This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: cC/KvcULCZVxL2qbU9juOZ6QqLMW2Dxqb91lA7pCzIY= Subject key identifier: AC:31:27:9A:95:2E:4B:5B:11:5E:27:6E:4B:41:9D:DA:5A:FD:38:46 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 208C06D93FBC2C85203538099B14F3E83804CBAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0536 Signing time: Thu 11 Dec 2025 09:11:47 +0000 Manifest this update: Thu 11 Dec 2025 09:06:47 +0000 Manifest next update: Sun 14 Dec 2025 17:36:47 +0000 Files and hashes: 1: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 2: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 5: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: SXs5gkgrZRMiXLcg1aXmhAjk67blacYfEsTLnjGXMek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 17:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8c:06:d9:3f:bc:2c:85:20:35:38:09:9b:14:f3:e8:38:04:cb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Dec 11 09:06:47 2025 GMT Not After : Dec 14 17:36:47 2025 GMT Subject: CN=AC31279A952E4B5B115E276E4B419DDA5AFD3846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:29:72:24:d3:67:4e:0f:98:f1:87:5f:24: 21:0c:0f:5d:d6:ca:f6:94:bb:e7:ac:c4:4d:d9:ec: c4:a7:df:eb:4e:f2:98:43:61:9b:5c:49:49:23:bd: de:7c:e5:a0:98:23:fe:8b:26:b3:97:a3:0b:dd:98: f9:f8:e2:23:b5:78:66:e1:23:d7:95:41:fc:36:11: 38:ce:5f:a2:3b:4b:30:8e:2b:30:36:77:4c:85:a3: 5b:a2:f1:dc:94:68:c5:32:de:14:47:cc:c2:5b:3a: cf:6f:16:c3:08:d8:20:cf:c4:e6:e1:52:2e:db:17: 2e:b3:35:b5:4c:c4:c7:18:bb:5f:65:04:a7:b8:6e: 02:4a:2b:3c:5a:d9:bc:aa:f8:fd:bb:9d:c5:d2:b4: 8c:96:d8:a3:a2:c6:2b:d2:6c:b6:33:01:fc:bf:74: c4:82:d6:a1:33:e9:a8:62:ba:df:30:5a:e9:c4:7d: c0:8a:3e:e4:27:22:b8:93:a2:b5:02:7a:77:f4:94: d2:9f:2e:98:c1:f3:bc:35:76:6c:c0:df:9c:1d:ef: d2:95:bd:ce:68:02:1a:41:d6:01:ad:6f:46:53:a8: ee:0b:ff:40:f5:99:f0:df:9d:92:fa:fe:64:60:dd: 9f:99:f4:00:a6:6e:e5:f8:ba:c1:04:cb:e2:c6:68: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:27:9A:95:2E:4B:5B:11:5E:27:6E:4B:41:9D:DA:5A:FD:38:46 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3b:5e:3b:a9:94:c8:be:89:25:b0:d5:0a:5e:af:83:ed:13: 5a:64:74:12:06:bf:af:df:b6:b1:e9:5b:3e:8b:ec:7d:f4:04: 45:45:ab:fb:78:17:fd:7c:90:b2:a1:b3:99:9f:f6:d2:bf:c2: 5a:ad:d4:a5:c1:93:ee:ea:bb:bf:7f:5f:bc:f0:1c:f9:ad:c0: b0:9f:3b:1d:a8:80:a6:e8:71:23:2d:0d:9d:a6:f8:c2:a6:32: 1e:c5:ce:99:5a:24:28:85:d4:1c:9d:2e:bb:8f:2e:3c:de:0e: 68:d5:6b:04:13:ca:ab:63:27:6f:cc:d6:5c:b3:28:c2:4d:0b: 60:40:a6:af:45:98:9a:21:79:1f:e2:83:fc:ac:4a:70:5f:46: d5:a8:65:14:ee:9d:ab:f7:68:8a:62:21:cd:e2:af:cb:88:a6: 1f:f8:d9:8c:47:e3:a3:23:14:aa:9f:d5:b6:3e:7b:1b:46:e6: e6:1a:11:01:ae:c8:4a:27:2f:c0:c0:64:dc:9a:97:02:2e:26: 72:b3:e2:bd:50:98:1e:11:1d:0e:d0:cf:c4:be:f0:34:e1:7f: 0a:52:7b:00:30:4b:91:8c:5c:fe:32:4d:d6:d8:4f:c6:ff:8f: b1:38:a5:38:07:9f:25:83:11:0c:46:de:25:8a:56:62:06:f5: 84:75:9c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIwG2T+8LIUgNTgJmxTz6DgEy6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTEyMTEwOTA2NDdaFw0yNTEyMTQxNzM2NDdaMDMxMTAvBgNV BAMTKEFDMzEyNzlBOTUyRTRCNUIxMTVFMjc2RTRCNDE5RERBNUFGRDM4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0SlyJNNnTg+Y8YdfJCEMD13W yvaUu+esxE3Z7MSn3+tO8phDYZtcSUkjvd585aCYI/6LJrOXowvdmPn44iO1eGbh I9eVQfw2ETjOX6I7SzCOKzA2d0yFo1ui8dyUaMUy3hRHzMJbOs9vFsMI2CDPxObh Ui7bFy6zNbVMxMcYu19lBKe4bgJKKzxa2byq+P27ncXStIyW2KOixivSbLYzAfy/ dMSC1qEz6ahiut8wWunEfcCKPuQnIriTorUCenf0lNKfLpjB87w1dmzA35wd79KV vc5oAhpB1gGtb0ZTqO4L/0D1mfDfnZL6/mRg3Z+Z9ACmbuX4usEEy+LGaH2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDEnmpUuS1sRXiduS0Gd2lr9OEYwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc7XjuplMi+iSWw1Qper4PtE1pkdBIGv6/f trHpWz6L7H30BEVFq/t4F/18kLKhs5mf9tK/wlqt1KXBk+7qu79/X7zwHPmtwLCf Ox2ogKbocSMtDZ2m+MKmMh7FzplaJCiF1BydLruPLjzeDmjVawQTyqtjJ2/M1lyz KMJNC2BApq9FmJoheR/ig/ysSnBfRtWoZRTunav3aIpiIc3ir8uIph/42YxH46Mj FKqf1bY+extG5uYaEQGuyEonL8DAZNyalwIuJnKz4r1QmB4RHQ7Qz8S+8DThfwpS ewAwS5GMXP4yTdbYT8b/j7E4pTgHnyWDEQxG3iWKVmIG9YR1nK4= -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:49 2025 by rpki-client