This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: /9wdOflJe73zza5A7yDL4+Nb41kFX+pqNMdcekGVRgY= Subject key identifier: 4D:42:32:4B:D8:82:EC:0C:D0:AE:C5:E7:A9:60:A3:98:27:2A:6B:9C Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 7D26A4ADA8188C198C6D5A9D69D05EACADD36095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 5B Signing time: Tue 02 Dec 2025 19:21:05 +0000 Manifest this update: Tue 02 Dec 2025 19:16:05 +0000 Manifest next update: Sat 06 Dec 2025 05:28:05 +0000 Files and hashes: 1: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: QxMjLH1EoVoyEkXyogqIovZ1ZdYrbn3h/4yqU2aviZY=) 2: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:26:a4:ad:a8:18:8c:19:8c:6d:5a:9d:69:d0:5e:ac:ad:d3:60:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Dec 2 19:16:05 2025 GMT Not After : Dec 6 05:28:05 2025 GMT Subject: CN=4D42324BD882EC0CD0AEC5E7A960A398272A6B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:5d:2b:96:9a:d7:19:3b:4e:d2:41:9b:e5: 50:ab:c9:79:b9:a6:6f:1b:0f:15:66:4e:6f:0c:b5: 74:e5:8c:ca:ee:94:7c:88:8a:70:da:24:27:68:a8: 87:aa:1e:2c:00:fb:ff:45:6f:15:a0:fc:3a:6d:41: d5:17:4c:e7:76:29:0e:fe:71:b0:e5:a4:d6:3d:31: 6b:38:5f:27:4b:46:4f:da:df:c2:d3:b6:e5:cd:e9: 1c:88:2f:e1:18:9e:38:2c:b2:49:4f:52:f5:e4:de: cb:67:f6:7f:48:e0:9c:3b:35:48:e8:30:41:95:9d: 99:db:19:08:b5:94:cc:78:59:4c:9f:b4:39:ab:22: 10:a3:a3:9e:62:ea:e9:88:5d:82:21:9b:7d:e9:7e: fc:9e:8c:b5:d7:04:4b:ac:2c:d3:bc:b0:7e:67:9a: e6:73:e3:ef:0f:2f:e0:28:4c:29:fb:54:64:3d:62: 0e:c4:0c:f4:a2:59:6d:01:86:37:cb:e3:d3:48:a2: f7:dc:dd:2f:45:43:75:12:93:f1:fb:43:4b:d0:dc: 44:1c:92:ca:e4:a3:11:a7:51:26:ee:6e:5d:df:63: f8:c2:23:f9:a0:27:3d:a8:e3:d0:fa:61:01:de:d8: a9:84:cf:7c:d7:be:7d:18:29:fd:e9:74:a4:91:35: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:42:32:4B:D8:82:EC:0C:D0:AE:C5:E7:A9:60:A3:98:27:2A:6B:9C X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:19:e1:88:41:79:b2:ed:97:cc:48:6c:99:8d:38:70:b0:70: c1:a3:28:96:f5:88:60:8a:3b:fe:54:7f:8f:5a:bf:7f:cd:45: 90:2e:7b:b5:ac:73:c4:1f:d4:40:38:bb:26:e5:dc:86:3b:23: b0:fa:9d:26:38:16:d0:ab:7f:2a:f8:70:1b:d7:ff:bc:4d:4a: 97:39:2d:4e:e1:47:e0:13:f5:f3:db:ba:6e:17:03:82:81:5f: 85:07:67:d0:e4:83:e8:72:07:3d:e5:05:e3:fb:0d:7e:0f:cd: c7:ee:2d:ee:0b:7a:ee:91:52:4e:99:4c:22:43:76:59:01:75: 8e:58:de:6c:90:de:e9:5a:ef:3f:03:c3:57:9c:07:3d:d4:b4: 95:98:33:44:19:7d:85:bd:81:51:b7:1c:3d:67:7a:6b:18:98: 24:ff:d9:75:c9:9e:df:1c:be:06:88:4a:5d:a8:b4:05:f8:d7: b7:30:14:2a:79:56:0b:c1:c6:25:88:ff:6c:92:cf:0e:4b:ff: 8c:09:b6:e2:0c:ab:5e:45:47:99:65:26:71:e2:ad:16:b9:70: 7c:b4:b8:54:f3:15:0f:6e:7f:41:0a:ee:0b:9e:f8:0f:56:3f: e9:c9:5c:01:ae:cb:d8:56:a2:c6:7e:82:7e:40:15:14:04:67: de:b3:4e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSakragYjBmMbVqdadBerK3TYJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNTEyMDIxOTE2MDVaFw0yNTEyMDYwNTI4MDVaMDMxMTAvBgNV BAMTKDRENDIzMjRCRDg4MkVDMENEMEFFQzVFN0E5NjBBMzk4MjcyQTZCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RF0rlprXGTtO0kGb5VCryXm5 pm8bDxVmTm8MtXTljMrulHyIinDaJCdoqIeqHiwA+/9FbxWg/DptQdUXTOd2KQ7+ cbDlpNY9MWs4XydLRk/a38LTtuXN6RyIL+EYnjgssklPUvXk3stn9n9I4Jw7NUjo MEGVnZnbGQi1lMx4WUyftDmrIhCjo55i6umIXYIhm33pfvyejLXXBEusLNO8sH5n muZz4+8PL+AoTCn7VGQ9Yg7EDPSiWW0BhjfL49NIovfc3S9FQ3USk/H7Q0vQ3EQc ksrkoxGnUSbubl3fY/jCI/mgJz2o49D6YQHe2KmEz3zXvn0YKf3pdKSRNSj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUIyS9iC7AzQrsXnqWCjmCcqa5wwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcZ4YhBebLtl8xIbJmNOHCwcMGjKJb1iGCK O/5Uf49av3/NRZAue7Wsc8Qf1EA4uybl3IY7I7D6nSY4FtCrfyr4cBvX/7xNSpc5 LU7hR+AT9fPbum4XA4KBX4UHZ9Dkg+hyBz3lBeP7DX4PzcfuLe4Leu6RUk6ZTCJD dlkBdY5Y3myQ3ula7z8Dw1ecBz3UtJWYM0QZfYW9gVG3HD1nemsYmCT/2XXJnt8c vgaISl2otAX417cwFCp5VgvBxiWI/2ySzw5L/4wJtuIMq15FR5llJnHirRa5cHy0 uFTzFQ9uf0EK7gue+A9WP+nJXAGuy9hWosZ+gn5AFRQEZ96zThM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:31 2025 by rpki-client