This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: qCYNyelp3G67dkkpcnejR7NuhPKBu12cOHYwwWQ6kao= Subject key identifier: 35:67:73:FB:3C:EA:E5:E9:5D:3E:FA:B3:0D:7E:5E:72:A8:C8:DA:8F Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 429DEDFAA0A446CBB1BBCEF39BA85EE96C4E3029 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0109 Signing time: Tue 02 Dec 2025 08:11:44 +0000 Manifest this update: Tue 02 Dec 2025 08:06:44 +0000 Manifest next update: Fri 05 Dec 2025 10:38:44 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: aPp0d9Rdj+NDZHFFORDxV5l6ZcOAgyuuqKR3Nvl+S0g=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9d:ed:fa:a0:a4:46:cb:b1:bb:ce:f3:9b:a8:5e:e9:6c:4e:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Dec 2 08:06:44 2025 GMT Not After : Dec 5 10:38:44 2025 GMT Subject: CN=356773FB3CEAE5E95D3EFAB30D7E5E72A8C8DA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:50:da:0d:d4:d1:5e:6b:b3:da:b5:d5:ed: 10:0a:d8:80:d8:58:ad:75:24:61:e3:a9:a6:19:19: c2:f3:1a:66:43:ca:93:5c:fc:04:7f:53:e3:4e:9c: aa:76:1e:08:92:6a:4e:ba:a5:23:1b:32:a5:b6:99: 7c:c2:96:54:53:35:69:bf:bd:c4:e0:81:ee:9c:ae: 3a:e0:18:73:87:6e:fe:c5:b8:80:d6:2a:45:21:a6: ff:15:ac:ea:c8:4a:69:ad:78:e7:fe:00:e0:f3:7c: dd:8c:4c:e7:43:d6:dd:89:ba:86:93:63:41:7e:4f: df:8c:aa:35:6d:07:5e:52:e0:0c:43:54:af:ac:00: 57:aa:ed:ba:5d:d1:90:c9:7b:ea:de:15:33:d1:7b: b5:63:04:06:3c:c8:2f:8c:f1:d2:23:a7:e4:42:69: 02:4d:8e:da:c7:49:80:b3:e0:83:6f:17:4a:f9:40: 97:30:a5:89:22:c8:d6:23:e4:c0:9a:49:57:84:e3: 34:da:64:de:63:38:1a:59:05:a0:d9:3d:5c:fb:72: 8d:ea:4a:7a:46:b5:a5:38:54:dd:c4:48:3c:47:c8: 12:15:69:e4:85:85:58:c1:a7:cf:4a:bf:38:03:c5: 04:d3:74:5e:4f:a8:a2:a7:a5:21:af:32:1f:00:dc: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:73:FB:3C:EA:E5:E9:5D:3E:FA:B3:0D:7E:5E:72:A8:C8:DA:8F X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6d:ed:a1:c4:fa:8d:4b:6d:c3:1e:0a:c5:62:07:57:2d:0e: 81:94:49:20:4e:2f:af:32:7e:e1:08:79:6f:c2:9d:40:2d:e1: 61:1d:40:2f:c3:00:e2:32:da:5e:b6:2c:82:22:6f:eb:31:76: be:fb:76:7f:54:5b:ac:60:3c:8c:1e:27:a0:b2:14:ec:44:dc: a4:40:86:e8:42:e0:7c:d0:1e:4d:22:10:32:17:32:9c:b4:c8: 53:74:2f:8c:3e:04:d8:b9:2b:9f:5c:34:2d:a9:5b:8b:7a:ac: 10:4c:02:74:74:14:b8:d0:df:45:49:0b:92:db:86:4f:a6:89: 8c:52:3e:aa:04:ef:f5:d9:7f:9b:73:a4:b3:28:23:05:e9:c7: bb:29:fa:11:fd:2e:aa:be:4a:e3:57:94:20:b6:d4:eb:3c:62: c7:a4:0e:7c:a2:ec:b3:38:34:60:56:2a:05:24:a9:39:77:13: 24:86:4e:5a:e8:be:fa:a9:99:53:db:a4:e3:eb:f8:21:ca:92: c3:b7:69:5f:50:35:9b:20:07:b3:29:34:e5:01:36:f2:c6:8e: 1f:42:2e:48:f8:ef:0d:8f:c8:62:f5:43:64:66:9a:07:d8:f9: 4f:2c:a9:06:54:53:c2:eb:c9:eb:d2:1d:21:18:ed:d0:89:e1: 13:cc:06:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp3t+qCkRsuxu87zm6he6WxOMCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTEyMDIwODA2NDRaFw0yNTEyMDUxMDM4NDRaMDMxMTAvBgNV BAMTKDM1Njc3M0ZCM0NFQUU1RTk1RDNFRkFCMzBEN0U1RTcyQThDOERBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeX1DaDdTRXmuz2rXV7RAK2IDY WK11JGHjqaYZGcLzGmZDypNc/AR/U+NOnKp2HgiSak66pSMbMqW2mXzCllRTNWm/ vcTgge6crjrgGHOHbv7FuIDWKkUhpv8VrOrISmmteOf+AODzfN2MTOdD1t2JuoaT Y0F+T9+MqjVtB15S4AxDVK+sAFeq7bpd0ZDJe+reFTPRe7VjBAY8yC+M8dIjp+RC aQJNjtrHSYCz4INvF0r5QJcwpYkiyNYj5MCaSVeE4zTaZN5jOBpZBaDZPVz7co3q SnpGtaU4VN3ESDxHyBIVaeSFhVjBp89KvzgDxQTTdF5PqKKnpSGvMh8A3IC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWdz+zzq5eldPvqzDX5ecqjI2o8wHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtt7aHE+o1LbcMeCsViB1ctDoGUSSBOL68y fuEIeW/CnUAt4WEdQC/DAOIy2l62LIIib+sxdr77dn9UW6xgPIweJ6CyFOxE3KRA huhC4HzQHk0iEDIXMpy0yFN0L4w+BNi5K59cNC2pW4t6rBBMAnR0FLjQ30VJC5Lb hk+miYxSPqoE7/XZf5tzpLMoIwXpx7sp+hH9Lqq+SuNXlCC21Os8YsekDnyi7LM4 NGBWKgUkqTl3EySGTlrovvqpmVPbpOPr+CHKksO3aV9QNZsgB7MpNOUBNvLGjh9C Lkj47w2PyGL1Q2RmmgfY+U8sqQZUU8LryevSHSEY7dCJ4RPMBhc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:35:28 2025 by rpki-client