This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: 1b5yooub3UqITDZ/btY55PW0dPTCMtaa4MOYY1yB4vE= Subject key identifier: E0:BF:82:E0:98:55:E1:37:29:67:1F:1A:DC:53:94:E6:F2:0C:73:3D Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 3452EFA173F94E8C67FC434A9C9E9E979D264B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01FF Signing time: Tue 02 Dec 2025 18:30:47 +0000 Manifest this update: Tue 02 Dec 2025 18:25:47 +0000 Manifest next update: Sat 06 Dec 2025 04:27:47 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) 2: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: HffFlLkQ423ivBtV6M9FVcVeNmsCtKVPiFbBPeEX/4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:52:ef:a1:73:f9:4e:8c:67:fc:43:4a:9c:9e:9e:97:9d:26:4b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Dec 2 18:25:47 2025 GMT Not After : Dec 6 04:27:47 2025 GMT Subject: CN=E0BF82E09855E13729671F1ADC5394E6F20C733D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:2a:dc:45:b4:e2:69:73:e6:fa:09:d4:d3: 33:9b:08:66:84:7c:7f:e3:e5:3c:ea:98:43:b0:cd: bc:b1:9f:e2:b7:fa:63:99:e5:f9:79:80:d0:67:a0: 8f:e4:22:3e:57:6d:0c:f0:c5:70:4a:8b:af:ff:89: 5a:bc:78:60:45:67:63:74:90:ad:07:7a:1f:c8:a7: f4:ca:d8:fc:fa:4c:ac:20:bc:d9:0f:32:05:72:f4: 45:21:65:b2:33:22:aa:6d:b8:da:d8:f9:bb:da:06: 01:3b:66:b0:0e:9d:a7:b4:9e:52:73:60:0a:38:fc: 04:c0:ca:96:9d:f0:e3:13:40:8f:e5:61:b6:32:d8: 3d:4d:03:5e:54:a5:90:d4:e4:5d:66:aa:e0:66:5c: 9e:ae:9a:0e:e0:ac:49:eb:1a:33:47:bb:e3:4c:36: a6:b6:21:89:85:8a:45:6a:83:e6:ff:61:13:6d:63: d2:e8:e1:3f:3d:68:8f:20:01:c8:36:cd:f3:88:59: 1f:33:14:cc:d5:0c:b7:96:03:ab:07:72:2c:dd:8d: e4:31:45:b8:6b:51:dc:cb:35:15:f2:ef:17:6c:8f: 37:57:62:82:c7:ed:6d:ef:0d:30:47:de:c5:63:08: 85:25:65:19:2f:9e:da:e5:c1:c7:f4:e0:cf:b6:5b: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BF:82:E0:98:55:E1:37:29:67:1F:1A:DC:53:94:E6:F2:0C:73:3D X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c2:ec:5b:31:22:61:ab:01:a5:e6:3d:a3:9f:29:a8:48:a3: 01:5e:b2:b4:b0:21:86:59:1e:bd:10:c3:77:6d:fc:a1:72:9b: c8:a4:01:02:d2:95:b5:d2:e9:44:0d:ff:ae:47:cf:a1:c7:da: fe:7b:d6:2c:33:d5:01:ea:67:44:33:d7:39:ac:c3:f3:4c:89: ce:6d:66:50:17:5e:11:46:23:04:dc:c8:23:2e:74:a9:5d:75: e9:0a:20:56:1d:4c:b7:98:d0:ce:44:7e:2b:e4:ec:86:77:7d: e6:28:d0:30:da:03:23:f4:36:d3:1c:90:fe:7b:63:82:35:5f: 96:ae:b6:3e:96:d5:80:e7:3b:38:d1:c0:eb:da:57:bf:b6:ef: 50:77:3f:98:04:fb:27:36:f5:57:a8:08:d6:20:40:2d:9e:5f: 63:94:55:5c:6d:25:85:9e:e1:c3:6f:07:0c:c4:2f:64:30:6a: 36:77:83:da:62:0e:7b:76:f8:a5:f7:05:74:4c:eb:51:d5:17: 60:b6:e5:73:6e:93:3e:b1:8b:96:d4:3c:93:a4:48:59:37:0c: 18:d7:cb:88:53:50:67:e9:11:ed:2c:86:77:6a:8c:5a:62:1e: c4:03:b7:78:29:41:c9:1a:e9:db:65:94:30:50:84:5a:f2:71: ea:bf:0f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFLvoXP5Toxn/ENKnJ6el50mS0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTEyMDIxODI1NDdaFw0yNTEyMDYwNDI3NDdaMDMxMTAvBgNV BAMTKEUwQkY4MkUwOTg1NUUxMzcyOTY3MUYxQURDNTM5NEU2RjIwQzczM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipyrcRbTiaXPm+gnU0zObCGaE fH/j5TzqmEOwzbyxn+K3+mOZ5fl5gNBnoI/kIj5XbQzwxXBKi6//iVq8eGBFZ2N0 kK0Heh/Ip/TK2Pz6TKwgvNkPMgVy9EUhZbIzIqptuNrY+bvaBgE7ZrAOnae0nlJz YAo4/ATAypad8OMTQI/lYbYy2D1NA15UpZDU5F1mquBmXJ6umg7grEnrGjNHu+NM Nqa2IYmFikVqg+b/YRNtY9Lo4T89aI8gAcg2zfOIWR8zFMzVDLeWA6sHcizdjeQx RbhrUdzLNRXy7xdsjzdXYoLH7W3vDTBH3sVjCIUlZRkvntrlwcf04M+2W9ehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4L+C4JhV4TcpZx8a3FOU5vIMcz0wHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHC7FsxImGrAaXmPaOfKahIowFesrSwIYZZ Hr0Qw3dt/KFym8ikAQLSlbXS6UQN/65Hz6HH2v571iwz1QHqZ0Qz1zmsw/NMic5t ZlAXXhFGIwTcyCMudKlddekKIFYdTLeY0M5Efivk7IZ3feYo0DDaAyP0NtMckP57 Y4I1X5autj6W1YDnOzjRwOvaV7+271B3P5gE+yc29VeoCNYgQC2eX2OUVVxtJYWe 4cNvBwzEL2QwajZ3g9piDnt2+KX3BXRM61HVF2C25XNukz6xi5bUPJOkSFk3DBjX y4hTUGfpEe0shndqjFpiHsQDt3gpQcka6dtllDBQhFryceq/D/w= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:38 2025 by rpki-client