This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: rn1zsmbGZiKusBx47qFFM2HaX+gD7RHzVuNUEgS0o1U= Subject key identifier: 76:67:8F:66:B5:0E:00:FC:B4:CB:34:73:32:EB:70:28:44:C9:87:EC Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 6E79CAF462454B45E696969C125CBA3C3E3D034D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0365 Signing time: Wed 03 Dec 2025 10:00:41 +0000 Manifest this update: Wed 03 Dec 2025 09:55:41 +0000 Manifest next update: Sat 06 Dec 2025 19:47:41 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: eFJKC4RTjczUtuWl9oOpTBSRwRs05uU1yRgmRx6o19w=) 3: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:79:ca:f4:62:45:4b:45:e6:96:96:9c:12:5c:ba:3c:3e:3d:03:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Dec 3 09:55:41 2025 GMT Not After : Dec 6 19:47:41 2025 GMT Subject: CN=76678F66B50E00FCB4CB347332EB702844C987EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:d9:5b:06:43:30:83:22:de:e4:f0:00:d7: fa:56:70:74:fd:46:73:a4:8d:f6:c9:ef:fa:01:d0: 78:47:4d:0d:19:39:15:fa:b2:02:d9:6b:ad:39:04: 37:eb:52:fb:12:e9:7c:22:0d:d8:58:b8:c9:2f:fe: 2f:bc:ab:f6:16:52:ff:0f:2c:20:a1:02:be:b0:c8: b1:3f:1c:9b:0c:33:a7:d5:62:b6:03:0a:89:b9:e7: 32:4b:6e:87:32:7b:50:dd:f0:8d:94:53:6e:9a:46: f2:fe:e6:f6:67:b1:29:c8:f3:e3:52:c3:44:49:50: b1:84:d8:7a:3b:97:26:66:c8:46:69:1f:e6:83:f8: 8e:c7:a5:5a:31:ec:82:12:08:60:d6:12:e8:0a:c7: e9:8a:1b:59:25:0e:15:2c:25:fe:7b:e0:8b:34:27: 2d:12:cf:f5:ba:fe:a3:d3:99:00:f3:99:f1:01:90: d0:d6:5d:32:20:66:d8:f8:98:f4:72:a2:b4:4b:b2: 47:84:b6:07:03:39:6e:02:e9:be:99:8b:36:19:82: 4a:cf:ef:db:0e:dd:e7:23:cc:04:38:64:85:d3:d9: 5a:39:ac:95:1c:2a:81:fd:a5:cc:d3:70:4d:7d:af: 63:30:17:59:18:ad:98:1b:f5:61:62:69:9b:5d:7f: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:67:8F:66:B5:0E:00:FC:B4:CB:34:73:32:EB:70:28:44:C9:87:EC X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:af:d9:d5:04:ce:33:45:0a:fd:69:38:ee:f9:26:b3:51:9c: 56:d2:18:88:65:75:00:3a:db:16:e8:1c:03:59:e8:22:5b:cb: 6b:00:55:db:a7:8c:3c:17:6b:85:36:05:2d:8d:6a:40:45:55: 2e:b1:10:3e:a4:80:2d:98:dd:2d:0d:ee:fb:40:70:42:3a:62: 30:9b:e4:e3:2e:10:93:d9:49:45:b6:77:91:2d:2d:d6:db:46: 8d:c6:ae:0b:63:2e:ac:d2:04:6d:8c:54:8a:47:ce:a9:a3:34: 79:bc:46:52:23:66:d8:ca:07:e7:86:d1:e1:2a:f1:93:a7:dd: 5b:ac:cd:fe:d2:09:cb:6c:23:e1:6a:73:96:26:90:cd:26:07: 37:23:86:bd:d5:03:e2:26:5f:82:6d:21:1e:29:98:00:99:d6: a2:73:16:3c:a9:a2:4b:21:96:a6:86:d8:74:4c:a4:3f:1f:c6: 8f:ef:38:0a:c0:45:e4:92:f0:63:10:18:5d:e1:8a:50:d2:17: 4c:dc:70:a9:b9:7e:d9:d5:8a:8f:85:35:3e:33:b7:29:3b:cf: 48:21:10:b5:14:07:80:b6:bd:fc:4f:ea:99:76:ec:f3:7b:98: 23:af:19:5a:05:1b:38:c3:6f:fd:da:b1:16:e4:7b:64:24:53: e6:d4:22:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnnK9GJFS0XmlpacEly6PD49A00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTEyMDMwOTU1NDFaFw0yNTEyMDYxOTQ3NDFaMDMxMTAvBgNV BAMTKDc2Njc4RjY2QjUwRTAwRkNCNENCMzQ3MzMyRUI3MDI4NDRDOTg3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GdlbBkMwgyLe5PAA1/pWcHT9 RnOkjfbJ7/oB0HhHTQ0ZORX6sgLZa605BDfrUvsS6XwiDdhYuMkv/i+8q/YWUv8P LCChAr6wyLE/HJsMM6fVYrYDCom55zJLbocye1Dd8I2UU26aRvL+5vZnsSnI8+NS w0RJULGE2Ho7lyZmyEZpH+aD+I7HpVox7IISCGDWEugKx+mKG1klDhUsJf574Is0 Jy0Sz/W6/qPTmQDzmfEBkNDWXTIgZtj4mPRyorRLskeEtgcDOW4C6b6ZizYZgkrP 79sO3ecjzAQ4ZIXT2Vo5rJUcKoH9pczTcE19r2MwF1kYrZgb9WFiaZtdf8w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmePZrUOAPy0yzRzMutwKETJh+wwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWv2dUEzjNFCv1pOO75JrNRnFbSGIhldQA6 2xboHANZ6CJby2sAVdunjDwXa4U2BS2NakBFVS6xED6kgC2Y3S0N7vtAcEI6YjCb 5OMuEJPZSUW2d5EtLdbbRo3GrgtjLqzSBG2MVIpHzqmjNHm8RlIjZtjKB+eG0eEq 8ZOn3Vuszf7SCctsI+Fqc5YmkM0mBzcjhr3VA+ImX4JtIR4pmACZ1qJzFjypoksh lqaG2HRMpD8fxo/vOArAReSS8GMQGF3hilDSF0zccKm5ftnVio+FNT4ztyk7z0gh ELUUB4C2vfxP6pl27PN7mCOvGVoFGzjDb/3asRbke2QkU+bUIgc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:21 2025 by rpki-client