This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: QmgyDMRIl0uhSY3y1/ItKZc5hkHbjWHEgA7Lcik1lgI= Subject key identifier: 55:00:B1:CC:9D:8B:8D:95:0C:44:02:52:45:88:75:61:7A:13:28:B6 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 1318D2BE82B93D466BB1405270D7E69B39D59E48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04B2 Signing time: Tue 02 Dec 2025 04:02:07 +0000 Manifest this update: Tue 02 Dec 2025 03:57:07 +0000 Manifest next update: Fri 05 Dec 2025 14:43:07 +0000 Files and hashes: 1: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 4: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: UUq8zVo1fZaCxTTru65NjutBEoS/E+BJ68af9KugNAY=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:18:d2:be:82:b9:3d:46:6b:b1:40:52:70:d7:e6:9b:39:d5:9e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Dec 2 03:57:07 2025 GMT Not After : Dec 5 14:43:07 2025 GMT Subject: CN=5500B1CC9D8B8D950C440252458875617A1328B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:cb:d4:24:66:5b:6f:51:b8:63:d6:a0:f4: 94:a1:eb:32:87:cb:22:0b:2a:b6:4e:77:28:35:d2: c7:29:05:62:49:6d:56:43:13:63:19:c5:ab:f0:16: 1e:8d:4e:73:3a:72:7a:9d:91:0a:4e:8d:aa:eb:4a: 22:c6:77:d6:05:b1:e9:54:0f:5e:e9:4d:ea:11:42: 4e:ed:da:b2:c0:90:2c:95:7c:9a:e1:78:c9:bf:e2: 56:f2:75:ec:8b:13:32:7b:b5:e3:32:21:43:91:99: 36:41:97:95:63:0a:65:bd:1e:25:40:53:bf:97:46: 0c:1e:e3:6d:3d:9e:69:16:e1:04:c8:54:c5:c3:e5: af:c8:c2:93:04:ed:d5:80:d6:38:e1:cc:43:6b:fa: c7:f4:98:92:39:01:64:68:56:fd:bf:bd:15:6b:91: 61:9e:e6:a3:5a:c8:62:af:50:77:57:16:42:bb:55: 1f:3f:64:48:6b:9f:91:58:5f:cc:e3:11:9d:8c:c7: a6:e4:50:12:33:44:b6:0d:20:f7:d0:5d:97:21:8d: 59:53:f7:26:a3:19:94:ff:af:0c:0d:86:2f:5a:c8: d7:fc:de:cc:3f:25:b1:64:28:fa:df:59:e6:8a:7a: 5a:2e:57:6b:7c:1c:b3:da:23:45:18:d9:f3:d8:e1: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:00:B1:CC:9D:8B:8D:95:0C:44:02:52:45:88:75:61:7A:13:28:B6 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:32:9d:e0:70:22:b0:63:89:a3:61:ed:e3:29:66:54:7b:7c: 1e:b0:60:aa:d5:64:96:07:93:c1:d5:ef:22:8c:32:fe:9c:3f: 1f:e8:87:37:14:eb:b4:fa:08:20:4e:cc:bf:39:02:9b:39:f9: 4b:9a:42:56:c2:21:32:b8:c3:11:ab:db:51:03:64:b5:b1:04: f6:a2:22:11:60:47:eb:e4:5e:10:ef:22:37:35:a3:a5:64:a3: 1e:93:39:b8:2d:0d:57:eb:e0:80:37:e5:6c:3a:04:4e:f3:4c: d3:1f:7c:29:ef:c1:95:0f:cf:2e:2a:19:72:64:60:0b:f8:29: e5:c0:3f:e2:ae:83:a6:b1:a7:46:60:8f:7f:d9:da:12:a5:e6: 99:87:6b:e1:54:b5:b5:27:a4:44:17:3a:30:1f:1a:6e:36:dc: eb:f5:f7:04:2c:fa:69:5b:28:d7:92:73:ac:21:64:85:c2:23: bc:a0:df:38:59:0a:69:50:b8:a7:3e:6a:8a:91:35:86:a4:68: ff:52:88:05:59:ea:b7:60:0a:cf:96:e2:58:ee:a0:02:1a:2d: fd:ee:56:17:5e:91:33:23:eb:52:58:f8:4d:ca:80:b1:92:7c: 75:47:1d:a2:33:3f:d2:d1:73:fe:ba:3c:3f:65:a5:18:8e:78: 70:95:11:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExjSvoK5PUZrsUBScNfmmznVnkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTEyMDIwMzU3MDdaFw0yNTEyMDUxNDQzMDdaMDMxMTAvBgNV BAMTKDU1MDBCMUNDOUQ4QjhEOTUwQzQ0MDI1MjQ1ODg3NTYxN0ExMzI4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5cvUJGZbb1G4Y9ag9JSh6zKH yyILKrZOdyg10scpBWJJbVZDE2MZxavwFh6NTnM6cnqdkQpOjarrSiLGd9YFselU D17pTeoRQk7t2rLAkCyVfJrheMm/4lbydeyLEzJ7teMyIUORmTZBl5VjCmW9HiVA U7+XRgwe4209nmkW4QTIVMXD5a/IwpME7dWA1jjhzENr+sf0mJI5AWRoVv2/vRVr kWGe5qNayGKvUHdXFkK7VR8/ZEhrn5FYX8zjEZ2Mx6bkUBIzRLYNIPfQXZchjVlT 9yajGZT/rwwNhi9ayNf83sw/JbFkKPrfWeaKelouV2t8HLPaI0UY2fPY4fj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQCxzJ2LjZUMRAJSRYh1YXoTKLYwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM4yneBwIrBjiaNh7eMpZlR7fB6wYKrVZJYH k8HV7yKMMv6cPx/ohzcU67T6CCBOzL85Aps5+UuaQlbCITK4wxGr21EDZLWxBPai IhFgR+vkXhDvIjc1o6Vkox6TObgtDVfr4IA35Ww6BE7zTNMffCnvwZUPzy4qGXJk YAv4KeXAP+Kug6axp0Zgj3/Z2hKl5pmHa+FUtbUnpEQXOjAfGm423Ov19wQs+mlb KNeSc6whZIXCI7yg3zhZCmlQuKc+aoqRNYakaP9SiAVZ6rdgCs+W4ljuoAIaLf3u VhdekTMj61JY+E3KgLGSfHVHHaIzP9LRc/66PD9lpRiOeHCVEds= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client