This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: uY26cQgDcYmWIBje1JModGqGwg5Apyew1bOua3cIeiU= Subject key identifier: 5B:19:52:73:08:BD:83:1D:19:F4:7C:F6:9D:E9:6D:29:C5:88:D8:21 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 65F2D8545177E30290EFF9B00801D8F796269BC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 011B Signing time: Wed 03 Dec 2025 06:30:42 +0000 Manifest this update: Wed 03 Dec 2025 06:25:42 +0000 Manifest next update: Sat 06 Dec 2025 08:01:42 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: 5kXhrm8J9A8mT5CRnW82v4ZHB10WWmnx91xeMIuGqM0=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f2:d8:54:51:77:e3:02:90:ef:f9:b0:08:01:d8:f7:96:26:9b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Dec 3 06:25:42 2025 GMT Not After : Dec 6 08:01:42 2025 GMT Subject: CN=5B19527308BD831D19F47CF69DE96D29C588D821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:76:4c:1a:42:e8:99:2c:1d:f7:95:11:d2: cb:78:b4:84:f6:cd:6b:a3:8e:3a:b5:06:7e:81:91: 7d:f5:a8:62:36:ea:a2:8d:a6:2e:6f:57:5a:52:aa: 23:1a:53:69:46:52:ef:4b:a5:5b:5b:08:d1:fb:44: 3b:87:12:2f:ca:ce:4f:4c:62:80:14:7d:79:49:fc: 1f:d8:b6:0a:d5:11:47:cc:15:8b:bd:0a:a2:9f:7f: f4:fc:f5:b2:16:fa:19:80:c7:8b:bc:7d:fa:60:59: 07:96:11:1a:6d:60:a7:f5:71:71:97:3d:e0:ca:21: a1:c7:81:79:14:35:8a:22:a1:a8:57:41:00:5a:6a: a4:6f:f6:a5:98:36:96:02:8e:3a:4f:ef:f8:ce:ad: 79:19:0c:f8:aa:7a:3a:c1:bf:9d:64:ba:42:b0:21: 30:28:18:46:4a:4c:e5:5d:fe:b3:f2:29:59:cc:f1: 3b:d0:e2:fa:10:7f:7d:29:79:a2:c3:b2:ba:47:73: c9:84:83:58:fd:67:d0:7d:9f:cb:5b:97:a1:88:74: f5:26:d1:73:aa:eb:ca:5e:1f:11:58:49:4f:21:43: 86:4c:a2:39:35:13:1e:e5:b8:90:dd:df:9b:da:fb: 21:6a:f5:f4:89:a0:77:67:ff:9b:8f:3a:1d:3f:6c: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:52:73:08:BD:83:1D:19:F4:7C:F6:9D:E9:6D:29:C5:88:D8:21 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e5:19:a0:a5:30:d2:e5:0b:17:4b:53:ce:f8:23:8d:da:d6: e5:ca:b0:9b:89:76:4e:cc:6a:ad:74:69:dd:8e:fd:4a:23:74: 50:c7:49:41:c6:18:a5:96:13:b3:a0:be:af:df:51:f2:90:cc: 17:2e:1b:98:8d:5c:9a:14:9f:2b:db:28:b5:fb:b4:f6:dd:4a: 9c:84:68:cd:5f:ce:e7:f1:32:46:8c:c3:fa:d8:3d:3b:9d:c3: 3e:9d:d8:52:9a:43:5c:fe:65:65:d4:24:a2:cb:6d:0c:1d:cc: b1:07:5c:fc:5e:ba:ac:f9:a9:8c:d5:15:fb:fb:3f:f6:d6:d5: 68:14:36:59:c9:b5:2f:df:21:c0:8f:aa:88:55:9f:ef:d8:33: 4b:50:57:34:19:bb:20:1f:43:bb:67:d0:a1:31:93:cb:ab:77: af:50:7f:36:0c:37:96:f7:a1:8b:c0:2d:e1:cf:2f:10:b4:41: 33:06:43:13:7c:6d:da:8f:81:15:de:9c:7e:d7:02:a5:29:c5: 0c:d0:3c:21:d4:31:af:75:c6:e0:29:83:9c:4f:63:92:4a:95: 88:e5:d3:67:c7:92:28:51:fe:87:ce:c8:be:5a:8c:7c:c1:9e: 9c:c2:3b:f8:56:7a:cc:60:09:de:0f:fc:12:5d:90:bf:9c:6f: 84:2b:0a:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfLYVFF34wKQ7/mwCAHY95Ymm8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTEyMDMwNjI1NDJaFw0yNTEyMDYwODAxNDJaMDMxMTAvBgNV BAMTKDVCMTk1MjczMDhCRDgzMUQxOUY0N0NGNjlERTk2RDI5QzU4OEQ4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC463ZMGkLomSwd95UR0st4tIT2 zWujjjq1Bn6BkX31qGI26qKNpi5vV1pSqiMaU2lGUu9LpVtbCNH7RDuHEi/Kzk9M YoAUfXlJ/B/YtgrVEUfMFYu9CqKff/T89bIW+hmAx4u8ffpgWQeWERptYKf1cXGX PeDKIaHHgXkUNYoioahXQQBaaqRv9qWYNpYCjjpP7/jOrXkZDPiqejrBv51kukKw ITAoGEZKTOVd/rPyKVnM8TvQ4voQf30peaLDsrpHc8mEg1j9Z9B9n8tbl6GIdPUm 0XOq68peHxFYSU8hQ4ZMojk1Ex7luJDd35va+yFq9fSJoHdn/5uPOh0/bMHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxlScwi9gx0Z9Hz2neltKcWI2CEwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrlGaClMNLlCxdLU874I43a1uXKsJuJdk7M aq10ad2O/UojdFDHSUHGGKWWE7Ogvq/fUfKQzBcuG5iNXJoUnyvbKLX7tPbdSpyE aM1fzufxMkaMw/rYPTudwz6d2FKaQ1z+ZWXUJKLLbQwdzLEHXPxeuqz5qYzVFfv7 P/bW1WgUNlnJtS/fIcCPqohVn+/YM0tQVzQZuyAfQ7tn0KExk8urd69QfzYMN5b3 oYvALeHPLxC0QTMGQxN8bdqPgRXenH7XAqUpxQzQPCHUMa91xuApg5xPY5JKlYjl 02fHkihR/ofOyL5ajHzBnpzCO/hWesxgCd4P/BJdkL+cb4QrCpA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:49 2025 by rpki-client