This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: Sh/tqbPNZnxeoX8ilYmL/us78L4udsE2BAOaUHba5aU= Subject key identifier: B7:51:90:9A:4C:46:B2:55:09:B4:A0:C0:C9:4A:63:74:71:F8:70:CF Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 78873B46450B96282979EC558C4FE0DAF5ED996F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 73 Signing time: Mon 01 Dec 2025 09:12:11 +0000 Manifest this update: Mon 01 Dec 2025 09:07:11 +0000 Manifest next update: Thu 04 Dec 2025 12:58:11 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 2: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 3: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 4: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: SkZ+gpmb3rBK72ZeOJqo/Lmp5Z2bmaPSejYuEznY6AA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 12:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:87:3b:46:45:0b:96:28:29:79:ec:55:8c:4f:e0:da:f5:ed:99:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Dec 1 09:07:11 2025 GMT Not After : Dec 4 12:58:11 2025 GMT Subject: CN=B751909A4C46B25509B4A0C0C94A637471F870CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:20:6d:78:cb:36:bb:57:04:04:1e:12:5a: a1:11:3e:25:82:97:6c:34:14:de:63:04:57:72:ac: d6:cf:21:32:f2:9f:e5:a7:52:77:3b:14:ce:59:0a: 6e:58:23:cb:95:b0:24:26:15:4a:14:a4:43:bc:ac: 57:0a:ef:7c:c0:ac:88:10:42:79:29:79:ca:00:80: 41:0f:a4:3d:d6:9f:6b:d2:ab:ba:5b:9c:c3:f7:ae: 06:cb:57:58:2c:38:b4:e7:fa:5f:05:92:92:dd:06: c2:f0:fd:50:01:b3:0e:7c:de:e7:5e:3a:c5:62:b6: ca:bd:dc:70:4d:a7:29:03:a8:d3:08:32:6c:0b:de: fc:7e:b8:b9:cb:0f:4c:fc:19:0b:0b:22:14:56:7f: 1f:76:3d:5e:1d:c3:a6:a5:63:38:60:7d:e5:77:c2: 5c:47:b0:1b:fc:64:9e:be:ac:c2:bd:b8:a6:ba:52: 1d:f1:af:ac:51:f6:ab:60:07:37:de:16:ce:e3:15: c4:ab:1b:fc:83:03:90:ae:6b:fc:7f:ff:2e:1d:33: 1b:65:bc:5c:2f:4a:a9:76:8d:ff:09:7e:79:9b:4f: b0:2b:e5:70:c9:ad:0f:5b:54:89:ea:f4:51:5c:fc: 2c:84:d0:a2:85:93:ff:15:e5:d2:02:b8:cc:53:56: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:90:9A:4C:46:B2:55:09:B4:A0:C0:C9:4A:63:74:71:F8:70:CF X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:0a:9b:72:06:38:1c:49:93:77:ac:9f:c2:e5:60:b3:4d: 26:68:55:d7:98:a5:8b:93:0d:ee:d0:e4:7b:a6:23:07:76:c3: 68:78:f5:1c:74:de:00:8d:dc:67:3f:7d:5e:f7:46:27:9f:a5: 9f:cd:06:66:05:d7:4a:97:11:96:0e:d0:d2:f1:d6:88:3b:b0: aa:18:8f:a4:98:e1:32:72:87:d5:56:98:10:7a:dd:aa:e4:e0: ed:0a:da:ab:91:f6:1f:f7:96:e6:fd:5e:3f:4f:dc:c4:70:be: 56:10:57:99:06:8f:20:d1:f3:82:f8:86:7c:23:aa:8d:5a:b7: 7c:34:8b:ad:73:73:dd:d5:4d:0b:8b:40:8f:9d:a3:71:f9:c3: 12:ad:1d:a6:2d:85:a3:0c:07:56:51:6e:31:f1:e2:61:b6:3a: bd:74:1f:51:71:55:42:c0:6a:28:24:e8:72:1e:e1:d0:64:2c: 54:d8:14:69:dc:57:e6:c2:18:89:73:2b:db:3e:63:e4:f0:fc: 8e:b6:b2:1a:e3:93:ba:26:c9:02:32:9b:01:ef:89:36:2f:65: 65:72:0b:98:8a:85:94:bb:d4:ef:cd:c4:3d:cf:c0:ed:87:27: 2f:1c:6b:ec:45:02:a8:17:c0:d6:de:0a:52:99:a5:dd:76:bb: d2:0b:f9:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIc7RkULligpeexVjE/g2vXtmW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTEyMDEwOTA3MTFaFw0yNTEyMDQxMjU4MTFaMDMxMTAvBgNV BAMTKEI3NTE5MDlBNEM0NkIyNTUwOUI0QTBDMEM5NEE2Mzc0NzFGODcwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8yBteMs2u1cEBB4SWqERPiWC l2w0FN5jBFdyrNbPITLyn+WnUnc7FM5ZCm5YI8uVsCQmFUoUpEO8rFcK73zArIgQ QnkpecoAgEEPpD3Wn2vSq7pbnMP3rgbLV1gsOLTn+l8FkpLdBsLw/VABsw583ude OsVitsq93HBNpykDqNMIMmwL3vx+uLnLD0z8GQsLIhRWfx92PV4dw6alYzhgfeV3 wlxHsBv8ZJ6+rMK9uKa6Uh3xr6xR9qtgBzfeFs7jFcSrG/yDA5Cua/x//y4dMxtl vFwvSql2jf8JfnmbT7Ar5XDJrQ9bVInq9FFc/CyE0KKFk/8V5dICuMxTVqlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1GQmkxGslUJtKDAyUpjdHH4cM8wHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL0CptyBjgcSZN3rJ/C5WCzTSZoVdeYpYuT De7Q5HumIwd2w2h49Rx03gCN3Gc/fV73RiefpZ/NBmYF10qXEZYO0NLx1og7sKoY j6SY4TJyh9VWmBB63ark4O0K2quR9h/3lub9Xj9P3MRwvlYQV5kGjyDR84L4hnwj qo1at3w0i61zc93VTQuLQI+do3H5wxKtHaYthaMMB1ZRbjHx4mG2Or10H1FxVULA aigk6HIe4dBkLFTYFGncV+bCGIlzK9s+Y+Tw/I62shrjk7omyQIymwHviTYvZWVy C5iKhZS71O/NxD3PwO2HJy8ca+xFAqgXwNbeClKZpd12u9IL+b8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client