This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: hqFdPu/qcf4rDfBO/uOs0K1znePbwz34DnwOl3KgNTc= Subject key identifier: F6:24:2E:90:EC:8A:89:6F:16:87:58:35:4C:4D:B1:D4:2C:32:A5:C4 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 5A86DD5AF1920D996DAA53D29D0A377F20D214B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 022A Signing time: Tue 02 Dec 2025 11:11:18 +0000 Manifest this update: Tue 02 Dec 2025 11:06:18 +0000 Manifest next update: Fri 05 Dec 2025 18:54:18 +0000 Files and hashes: 1: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: z2U3253GZHc+4WceLADHJFRgO+gLDFvxLN7iI4mRbjo=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=) 3: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:86:dd:5a:f1:92:0d:99:6d:aa:53:d2:9d:0a:37:7f:20:d2:14:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Dec 2 11:06:18 2025 GMT Not After : Dec 5 18:54:18 2025 GMT Subject: CN=F6242E90EC8A896F168758354C4DB1D42C32A5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:9e:eb:f1:8d:6c:57:80:32:bd:a8:66:56: fa:f1:a1:14:40:47:b1:8b:1a:21:c9:df:a5:5b:fa: d9:d2:0e:d6:fc:55:1d:8f:89:7e:5a:1c:98:7a:d1: 96:0c:05:46:e1:90:20:5a:d0:84:c1:83:07:ad:7f: f5:87:0d:79:31:c3:e2:28:d1:65:b8:4d:04:47:ac: 2e:f6:50:83:83:2d:26:b6:0b:2b:0e:30:13:a0:76: 1e:ce:e5:41:79:3e:13:82:d0:3f:13:cd:d8:ec:09: 64:2f:2e:21:27:41:45:2c:1d:96:16:9d:98:e2:2d: 56:20:cc:09:1c:41:c2:71:3b:3c:90:8a:3c:bc:2a: 07:e1:2b:dd:14:2a:19:b8:9f:dc:ad:02:ad:76:6a: 7c:8d:33:b6:73:f3:14:ff:af:08:6a:10:14:97:e4: 43:e4:e7:cd:a9:e4:bc:88:4c:1d:26:eb:e0:2c:90: 77:8e:ef:cb:06:8b:c4:4d:3f:38:32:b4:a2:4f:56: 63:f0:7d:97:a8:4a:63:61:d2:ff:5f:46:f2:38:57: cc:9b:83:ac:8b:33:2d:8f:a5:cd:b5:4e:29:fc:1a: fc:ec:cc:16:07:f5:92:3b:8b:21:ad:ad:73:59:7f: 95:8f:c6:08:1d:b0:73:d3:e5:cc:b0:ae:41:ef:eb: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:2E:90:EC:8A:89:6F:16:87:58:35:4C:4D:B1:D4:2C:32:A5:C4 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b4:d1:ac:64:fa:d0:ca:ec:a5:f2:04:ea:3b:cd:ab:ed:81: 3c:74:8d:0c:6d:65:37:e7:16:e4:8d:41:fb:cd:64:d9:4e:b4: d0:3f:07:bc:97:a3:43:0b:92:b5:b4:cb:3a:5b:4a:f9:ee:d4: 84:ba:50:9b:33:55:d1:a7:43:ed:31:c4:8b:03:14:38:6f:94: d7:7e:71:ba:ea:3c:1c:5b:32:6d:6a:cd:9e:1a:cf:43:05:33: 26:53:43:9f:dd:e5:56:a6:f4:fb:2b:74:da:8c:d1:a9:43:5e: f4:ff:bf:01:71:5e:80:80:30:14:a5:85:55:0a:e2:da:54:20: 06:47:fb:f9:cf:e4:84:c3:3b:66:d2:cb:ce:34:bc:2d:a4:02: 47:b5:35:a8:20:ac:d1:31:40:f4:58:22:78:d9:2e:73:4c:54: 92:ab:db:6b:55:c5:74:a3:7b:6d:55:2b:26:2b:4f:c2:14:a2: 3a:a0:01:54:8f:c0:4a:a5:f4:47:84:fc:92:20:a1:1d:e8:7c: 0b:ce:b6:41:87:08:b1:f1:09:7b:77:f7:de:ca:1c:f3:75:c8: 9a:9a:18:62:42:99:b9:0c:63:37:aa:f0:83:23:9e:15:9a:73: af:38:91:4c:7e:79:43:a9:34:d7:7c:46:57:9d:5f:3b:04:60: 97:d9:c7:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWobdWvGSDZltqlPSnQo3fyDSFLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTEyMDIxMTA2MThaFw0yNTEyMDUxODU0MThaMDMxMTAvBgNV BAMTKEY2MjQyRTkwRUM4QTg5NkYxNjg3NTgzNTRDNERCMUQ0MkMzMkE1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcp7r8Y1sV4AyvahmVvrxoRRA R7GLGiHJ36Vb+tnSDtb8VR2PiX5aHJh60ZYMBUbhkCBa0ITBgwetf/WHDXkxw+Io 0WW4TQRHrC72UIODLSa2CysOMBOgdh7O5UF5PhOC0D8TzdjsCWQvLiEnQUUsHZYW nZjiLVYgzAkcQcJxOzyQijy8KgfhK90UKhm4n9ytAq12anyNM7Zz8xT/rwhqEBSX 5EPk582p5LyITB0m6+AskHeO78sGi8RNPzgytKJPVmPwfZeoSmNh0v9fRvI4V8yb g6yLMy2Ppc21Tin8GvzszBYH9ZI7iyGtrXNZf5WPxggdsHPT5cywrkHv61Z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iQukOyKiW8Wh1g1TE2x1CwypcQwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa00axk+tDK7KXyBOo7zavtgTx0jQxtZTfn FuSNQfvNZNlOtNA/B7yXo0MLkrW0yzpbSvnu1IS6UJszVdGnQ+0xxIsDFDhvlNd+ cbrqPBxbMm1qzZ4az0MFMyZTQ5/d5Vam9PsrdNqM0alDXvT/vwFxXoCAMBSlhVUK 4tpUIAZH+/nP5ITDO2bSy840vC2kAke1NaggrNExQPRYInjZLnNMVJKr22tVxXSj e21VKyYrT8IUojqgAVSPwEql9EeE/JIgoR3ofAvOtkGHCLHxCXt3997KHPN1yJqa GGJCmbkMYzeq8IMjnhWac684kUx+eUOpNNd8RledXzsEYJfZx2M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:29 2025 by rpki-client