This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: vPhXKnOpEwXMDiAWhTdfJyK09cpSzPfKjypd34wday0= Subject key identifier: 5C:5C:19:2F:16:62:80:FE:6C:C3:62:85:74:DA:CF:B5:8D:DC:F3:59 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 79700BAC29ADD8A4172E1FCFF3DAC8B57C3BFB33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0288 Signing time: Tue 02 Dec 2025 06:01:47 +0000 Manifest this update: Tue 02 Dec 2025 05:56:47 +0000 Manifest next update: Fri 05 Dec 2025 09:50:47 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: jVRIld2JPJMmT6uUYyW1u45U6Gcgm+RbiJ0hB+iTZiM=) 2: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 4: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 5: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:70:0b:ac:29:ad:d8:a4:17:2e:1f:cf:f3:da:c8:b5:7c:3b:fb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Dec 2 05:56:47 2025 GMT Not After : Dec 5 09:50:47 2025 GMT Subject: CN=5C5C192F166280FE6CC3628574DACFB58DDCF359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:95:99:08:cb:0c:ac:9d:88:8a:20:9c:06:74: 37:97:20:67:d4:22:e0:1f:b8:48:60:5c:a1:a2:af: 1f:e5:15:88:54:7f:80:65:b1:cc:eb:7a:5d:97:7f: f3:4a:cd:9f:76:3e:f1:fe:37:99:61:8b:3c:76:5f: 5d:04:b1:21:7d:b7:09:d5:53:46:2a:81:40:fa:81: 03:3e:2c:03:0c:4f:f8:86:50:53:69:f6:1b:c0:44: 2f:60:63:3c:09:66:3e:30:d3:82:61:a5:2c:58:97: cf:b8:ec:cd:45:e6:3b:d9:f6:03:a1:0a:7f:e5:3d: a9:27:f9:b1:18:4c:e3:94:5b:2d:0d:17:15:4a:68: ab:d5:35:f5:3d:d7:c9:dc:8d:ad:c8:42:3e:e7:88: 79:b6:62:8c:87:00:43:67:3e:27:ae:ee:3e:26:05: c3:cc:d3:6c:de:11:98:23:21:5e:f0:04:5e:a3:93: 5b:df:f2:7a:10:a1:78:b4:63:7b:0b:12:c8:53:8e: 40:93:e6:7a:c8:a8:4f:c7:cb:f5:38:e0:b0:b9:09: 55:e5:3e:32:47:9e:d8:20:58:03:c0:73:23:8b:d4: ff:a4:e4:c3:ba:0b:b5:0a:69:c1:32:10:84:a2:3e: d8:97:be:e7:15:f0:9b:dd:3d:c4:e6:25:b8:1b:7c: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:19:2F:16:62:80:FE:6C:C3:62:85:74:DA:CF:B5:8D:DC:F3:59 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3a:36:c4:28:8b:a7:f4:cc:aa:e7:bf:f7:fd:e9:85:90:70: b8:60:67:f7:a6:7c:b5:51:df:22:99:8e:72:31:65:07:9c:1c: 14:83:ec:53:45:33:9f:38:e8:0f:c8:f5:1f:d4:23:0d:a9:aa: fe:42:8c:de:3b:21:61:9d:d1:56:f9:dc:24:b7:97:88:81:d4: 5a:92:b2:64:c7:cc:a3:34:57:05:f8:bb:7a:fa:48:0b:aa:3c: 3f:87:cb:ed:a6:c3:4c:58:2b:1b:de:27:68:52:30:f2:2a:c9: 6a:ec:44:80:ac:d3:80:f5:76:4c:ec:c8:19:b2:a1:cd:f9:e2: 79:17:48:b6:aa:83:89:6a:8b:ad:fe:34:c2:1d:93:20:3c:04: 9d:11:6e:68:d0:09:83:7f:ee:aa:89:5b:f5:ff:7f:ca:cb:25: 5e:9c:19:8f:63:7c:01:4a:08:e9:38:9f:18:02:28:e9:db:45: 8b:02:43:d5:07:77:74:a5:eb:57:71:f5:69:79:12:0a:a6:9d: 6f:2f:89:70:a2:b4:c4:0d:17:97:9a:6a:49:a0:49:ba:a3:1f: f2:8f:0d:4f:05:41:7e:37:cf:db:47:7c:14:55:6b:2a:e4:16: c0:bd:83:41:af:40:53:51:08:92:e4:41:f1:60:e6:70:28:04: c6:0d:4e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXALrCmt2KQXLh/P89rItXw7+zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTEyMDIwNTU2NDdaFw0yNTEyMDUwOTUwNDdaMDMxMTAvBgNV BAMTKDVDNUMxOTJGMTY2MjgwRkU2Q0MzNjI4NTc0REFDRkI1OEREQ0YzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxlZkIywysnYiKIJwGdDeXIGfU IuAfuEhgXKGirx/lFYhUf4Blsczrel2Xf/NKzZ92PvH+N5lhizx2X10EsSF9twnV U0YqgUD6gQM+LAMMT/iGUFNp9hvARC9gYzwJZj4w04JhpSxYl8+47M1F5jvZ9gOh Cn/lPakn+bEYTOOUWy0NFxVKaKvVNfU918ncja3IQj7niHm2YoyHAENnPieu7j4m BcPM02zeEZgjIV7wBF6jk1vf8noQoXi0Y3sLEshTjkCT5nrIqE/Hy/U44LC5CVXl PjJHntggWAPAcyOL1P+k5MO6C7UKacEyEISiPtiXvucV8JvdPcTmJbgbfESbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFwZLxZigP5sw2KFdNrPtY3c81kwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA6NsQoi6f0zKrnv/f96YWQcLhgZ/emfLVR 3yKZjnIxZQecHBSD7FNFM5846A/I9R/UIw2pqv5CjN47IWGd0Vb53CS3l4iB1FqS smTHzKM0VwX4u3r6SAuqPD+Hy+2mw0xYKxveJ2hSMPIqyWrsRICs04D1dkzsyBmy oc354nkXSLaqg4lqi63+NMIdkyA8BJ0RbmjQCYN/7qqJW/X/f8rLJV6cGY9jfAFK COk4nxgCKOnbRYsCQ9UHd3Sl61dx9Wl5EgqmnW8viXCitMQNF5eaakmgSbqjH/KP DU8FQX43z9tHfBRVayrkFsC9g0GvQFNRCJLkQfFg5nAoBMYNTiI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:40 2025 by rpki-client