This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: JEsV2s9af1OklO8JMVWu8MDzUbr0rPF0a+Py14ZgdTs= Subject key identifier: F0:FA:AC:38:62:55:60:E3:24:1A:BF:A7:50:23:59:B3:F7:EC:3D:5E Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 225477B997CBC04E7E25557CAAC956D3C6DCC7AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 0528 Signing time: Tue 02 Dec 2025 17:50:45 +0000 Manifest this update: Tue 02 Dec 2025 17:45:45 +0000 Manifest next update: Fri 05 Dec 2025 20:23:45 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: Grar8qnsOr5z1AVvNC55Mbk3pk+K+VbXIgjxoLRNM9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:77:b9:97:cb:c0:4e:7e:25:55:7c:aa:c9:56:d3:c6:dc:c7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Dec 2 17:45:45 2025 GMT Not After : Dec 5 20:23:45 2025 GMT Subject: CN=F0FAAC38625560E3241ABFA7502359B3F7EC3D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:a5:00:49:17:cb:18:02:6a:cf:c8:b0:c1: 6a:ff:20:6c:6a:f3:33:fb:33:09:64:aa:15:4f:d3: 6d:3e:26:0e:5c:fb:70:05:f6:09:3a:87:27:28:3d: c7:aa:15:70:69:c0:27:59:6f:da:1a:32:17:ae:e5: 09:12:d6:34:5e:fb:51:38:46:82:b4:10:ac:41:f2: 29:2c:1c:64:a9:cc:3a:33:38:92:4b:c0:44:12:72: be:3f:8e:3e:52:5e:50:d9:e9:32:d3:f9:68:36:6d: 94:d1:08:e2:e6:12:ec:ad:13:14:29:1b:12:83:a4: 4c:c8:18:ae:ec:37:1a:cf:54:ac:5c:c0:04:5c:7a: 90:d1:0b:f4:50:8d:ea:5c:e5:e6:28:ef:b9:a2:23: c4:ce:35:a6:b1:d0:ef:0e:ab:84:79:64:d6:88:37: 6f:c5:d9:f9:83:87:71:66:90:2e:4b:d0:48:e5:0a: b9:7e:9c:cd:c0:21:cd:be:48:ce:7e:7e:ab:e1:c9: 5e:57:95:ee:66:b1:68:20:40:12:39:42:29:ae:2e: d5:a5:bb:c4:bd:39:67:61:f7:67:30:27:a0:c3:7a: 67:9c:bb:d9:7f:de:ac:fa:d7:a0:29:76:13:d3:03: d6:be:47:3a:50:1d:5a:76:c4:18:c9:3c:a5:58:0b: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:AC:38:62:55:60:E3:24:1A:BF:A7:50:23:59:B3:F7:EC:3D:5E X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ab:ab:5b:0b:72:9f:fe:eb:d8:28:9e:b7:cc:6e:cd:dd:ef: f7:e2:4d:a9:7f:f2:44:95:0d:0a:01:53:ee:11:ff:50:e1:37: ba:36:3c:da:7e:79:41:f6:6e:34:25:61:39:5f:85:13:bb:9d: ef:b5:75:0a:b0:bd:7d:d4:f6:0a:d6:64:88:d0:6a:bb:cd:03: 16:f0:d9:d3:e9:4b:50:19:0a:33:bf:ed:12:1d:96:db:97:ac: eb:96:df:27:9a:12:1e:8a:54:91:26:8c:19:ad:db:21:19:cc: cf:f0:f2:55:0e:de:f2:84:44:d2:f9:36:0e:ff:0c:54:ca:e8: cd:e6:9b:63:5e:01:e1:d9:c4:d5:19:f3:5e:e7:a8:80:f9:0b: d2:53:58:8c:ce:be:b0:3c:c8:67:83:0d:d8:10:5f:c1:45:60: ba:07:0c:67:44:5e:4f:dc:43:58:39:fd:49:de:c6:e8:b7:d2: 4b:f8:28:0e:6f:8f:bb:ee:80:54:50:b9:34:c3:4e:ed:cc:f4: 39:68:51:82:47:87:af:7e:e6:77:07:61:de:37:9d:e0:3a:96: 11:28:26:2e:de:bd:d3:67:37:27:22:82:8e:79:7e:dd:80:78: ac:b8:8b:77:c2:79:9e:56:ed:2a:c0:3b:d1:15:1b:b5:92:59: c3:e2:ea:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlR3uZfLwE5+JVV8qslW08bcx6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTEyMDIxNzQ1NDVaFw0yNTEyMDUyMDIzNDVaMDMxMTAvBgNV BAMTKEYwRkFBQzM4NjI1NTYwRTMyNDFBQkZBNzUwMjM1OUIzRjdFQzNENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MqUASRfLGAJqz8iwwWr/IGxq 8zP7MwlkqhVP020+Jg5c+3AF9gk6hycoPceqFXBpwCdZb9oaMheu5QkS1jRe+1E4 RoK0EKxB8iksHGSpzDozOJJLwEQScr4/jj5SXlDZ6TLT+Wg2bZTRCOLmEuytExQp GxKDpEzIGK7sNxrPVKxcwARcepDRC/RQjepc5eYo77miI8TONaax0O8Oq4R5ZNaI N2/F2fmDh3FmkC5L0EjlCrl+nM3AIc2+SM5+fqvhyV5Xle5msWggQBI5QimuLtWl u8S9OWdh92cwJ6DDemecu9l/3qz616ApdhPTA9a+RzpQHVp2xBjJPKVYC/GNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PqsOGJVYOMkGr+nUCNZs/fsPV4wHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2rq1sLcp/+69gonrfMbs3d7/fiTal/8kSV DQoBU+4R/1DhN7o2PNp+eUH2bjQlYTlfhRO7ne+1dQqwvX3U9grWZIjQarvNAxbw 2dPpS1AZCjO/7RIdltuXrOuW3yeaEh6KVJEmjBmt2yEZzM/w8lUO3vKERNL5Ng7/ DFTK6M3mm2NeAeHZxNUZ817nqID5C9JTWIzOvrA8yGeDDdgQX8FFYLoHDGdEXk/c Q1g5/Unexui30kv4KA5vj7vugFRQuTTDTu3M9DloUYJHh69+5ncHYd43neA6lhEo Ji7evdNnNycigo55ft2AeKy4i3fCeZ5W7SrAO9EVG7WSWcPi6tk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:21 2025 by rpki-client