This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: ClZnWtGN/fToTBv7EShzYUqg5Fyu/5YX9TljmzIblnQ= Subject key identifier: AB:21:75:A8:3D:06:11:C5:CB:95:B4:8F:27:B5:35:CE:BF:A3:8A:1A Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 2C03F27DE080E160C75FEFB0DB0BB9146EC55502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0104 Signing time: Thu 18 Dec 2025 05:32:21 +0000 Manifest this update: Thu 18 Dec 2025 05:27:21 +0000 Manifest next update: Sun 21 Dec 2025 12:11:21 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: NCeBzHElRERoAcheNymqu/sMRZ8ckJtXP3T7v26RsLg=) 2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:03:f2:7d:e0:80:e1:60:c7:5f:ef:b0:db:0b:b9:14:6e:c5:55:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Dec 18 05:27:21 2025 GMT Not After : Dec 21 12:11:21 2025 GMT Subject: CN=AB2175A83D0611C5CB95B48F27B535CEBFA38A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:30:ce:1e:6e:9a:7d:22:bf:46:5c:e1:7f: c7:a5:ab:c5:67:84:cc:78:73:df:97:4b:ed:84:7d: b9:6a:5b:96:c9:ef:7a:c7:0d:a9:84:04:cf:ea:27: 05:3c:c0:58:be:10:29:4f:4f:f6:2f:fa:a2:68:62: c1:8c:89:50:d8:68:d7:bd:93:c9:11:b7:3d:68:90: 6b:6e:ec:ea:1c:c9:b8:fc:7a:3a:4d:34:69:2e:82: a4:f9:73:d6:42:55:1a:d9:55:60:b4:02:e2:c1:1e: d4:f2:b8:56:0b:c6:52:c4:a1:88:0d:09:26:3e:db: b6:27:12:c8:04:b2:ed:e2:a4:3a:a1:de:33:6a:9a: 83:fb:97:19:d4:e8:6c:0d:ea:7c:bb:6d:23:ea:d7: 80:d1:d7:10:8d:68:15:2e:a4:9c:35:c0:85:6b:cf: 9e:30:fb:02:2a:34:e7:7c:d3:43:2b:53:c7:c8:2d: 44:96:7e:b2:8e:a1:35:23:62:ee:74:ec:85:fb:02: 72:82:3f:c6:53:b7:6b:c8:2f:20:63:74:83:bd:ed: 92:63:2a:39:af:27:d0:b5:c9:4f:62:cd:28:e3:09: 66:fa:b0:eb:2e:ee:16:7f:80:fe:ae:6c:be:a0:cc: cc:8a:77:12:4c:a5:c5:f8:0f:76:2b:27:92:67:96: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:21:75:A8:3D:06:11:C5:CB:95:B4:8F:27:B5:35:CE:BF:A3:8A:1A X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:60:df:78:d6:84:32:35:44:87:1c:5b:cf:8b:87:db:98:db: 03:d7:3d:c2:d8:87:56:fe:32:34:e4:7a:34:a2:bb:63:04:d8: 4c:37:2a:a0:85:80:57:c0:7d:21:a7:f4:9d:b4:2a:4b:d4:34: f1:e8:d6:40:0b:57:5b:98:6b:5a:1d:2d:f7:52:38:08:60:69: b7:81:a8:16:e7:20:cb:98:97:a6:ec:f3:f2:d1:0d:7e:c4:e2: 93:1b:db:1d:42:55:ff:bd:69:69:52:0f:78:26:06:ed:ab:d9: 75:60:64:84:75:0e:fc:f9:4c:be:49:9b:d5:b6:74:d9:58:10: 53:5b:d2:ac:57:47:e4:d2:7e:f2:b3:4b:7f:6c:55:35:d4:8c: ff:fd:d1:06:04:d4:8c:76:04:04:0a:85:09:75:2d:ba:7e:c8: 3f:53:0c:5c:d0:75:aa:c7:0f:19:43:ce:a4:31:bd:26:95:0f: eb:ac:54:a7:2d:bc:0d:ab:41:90:4e:1f:e1:1c:60:72:aa:29: 47:42:cc:b0:f6:c4:e5:9a:3a:d2:8b:35:57:8d:f4:63:a0:f9: cb:ed:19:40:ee:32:c6:d7:88:4f:4f:96:e6:81:16:90:e6:f5: b0:0b:5e:d5:a5:31:fd:5b:42:92:ca:f2:0e:80:7c:97:31:21: d2:d7:34:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAPyfeCA4WDHX++w2wu5FG7FVQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTEyMTgwNTI3MjFaFw0yNTEyMjExMjExMjFaMDMxMTAvBgNV BAMTKEFCMjE3NUE4M0QwNjExQzVDQjk1QjQ4RjI3QjUzNUNFQkZBMzhBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3TDOHm6afSK/Rlzhf8elq8Vn hMx4c9+XS+2EfblqW5bJ73rHDamEBM/qJwU8wFi+EClPT/Yv+qJoYsGMiVDYaNe9 k8kRtz1okGtu7Oocybj8ejpNNGkugqT5c9ZCVRrZVWC0AuLBHtTyuFYLxlLEoYgN CSY+27YnEsgEsu3ipDqh3jNqmoP7lxnU6GwN6ny7bSPq14DR1xCNaBUupJw1wIVr z54w+wIqNOd800MrU8fILUSWfrKOoTUjYu507IX7AnKCP8ZTt2vILyBjdIO97ZJj KjmvJ9C1yU9izSjjCWb6sOsu7hZ/gP6ubL6gzMyKdxJMpcX4D3YrJ5JnlvNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqyF1qD0GEcXLlbSPJ7U1zr+jihowHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdg33jWhDI1RIccW8+Lh9uY2wPXPcLYh1b+ MjTkejSiu2ME2Ew3KqCFgFfAfSGn9J20KkvUNPHo1kALV1uYa1odLfdSOAhgabeB qBbnIMuYl6bs8/LRDX7E4pMb2x1CVf+9aWlSD3gmBu2r2XVgZIR1Dvz5TL5Jm9W2 dNlYEFNb0qxXR+TSfvKzS39sVTXUjP/90QYE1Ix2BAQKhQl1Lbp+yD9TDFzQdarH DxlDzqQxvSaVD+usVKctvA2rQZBOH+EcYHKqKUdCzLD2xOWaOtKLNVeN9GOg+cvt GUDuMsbXiE9PluaBFpDm9bALXtWlMf1bQpLK8g6AfJcxIdLXNHs= -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:44 2025 by rpki-client