:04:51:06:06:ba:ed:26:a4:2c:2d:3f:a2:54:04: fe:08:98:eb:93:37:52:57:00:96:5a:b1:88:76:ac: cf:8b:1c:99:51:a7:ef:10:96:a4:2a:0a:cb:f1:d1: af:c5:e6:65:12:62:60:a9:ac:6c:65:ab:fa:0f:19: 5a:5b:3a:ba:02:17:40:2d:f6:15:75:de:c3:de:96: 07:d1:8d:50:7e:1d:98:b9:8f:e7:5f:5d:b8:b1:f2: 34:cc:4b:bd:20:4f:a5:d5:38:f3:67:f2:30:e9:0a: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:41:E0:D2:37:8D:D9:16:31:56:DE:F3:60:E8:25:C2:E3:E8:37 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bc:40:31:2a:a4:b7:f4:11:ad:77:c9:64:3c:d2:a9:fe:93: f9:4d:ca:bd:7a:dd:f6:70:61:67:0c:f1:a3:c7:36:c7:4c:b5: 42:29:69:ba:42:12:37:0d:0d:12:e0:48:c5:a5:c1:5e:b0:ea: 93:be:09:04:30:15:4e:64:8b:c9:24:55:4b:60:b6:0e:06:8e: 91:db:55:41:32:cf:3a:2a:a1:44:9e:1e:d1:8d:c0:15:b1:32: f2:18:30:7c:b9:7e:ac:58:bb:ee:4a:53:30:5a:d8:ac:60:b7: 5b:99:bc:1b:5f:3d:ed:37:57:67:19:c3:bd:4a:1e:6e:b4:d9: 59:81:cc:12:b7:a6:0e:e0:ac:97:6b:25:2d:4f:ef:ea:21:73: 59:2c:28:20:e4:7e:04:c3:2f:75:37:ba:2e:be:18:2a:92:90: f6:b0:52:d8:6d:58:b8:15:79:23:e5:36:71:b0:ec:94:83:75: 88:84:5a:fb:71:71:9f:ef:97:68:e9:f8:e8:72:b2:3a:91:d4: 98:6f:8c:be:be:e2:75:e2:00:c7:da:71:77:ca:0b:8d:71:29: 71:ac:72:cd:e5:af:98:96:2c:d9:cd:49:8c:d2:15:df:d3:f7: 93:c7:73:18:a0:19:0e:d6:1c:09:2f:16:cb:52:77:80:78:da: 72:49:ae:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwEoP03RREGl+FAi3c54q3B849MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNTEyMDExODI1NDhaFw0yNTEyMDUwMTI0NDhaMDMxMTAvBgNV BAMTKDFBNUU0MUUwRDIzNzhERDkxNjMxNTZERUYzNjBFODI1QzJFM0U4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFE5BbPviqilRtw6aFOsfAiSo 7rqzFKzABzTPx+4KiTWeYKF7006hUgqqNHLWh/L8vqAAzhRYzbb7myyV9YsbJQi9 XAHbrJqONBwIhTRTTBRcogRJSNk770IiXFo+ShRSs6SHKpWfQCMgAYnFa3yCA693 A7xhYmHFcwIOAcKKg+9ypTPNVymH4fl/s32zzInc/vR/wqYEUQYGuu0mpCwtP6JU BP4ImOuTN1JXAJZasYh2rM+LHJlRp+8QlqQqCsvx0a/F5mUSYmCprGxlq/oPGVpb OroCF0At9hV13sPelgfRjVB+HZi5j+dfXbix8jTMS70gT6XVOPNn8jDpCrh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGl5B4NI3jdkWMVbe82DoJcLj6DcwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm8QDEqpLf0Ea13yWQ80qn+k/lNyr163fZw YWcM8aPHNsdMtUIpabpCEjcNDRLgSMWlwV6w6pO+CQQwFU5ki8kkVUtgtg4GjpHb VUEyzzoqoUSeHtGNwBWxMvIYMHy5fqxYu+5KUzBa2Kxgt1uZvBtfPe03V2cZw71K Hm602VmBzBK3pg7grJdrJS1P7+ohc1ksKCDkfgTDL3U3ui6+GCqSkPawUthtWLgV eSPlNnGw7JSDdYiEWvtxcZ/vl2jp+OhysjqR1JhvjL6+4nXiAMfacXfKC41xKXGs cs3lr5iWLNnNSYzSFd/T95PHcxigGQ7WHAkvFstSd4B42nJJrsQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:11 2025 by rpki-client