This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: k6EvEHeAgisdeXFyPIgUa+/Zqs3nBW3tJtQ0bGpaTvo= Subject key identifier: A1:7E:8D:61:A1:4A:E2:EC:E4:BE:4A:3F:3C:D3:70:CE:EA:3E:88:97 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 70CA876419FAABF315ADF67DCE3F7C5A788C8783 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01D0 Signing time: Mon 01 Dec 2025 20:00:40 +0000 Manifest this update: Mon 01 Dec 2025 19:55:40 +0000 Manifest next update: Thu 04 Dec 2025 23:18:40 +0000 Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: +Z0H+c+KFWKFG8H3J/+XF1y62J4rjaGo5XZ0kIEOXec=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=) 3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ca:87:64:19:fa:ab:f3:15:ad:f6:7d:ce:3f:7c:5a:78:8c:87:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Dec 1 19:55:40 2025 GMT Not After : Dec 4 23:18:40 2025 GMT Subject: CN=A17E8D61A14AE2ECE4BE4A3F3CD370CEEA3E8897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:0c:78:69:af:08:91:dc:31:0c:70:be:92: b5:81:43:f4:9f:67:24:fc:b5:58:82:13:70:f0:26: c1:ae:0a:d2:0e:f0:7a:78:df:d1:0f:c3:5c:0b:29: 5f:1b:34:77:e1:0f:80:8d:22:c2:1b:6f:56:50:1b: d6:03:4e:30:38:bd:6f:13:03:f3:7b:09:fd:84:1d: f4:c2:4a:1b:b3:7b:a1:30:54:6d:4d:cd:cf:c0:ed: b9:ac:20:49:09:9e:a9:66:ed:42:27:b7:48:17:91: 10:89:ba:53:3b:db:75:cf:19:fa:78:fe:cc:cc:20: 4d:7d:cd:91:4b:ce:ef:8f:90:e3:5a:c4:ce:36:a4: b7:ec:40:89:39:9d:6d:28:91:1b:6a:f6:f1:2c:84: ff:fd:c0:dc:cf:9b:91:a8:e4:be:8e:d9:67:c0:1c: 03:ac:56:8e:47:b3:64:e5:05:ca:3d:87:da:e8:48: 45:bd:2f:4c:db:aa:b6:dd:39:55:9b:51:dd:af:92: 5e:31:f3:9e:41:29:35:fb:3b:8c:ed:9f:ea:0e:fe: f3:3f:f6:bc:7a:2d:f1:75:87:be:89:d4:e9:ff:55: 55:89:fc:0b:49:45:ae:d6:f9:22:d5:99:fc:cb:95: 3a:96:56:80:23:91:18:62:79:03:5d:b0:19:0c:15: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:8D:61:A1:4A:E2:EC:E4:BE:4A:3F:3C:D3:70:CE:EA:3E:88:97 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ec:cc:e1:b2:a4:46:88:f0:3b:6e:11:4d:ed:87:7f:bd:e4: 3f:5d:67:b8:c0:78:b5:e2:54:c1:2f:89:d1:d1:25:e2:d6:19: 85:65:18:05:c1:bd:2c:57:49:0e:34:c8:76:44:aa:bb:0e:47: 0b:b1:98:4a:c1:be:04:a8:8d:34:54:45:c5:e7:3f:3a:4c:c8: e6:84:fa:27:34:d5:d0:2e:fb:c1:3a:0f:4c:1a:b4:c0:1b:6c: fa:1c:7b:53:79:95:a4:6c:f2:a2:7f:a8:fa:8a:ac:4f:b9:c2: b7:f5:db:f9:c6:ac:c0:f4:75:a1:89:f3:e2:15:ef:43:00:d8: fc:59:b9:81:c0:21:6c:c4:b1:4a:e8:57:1f:fb:94:58:41:e5: 84:42:f3:f8:ac:dc:f8:4c:5d:a4:43:9f:35:3f:99:0e:94:fe: b3:22:00:0e:f8:79:2c:35:4b:11:f4:d0:d3:c6:38:c6:4d:3e: b0:30:b5:83:b1:48:40:e4:5b:c3:9c:41:d8:57:1d:36:f6:c8: f3:47:a4:8d:d0:ae:44:a6:82:b7:b4:d8:a4:2e:ec:63:d7:d2: f4:e0:79:a2:ca:77:a0:8b:c1:65:c7:dd:5b:bc:8b:b4:2b:06: b3:dc:90:a9:85:c5:ef:30:c2:f0:e3:fe:44:35:50:26:c8:5b: 63:69:57:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMqHZBn6q/MVrfZ9zj98WniMh4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTEyMDExOTU1NDBaFw0yNTEyMDQyMzE4NDBaMDMxMTAvBgNV BAMTKEExN0U4RDYxQTE0QUUyRUNFNEJFNEEzRjNDRDM3MENFRUEzRTg4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTAx4aa8IkdwxDHC+krWBQ/Sf ZyT8tViCE3DwJsGuCtIO8Hp439EPw1wLKV8bNHfhD4CNIsIbb1ZQG9YDTjA4vW8T A/N7Cf2EHfTCShuze6EwVG1Nzc/A7bmsIEkJnqlm7UInt0gXkRCJulM723XPGfp4 /szMIE19zZFLzu+PkONaxM42pLfsQIk5nW0okRtq9vEshP/9wNzPm5Go5L6O2WfA HAOsVo5Hs2TlBco9h9roSEW9L0zbqrbdOVWbUd2vkl4x855BKTX7O4ztn+oO/vM/ 9rx6LfF1h76J1On/VVWJ/AtJRa7W+SLVmfzLlTqWVoAjkRhieQNdsBkMFSdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoX6NYaFK4uzkvko/PNNwzuo+iJcwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvszOGypEaI8DtuEU3th3+95D9dZ7jAeLXi VMEvidHRJeLWGYVlGAXBvSxXSQ40yHZEqrsORwuxmErBvgSojTRURcXnPzpMyOaE +ic01dAu+8E6D0watMAbbPoce1N5laRs8qJ/qPqKrE+5wrf12/nGrMD0daGJ8+IV 70MA2PxZuYHAIWzEsUroVx/7lFhB5YRC8/is3PhMXaRDnzU/mQ6U/rMiAA74eSw1 SxH00NPGOMZNPrAwtYOxSEDkW8OcQdhXHTb2yPNHpI3QrkSmgre02KQu7GPX0vTg eaLKd6CLwWXH3Vu8i7QrBrPckKmFxe8wwvDj/kQ1UCbIW2NpVwg= -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:54 2025 by rpki-client