This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: PUHeF8el/HQdvLFPfSb8PuldoEOMklfsJacc0ljE2MY= Subject key identifier: E9:9D:8F:A8:F8:1A:D4:01:A2:70:DE:89:40:D4:56:A7:92:12:E1:C9 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 6879B458716AF8C5D5B091C61735B7224F9384EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: E0 Signing time: Sat 06 Dec 2025 23:12:02 +0000 Manifest this update: Sat 06 Dec 2025 23:07:02 +0000 Manifest next update: Wed 10 Dec 2025 01:00:02 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: R0o/KfN759gyUtkw3K0G8+JclgjAK/O2QwsPH8MIMm4=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:79:b4:58:71:6a:f8:c5:d5:b0:91:c6:17:35:b7:22:4f:93:84:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Dec 6 23:07:02 2025 GMT Not After : Dec 10 01:00:02 2025 GMT Subject: CN=E99D8FA8F81AD401A270DE8940D456A79212E1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:33:6a:43:5a:b5:a9:a4:49:cd:f2:d2:c5: 3c:44:ec:f2:dc:36:45:50:6f:fa:89:4b:17:c3:42: 85:08:21:6b:78:ed:79:da:a5:1b:53:7d:a7:fa:7c: 1f:08:16:20:b6:8c:f8:50:bc:08:9b:85:ac:1b:73: 0e:d3:84:4b:62:c0:18:43:1a:b2:95:51:ea:6d:c5: 25:5f:0f:8c:cc:1d:02:db:ab:9f:c1:8b:0a:0b:62: 7c:16:1d:23:ae:56:57:60:93:e1:f5:f3:40:a9:3e: 15:bf:fe:64:36:75:c3:ca:8a:f9:a9:48:0d:44:90: ef:03:0a:de:a3:78:c2:bb:51:92:dc:3b:61:d8:cc: 99:d5:d1:ba:1c:2d:41:f8:d4:5c:69:60:c0:68:70: 17:3b:44:fc:c5:7c:f2:70:cd:52:dc:e7:84:66:87: 23:c1:43:59:8d:76:95:13:d5:22:6f:af:3c:ba:7a: 8a:d7:1d:4c:63:5f:0d:3e:31:1b:ed:c7:e7:03:c7: ea:a6:bd:7e:07:3f:b3:4d:fd:11:fa:ea:da:b5:a4: a6:23:4c:a7:8c:7e:6c:3e:41:f4:a6:0e:50:8f:32: e5:87:fe:fb:d3:a6:f3:41:37:f0:ed:7a:18:dd:18: a5:35:5e:a2:10:77:98:31:2d:03:c0:4a:92:7b:7a: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:8F:A8:F8:1A:D4:01:A2:70:DE:89:40:D4:56:A7:92:12:E1:C9 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:53:be:96:16:21:0c:25:7a:54:68:24:a1:13:99:ec:a6: 8d:03:83:60:c0:a0:eb:13:0d:fe:12:25:5c:14:68:dd:b9:18: cb:39:c1:54:6f:65:53:0a:b8:9f:98:7e:77:fd:4f:ea:32:16: 0a:3e:e4:d5:7d:7e:c1:5a:e3:f2:0d:e4:38:9b:8e:33:34:4d: 6b:a9:34:95:d5:bf:46:9a:34:a9:24:de:3d:59:71:d0:36:59: ff:fb:32:f7:42:4f:aa:8e:46:4a:c5:3c:1c:01:04:ce:d6:28: d0:5e:f2:f9:57:f2:34:eb:82:6e:2c:42:f3:f9:8e:68:19:91: c1:76:ca:a9:e9:e9:4a:34:ef:7c:7e:37:4b:a1:58:31:34:58: a1:cc:e0:59:35:cc:10:76:67:4c:26:d1:f0:f5:84:ff:8f:59: 7f:8c:05:b3:2c:e4:ef:28:f0:0f:49:b9:a3:cc:f2:e2:8c:78: 25:3c:55:b1:49:8f:53:18:6f:a7:45:da:c0:8b:9a:25:23:56: a9:c8:7e:76:8f:35:71:17:9e:de:bb:fb:0f:06:ef:d0:6f:55: 70:46:67:ed:15:56:d6:77:3d:3d:6c:55:7b:c9:05:67:7e:4d: 58:13:58:fc:05:b9:ec:9e:76:43:3d:e7:6c:47:ed:ee:e3:22: 59:7d:d6:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHm0WHFq+MXVsJHGFzW3Ik+ThO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTEyMDYyMzA3MDJaFw0yNTEyMTAwMTAwMDJaMDMxMTAvBgNV BAMTKEU5OUQ4RkE4RjgxQUQ0MDFBMjcwREU4OTQwRDQ1NkE3OTIxMkUxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTazNqQ1q1qaRJzfLSxTxE7PLc NkVQb/qJSxfDQoUIIWt47XnapRtTfaf6fB8IFiC2jPhQvAibhawbcw7ThEtiwBhD GrKVUeptxSVfD4zMHQLbq5/BiwoLYnwWHSOuVldgk+H180CpPhW//mQ2dcPKivmp SA1EkO8DCt6jeMK7UZLcO2HYzJnV0bocLUH41FxpYMBocBc7RPzFfPJwzVLc54Rm hyPBQ1mNdpUT1SJvrzy6eorXHUxjXw0+MRvtx+cDx+qmvX4HP7NN/RH66tq1pKYj TKeMfmw+QfSmDlCPMuWH/vvTpvNBN/DtehjdGKU1XqIQd5gxLQPASpJ7ekKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Z2PqPga1AGicN6JQNRWp5IS4ckwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfgU76WFiEMJXpUaCShE5nspo0Dg2DAoOsT Df4SJVwUaN25GMs5wVRvZVMKuJ+Yfnf9T+oyFgo+5NV9fsFa4/IN5DibjjM0TWup NJXVv0aaNKkk3j1ZcdA2Wf/7MvdCT6qORkrFPBwBBM7WKNBe8vlX8jTrgm4sQvP5 jmgZkcF2yqnp6Uo073x+N0uhWDE0WKHM4Fk1zBB2Z0wm0fD1hP+PWX+MBbMs5O8o 8A9JuaPM8uKMeCU8VbFJj1MYb6dF2sCLmiUjVqnIfnaPNXEXnt67+w8G79BvVXBG Z+0VVtZ3PT1sVXvJBWd+TVgTWPwFueyedkM952xH7e7jIll91oM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:14 2025 by rpki-client