This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: 88xQxvyicjTrPiqkt4zT2rJAUkysOnBNka/k/Fu3dTI= Subject key identifier: 1F:84:7B:7A:B8:1F:BA:94:60:A3:01:20:53:98:3A:C5:BB:3E:93:D2 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 3A32FB4363BE0259E68F68D90529B2CD55D0A8DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: 0100 Signing time: Tue 09 Dec 2025 03:02:22 +0000 Manifest this update: Tue 09 Dec 2025 02:57:22 +0000 Manifest next update: Fri 12 Dec 2025 11:52:22 +0000 Files and hashes: 1: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: 8Rls8BsGJsJ9WVQC14zW3hpg44y2Lg9oSH6TF4K3MZg=) 2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) 3: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 11:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:fb:43:63:be:02:59:e6:8f:68:d9:05:29:b2:cd:55:d0:a8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Dec 9 02:57:22 2025 GMT Not After : Dec 12 11:52:22 2025 GMT Subject: CN=1F847B7AB81FBA9460A3012053983AC5BB3E93D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a1:e3:f3:a9:da:89:d4:9c:5e:4d:90:63:e4: 9e:2d:5d:d3:22:e3:eb:d1:80:60:f9:5c:36:cc:86: 40:95:cd:4b:bc:28:c7:e4:86:8c:5c:6f:bb:d8:c9: fb:20:91:90:51:61:7e:3a:5d:95:f0:2c:40:ac:10: 60:7f:e0:60:01:93:4c:24:b1:18:7b:01:0b:fd:29: 17:ed:d4:de:40:17:c0:cb:96:0a:24:50:f9:9d:c8: 24:10:4f:4c:50:e9:81:43:16:8a:6a:06:69:b7:21: 9a:48:02:f7:47:38:6f:d8:4b:17:d3:e1:62:ae:a8: df:28:d9:98:37:02:62:d8:97:71:ac:09:7a:8a:ef: b5:f3:a6:9a:63:6a:78:60:81:0e:91:94:bf:e1:65: 81:1c:bf:0c:90:59:58:9a:d2:69:16:d6:d2:7c:4c: b4:09:fe:c2:b8:1c:06:9d:b8:46:68:3e:cd:42:f3: c0:93:bf:94:d4:46:b6:66:ff:8c:5e:0c:08:68:5b: d5:74:3c:85:01:6c:b4:79:a8:74:e7:d8:7f:95:eb: 08:36:0d:48:83:64:8f:2f:28:95:ac:fe:bd:c7:a5: b5:a9:17:8f:cf:dc:ea:11:7b:c7:f0:b6:16:98:af: bd:66:34:d8:0b:24:4d:60:89:3d:d4:0c:79:11:3f: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:7B:7A:B8:1F:BA:94:60:A3:01:20:53:98:3A:C5:BB:3E:93:D2 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:a1:f0:14:24:d3:06:95:a9:d7:3b:5a:0b:36:58:98:49: a3:d1:3d:29:5f:6a:ce:42:b8:4e:f5:7b:a1:00:2c:3c:b4:83: e4:0b:1e:41:2e:60:62:61:e3:04:03:f0:76:58:4f:d5:84:12: 60:f3:fd:cf:1c:6f:2f:65:de:df:e5:30:23:dc:90:e9:c6:67: ec:aa:20:98:cd:89:8a:94:f6:7d:80:9e:8b:39:48:13:89:e0: 17:3c:08:99:75:44:70:4d:dc:1b:77:5f:52:ff:b7:3f:c7:00: c7:46:4d:8e:a4:d3:d6:5a:22:c2:3a:9a:6d:88:aa:47:2a:db: ff:0e:ea:db:ec:07:86:1a:b7:20:18:a3:cb:a8:ca:77:99:4f: b5:14:8c:17:a9:79:ce:52:52:0f:4e:24:fb:e1:c0:f2:66:e0: a9:a8:fd:3a:1b:45:ca:e3:a5:73:08:0b:d0:ef:e7:20:da:8c: 8c:35:d3:f9:e3:e8:99:d8:1f:b0:af:7b:6f:42:95:b1:1d:2e: 69:14:45:75:36:b7:b5:f5:cc:2e:a2:ed:01:e9:09:de:67:91: 97:ef:5b:5f:4c:92:d8:42:02:7e:da:97:61:b4:b1:70:10:8e: 69:ca:d0:bb:32:bd:4c:82:4b:d9:bb:42:7a:a1:46:25:20:6d: b4:a7:5e:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjL7Q2O+Alnmj2jZBSmyzVXQqNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTEyMDkwMjU3MjJaFw0yNTEyMTIxMTUyMjJaMDMxMTAvBgNV BAMTKDFGODQ3QjdBQjgxRkJBOTQ2MEEzMDEyMDUzOTgzQUM1QkIzRTkzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwoePzqdqJ1JxeTZBj5J4tXdMi 4+vRgGD5XDbMhkCVzUu8KMfkhoxcb7vYyfsgkZBRYX46XZXwLECsEGB/4GABk0wk sRh7AQv9KRft1N5AF8DLlgokUPmdyCQQT0xQ6YFDFopqBmm3IZpIAvdHOG/YSxfT 4WKuqN8o2Zg3AmLYl3GsCXqK77XzpppjanhggQ6RlL/hZYEcvwyQWVia0mkW1tJ8 TLQJ/sK4HAaduEZoPs1C88CTv5TURrZm/4xeDAhoW9V0PIUBbLR5qHTn2H+V6wg2 DUiDZI8vKJWs/r3HpbWpF4/P3OoRe8fwthaYr71mNNgLJE1giT3UDHkRP9BZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4R7ergfupRgowEgU5g6xbs+k9IwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3GofAUJNMGlanXO1oLNliYSaPRPSlfas5C uE71e6EALDy0g+QLHkEuYGJh4wQD8HZYT9WEEmDz/c8cby9l3t/lMCPckOnGZ+yq IJjNiYqU9n2Anos5SBOJ4Bc8CJl1RHBN3Bt3X1L/tz/HAMdGTY6k09ZaIsI6mm2I qkcq2/8O6tvsB4YatyAYo8uoyneZT7UUjBepec5SUg9OJPvhwPJm4Kmo/TobRcrj pXMIC9Dv5yDajIw10/nj6JnYH7Cve29ClbEdLmkURXU2t7X1zC6i7QHpCd5nkZfv W19MkthCAn7al2G0sXAQjmnK0LsyvUyCS9m7QnqhRiUgbbSnXpE= -----END CERTIFICATE-----Generated at Wed Dec 10 05:33:34 2025 by rpki-client